Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          1xP3luBrxSQHe83TnpWvwnoND64oIe2D9w3aZs/1iX4=
Subject key identifier:   5B:DD:83:84:F5:79:B2:34:0B:77:00:80:8E:52:23:08:A3:C6:6C:7E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0196BE92C8DE8BDA36E3CA356A858CA76D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          124D
Signing time:             Sun 11 May 2025 09:00:12 +0000
Manifest this update:     Sun 11 May 2025 09:00:12 +0000
Manifest next update:     Mon 12 May 2025 09:00:12 +0000
Files and hashes:         1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
                          2: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
                          3: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
                          4: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
                          5: 7wpqEnLbXsmQgEcRjhSFA1E1Ph0.roa (hash: HxVQp3Z1rMeJKbwsiheKb1cIlaSzxb9MNENJpb8we40=)
                          6: 8zj1s3Ptfil6Mh57viGcmhuNUQo.roa (hash: 4PzZD7bPpeIUKStdtl1x4+X4xSCXz5aci88yHdX7k3o=)
                          7: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
                          8: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
                          9: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
                          10: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
                          11: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
                          12: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
                          13: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
                          14: Fj1LHdywYxmpNZYAlA5jYdYU-2Y.roa (hash: mXJTyqInCONrh6olkEuXhmmFrOakqrl35XBlrBrFg1o=)
                          15: Gq_xCZdEzAOLUGgbxCsiI12vGe0.roa (hash: zD/DDfTlc7UMlvce/2TQOzHMx0TMXcX/Gj0yJXMu0iI=)
                          16: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
                          17: HWKuq43ra0KbMfQ1sxyaLKRxMYU.roa (hash: OmDhJNZj5y5DErtiCu3LMFfMUdiwxKehyMoTP4Ak7ls=)
                          18: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
                          19: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
                          20: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
                          21: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
                          22: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
                          23: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
                          24: NEBTrVrG2aOIqVsZMSsFHhwJFnw.roa (hash: f/aYHn25//7r/Dz9hT4MyKOdlYCxECJdfwrHVdjUJdo=)
                          25: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
                          26: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
                          27: T2nBcN90QL37RbdRO-q8DLQ77Ek.roa (hash: 31WpgwL2EfZ5Tm1AWagxgpt2F5zFwFiQsAAVBMSiTzA=)
                          28: TQoyMTaufag9Fh3qmegQelA2zNg.roa (hash: 95d7zIS7vKuMg1Mj7+fOLFO0LcohD9ziLzOdj+cFHi4=)
                          29: XyVBuSMO4tDMtKN2CT96qIL0ENo.roa (hash: sOGSOte2a4l6mbgCk/Nt1riATxr1NXH+i3dLb894BnA=)
                          30: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
                          31: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
                          32: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (hash: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=)
                          33: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
                          34: aVylZyEQwBXWctUuh01Kx-MnBpw.roa (hash: jB+XdgMQvp3EPtPkAQ+7tQq78v6NYgmRWUdO6oBD0tY=)
                          35: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
                          36: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
                          37: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
                          38: gMdD_VXSyo94G-BnLblB_ugIGAE.roa (hash: 9nCb51TSQbfXDAKCN53dfxa767DQLXFXaeqP+pGISx0=)
                          39: g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa (hash: 9gm8nIFVfkBHC0WnoRN2oeNjKj8xNcfn6S96jzdZ2t0=)
                          40: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
                          41: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
                          42: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
                          43: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
                          44: ml9vCja4mgcdfAYhpAav4-QETWg.roa (hash: SLf7cBw88J8YVYvHBLi3COobS3EgJxVzQ38+pYMKZa4=)
                          45: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
                          46: qDo3TPWSAflGinbz6cHuC3nUpKc.roa (hash: namWwO7xfyJQeGBYRk+OVSKMxdRhMqt19Fo5eex/BNE=)
                          47: rlNK_Q8k2eJC_qmSCeZxHZ_MfQE.roa (hash: IZQQ/6oS+G6OcQEcpL/b2sbx8obxVdk1R2/eXjMJinM=)
                          48: s5JGbcfAxZWJy2DrMtM0WwWRhus.roa (hash: SJj4fkJufFZa6/ohQiBhaQCM8kQ1vt6hwNW+jhV6Gac=)
                          49: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
                          50: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (hash: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=)
                          51: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
                          52: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
                          53: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
                          54: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: ngN/tril0Cn+DKk0MWQ5zqFKhcDCNMC/ndk2JrnBnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:92:c8:de:8b:da:36:e3:ca:35:6a:85:8c:a7:6d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: May 11 09:00:12 2025 GMT
            Not After : May 12 09:00:12 2025 GMT
        Subject: CN=5bdd8384f579b2340b7700808e522308a3c66c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:d1:97:21:7b:33:eb:e1:22:a9:7d:42:81:
                    7f:2e:c4:4f:65:e3:da:97:dd:d5:ef:55:fe:68:b5:
                    78:0c:02:a4:ea:d1:3e:cd:78:a6:5e:b2:a3:7b:1a:
                    88:b6:ec:da:b4:88:e3:a9:3a:de:e4:12:c6:a7:a5:
                    45:e2:d2:1b:36:25:f7:e9:9a:05:ac:37:cf:2d:6a:
                    9c:16:fe:e1:4e:ba:5b:e4:bd:e9:b3:69:c9:d1:3d:
                    33:36:0e:04:ac:8d:d9:ed:c8:f4:d4:c9:ef:a3:a7:
                    f9:f2:73:28:4c:60:96:ce:83:e9:75:27:72:01:eb:
                    40:46:bd:08:f3:6b:8d:92:a7:ea:e8:eb:76:ce:17:
                    09:89:0f:e7:dd:b9:38:9d:60:0a:7d:31:4a:5a:ee:
                    a5:f8:1c:cd:f8:cc:4a:54:6e:1d:c2:46:3b:32:b6:
                    3d:65:99:45:f2:c8:4d:c1:65:05:55:54:3f:fe:c2:
                    9c:d4:92:5d:0d:4c:eb:0a:63:35:98:b9:cd:03:9d:
                    ef:07:07:a6:d5:a1:10:d6:ae:06:a4:08:05:f7:96:
                    aa:4b:cf:b6:d0:a3:64:8b:72:24:60:5f:a1:01:eb:
                    51:47:ac:d4:d9:86:0b:70:e3:f4:b3:77:69:b9:e9:
                    a3:8c:99:44:1f:99:54:f1:65:ed:ff:19:b3:d0:e7:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:83:84:F5:79:B2:34:0B:77:00:80:8E:52:23:08:A3:C6:6C:7E
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:38:26:09:4e:30:e6:80:13:73:0d:7a:7f:4e:a6:f2:d9:
         47:3c:6f:23:69:2f:20:a3:5e:11:4d:ee:0b:47:2f:e8:21:30:
         bb:16:9d:ae:d1:2c:d7:f4:4f:d7:4d:f2:8a:7c:f0:85:56:a6:
         a7:88:df:1c:32:72:7e:84:43:01:49:10:a6:80:8b:78:4d:c1:
         d6:45:4d:a5:9b:f3:ef:20:29:50:dd:70:1f:33:a4:5e:c7:5e:
         98:d3:70:9c:43:6b:d6:39:9b:dd:20:50:84:bc:b2:30:49:6d:
         f1:6a:1a:a5:09:80:85:0d:1c:03:e9:ab:f4:f5:8b:bb:f9:cf:
         0b:bf:43:0c:b1:1a:db:10:64:cb:50:85:12:19:81:b5:fa:ec:
         0a:a3:77:a2:4a:c4:78:ac:06:67:62:60:3d:2c:ac:7b:ca:bb:
         23:50:a1:ae:44:fc:fa:bc:67:aa:bb:48:60:ff:f6:6d:c9:3d:
         ae:4d:9e:d9:1b:52:04:82:f1:3a:40:70:89:e1:e4:82:0d:0f:
         7c:82:59:ee:f6:67:9a:f6:11:ac:27:20:90:62:8a:60:35:d6:
         8c:37:62:27:10:77:26:6b:7b:76:81:35:b8:e1:a1:83:77:d7:
         a8:82:07:c0:70:fd:2b:f1:1b:ed:93:10:20:35:7d:bc:e6:9c:
         08:a9:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----