Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          p1Dl69HX8OjgXQtdXSjp1o67MwD9JsXbMUmOCzNepoo=
Subject key identifier:   74:21:C4:AD:21:1E:9E:48:60:96:1F:FE:79:2E:55:F1:48:26:1A:8A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0197C64A96F6B80FFF6ECC0D233BB9253AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          12EA
Signing time:             Tue 01 Jul 2025 14:01:06 +0000
Manifest this update:     Tue 01 Jul 2025 14:01:06 +0000
Manifest next update:     Wed 02 Jul 2025 14:01:06 +0000
Files and hashes:         1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
                          2: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
                          3: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
                          4: 7Vg026GilsAdwwmReGqAOt7uEBk.roa (hash: o2eCEEPEnYtuReTatMEMg5W6/8oDYNB6JVy+I8yx6Gk=)
                          5: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
                          6: 8zj1s3Ptfil6Mh57viGcmhuNUQo.roa (hash: 4PzZD7bPpeIUKStdtl1x4+X4xSCXz5aci88yHdX7k3o=)
                          7: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
                          8: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
                          9: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
                          10: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
                          11: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
                          12: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
                          13: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
                          14: Ff6PjCKYxksSpT1f0K8hi0k7er8.roa (hash: VflQNvUfdCGYwmZ2tB2YKnhTx72Pgu7vVHPUvzvijoU=)
                          15: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
                          16: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
                          17: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
                          18: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
                          19: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
                          20: KeajlVbUH8unzlJTw34l2zDniNA.roa (hash: sj6op165F7XGOX0SSrzNBGiHHatDPbleNT20ZWRP3XQ=)
                          21: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
                          22: MFaoBuMp_n8GYQy16F9yYPCDvlw.roa (hash: pzLjXNVOb/tu8XBFljfZTE6/DnQ8ZMtfBy9pSDaK+d0=)
                          23: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
                          24: NEBTrVrG2aOIqVsZMSsFHhwJFnw.roa (hash: f/aYHn25//7r/Dz9hT4MyKOdlYCxECJdfwrHVdjUJdo=)
                          25: NFZ8eLgpC9l6dMH34-bEaYztt0w.roa (hash: aOIX8CtMqHFskQm3oyhLkvyrEp9No67eN08w8zgIJUE=)
                          26: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
                          27: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
                          28: QIUxG2d20ewp6Ag4VHhOjKX3390.roa (hash: gd3ad7uP/4lRdgZeJ5043KvMhVaae9ozbtJI6vLh94w=)
                          29: QPp3ShO51Vxq9wUSQpAjxaZkM9Q.roa (hash: S0nBXUW8Iz/PPL58aOwa+KW9UVmq6rlyOkpScxCXtE4=)
                          30: Rhqu0Hhn4jlUWaqBlQkcgoWXjMI.roa (hash: JisZbeQ0AocuRS7stDTFoBU3g27nQeSIpJz1KNUOxPE=)
                          31: TQoyMTaufag9Fh3qmegQelA2zNg.roa (hash: 95d7zIS7vKuMg1Mj7+fOLFO0LcohD9ziLzOdj+cFHi4=)
                          32: Ta-Jng8bCeWcapI-4Br5-Z9YPK4.roa (hash: ZXEMtyYZ68+dYUKGgJwGRiHDozsTZWFiUEvbDn+U6vU=)
                          33: UFM7V0QaEQk5iMcLePQNtrCnBuU.roa (hash: 1KCm2LnslOt1Go2n1GlY4KXw/ywbLjggHVGzM3KYrZI=)
                          34: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
                          35: Ya5-h2ETMjyWDhCB2tvxKRLAqsQ.roa (hash: coLWeAGOhf5VNkz6Fd+O+ZH/zyRAc6w/wTvM49zi9Dc=)
                          36: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
                          37: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (hash: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=)
                          38: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
                          39: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
                          40: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
                          41: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
                          42: fWAfX3KpvP6KHVwuJR6oEj4CXnQ.roa (hash: 7Asl2MelB+M4yfnzUpkkQrmPhCU/0GL0ifTu9RCxXRU=)
                          43: g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa (hash: 9gm8nIFVfkBHC0WnoRN2oeNjKj8xNcfn6S96jzdZ2t0=)
                          44: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
                          45: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
                          46: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
                          47: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
                          48: n8KrkCOeu372DfA7gb7CXyt4MkA.roa (hash: m6YplWM+G0Bt8JF0DAD2p3UhAQO9YK+EkRMI1CUMIoE=)
                          49: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
                          50: qDo3TPWSAflGinbz6cHuC3nUpKc.roa (hash: namWwO7xfyJQeGBYRk+OVSKMxdRhMqt19Fo5eex/BNE=)
                          51: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
                          52: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (hash: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=)
                          53: uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa (hash: +A1T+WhnOHYIEIZ7mEVu1afaFwmjRRKYqLMFQ3ckAmE=)
                          54: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
                          55: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
                          56: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
                          57: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: 4A48qfoiT87kZWHWgW6e2s67qJ/nqA5LrxvBl9YJLqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:4a:96:f6:b8:0f:ff:6e:cc:0d:23:3b:b9:25:3a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jul  1 14:01:06 2025 GMT
            Not After : Jul  2 14:01:06 2025 GMT
        Subject: CN=7421c4ad211e9e4860961ffe792e55f148261a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:3e:06:01:f6:be:02:99:3c:a5:6e:27:71:
                    89:bd:80:c0:8b:27:4c:43:6a:da:1f:8a:ef:89:a4:
                    0b:42:66:03:d9:96:86:9e:be:7f:da:6c:bf:7d:a2:
                    d1:2b:25:63:c0:c3:26:40:88:7b:2d:98:ef:e5:b2:
                    b8:e6:a0:82:bc:f4:dd:36:9e:5b:eb:4a:e5:c8:aa:
                    6f:17:f0:f8:ec:8f:c9:1e:c1:35:42:96:7f:f4:ce:
                    90:4a:f2:57:c7:df:39:cb:81:b5:6e:cf:e1:a5:7d:
                    bd:e6:24:f4:f9:3f:52:68:f7:fa:db:ba:5a:63:03:
                    4a:5e:e1:ad:ae:ed:9b:1b:0c:a9:8c:93:dc:15:bd:
                    71:ca:0e:79:2c:0a:57:5d:32:87:48:a0:c3:e1:9d:
                    7e:6b:b3:64:14:d5:de:f2:fd:61:bc:b9:e9:27:95:
                    d3:2a:42:22:1f:bf:40:4f:1e:5b:62:9a:d9:7e:e2:
                    85:11:7f:97:46:4c:89:8e:1e:9e:49:d4:17:2f:3f:
                    56:62:cb:fa:c8:e7:a2:71:2e:da:9e:35:9a:4e:ae:
                    de:7d:87:c1:5d:8a:fd:7c:f3:28:fc:65:a0:9a:1f:
                    9b:bc:22:12:87:13:ae:72:92:0c:32:01:fa:18:bf:
                    8d:f5:7c:76:7d:8e:6f:07:8c:5e:83:d2:10:b6:8a:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:C4:AD:21:1E:9E:48:60:96:1F:FE:79:2E:55:F1:48:26:1A:8A
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:85:19:b0:e5:95:86:95:f3:99:58:8d:35:24:c2:0e:8c:45:
         78:ac:9f:ac:b2:8a:82:93:26:b1:fe:96:66:59:af:31:0a:7e:
         ac:ac:91:87:89:7c:f7:50:24:0e:b2:c6:12:3f:ed:07:3e:77:
         dc:c0:db:88:90:9e:81:7a:af:d4:cb:91:83:a7:55:ad:40:ec:
         50:15:1e:6f:68:db:01:b5:17:a2:37:7d:f2:6a:32:d8:16:87:
         b7:11:15:75:53:d8:1a:ed:8a:68:72:62:4e:7b:be:62:20:66:
         ab:46:f3:09:49:ad:6c:20:1d:a7:6b:49:8a:f3:d2:dc:48:54:
         d7:71:df:55:fd:e8:6f:95:89:09:41:a3:16:88:39:66:19:a1:
         44:c3:81:ad:ed:39:d1:41:b7:27:88:6a:2c:69:4f:c0:71:52:
         b8:09:00:34:14:0f:7a:0d:73:88:b7:ec:b4:1f:3a:9a:81:aa:
         bf:5e:9f:db:38:53:79:71:ba:e9:37:6b:08:0e:53:c1:86:6b:
         72:b7:cc:e3:c1:e1:54:9a:92:e4:29:38:ca:13:2b:38:4f:7b:
         fd:9c:a3:38:86:4f:ac:be:04:fe:cd:87:17:4f:27:a1:f1:01:
         c3:2b:b5:ac:1a:8b:aa:eb:3e:10:e7:29:49:65:e0:c0:44:7f:
         e7:e4:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:24:56 2025 by rpki-client