Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
File:                     Gspj3ySLet893QfowtPu3QLO-TM.mft (raw, json)
Hash identifier:          5RCVSrFr6+WeQcFO5QT/1DYo3LWrL/K91oRyHWkBlM4=
Subject key identifier:   2E:97:1F:04:D1:23:44:71:1C:3B:83:E3:E4:28:B0:E7:27:00:E7:A9
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       0198481BED608DAE88A29927E7A2F3AAF0CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
Manifest number:          160A
Signing time:             Sat 26 Jul 2025 19:00:46 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:46 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:46 +0000
Files and hashes:         1: 1-5hSTIPsRy5D9_bcwYF_WMz1BH8.roa (hash: BZPrksSfRlF6LAV7eR2IosdBvVh2oBZxAtVrv/y7NIQ=)
                          2: 3IWq37gplUSah5H8l_mykIg3r_0.roa (hash: nW74xFWdSJ0q18zh60xEFwg4qYnGrCe+zwcWIKJE6bI=)
                          3: 3rD9StsheQJ2jCCVmyxVVyxpBjE.roa (hash: GzfI8HFdBgSfemP2c5Gqo1niPoqxRYIEhQjVPM2DMmU=)
                          4: 4oy5f6eWUFWeuQ-LYoGKR5kBbmA.roa (hash: YFWPRLKzF0IohoijQjCKo23llGQIbDkRvtvR0mEBhNE=)
                          5: 6_VthmtCFVoFgnrv7AyjJptBLuQ.roa (hash: SvwULvQRJncn6SJNeqM19vLpt9Z16yE+fnln2KH2tcs=)
                          6: 6fnqLfSahcPJljn9BxT97gT8whY.roa (hash: XWm/mCKGznzpRI3lncIjTtbaQ3ZRS1sxiBsRGlYEzuM=)
                          7: 6xWVE_OuY0syHSQoKE_RSw_j9Y0.roa (hash: enaJUe3e9mkaFANtWZr40abqVR5PCTnazMcSIeCDvHM=)
                          8: 7exhcXZkp2yXL6qalX7FBxcZrrw.roa (hash: W0XOIvU0IcwcLnFFNRh4YNMhhpEq8cbh4URUNEkve8Q=)
                          9: 9XlTOy7cvStsx3Xasqbdbzm-Z88.roa (hash: 4nh24GFmOLdTzMR1iDFa+FmgfHsPGJ7w7jsScCZNOCo=)
                          10: 9bQI2MEggSINlK9_BarU8M81OQA.roa (hash: wOitezrRSXcEwaiiOP2S3ZgNGLVJcTHEtHqjTe+hp0U=)
                          11: A47fccTo8R6H5H4SA6IjK8B0oyw.roa (hash: u22QQd6Zy22uxWoYGFgOyxTpdIgz83a8msCQfB/L8Cc=)
                          12: BT46iIB4OSMOWVQ2HKjuNk25XSs.roa (hash: 44E2dRX13lWTv0CpNFnA+SZ7s9k3n6xjHPl7U1S3LJI=)
                          13: EmaR1dFh4C44CROnznSle4RKoZY.roa (hash: Gjb47BK3BdncMxIXGeuASD9kSTnBNMc+se5DRg3yyTo=)
                          14: G-Af5X2_2YIHhUlxyoAkwDDHogk.roa (hash: vk5Vdv6JR5C5h80ouCg+GEL5alRWF0QWdH9YklynVJ0=)
                          15: GpGFJqdP33JTl2DnYNIhXCLvMb0.roa (hash: LW7LyxHMeTgasNxqr6f81sBE0I00dDlLESQzUEqM5Z4=)
                          16: Gspj3ySLet893QfowtPu3QLO-TM.crl (hash: Q4dcJsPLqqEinSV+O8IPRtQ2e/WB5mUBfj341fHa4B4=)
                          17: HJCG7wX6bVTSlFU6A-_QZepXnjE.roa (hash: qWy9uu0ocSaGyE7cbor3VB0J4b8YD+Adt+XSdLNm834=)
                          18: IfMAb-baYtrUi8Zzn2tFLvkovDA.roa (hash: d2CMRn1kc4oEgu4bSk14WiS27zlRxc0nqJ5C1IGfk8o=)
                          19: K2KWy_mQsUZWaTV8PEcejmLAT60.roa (hash: FhNLHASlAsa9lHin4H7G9Yhw6Aqeoa1NtYO8tRdr6rw=)
                          20: LvDy9p6ikxqQSJ-VqF7io8zgKSk.roa (hash: GewoAJAwsWBWLIkno/3RVcfw4AJjUIbGZa9BOK5+n4g=)
                          21: Lw6jlM2evpWhFlwdzl__oEseivo.roa (hash: O62vBJqfUiBoXZn/qX8IT733rlokeQ16DinF04jzxIA=)
                          22: PAh3rm7-6qf5vNChF4tb0XDiBok.roa (hash: TsXeQOJgZe2V8A2ga0XS4BePFqZ5jWDORWR5JBRsZ+c=)
                          23: QSEOG3c1R6giDFhGCuTe0hYZpjc.roa (hash: GcRtBuCCVULsQO2wY/DVulhch7pAYDf/l9JF+bQ2VBo=)
                          24: QkZnN9-Quqx-KboStAi3d_LyOuE.roa (hash: ZTby7uNaHfjuTrcm5MXUG0R8+tJbb/D7VfS3DsNDHaM=)
                          25: RMWscc-5TvpBiv8d6fCAuPUGv94.roa (hash: t8rgoMdwyyhbjSG6dnKBunLSzsCNXhN+ZdaePWLA4Oo=)
                          26: RMejfvfqDU-6mJRHZu7CVwTTZJE.roa (hash: ZcA658uI9ES0M169SLVgKbZ7N/zTS9DXu8y0zEhWizY=)
                          27: SKjvjP4gY0WEmMWHkxBx5hw-YjM.roa (hash: czu1niFpqV85KXxWDwgvxI2xLjGzCV51QfLP/FPCQqM=)
                          28: SYJUJnaWldNU2YgvYIUVmDALJhs.roa (hash: gwpLherQSi2HzWOcKDzz8rnNXYmyBS57Lky5eYM4GJw=)
                          29: UAlBnL2rhAXUgBqvO47Qajamw2g.roa (hash: xN29on2+6W1aee+fqCjKGDXnFxjptJbwJyR3u33Vxwo=)
                          30: VQUOzqXhwMIZ7BP3JiEJ-HlSjvg.roa (hash: Y9WwjRgOzDJ0P9uiacsmEouTI2l454ZKj2QNuJjBIIw=)
                          31: YMIF9QGbE8ZUd4KtkxHWgl4rCYY.roa (hash: EfFPqt7V4dnU/dohJlXfwhRGHy28ftlIHNB1HaDfOmY=)
                          32: ZNkg9OflQ5YKRWwotQ2A0ovrwHQ.roa (hash: LvvUg32Av5FL99KOaxCIaCeq6TW7KDy3xgoj08Pwnic=)
                          33: _JhAhRBJC8Nb5PAAydr7b39_4_c.roa (hash: ieSA2cvoYnKzjgdt7WaMk8MY4NDkHZh/ubbeQu9eRXQ=)
                          34: aMriVkZ4IAYHBYUhLWJ80OdgN18.roa (hash: ZNMMzJHq7QtdmRSEN4pm+mZy3t3o8WSswSYAygOKP4c=)
                          35: bM67-0WnTIlk3OZGihzodLQF_2E.roa (hash: NRPFJ8K1hNrIr2ljiE7qTUvvC0cbZhWtCY0fv6Syz6M=)
                          36: e8LHoDaExvY2EhEH-cKcB4N5kb8.roa (hash: Z1BxMCtJVqZUKTKzwFVpm6e5v92Yzrq4D8wtx/muuk0=)
                          37: gOYyprxzZCgraPiSHx98Z_j2ly4.roa (hash: Jq0tGV+RSeJ69NS7DywPGofAnMIdLaC1eoXEB6G6rIU=)
                          38: gvVZ7S_MT72Pje2By0Bby2Ij9C0.roa (hash: aibwfcNEkry2NIdkPF29Lq0Hlv6AHEZR5hCHySn0s2E=)
                          39: jPUOn6unGxOXNyP0wLNgFLf9zaI.roa (hash: 4pdIemb0H73HmdQHXC8SynBsaZWGGJ2x3MWXR4Pr754=)
                          40: lA4KE-XkkTWAJTxo2K8swo2A_f8.roa (hash: 9Emo3amlBuaZyUevfod2zATXpHr5snaFCrlvo/OfsJQ=)
                          41: nUjqwMGROu8lio8WlHgzqcbQHKM.roa (hash: UC2BaMoq+IhRonC2OdThJUbgN5G04G9A2iaqeo7sqnk=)
                          42: od_YUR8N_zhzisYrg8PKSch448Y.roa (hash: 3GG/2Q710VdIvEMunPoaycViS7ZGE8RJZDgOw/3yRiU=)
                          43: r09SSIy-eB-Z25qEgYQUxovsy38.roa (hash: g2ZJkA65eGJunpXfjHMfkr7mqC8bwf6B7MCgf5tQ0Nc=)
                          44: soNsg1OGi8NnYafVFwalJm7LzGg.roa (hash: Ski4G94G44Xz9Lzoq75tTUzLO2vhTjQfsGV7Hc+GMsw=)
                          45: u5VeGDFI9q5fHKrjLmTIi0uDU7A.roa (hash: FcBZj7sMLbgtdYa/NEIruIpIpyUSch9ZZH/wqb/Kc08=)
                          46: uySRNRflomYFyU90NHK5PN09gJc.roa (hash: RMn+ac6IluyH0hNW0Nl5ZfPZ6PAsAPdPufZtdctzeoI=)
                          47: x5V3LKEEs9oK4b6RHpDDd8MI0y0.roa (hash: J6/kZs2WsxkNOAGpQppF69M5PlyTDdES3E9QUB+NdiM=)
                          48: yPbPGHVnybfOg3CbVa6ATXW9MZw.roa (hash: kq99i/gc1aAyBNAILAzQo/xTksP0pqpuR2NJXZwO3bo=)
                          49: yeksH9vuwOfY2GZnjy3cVhtk3jU.roa (hash: tBtwKbAIW9+lpdwVZBQ+U96ax1Xc5EXkO1D3NFot0II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:ed:60:8d:ae:88:a2:99:27:e7:a2:f3:aa:f0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: Jul 26 19:00:46 2025 GMT
            Not After : Jul 27 19:00:46 2025 GMT
        Subject: CN=2e971f04d12344711c3b83e3e428b0e72700e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:73:34:c8:76:5d:b2:39:e6:8e:b2:99:dd:
                    cf:f2:e5:c7:ea:07:20:12:6e:34:e0:3a:10:51:ff:
                    df:62:14:01:5d:f1:da:99:9f:f9:a4:8b:dc:80:d3:
                    dd:a4:b7:57:df:fb:26:a9:20:8c:c3:ad:7e:dc:25:
                    d0:c4:c1:b1:6b:53:dd:60:42:ad:e3:2f:43:50:c4:
                    ca:90:c3:41:6a:0d:a7:21:c2:7a:d6:20:ea:0f:0a:
                    c4:8a:d1:48:79:b5:50:2b:df:50:89:37:4c:7d:f7:
                    7a:4b:de:71:c8:12:c5:09:f3:ba:6e:d3:5c:16:40:
                    b4:49:b5:ce:f0:3f:c0:ec:46:d8:11:d6:5a:1f:1e:
                    79:c0:19:78:13:33:64:37:41:25:00:32:9e:69:c7:
                    90:d6:7c:79:d5:2d:04:91:00:df:8c:d4:52:cc:71:
                    de:c5:43:09:a0:4b:4e:a4:c0:5b:f3:65:9e:5f:9b:
                    3d:0e:9e:8c:99:26:23:86:f9:d6:d5:33:d5:1b:47:
                    4c:9b:c6:bf:06:c0:84:cb:d1:6e:bd:71:53:4f:41:
                    7b:12:60:4e:8b:5b:3a:57:e2:91:7b:70:d2:a1:d5:
                    75:a6:89:17:5f:db:3d:cb:ab:1e:f5:f1:93:8e:e5:
                    e3:d0:1a:18:fc:b2:ee:58:10:cb:c9:76:14:d6:8d:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:1F:04:D1:23:44:71:1C:3B:83:E3:E4:28:B0:E7:27:00:E7:A9
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:6c:d8:11:70:b2:2e:4b:41:9e:08:eb:3c:29:2d:95:77:
         21:2b:2b:44:72:7e:57:0b:82:58:d9:71:ae:2d:bd:8a:8f:1d:
         6f:4c:79:e8:9e:f3:2d:b6:61:7d:04:5e:94:8f:f9:24:bc:f3:
         93:05:3c:15:b9:2c:52:ff:eb:5b:90:68:fa:62:9a:b6:42:56:
         df:df:76:ba:9b:42:17:05:2f:93:01:1a:42:14:11:4f:4e:70:
         4f:82:06:a9:a3:61:a6:9e:6b:80:84:8a:8e:41:ea:a0:37:1c:
         51:8b:67:f5:17:ce:5e:12:cc:a0:02:1e:46:65:d5:9f:97:0e:
         bb:84:e5:16:41:28:20:f0:22:fc:eb:48:36:0d:69:c4:78:19:
         76:ba:8b:d5:fb:91:32:b0:44:f5:c5:94:d3:96:a7:f0:33:84:
         1f:de:fe:51:45:4b:91:47:1f:ae:6b:43:87:04:31:52:b9:91:
         3c:2b:68:ba:40:db:fd:90:2f:25:32:c9:fc:04:2b:a0:dd:93:
         f8:5d:71:1e:6c:dc:98:34:7c:3f:59:90:e6:c9:a8:62:a6:84:
         a2:45:d5:c2:6c:0e:2c:a5:98:1b:bf:86:2c:dc:84:8b:1c:43:
         83:4c:43:3d:a5:7e:5c:5b:12:a1:7c:8d:18:b3:0a:eb:96:ce:
         78:6b:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:46:53 2025 by rpki-client