Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          OaudpiqDKVqIfrrjJoRBRo7hSGo9vSPqfIHuBEK/Zrw=
Subject key identifier:   A1:F4:7A:53:6E:1D:0D:F0:A9:D7:17:5F:7E:A9:7A:65:58:05:41:05
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       01982710EFC29DDCE1A938C9AAE681C6E79E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          131F
Signing time:             Sun 20 Jul 2025 09:01:17 +0000
Manifest this update:     Sun 20 Jul 2025 09:01:17 +0000
Manifest next update:     Mon 21 Jul 2025 09:01:17 +0000
Files and hashes:         1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
                          2: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
                          3: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
                          4: 7Vg026GilsAdwwmReGqAOt7uEBk.roa (hash: o2eCEEPEnYtuReTatMEMg5W6/8oDYNB6JVy+I8yx6Gk=)
                          5: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
                          6: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
                          7: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
                          8: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
                          9: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
                          10: DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa (hash: 5tBAqqFCun3qMuyt3hnlLRBwJNJimso2u+1bTRY1BKk=)
                          11: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
                          12: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
                          13: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
                          14: Ff6PjCKYxksSpT1f0K8hi0k7er8.roa (hash: VflQNvUfdCGYwmZ2tB2YKnhTx72Pgu7vVHPUvzvijoU=)
                          15: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
                          16: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
                          17: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
                          18: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
                          19: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
                          20: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
                          21: MFaoBuMp_n8GYQy16F9yYPCDvlw.roa (hash: pzLjXNVOb/tu8XBFljfZTE6/DnQ8ZMtfBy9pSDaK+d0=)
                          22: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
                          23: NEBTrVrG2aOIqVsZMSsFHhwJFnw.roa (hash: f/aYHn25//7r/Dz9hT4MyKOdlYCxECJdfwrHVdjUJdo=)
                          24: NFZ8eLgpC9l6dMH34-bEaYztt0w.roa (hash: aOIX8CtMqHFskQm3oyhLkvyrEp9No67eN08w8zgIJUE=)
                          25: NqEDSyCU-4MS42jFZzpvAT-HI8I.roa (hash: 9FbUsU13J/GmaYBC86KZ74ejALBebmKkz0F4iRu7cz4=)
                          26: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
                          27: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
                          28: QIUxG2d20ewp6Ag4VHhOjKX3390.roa (hash: gd3ad7uP/4lRdgZeJ5043KvMhVaae9ozbtJI6vLh94w=)
                          29: Rhqu0Hhn4jlUWaqBlQkcgoWXjMI.roa (hash: JisZbeQ0AocuRS7stDTFoBU3g27nQeSIpJz1KNUOxPE=)
                          30: TQoyMTaufag9Fh3qmegQelA2zNg.roa (hash: 95d7zIS7vKuMg1Mj7+fOLFO0LcohD9ziLzOdj+cFHi4=)
                          31: Ta-Jng8bCeWcapI-4Br5-Z9YPK4.roa (hash: ZXEMtyYZ68+dYUKGgJwGRiHDozsTZWFiUEvbDn+U6vU=)
                          32: UFM7V0QaEQk5iMcLePQNtrCnBuU.roa (hash: 1KCm2LnslOt1Go2n1GlY4KXw/ywbLjggHVGzM3KYrZI=)
                          33: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
                          34: Ya5-h2ETMjyWDhCB2tvxKRLAqsQ.roa (hash: coLWeAGOhf5VNkz6Fd+O+ZH/zyRAc6w/wTvM49zi9Dc=)
                          35: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
                          36: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (hash: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=)
                          37: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
                          38: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
                          39: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
                          40: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
                          41: fWAfX3KpvP6KHVwuJR6oEj4CXnQ.roa (hash: 7Asl2MelB+M4yfnzUpkkQrmPhCU/0GL0ifTu9RCxXRU=)
                          42: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
                          43: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
                          44: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
                          45: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
                          46: n8KrkCOeu372DfA7gb7CXyt4MkA.roa (hash: m6YplWM+G0Bt8JF0DAD2p3UhAQO9YK+EkRMI1CUMIoE=)
                          47: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
                          48: pa4psCNGpVnlXPr5Xjd5Q4dCGqo.roa (hash: 9bWKHfzVg42Te5unuEl+G5osuB65PQ9mG4+hf0aFTzw=)
                          49: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
                          50: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (hash: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=)
                          51: uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa (hash: +A1T+WhnOHYIEIZ7mEVu1afaFwmjRRKYqLMFQ3ckAmE=)
                          52: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
                          53: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
                          54: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
                          55: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: Cluzjr1d8BVYRkviZDNoWwe0vw3gyRtkix0us8i+qio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:10:ef:c2:9d:dc:e1:a9:38:c9:aa:e6:81:c6:e7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jul 20 09:01:17 2025 GMT
            Not After : Jul 21 09:01:17 2025 GMT
        Subject: CN=a1f47a536e1d0df0a9d7175f7ea97a6558054105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:8c:42:a0:a9:f2:ce:73:b5:99:ec:e1:43:
                    ee:93:3d:53:ab:2f:37:69:ab:ea:01:9c:0c:10:8f:
                    38:c0:87:9d:63:5c:44:91:fa:7b:e1:84:89:75:55:
                    0b:ae:4f:43:79:de:93:25:76:a0:bd:8d:2e:80:cd:
                    ef:43:01:9b:66:be:05:c5:d7:0f:97:b9:d5:e2:2c:
                    b0:32:81:63:fd:41:51:2b:f5:05:8d:d4:d3:9a:d9:
                    b1:52:00:3d:9f:a8:71:36:2e:e3:e4:df:d5:4e:be:
                    55:5a:17:99:d8:57:5e:f0:a0:9b:b3:3b:d2:de:e8:
                    0a:90:6a:a4:03:c7:8e:55:76:3c:ab:d0:7c:e7:1d:
                    83:ac:97:87:28:05:cd:30:15:ee:ea:1c:97:a9:9f:
                    c1:8b:8b:24:f3:9e:65:38:d3:c9:ea:34:d2:81:56:
                    cf:fa:79:e1:ce:ab:b0:41:a3:ba:32:f3:cc:ce:ed:
                    a3:aa:c6:63:be:d4:36:2e:da:d5:d9:01:c1:d3:55:
                    5c:c4:83:e3:19:da:8c:f8:4b:43:22:07:c6:3a:8b:
                    41:b6:8e:bf:a6:07:a1:a7:ae:9f:f9:35:27:e2:ad:
                    cf:3d:8e:14:2b:3f:24:ba:c9:28:8d:58:e9:e5:ad:
                    c2:1f:d3:e5:03:c1:fe:96:12:ff:80:87:5e:a3:19:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F4:7A:53:6E:1D:0D:F0:A9:D7:17:5F:7E:A9:7A:65:58:05:41:05
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:90:30:54:b6:72:7d:6e:26:b8:b5:a8:85:b4:ee:15:28:
         87:58:bb:36:7f:d8:b8:14:99:e9:2a:96:89:0e:88:90:da:66:
         9e:39:af:55:6a:54:ac:37:69:fc:0b:6e:72:53:20:2e:dd:8a:
         01:cd:25:c7:59:64:fb:0f:58:d3:9b:07:7d:12:e5:f2:c4:75:
         bf:71:f3:20:d8:af:d7:78:2c:38:3a:a4:82:9b:1a:aa:3f:2a:
         41:33:e8:c3:55:88:a5:40:78:01:4d:fe:2c:88:f9:f6:80:ea:
         d4:1d:89:d6:d6:ab:c7:7d:08:22:84:fb:70:3b:16:3c:77:70:
         fe:29:6e:e8:f1:51:d8:97:7a:77:85:4b:83:f9:70:03:db:0d:
         66:d5:46:92:ca:ca:7a:ce:ba:86:7a:35:58:39:d1:b9:56:99:
         ff:f7:28:67:90:33:3a:a9:4c:53:88:75:f1:8d:7f:d8:71:78:
         df:db:84:e0:31:f7:19:78:4f:c0:f6:c8:94:19:b2:20:a2:7e:
         fe:99:e2:c8:a5:e1:fb:32:cc:b9:b9:93:e7:95:fd:21:e0:44:
         cc:fb:ec:e5:2c:8f:07:05:f5:c1:b0:90:2d:83:51:7f:38:5e:
         a0:00:ed:0b:1b:cd:e8:d7:cb:a8:8e:9c:6e:29:1d:d3:f3:f1:
         6e:f8:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:25:55 2025 by rpki-client