Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File:                     CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier:          Jj67prdD0ulNF3aKAm8ks82VdaZas4MpwsE8rmQJmVA=
Subject key identifier:   75:A3:A2:DB:69:17:50:5E:02:1D:97:77:4A:46:23:EE:56:4D:99:6F
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       01974B8D45F6D0879DAC0EE051645DC96AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number:          159C
Signing time:             Sat 07 Jun 2025 18:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:38 +0000
Files and hashes:         1: 0WVAn9YvgOWg_yNJalsG8HWMv_4.roa (hash: o9Uyp3iYPto8Ogeet4RXU658pKPPwu/4VlXDv2Wj41I=)
                          2: 1-HibKYNRlVckj_iTZXhupR1bakY.roa (hash: Pbr797a3iSuwQPzQuuhzHtYhPcEF76lPdVXFTnoW0hM=)
                          3: 1-M-VbyCsItZcG9hA_XDnasi-D8A.roa (hash: b/qbiDYWw8CaeeHb6nquKsuF2wjB+A0cqxq8LMSb+5Q=)
                          4: 1-kWteBemYeM6XkcJ_ZUss1hXG38.roa (hash: 53KhatrrAtQ3Krc/O/sxE+vOAlFJYCo6re5dXOrYPbw=)
                          5: 11lOaRU7MF7FcgxE4R9XRkIdnqo.roa (hash: M2CH14vyLfisxEvGm4ORm0aaawOu/BRSvOS3W2Ud6h0=)
                          6: 5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa (hash: KPRBRfXnJeYECt7rkwbA5HLNQN041J0Mdk2L9JLyBZo=)
                          7: 5luPFN5i1lVouRmEBcyTwypwbk4.roa (hash: NHJ5Mbfg05vw8ufC9Y1UIjix6uHWmtoYQh4zJ5PimRw=)
                          8: 5uoV4iXBKOHPftTz02DmU-CdsdA.roa (hash: 2mpqQFSXOUV6zOOM8zKnqxs62eDdoR9K/P9KflUVZuE=)
                          9: 5xoa_s9hHCqBdRVojMZQkieywOI.roa (hash: dLkmlG+BPyJ83dYgEjVkZRzgqQ7WrHrEwODRUOEeHuU=)
                          10: A3kgD4Yh6ZMjOUE4gcsu8drzx2M.roa (hash: rSbRVMQTbgAlKJRB8d21HopmvnA8JdFqIMhpnSws1rA=)
                          11: AbAEVxebdm5G6D1PAcaC5LnGsN8.roa (hash: Dq6Ap6xJijHogpVYcHLyNczvNtcQKKUMlCLwYT3XZ8M=)
                          12: B2R_-aZKC-fKD2cM0Y_ju4yWqAo.roa (hash: tBZsJi3mmXm6MIP7FFZRS9nAQq34IKAHgmKAGADHUfg=)
                          13: BI3sgIaTUM9B3H9IM95i6cQ79tI.roa (hash: lcX08Q/BWVZC00vOiV25sRoANDFaOIFw5t/+Q+BGNvA=)
                          14: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: 6rSGVVJHzWxhQKIYizvW4L8nH3jJXjPfsqIagokkwFU=)
                          15: DDGgge6d5LlDy5dfWiBTroZGTmE.roa (hash: zUOcG6+MR1ospsTENGFCDauMx9GhwzFthN3G8vcsKdo=)
                          16: DN8DQEopeZn2s_vginrteZyRblg.roa (hash: zusAIGD0N+4YFi9tXrSAhBA0eAPQf96DOjVae8bFzrU=)
                          17: DeT4H9vHwyuu35zhI-U0tyFq8YA.roa (hash: d0w+8cvUotAVfyvFf8K4WVYM3e72pkNRc5Y9xUxniZE=)
                          18: EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa (hash: Us3Y5yljNy3p7flzVkHUSVVxPFvWxXzsb07771aSlx8=)
                          19: ELbRMj9dpYGXHBkS3x9fr4fVjNM.roa (hash: pFN7vf4Bi+e7UowjcIQLdhSSW0ELN5XtTgINgLEACV8=)
                          20: ETH1wFBSXTyIScZMuYhOjWG7_Xo.roa (hash: 4pgFORs2NoGVTWQG8JLEHJW5hEBDfhwioOYGj1ZkQ/k=)
                          21: Ehc3A5wFyxSxaVu2JN_l2n6bEM4.roa (hash: 7Tt2rA6zfiq0xOHK0YG3vUvHjTlygYo8XF+ji7LgCg4=)
                          22: G4d6Vi8fwpfBMbAKMprgK-hp9Io.roa (hash: pSEwB6TkhO46uqD2vIRYPbUeH5EsncPmsM5P6q2Yt9c=)
                          23: GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa (hash: hMPbKb1NXJhU4uvH0If2mxxGXgVJxSXaj+jSWiiTlE8=)
                          24: J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa (hash: h0eilDzFJc63ldeHb0QL9b1OgF0191jasEAOBuxrT4M=)
                          25: JIaqKyRqQoYvD8TsrxLTXGlz8w0.roa (hash: Do5yTPKJtBZsvnrJAT23fp5uIOvN1opbLPvdDKN40vc=)
                          26: KhUy9UUnOlFas6aD25pl3uvHOgo.roa (hash: pRLRdQeFQBTTu2BRQ6e6LQQWDfH1gqbpxEW93Q6xIJk=)
                          27: NwTJLgWLnMQ9EeqpznhmvvPQgvM.roa (hash: ViH5oqEBI9vRU6MTGLiUbaYIP8vxiKBaD+q325XXZOE=)
                          28: PFn-sywxKaqL-MQoHYaDo3Ylvxg.roa (hash: 7M/nt+kbs5nOYGFBdJB98Fe7ciYZvkhYXohc8zrAuko=)
                          29: PsSM5b3oLk5wUeBSmklEPX40UQ8.roa (hash: ktnZORaDvt42fZYrrjp7EBxS9xvZh108Mt9SBXfu83A=)
                          30: PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa (hash: 4OKKH899BiMarrXaTVhgCrQZ8xaivHpsNV8dYRA/+C4=)
                          31: Qfd2pQFSud35Kd5afgx_HllnhlU.roa (hash: AVzGY15QZRw23nEpfQHWMOhslLM4/l7mK/LlAJnwT6k=)
                          32: SVAo8dmVNs_cgWnjmR5t-BqxJsg.roa (hash: YTFvZ6MXaLQqcE67dzd6EDQHER7pxnY4XSKLt9tK4LI=)
                          33: SrF5yr5Pqaq1Ja-_kcWWL91gbc4.roa (hash: 2vqcvGcuZtO87Apo8Qmd6BopBmIN2/9Y++vnVJ5lTDM=)
                          34: V-LCmOe10R8krDgxZ26_D69-M1s.roa (hash: e5tLg2l3aiV5VWqL3jXIWtw0V144t3f3X8rGhSYx2N8=)
                          35: VKpWLCVvnM9Bk9gkuramrbyr9oI.roa (hash: iufCNvmg9pyXxypfL82+6UjxiEFR4YOVBGjjYXCmNCA=)
                          36: W4x_U8KKzKhD7jUq27wP_pnDHSQ.roa (hash: FvDjm270NNg4f/ya97U4H5ElApGRQootXEuMHYZH6cM=)
                          37: XC5_IHXanKyEQtqSapG74oOlfsk.roa (hash: 6QAptJczYTkTa4ac/1nerDggXpMWciCFJDGSnNvSP2s=)
                          38: YenQr5nH_V3kb3uSF9W13TFvB5Q.roa (hash: GpHupGsKceamB9tAnqXoExG/BKA3+rfzw7wdC7Z1p8s=)
                          39: ZMGiCYqIYbLxIDFLGSrZr7x3AKA.roa (hash: WLL9B2mOtaR0OnLgCRktu1TUID/GGlBWdDeo/4knmL4=)
                          40: Zi1QbNVUNm3mfz1CTqhQtalYVwM.roa (hash: gT07hI4kfkPaZsHUUATtMtjxeDaYW50HEiIkbWM7BGA=)
                          41: alXjjyJjACKReiBWFe9q2LojJSA.roa (hash: 0CGeb6hxkkcv5NiB3c+nNxG+nWc/zDf3rldJ9DYLqso=)
                          42: d0OziBiaSaqujGGg39NmZm8WAQc.roa (hash: wPE4wVxV1u8jFuZvEhRcVJN0ZIEnlAfJeb7rkOgWfjo=)
                          43: dEQn4gfsJRxfhqKslfN41v3D4hc.roa (hash: TZ0sobRJ9WMYF6aBcf3Cq1/T45j0yE6z5roNHeVXmhg=)
                          44: eo3YEkR_kIlvbYQzw6Gy-UPzN1Q.roa (hash: JLhOns4DewIU/XF05/PioRQMuqO3MR2c58DWu+qOVVQ=)
                          45: fEpq9DdIP9_2nad6jXW1KwPbOmY.roa (hash: jNRyz0mfdBPIr+myxBnVzRJNjsmPS2tkxn+QYcZLgCU=)
                          46: gQLDHDpGBQlgALs9GcfAUzVclt0.roa (hash: DRtfp1UtfULNf5WPwgIsVkdZx6FfMZanPaD3QZoUync=)
                          47: ifEtStLPeAA8jKJ4MhxpZv8xwu0.roa (hash: SHKwnaRe/appNbcVWvQlAJculHJjzlHZPzKL+wqnct8=)
                          48: j0kswT18M65pGw9oZ5vF0p46VKQ.roa (hash: 32N3pVed44e+OfqPtN7yUzxwpydaC6y88MI0aFPEPT8=)
                          49: jY7niDqbHThw-tNhaxyppo0lcEY.roa (hash: V1mUjItVWw410qTmkUZlb5i/69zvNslDL21/SgXV274=)
                          50: motJg_hClgvKFxrmI0ThBISo3lo.roa (hash: 1+GgeLsk0bVXeFjHtsYrISwKmvPy/YI4vUXD5HuoJw0=)
                          51: mvBA8v6ECbu_1CHCq3Ygov29IXM.roa (hash: 66IPvJEHtgW9wEKAU5V3GW2FisJZNIcyhujZbbm68Eo=)
                          52: nxm2z-N8DzZSbo0806BLGjh1MGI.roa (hash: LBhQJnrLYwLBMi2jNJHPP6NuErBJyyIWsF2qumnunWA=)
                          53: qz_DmGy9IAKXRI9f4REmBeW1T9Q.roa (hash: AyfH+v4itEz/GELogPNr7gp6yMRLDbtAVMRnMQ0R1Zk=)
                          54: rF-q7agOPCH4-t_lEDeqW9htfmY.roa (hash: BtOMLbBjtNuDENxRwlH88b+1W2N7L+162hA6Uib2VAY=)
                          55: tKWY7-wssBbVkK8gi5xh_V7LyWo.roa (hash: 9iQCM9DBb9SNVfP6FnCOqNxt4sGo669zHK843eqyeJQ=)
                          56: uprewwcTXCcmQN0Ey7EpJWORj44.roa (hash: QV157YO0Y71rObCzvJ0bY8O5Oh3zS2lhjp5uOHkyL5o=)
                          57: xVpekrjNm2Ym4WMpRSG3_hwYsv4.roa (hash: sahJiwW9mBR8LlyaT8TmE2NDfFoKYM4WzqhrscZG6Os=)
                          58: yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa (hash: e8Eyw72rq0/GtFG8y5QenGef6gli7tTz0dJgGjM7CME=)
                          59: z_xZZaAWa8QdNga7zU3z3y_ctgs.roa (hash: 3uv9J0zNy4D6OdhhkaZfxXnVW6d77XB4ndHuoNeUg80=)
                          60: zgMzIdhRlx-sM532UYZ-ab0aXII.roa (hash: DccIHmb2BgsXvdBuA8mWTiKispMrxrNFl+zv/Fzyie4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:45:f6:d0:87:9d:ac:0e:e0:51:64:5d:c9:6a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Jun  7 18:00:38 2025 GMT
            Not After : Jun  8 18:00:38 2025 GMT
        Subject: CN=75a3a2db6917505e021d97774a4623ee564d996f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:36:f6:22:54:71:88:a3:1b:9e:62:c4:16:
                    6d:16:dd:ae:20:f9:c2:7c:9d:d3:4a:36:a8:39:93:
                    00:29:92:06:76:c9:9a:15:7b:33:4f:e4:50:3f:3c:
                    a8:7c:a4:39:0c:7a:3a:19:1a:23:d0:f6:ba:06:7a:
                    70:68:b9:ba:1c:56:16:45:3c:68:a9:fe:9c:56:c2:
                    62:c4:b6:03:36:c3:38:c7:ac:07:40:42:a4:0a:66:
                    1f:47:91:ed:86:3f:fc:84:3c:86:7c:23:18:28:0a:
                    d8:d6:f4:62:ed:a4:43:f2:48:d8:cb:7c:30:08:53:
                    af:a6:d7:3f:e4:94:ba:a2:19:5a:cb:0e:3a:c2:6e:
                    8b:6b:1f:b9:46:f3:5b:5e:89:b1:b9:d1:ad:e8:3a:
                    58:ef:df:eb:fe:58:79:87:5e:38:b0:cf:80:91:61:
                    bb:a7:95:a0:a2:1c:14:29:45:9c:6c:e0:b1:33:77:
                    ff:19:29:8c:a1:5b:e7:3f:fc:65:62:e9:58:d4:02:
                    86:9c:88:0e:2a:22:2f:72:e0:bc:31:ed:87:9e:20:
                    32:df:97:24:cb:fd:82:99:b4:60:75:25:7d:44:c8:
                    a0:9c:5f:2d:d7:3b:78:87:b6:e7:ba:3e:d2:5a:2a:
                    29:d2:85:fe:4c:52:db:a5:8a:fd:20:b7:58:13:b0:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:A2:DB:69:17:50:5E:02:1D:97:77:4A:46:23:EE:56:4D:99:6F
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:5d:0f:7e:fe:12:87:62:e0:d9:18:95:2c:e7:ef:1e:30:
         b1:30:bd:e1:bd:2e:9a:53:1d:e3:bd:f4:d3:12:f5:30:39:49:
         2e:14:3b:a5:b1:bc:83:a1:33:6e:24:b6:a8:52:17:a3:11:cc:
         d9:31:92:19:6e:74:10:e8:f0:8b:51:87:11:c3:c2:a7:d9:88:
         ce:26:43:ba:1a:4e:df:6f:13:61:0c:3e:03:f1:df:10:36:a7:
         97:79:b2:34:4e:69:a3:10:6a:11:33:05:63:7b:98:0a:56:97:
         77:e4:ac:5f:69:cc:08:7c:a7:3a:56:6a:a2:4f:f0:b6:bb:38:
         53:51:1f:f8:48:ba:0c:46:f4:14:79:eb:7b:af:ee:f6:9e:05:
         5e:df:68:b8:de:d0:be:39:b6:be:f3:04:d7:58:87:5d:bd:fc:
         0c:c5:6a:25:fa:84:6a:6e:c0:55:7f:b8:f7:27:8e:cb:c7:f8:
         72:70:bf:5c:ad:9a:8e:8c:0b:98:b5:36:88:e5:cd:6c:26:6f:
         40:b4:7a:41:b9:c2:2b:7f:6c:b5:02:f3:b3:42:0b:78:fb:25:
         83:5e:a4:43:f5:2f:80:60:47:49:93:49:57:f3:7f:8a:19:86:
         2e:09:9d:05:3d:31:f1:1c:cb:b1:8e:82:2c:d1:2d:c5:cf:b6:
         d0:4a:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:48 2025 by rpki-client