Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          KLb9k9+pJdIluK2UgGijNKzElp8lfRdGrRztDjIL78s=
Subject key identifier:   BC:6A:C6:AA:BC:12:49:97:F8:F6:AD:6F:25:F2:A4:22:ED:6F:76:27
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       01973E3F5CC497E4C785C47300780F3A76B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          16F2
Signing time:             Thu 05 Jun 2025 04:00:29 +0000
Manifest this update:     Thu 05 Jun 2025 04:00:29 +0000
Manifest next update:     Fri 06 Jun 2025 04:00:29 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=)
                          3: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          4: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          5: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          6: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          7: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          8: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          9: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          10: ID4trGdaWKJu5BbNXALaxIjZ31k.roa (hash: Pkv6z01q9dvGXVnFDwkYMbgGkDFgHerMyDhgKR/xJeg=)
                          11: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          12: MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa (hash: 2cRjKiLLq409oV3H3w03WuAOBjBM+sqVFpy4OKfY030=)
                          13: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: GOHmDaW2sNAa9KCHFmctFxHnnD2c7OnOBo/vD+fRpJk=)
                          14: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          15: ObZzYN2E0kdZNeSLF4XNFHQWZK0.roa (hash: 85PbvghxphTHomH9hrjntHu2TbF8oiO3c8zwpKmiEd4=)
                          16: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          17: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          18: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          19: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          20: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          21: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          22: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          23: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          24: d6xPZ5w_t1Vfgnb2yfuPIAZYZ5Q.roa (hash: xVreapCwRP70gZPY98FfZMhfqjasBVHWjglIAwmPjHg=)
                          25: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          26: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          27: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          28: jglHMQosHm5EePmNaCszZnbBZOs.roa (hash: R0FPP1nLh3wCW9tN4EPA/+UY2zsuEsyvpDHM+ViEarg=)
                          29: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          30: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          31: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          32: o-h2A957dlcPkUpwvfVIlQ19QGk.roa (hash: TLWzVDizEQzpjZ25+tu4lXknyJozTbrV/Wbt2G8zyy8=)
                          33: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          34: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          36: uCyH2-fPRpFibOOxTNl7u6CXQas.roa (hash: tlDsieQUw597/PTZ8W1911q4kuRCKAdlDdwHG1Otktc=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3e:3f:5c:c4:97:e4:c7:85:c4:73:00:78:0f:3a:76:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jun  5 04:00:29 2025 GMT
            Not After : Jun  6 04:00:29 2025 GMT
        Subject: CN=bc6ac6aabc124997f8f6ad6f25f2a422ed6f7627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:8d:38:c3:0f:64:f1:e0:49:e8:79:5d:1f:
                    e7:7c:49:a2:9f:91:01:96:3f:7f:92:da:46:d9:af:
                    9e:95:86:e5:b9:3d:ef:a6:b2:7b:b5:f6:94:ac:67:
                    28:62:5a:a9:ac:da:f2:cd:25:54:75:6a:fc:34:a4:
                    e0:2d:59:d2:4c:20:35:4d:01:d4:4b:25:8e:bb:8b:
                    d0:a5:cb:98:62:61:b8:9b:05:41:6a:ac:67:90:03:
                    0e:ef:26:46:9e:e7:96:eb:54:19:bc:fc:7a:17:22:
                    27:1b:7f:b0:b8:86:a5:68:b8:da:34:0f:60:d7:19:
                    bd:12:5e:01:b9:c5:f2:fe:88:25:23:a1:c5:3a:fe:
                    3b:57:c3:46:eb:59:15:7a:6e:39:db:c3:7b:5f:6d:
                    d6:d4:0a:84:4d:58:81:cc:ba:86:2c:fb:9d:b2:7e:
                    51:7d:f6:a6:e6:32:eb:92:f6:db:69:33:47:d1:81:
                    0a:83:d8:7c:1e:76:b7:f7:1d:bc:e7:05:3f:68:39:
                    1b:89:da:64:f2:75:4b:7f:da:f2:f4:e8:28:ff:b1:
                    56:10:ce:7d:66:b3:48:3c:ec:3b:14:1c:82:2b:25:
                    e3:d1:7f:20:08:83:4f:a2:7e:a4:05:b0:15:b3:78:
                    7a:69:81:3c:11:62:21:c4:f0:4d:6c:ce:35:6f:0a:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6A:C6:AA:BC:12:49:97:F8:F6:AD:6F:25:F2:A4:22:ED:6F:76:27
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:88:52:39:be:a4:53:f3:bd:1e:f0:97:7f:cb:e0:3c:f6:68:
         65:65:91:b6:45:2b:bd:fc:80:73:66:b7:98:ad:4c:53:3a:6c:
         6d:4f:66:66:eb:d4:e5:34:7d:93:d2:a4:b1:d5:33:60:76:d1:
         ab:1f:26:6d:fc:32:5e:53:bf:c0:ce:95:b0:11:d1:2d:49:71:
         fe:c8:72:30:c6:69:de:6e:d5:44:df:c3:37:eb:89:28:7c:f0:
         65:de:55:ef:b8:a6:1a:50:1e:cf:fd:d6:f7:46:1d:c7:cc:c1:
         8b:0e:e1:97:90:ab:79:dc:c5:1e:71:80:60:19:97:ea:e8:3e:
         dd:61:b5:b9:ee:7d:23:b3:ad:a0:4a:91:7b:3d:fd:bc:7a:f5:
         1e:3b:30:41:93:f9:b1:c1:e1:ec:df:b2:81:af:3d:48:6b:f5:
         f3:41:98:cc:5f:0e:ab:36:f7:b0:8e:0e:e7:8e:a3:83:b1:f7:
         c6:b4:ed:ce:90:95:5a:cf:e4:e9:04:4a:d9:4e:63:4d:e9:ca:
         e6:8b:8f:4f:ba:84:e9:98:47:f7:87:4a:9c:42:87:4e:99:8a:
         52:cd:6e:c9:dc:5f:a7:12:ee:8a:13:e0:6d:47:a5:4e:03:0f:
         58:65:57:30:bd:5b:e0:5b:93:04:d6:dd:5d:59:9d:fe:92:b3:
         62:01:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 06:44:10 2025 by rpki-client