Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          ZoCItUWmQkXzhW/fFIoPj6XfShLCMB8aPEAoNy8NO+A=
Subject key identifier:   9F:EF:5F:B3:94:7A:A0:57:07:94:14:A2:B3:7F:C9:D2:A3:4F:F8:40
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019917647978AE755E2343B9D2C9B931A4F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          17F0
Signing time:             Fri 05 Sep 2025 01:01:24 +0000
Manifest this update:     Fri 05 Sep 2025 01:01:24 +0000
Manifest next update:     Sat 06 Sep 2025 01:01:24 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 1tf4gDn3E8oQJBa1P8YsiAEqDhM.roa (hash: 79Cfn4DIphA5rCTAyXxPmRPIy+pQ3OnQkEroI7+/vWI=)
                          3: 3GpFaqQcQN9oMifABgrQUFoG0kE.roa (hash: WY/ivhDoFD/EbNKAvaxEqHPsDCFDZM/+fS+MHyM0i7w=)
                          4: 67Mxj3KpQWipNpMlLApfSyTCvC0.roa (hash: Fv9QcoJhLdt0inevu/XCAdGmMRCdZt4H9qb4Kzk/RZ4=)
                          5: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          6: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          7: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          8: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          10: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          11: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          12: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: HfdfucCgbEomUX8zf9RnQoPVRJzTRJWm5fNAWOCcz3o=)
                          13: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          14: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          15: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          16: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          17: SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa (hash: 0t61EacIVCgeyWoWNgl6pkppBifI3GCHVv8rPuzvXjg=)
                          18: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          19: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          20: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=)
                          21: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          22: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=)
                          23: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          24: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          25: dbVfA_fXprSS4i2QZkFruITo2AE.roa (hash: rakhWVMFHWlUieRihs0aD8m0Lp0z1R0bTv8p0JLqNxw=)
                          26: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          27: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          28: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          29: jglHMQosHm5EePmNaCszZnbBZOs.roa (hash: R0FPP1nLh3wCW9tN4EPA/+UY2zsuEsyvpDHM+ViEarg=)
                          30: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          31: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          32: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          33: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          34: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          36: vTsV43c6iLSrTEE_Qbj03ccqdeg.roa (hash: 0epFIRNjZUqW0bkd/LA5GI9/eBBUO8Zaqj2aGiIwYro=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:79:78:ae:75:5e:23:43:b9:d2:c9:b9:31:a4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Sep  5 01:01:24 2025 GMT
            Not After : Sep  6 01:01:24 2025 GMT
        Subject: CN=9fef5fb3947aa057079414a2b37fc9d2a34ff840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:e3:7e:0e:5a:3e:28:a5:75:2b:78:59:78:
                    89:c2:53:69:4a:45:6d:65:52:56:8e:0b:0b:ae:c5:
                    57:27:a0:22:00:a2:3e:84:34:71:57:86:2d:40:0c:
                    0b:78:c0:70:43:8b:fa:fb:dc:81:ab:27:99:fc:a1:
                    cf:73:50:b2:9f:5f:05:3b:d6:0e:da:43:1c:dc:46:
                    c8:82:3a:1a:6a:81:b4:ef:eb:01:1c:c2:6f:76:cb:
                    6b:88:0b:17:3a:a3:3e:7f:ab:28:89:e5:12:23:cb:
                    0f:d8:c7:54:19:fb:03:46:9b:07:9c:c1:cd:3c:61:
                    c5:d9:9e:10:69:b7:59:f9:83:1c:ab:c1:ec:22:99:
                    11:fa:a3:09:c2:85:8d:8b:07:dd:b5:e0:08:a0:77:
                    8b:4a:b2:a1:62:f1:ba:b9:68:65:fa:67:b2:95:5c:
                    63:11:64:b7:d4:b3:9e:65:c3:b9:92:d7:96:87:16:
                    4b:70:41:7d:58:5a:d6:e6:2f:27:be:9f:b8:4d:31:
                    01:bb:80:5f:e9:0c:77:c3:95:bd:80:e5:da:aa:9a:
                    4a:ff:fe:5c:14:71:ff:7b:8d:d4:fc:f7:d5:b4:7d:
                    4d:b0:ba:b5:c8:6f:fd:f5:ce:0b:f5:22:cf:d1:ff:
                    a9:32:6d:d2:21:28:9c:89:c8:78:c7:93:1f:cd:bc:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:5F:B3:94:7A:A0:57:07:94:14:A2:B3:7F:C9:D2:A3:4F:F8:40
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:76:a8:6f:34:6b:fe:ca:00:c0:3f:7f:ab:f8:b1:3c:b5:71:
         57:b1:40:a1:76:11:a1:c7:31:14:7c:f9:2c:92:98:c1:97:bd:
         0b:8d:35:8c:d3:67:2b:f4:1a:be:32:14:89:c4:20:4c:27:f7:
         f1:48:65:1a:fb:23:fe:a0:9f:92:47:99:6b:a0:ba:dc:64:ad:
         7c:e8:3e:86:a4:6e:06:9d:e0:3b:d5:05:4d:4d:d4:42:5f:66:
         da:54:cc:be:50:2c:e1:cd:2c:5b:85:b4:29:1b:03:15:ea:ba:
         83:d4:16:54:2b:e9:61:14:94:bd:15:b6:3d:2e:6f:c6:22:82:
         37:b5:a3:b2:89:fb:25:2b:a9:41:f5:f1:90:91:c3:3e:a2:8f:
         ef:bc:fa:88:87:6c:8e:53:e8:5c:1d:c2:95:6b:07:43:d7:97:
         6a:97:67:c5:42:0b:86:4e:f7:fe:3d:38:44:e1:0c:9a:f3:12:
         18:58:f4:e4:6b:ac:26:94:be:bc:d7:82:55:f8:6e:04:c9:2c:
         99:95:7d:31:31:ce:5a:6f:f1:96:12:e3:6b:ef:ec:2d:f0:7a:
         c1:12:ef:9d:ef:5c:1b:a9:2f:73:00:46:ca:10:02:fd:69:61:
         5c:9c:c7:4b:9d:d9:6f:d7:22:d7:d1:7b:aa:c4:ff:36:90:1b:
         12:63:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----