Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
File:                     J52_30wgva6NYRhWbs52RE5G0XE.mft (raw, json)
Hash identifier:          XCCrrCwpf163GrUef0c2rIZRsPmbHZY6TeKCJ525SZg=
Subject key identifier:   6E:9E:98:6F:48:3A:96:9F:4D:5E:6A:32:A0:97:60:7F:3F:A1:C0:B6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       0197445915ED896B6105C69D55A025B8D824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
Manifest number:          15CF
Signing time:             Fri 06 Jun 2025 08:26:18 +0000
Manifest this update:     Fri 06 Jun 2025 08:26:18 +0000
Manifest next update:     Sat 07 Jun 2025 08:26:18 +0000
Files and hashes:         1: 1-QM7lN_3l_i24PtIVM4U3b6ZVsY.roa (hash: BVkkqGkVOZsaCvddvqk40JcxzS3yXeDtAePzl+T+34A=)
                          2: 12KGssEvUxE_j6gW5XD7n08rX3c.roa (hash: oAK8MdXi4RIAuKXDq0kKdU/AlzFdNzb1DFaGPQEQF/k=)
                          3: 19LpzfYh7aZld8nuQqNanK3sVS0.roa (hash: FtTpAqHj9jd1JGHIpnm/Xjkbr216P7K54EVyi0SrqHQ=)
                          4: 2dBnw9Zm0iG95ScBRgeRL6K6qGU.roa (hash: iWLS0dUcbj7x0hiYWnWPlmBPvDk8/IjJmcVlBSF422I=)
                          5: 2uqfE3wlu2mK8kTtPAOG6IwmpWU.roa (hash: MjeX99ohxCy7M0QvdKUOqgv644yAnOfDxHeyEhtyZA4=)
                          6: 83S96gFDssd9G3jyTFqFt9CN_OA.roa (hash: 9DUIj9rDfmXxR1u9+SOfUOrxZ8ScHx8sb8dxrzmH13I=)
                          7: 8cLonLerPea1ONAnvr_dxQWYjTM.roa (hash: nRgP46aVXwPd+6oMZ/fP0RAWOxYr2cSvaYDPxKnCP4Y=)
                          8: 8cx6w1beyMlGqZP8KyYcuFzXSEs.roa (hash: J7UJLXdkDNNW0MJQgo/ZZub7MQrmBw5qL5bKcvLJtGI=)
                          9: 9akxktbl0WdW2VrN9fhQ4CPa5e4.roa (hash: z094BpAmlu2aAVSunN2yeXBrvg9BeQNPducWNXGldME=)
                          10: 9lfJZmZ4WrNqWZ0C_GNItXyCwWg.roa (hash: hhTGC58jLwt1EeNK00GvauOz2UBvNyRZyT79pcnIUAs=)
                          11: Al2CJ-hFhvhuWEtIzZImb5wPqoE.roa (hash: JfweM1MnWIdlm+tgCPvMzrYBE+YTTb8JHr9Agsw8o6g=)
                          12: AnGb1F6vrDQn-_J9yPy81EbgHug.roa (hash: gjaX4Az39L7nM4ttftGzLr4ijUTfbnAw2dsPkVEVbiE=)
                          13: Axq7-pao9bD8_3H2zYx38U0EwHg.roa (hash: NkhFLsCedjEMzwHFCvFLRiEUZ1JMaMmDgw9FQVqKo6I=)
                          14: BsRpiiQK9KCjho6DrW1wtglo1IM.roa (hash: sgLHVcWXtaVQyXDvrhkvDLVN/k+aJMJ4oliAJOu3y44=)
                          15: Dat1P8EK-U6psVpJJsi5wpEdVdw.roa (hash: Gx/2jNTqPY90ulK6zZN16Hi485P18R0KrrIdHjcFwiY=)
                          16: E_pE0RoSLsOOSCELQuvHQpm3EOQ.roa (hash: q1RL2VdABfgaiUvv6GxYuh2a+53tYIsTB90CtwgGHKU=)
                          17: GXKOVJMi-iCp79LOL8ZJwypaKNc.roa (hash: Of4MDZISR6b2I1yioSfnZZ7Rf6dyDQpPTcdb0iFgFNs=)
                          18: H9Lep1iOPD-5AqIhKkqPz097Spk.roa (hash: ldVSiVxAFChxs9f+XEhXOOZ3MA4vJ1fr+NH75+9ob2s=)
                          19: J52_30wgva6NYRhWbs52RE5G0XE.crl (hash: AOT/pkTMa5nwx19HILuCxZPfUS+mYeE0iz1Wvl38WZ0=)
                          20: KkTOteQUGewLwZoxnEph46bdLTE.roa (hash: pw71J26w+5n1y3l9mzDvXMIQLn5PzwgdVAosXi+pR9I=)
                          21: MSVsSFqyYmkzSthiCPb6J97bGuA.roa (hash: 7RplfcUQh52LNdkySIuR2OoK0vORAK8vru947BL+8ZM=)
                          22: Mfjilu4i2bFB_oiV2k3kb1IXMO4.roa (hash: aouSaMJmLDUgnszVxtE+0ZmlKyIIElRAUppu4aVFolU=)
                          23: MupxJXIhUUWKqsCELLd67Cz33fc.roa (hash: zrhDw1HaEfOjdAxwW5TeJre6DoBTV72QIRH/gLiUeZY=)
                          24: Ou7M0KmLE4WJDKyw4l-atUqjGyg.roa (hash: VNzJge26BNZCsfzKjFks8cOkJvQXzCyErZgbdHfRgoM=)
                          25: PkABJaVRWiQjy_4RILYCs_CK_SI.roa (hash: b7en6Be+nPTR+mK2a2sCXHHGEoPgh9z3dIUmSF1Db2c=)
                          26: Qbva1ItCsE91O_rrvfT9aDvDnL4.roa (hash: 2znGW91YGH3u6Ai2uRfeAwQwDItRIiyG1Q5yZ2XmCTQ=)
                          27: U1oTjq-0GQ4DzEkNnVQ2nb1gonY.roa (hash: Yfy6PvEl0WkVGyxI7OgQMvD3LnFL+JPaW1hLYYGsBRg=)
                          28: WItTQBl1JdJJtJU-_Ol9lcUAZW4.roa (hash: 9TnOJbOOEVrImjNu/Wi+aYZFGZFMVFmF6vEe7jANnD8=)
                          29: YzEEBZ2nFhr-nr4dIXveLwqw--4.roa (hash: P4qnMKVAj6zCbFR4UGpNbSSaPMVJcYZbk7718Vgb2co=)
                          30: _hWIZtCNgEyL-H1ZcXOs3ubux20.roa (hash: taNMHdFrOjv54DcZn4eFZHeynyvVa26TAy5jacrLlQ4=)
                          31: bTR5ARGVS48NxGTPkopdh9Ggm8k.roa (hash: aaWv4Rw2ia1K7cSGZjky7x9lBQFsZGt4c0YsGVg+gz4=)
                          32: chKjdOD2G5KLJmGbVYXnlCNYxzo.roa (hash: n3VTjGtK+o0WUfCTFIUBM1HFOBVIkeQI3wpkJxtOTyA=)
                          33: eNSe7NZpBc_eJj0y5eMiMmnmRjc.roa (hash: pwyewnUGvwGvARPw8eNqUHv+LqGl8Wfm67TW8M6UK3A=)
                          34: hWDPC5V6bDQ_Ywxma73TBS7unOY.roa (hash: 5pFnUgVfQ6XF4IlRf99N1SOcJIDVpMu9qNqYtF4/7Dg=)
                          35: hsEB-1Rr688p1luPcFY3QHKG8AY.roa (hash: JZ2vHfftvNf42IEZyQcMRDXh+vFlsIADr3tNYCFl6Sk=)
                          36: k49qqCYywhYhBXtIEF8tVpq-K-s.roa (hash: +OEgRjn2QYiEK0Ot+SkzbahF9krO3BmUR3L+mXLLDXo=)
                          37: mOxqHKVaM8FOyy9qC7C8TSKBAyM.roa (hash: qTLJadQ7H14Ihs1xJu+ceU18o8p6SlqvQuxChHR7oxY=)
                          38: o7sJipsVX7hwoODnd8cWMgZkYJw.roa (hash: tDJ76gPp8Zg8iAxovslvfSb506anjKYvrDEi9vUJLuA=)
                          39: oBtrjUXbuQ2ltXsz-v7Q2iOT3GA.roa (hash: F76Ef2oKurt68EfauOgCyeengLJONX8Fciqh3psaQ5A=)
                          40: p_T9nHoPGqNNrNnR-HF70_n9iwQ.roa (hash: dQ6G2OJhpBuHh/Lr5x6w9i5v0pQPfRIJFzrEAhINk60=)
                          41: qi7sTzufFC7EkRCYqq0lulzGTGQ.roa (hash: k+6aNmxAVditWwqCq6XU3IZjHa9eI73brduw/dGSIXU=)
                          42: qn0HBJJtibVaWfz49dXEOms8aWU.roa (hash: 97DgRmp2KS4esIH2LUbJTWE8bxq4soRrjqGks4JIX2E=)
                          43: rcQZim11G5Xxznsrw1JbVOkV_mw.roa (hash: AW8GFn5+B9TORfZFdRkwAvkFvQ7ApRaGRDViKpLlvno=)
                          44: s-tAnvfIFJM-jzZ_8aiu7TnosuQ.roa (hash: d/ChYSopLKoY5bubxK5dhq8tHDGlkd35G7FUlv5iINs=)
                          45: sr0UPSjUdzkol4ETssYBWKfK3H8.roa (hash: Po3iO/040CJX49uKGSivdYsu5vekHP/RjCUdlbLsslQ=)
                          46: tN3Ne2OBckVQlQSe0-tiflKX7HA.roa (hash: +JBi6Zqbvyt0c8qpJoLj5rLIApw1IM0YXBygW6AqLW8=)
                          47: ul0GAOlwqYlP4-EPJiCmRx6maCM.roa (hash: G/LAYmbruJmYHcaX0kpXHw2WoouIu1JXetN3vtNuLW4=)
                          48: w8ePUEB7kMjG84Zh3lEo6ZssAdw.roa (hash: 6Tv0ezxHU87k4TiMrIm9h1K6nd9nZX+cEqx5QdYWnFI=)
                          49: xEnkF5j92tlMN6y9yFq6rf-ZtGM.roa (hash: S3HA6lQu3bWEiC3+sWYcaGY3bnZKpB78PEktmW2P5zo=)
                          50: yGGcjEeLN1XoDfUFDjJG_DO_4S4.roa (hash: 4dm551rsf+KoQu6R40JInSbMzcNHDKJhMN9+xzX7jtw=)
                          51: yx-yW8BiAYp-7URgBd1T7s8yW5g.roa (hash: 0Quiu2iPhpGYeOCV4r6C/rlJ/WsEbGGPslRDFU+Dm8Y=)
                          52: zGPo6mnRBIYyQB68N4SoxJmoi44.roa (hash: tyckAZxPrNs4vvBNRCXQiYrCFCex2rMQ9FJZNiDvwiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:44:59:15:ed:89:6b:61:05:c6:9d:55:a0:25:b8:d8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jun  6 08:26:18 2025 GMT
            Not After : Jun  7 08:26:18 2025 GMT
        Subject: CN=6e9e986f483a969f4d5e6a32a097607f3fa1c0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:42:ea:8c:02:5b:1c:18:92:17:91:46:22:
                    e8:c0:40:99:ae:e7:9d:a6:29:30:ca:20:46:43:cc:
                    b8:98:07:77:73:b6:d6:ad:9f:63:53:22:84:bb:2a:
                    0e:47:4c:a8:a8:86:ee:7e:48:6f:ca:98:a7:5a:46:
                    52:98:c0:df:6f:83:dd:4d:f2:75:f8:3e:0c:d8:b2:
                    87:e2:56:f5:91:12:26:37:ac:36:0e:3e:90:ac:2b:
                    c3:af:f8:23:4f:8a:d2:9f:54:40:06:b9:84:7c:70:
                    c8:ae:1d:d1:67:9b:37:26:6d:e0:01:53:5d:ca:b5:
                    78:ed:3d:34:43:f3:16:b4:37:c7:b2:9e:a1:30:4b:
                    f1:49:8f:b2:38:14:3f:e3:48:6b:0d:0b:24:e6:24:
                    1f:ed:1f:c9:e1:9f:24:0c:a2:fc:77:20:eb:2b:9c:
                    b7:d7:ad:6c:9f:f3:11:04:3e:fc:c6:1d:5c:50:07:
                    a4:23:35:c1:06:52:cd:43:2d:a4:a7:2b:5c:b0:19:
                    c5:8a:92:9b:72:9c:43:6e:f7:4c:1e:17:53:84:ff:
                    1d:f1:a3:f8:19:d6:e6:30:2b:03:d3:13:76:91:ec:
                    69:f0:47:34:60:62:97:0e:55:31:30:d3:8d:9f:bb:
                    bf:15:9b:bf:e3:a3:be:8c:d1:9c:d0:43:c4:59:c0:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:98:6F:48:3A:96:9F:4D:5E:6A:32:A0:97:60:7F:3F:A1:C0:B6
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:b9:ed:9f:52:26:7c:75:56:ce:97:31:a5:45:5b:91:7e:
         2d:d1:71:e2:ca:f5:5f:a0:7b:41:96:5c:ac:ae:a6:9d:16:36:
         39:b5:2c:50:43:a0:55:d0:a1:e8:a0:d5:35:a4:26:b5:6e:4f:
         48:a5:85:60:1a:73:9f:d9:3b:78:3b:a0:a3:49:69:7a:4b:71:
         e1:0d:07:2d:bd:a8:f8:ab:e2:48:14:e7:f8:2c:3a:27:7d:a9:
         c2:80:2b:61:ed:ac:cb:7c:19:16:f4:f6:f4:e8:3d:d7:8c:0c:
         ed:fe:ea:2d:7b:ce:10:3e:91:01:a5:df:83:f0:83:f5:58:37:
         13:25:29:16:d1:eb:2f:57:2e:e4:18:97:fb:f5:0d:71:84:63:
         df:f2:23:48:3d:8c:03:f1:93:68:b4:8d:7f:e5:71:98:59:57:
         81:90:8e:d8:09:8a:4a:eb:61:f5:6e:42:45:c8:f3:3f:82:ce:
         f6:9b:69:35:d1:21:96:5d:55:e8:49:f3:b3:04:fc:99:ac:ca:
         65:25:d9:03:36:ff:67:93:40:7b:80:69:70:2d:dc:b9:cc:d2:
         c5:86:ea:4c:62:ed:68:fb:47:44:f5:b6:82:3e:d8:fb:12:49:
         ee:6c:30:d6:86:05:3a:ee:27:0c:ee:4d:56:e4:17:0d:03:54:
         20:fd:24:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdEWRXtiWthBcadVaAluNgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNjA2MDgyNjE4WhcNMjUwNjA3MDgyNjE4WjAzMTEwLwYDVQQD
Eyg2ZTllOTg2ZjQ4M2E5NjlmNGQ1ZTZhMzJhMDk3NjA3ZjNmYTFjMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYRC6owCWxwYkheRRiLowECZrued
pikwyiBGQ8y4mAd3c7bWrZ9jUyKEuyoOR0yoqIbufkhvypinWkZSmMDfb4PdTfJ1
+D4M2LKH4lb1kRImN6w2Dj6QrCvDr/gjT4rSn1RABrmEfHDIrh3RZ5s3Jm3gAVNd
yrV47T00Q/MWtDfHsp6hMEvxSY+yOBQ/40hrDQsk5iQf7R/J4Z8kDKL8dyDrK5y3
161sn/MRBD78xh1cUAekIzXBBlLNQy2kpytcsBnFipKbcpxDbvdMHhdThP8d8aP4
GdbmMCsD0xN2kexp8Ec0YGKXDlUxMNONn7u/FZu/46O+jNGc0EPEWcA3CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6emG9IOpafTV5qMqCXYH8/ocC2MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLm57Z9S
Jnx1Vs6XMaVFW5F+LdFx4sr1X6B7QZZcrK6mnRY2ObUsUEOgVdCh6KDVNaQmtW5P
SKWFYBpzn9k7eDugo0lpektx4Q0HLb2o+KviSBTn+Cw6J32pwoArYe2sy3wZFvT2
9Og914wM7f7qLXvOED6RAaXfg/CD9Vg3EyUpFtHrL1cu5BiX+/UNcYRj3/IjSD2M
A/GTaLSNf+VxmFlXgZCO2AmKSuth9W5CRcjzP4LO9ptpNdEhll1V6EnzswT8mazK
ZSXZAzb/Z5NAe4BpcC3cuczSxYbqTGLtaPtHRPW2gj7Y+xJJ7mww1oYFOu4nDO5N
VuQXDQNUIP0kfg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:06:22 2025 by rpki-client