Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          CO1+CyrjGbbFQLPotU4c4qUo9hzcHxPzRXv846MEPrw=
Subject key identifier:   3D:18:87:D6:FB:7C:35:3F:C2:EE:FA:9D:6E:5A:0B:3E:1F:9B:D6:3D
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019606AEF9CC4D44EC5AA34CC76B3370F47F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          067A
Signing time:             Sat 05 Apr 2025 16:00:52 +0000
Manifest this update:     Sat 05 Apr 2025 16:00:52 +0000
Manifest next update:     Sun 06 Apr 2025 16:00:52 +0000
Files and hashes:         1: 2DtFiNnZxsSvwyUABXFDH9xGeRs.roa (hash: G39uHphZZEEAkLxmvTSGrIOoh5KobplqqdurCmrnTaM=)
                          2: 4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa (hash: qDrq2XWyugrrzMadNyZODi+tYW3DV+sPLZzT49k0JrM=)
                          3: 637ySHaa7VPjeqlKlcPrhZ2yY2I.roa (hash: 5OCAk2cIQJcX+e/E05dY0NN7PiUYi4cdJimVcm3YI9A=)
                          4: 8_fakKxo1IWGgqQO4LSuBNgbX1A.roa (hash: mKTIf5Vhn/rPPi27Si4S/aAUjmxjU05O8m3X6BZqHi4=)
                          5: AaypEsEdVYUGBO9pIAcSnVHxcng.roa (hash: xIrmQSj5iiQlA0CWV5z6X22s4gAVeMqFSjtUBU0ngGI=)
                          6: Ct96xN1xgvlrzbLvxfSx_-BAtNk.roa (hash: lrSKsEpugh4eEEm3L2JaQTWeMJQdiHgI5ot+GMevkbc=)
                          7: F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa (hash: ieI0ZKZHt/S3fOpvysP/zC/yEti8uFPoDMgtPhCFeKw=)
                          8: FN6eGuuI_wxSJwtVgTgHksuIU2k.roa (hash: lcwy4N23aWEQwNKLPfOGbzSMxuSa2S19+LPrrtBD9kQ=)
                          9: IzO07cDfXtxek4M2I1Iy4FbjBTM.roa (hash: SsoChbSg4dMYiRhLHZ+4qGEfaxOMUQB123/z9XrSJO4=)
                          10: JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa (hash: /te3H+VUTBpgy9VKLErG5yc6ITk4ZNAsCt35Sq14AnE=)
                          11: JhghdJ7VjztXKvkYZLina0WyjwI.roa (hash: 2GwdwgzZjwQGzAWsiR/XnPvpsFd9g9HIMvHZzUcynKY=)
                          12: JtAsjQszicgAK_Bz09MaZjgSHRs.roa (hash: 3F49sCHbl/xh5CG+U8kddXehfQts9G+pawy1bD9ilGQ=)
                          13: M9N3MaRnHMWCYC8Hk9zFSlj4D6Q.roa (hash: e786oWDXV8d4rdmxgjxOCoMsmqrUQ795MjKuKCqYgm4=)
                          14: MTcsB7pau_sj7fShnl0hskf_g1I.roa (hash: ZEyHwS4yMVYuUul4z8MpSjD2WFJ72elktQ3XV6XEcfg=)
                          15: Mai3hO1570LXs6RLr6YGrktOd4s.roa (hash: 3YqQQd9kN82zwoLCu2RB4M6k5ODGSKxhrf7vMbNdzEk=)
                          16: NzVn53qodIDSWt0vOG1oqhpGi_E.roa (hash: Lyhkl4afO2r+5/N5rOlPypCReelqQa6ct1JAxr+7elc=)
                          17: OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa (hash: fgJeoJ7zWqkp9sr1PNmklE2TKICiDxPgDxk46jWpq8I=)
                          18: SLLUMAJKxJq045JCLVs9H5nC9nw.roa (hash: /PN9Q7dD2zRwVKc/oYOK+/gsSuS6rWI59nDYoZCCVJI=)
                          19: UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa (hash: WJgBs9fu0EqbOTPPX09p13+s2t3z4+KFfuC6Uu5dHzg=)
                          20: UpxvyaO1w4UW5ThzZNiK11i8Iec.roa (hash: ts6x4xf+obI23cPBJb6wwaavJqR740WuylL0f/ZOTmA=)
                          21: Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa (hash: tk3tIBSeQBab5qYJNuQXuIHm0Fnq+pfGnO25obHRvCc=)
                          22: VZFGS-Fn4Kqjnwh23jee48-bApo.roa (hash: KDb7CTkFWG3SWfMMbnKx/BeDHCaf7g0U9ZYnth5W3TE=)
                          23: XhQy70S_UMvUlQqMS3Ri8w9Lzwg.roa (hash: pfzMfmapyb/YulZYQtRxTnmcCybmAdc60nKGcIcDJZA=)
                          24: ZGdAuUombv4vkBsPwiqPFlqYz8k.roa (hash: Vg0hs2FALGJK84oUteDgK6tbIxpNAMJc90q23NUJBvM=)
                          25: _BPKDl06S5B-WQij73gHPR1pC88.roa (hash: TpQi5kxvdYE7MlhfQqrq2bStKZhLcIZbpWTNfLLNzmc=)
                          26: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: J3ghhXJbq7tTc89kmzMmIBd9tFRDgK4qHz22/yQQSoM=)
                          27: a_YSXRy0GEriEr_Yop65IVdtSPw.roa (hash: wLE2AzL6ZkOvLLE19J24Zeu03IrBHRQfEcPvlWi0nkI=)
                          28: gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa (hash: CbsxGhJhoE8yvGtURZm7/5jfNWzpy2kZAlBuSWC42H0=)
                          29: h738lN5c3TyKcj8anxVMoHPkxGE.roa (hash: pjqnFNlGOHySNRAPtEKFXim6O4weYwyodx7laOQF5Og=)
                          30: jMa6gCTiwT7u6_nY7rYAamQhAvI.roa (hash: /3kWQVn9yQP77uBrM8AVQhX9Si46/u2UopM8CejUies=)
                          31: kCw9KW7g2WHXSaE7taxeZTizKC4.roa (hash: 0phDtsrapiUcNDcI7I3hyFhO2oK9iXRAiRoI4U9hIt8=)
                          32: lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa (hash: OaGMS8N36o43A9RI4EoDlUQq50SWqO5qzGHhpWj7ufo=)
                          33: lPdDfmlD9RAxCyidA_ifam-2Uvk.roa (hash: sWKYz6K+L1Be8/sNsnQfCAv7/Dkkri5HUxz/km5Fw+o=)
                          34: lakNGIHUgcn6UKwdVo4OxV9sHyU.roa (hash: aFoG4y5uaHj/rfiT0o09JJpVEi7UfU1x/oN+QiewPRY=)
                          35: mR_wkM-dl3q5Zqavc8_wUxLBsck.roa (hash: mjWZ9wcnOPQZpY6H28O3iednkx7NStQEjrpDKJuynX0=)
                          36: nububswUFWNKZFUv1-WT-nusbw8.roa (hash: vJnbRRzz2QWrTYEfK7eqJvsQka1cyruMLjOKXSilJ8Q=)
                          37: rZwZbD_BSnHvyM26tCS0n-6jr8s.roa (hash: xlibK6LzsFxTtBrkroU3Mk7lzRkyAhSJ743saez43/A=)
                          38: sgXmikHZdaCmSd1V08WpxfXo-T8.roa (hash: KMsYSteYB1GHkuplXeSxd9o4LN0sSfty5BOhOvuqq1Q=)
                          39: smgQhR1WkDuLYZtnSt3KxLnFFME.roa (hash: Z1MOxUq6sxBXZipioFKdR/NpXqOoPsix9279r6reGW4=)
                          40: uHnUp8alk4kl7R1__u3juRedX1A.roa (hash: 2Hv2oFFIwo0j/kizpuCBjWy1nT4b1wl0hiQz103C3L0=)
                          41: wUKqgXn8I6QyKCOZp1fOP55CVHY.roa (hash: ZYh1IRJkBN+fN6othjda/ZeToNDoNn/k0haPoeVnCVQ=)
                          42: x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa (hash: b6Xbxc4B5PcQR/6u1pjeaDaXYfTGp9+tHTDdJzfSjXw=)
                          43: xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa (hash: 8AY4z5mbYOVzgbpSHBMZBweydiWSklrRLaeWro7dQDw=)
                          44: y_JsphXDGhtYIly7VDuihnNcQ5U.roa (hash: e2p81FmOY2QZWDBjWNf+vYK0z1VRG2fKaiv+Lz4SL1c=)
                          45: yqIKBNfi5omJAzcXnoCsrE6snzo.roa (hash: Opdk7PUfzB/ZuCfmlT3r82TvrvdyJuMBr+txoxstkgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:06:ae:f9:cc:4d:44:ec:5a:a3:4c:c7:6b:33:70:f4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Apr  5 16:00:52 2025 GMT
            Not After : Apr  6 16:00:52 2025 GMT
        Subject: CN=3d1887d6fb7c353fc2eefa9d6e5a0b3e1f9bd63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:21:de:47:9a:5c:58:1f:07:f5:e0:ed:61:
                    9b:83:d4:a0:fd:7a:55:4d:5f:32:b1:b6:1a:b3:c7:
                    a7:97:df:9f:0e:04:c9:f1:74:8f:36:9e:f1:b8:92:
                    3e:8b:29:82:6d:ca:1f:45:0d:0d:3e:4d:bf:93:b9:
                    d3:ed:b6:38:5c:02:ac:10:2e:3a:5a:98:cc:79:c2:
                    37:d5:c3:1e:73:73:b1:ec:14:ff:58:fe:d6:43:2d:
                    f8:4d:c7:85:bd:8c:bf:e4:2f:e4:4d:68:5f:e7:51:
                    9a:bf:6b:a6:bc:58:16:22:02:c9:9f:e4:3f:36:b3:
                    89:07:ac:a0:44:da:4d:28:09:b3:a8:3b:ed:e4:f9:
                    3b:f1:8d:c5:3e:09:73:33:d1:19:7a:93:14:9a:28:
                    6a:27:70:e4:b3:5c:67:83:52:d3:60:06:5c:ee:92:
                    8b:9b:b6:c5:dd:03:63:db:88:eb:db:8d:a8:6f:69:
                    ea:c2:e1:ee:13:3a:ac:82:9b:a6:bd:63:59:3b:78:
                    3d:bf:e8:38:19:f6:6f:45:b0:84:c5:80:d1:37:68:
                    fb:87:2c:41:ff:a5:d7:7d:43:f8:d0:d3:2c:d2:82:
                    e8:1f:a9:30:2f:65:cc:77:64:51:ac:5e:e2:f6:b4:
                    ec:03:1c:7e:a2:93:71:87:bd:3d:80:4f:d8:18:ef:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:87:D6:FB:7C:35:3F:C2:EE:FA:9D:6E:5A:0B:3E:1F:9B:D6:3D
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:3e:da:ee:c1:a8:14:e5:b9:e8:0c:42:70:9d:0b:fd:61:
         6b:7a:4e:da:69:8e:f2:3b:7d:f8:d4:83:b3:53:76:7d:ec:42:
         2f:47:9c:1f:5c:39:09:a8:2b:ba:8f:b1:b0:04:13:18:16:07:
         41:0b:59:f9:bf:1d:3c:d6:76:d4:9f:ee:a6:cc:16:89:ad:10:
         9c:d6:a7:84:15:02:24:30:ef:40:77:15:d0:37:74:e5:ac:22:
         de:32:d3:9c:cc:0a:2c:1c:f0:49:09:aa:c4:fa:ef:2c:72:fa:
         90:df:1d:0a:ea:3c:d7:ef:31:d7:52:05:4c:70:05:29:51:6f:
         be:df:17:ad:de:a1:83:9e:19:f6:34:cf:35:20:0c:b8:f7:56:
         a6:8b:be:cc:1a:d6:ab:15:33:20:b9:b2:82:7a:8b:3f:8e:47:
         2f:3e:22:2b:97:89:13:6e:f0:fa:1a:83:1b:21:c5:8b:e9:af:
         d8:a7:5b:34:ec:59:e6:4c:35:df:23:82:09:c1:84:a3:43:54:
         cf:4f:04:a4:f6:9f:c1:6c:42:a0:2c:5a:da:dc:a4:31:f5:8d:
         47:a2:f6:62:84:0e:e2:9a:66:1f:36:da:d1:39:00:68:30:3d:
         88:ce:86:05:1a:d7:91:60:20:b2:fe:e1:e6:7b:e5:46:7c:47:
         b5:fb:92:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYGrvnMTUTsWqNMx2szcPR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwNDA1MTYwMDUyWhcNMjUwNDA2MTYwMDUyWjAzMTEwLwYDVQQD
EygzZDE4ODdkNmZiN2MzNTNmYzJlZWZhOWQ2ZTVhMGIzZTFmOWJkNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzEh3keaXFgfB/Xg7WGbg9Sg/XpV
TV8ysbYas8enl9+fDgTJ8XSPNp7xuJI+iymCbcofRQ0NPk2/k7nT7bY4XAKsEC46
WpjMecI31cMec3Ox7BT/WP7WQy34TceFvYy/5C/kTWhf51Gav2umvFgWIgLJn+Q/
NrOJB6ygRNpNKAmzqDvt5Pk78Y3FPglzM9EZepMUmihqJ3Dks1xng1LTYAZc7pKL
m7bF3QNj24jr242ob2nqwuHuEzqsgpumvWNZO3g9v+g4GfZvRbCExYDRN2j7hyxB
/6XXfUP40NMs0oLoH6kwL2XMd2RRrF7i9rTsAxx+opNxh709gE/YGO8Y+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0Yh9b7fDU/wu76nW5aCz4fm9Y9MB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd38+2u7B
qBTluegMQnCdC/1ha3pO2mmO8jt9+NSDs1N2fexCL0ecH1w5Cagruo+xsAQTGBYH
QQtZ+b8dPNZ21J/upswWia0QnNanhBUCJDDvQHcV0Dd05awi3jLTnMwKLBzwSQmq
xPrvLHL6kN8dCuo81+8x11IFTHAFKVFvvt8Xrd6hg54Z9jTPNSAMuPdWpou+zBrW
qxUzILmygnqLP45HLz4iK5eJE27w+hqDGyHFi+mv2KdbNOxZ5kw13yOCCcGEo0NU
z08EpPafwWxCoCxa2tykMfWNR6L2YoQO4ppmHzba0TkAaDA9iM6GBRrXkWAgsv7h
5nvlRnxHtfuSDQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:14 2025 by rpki-client