Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          gfHYg0Ka8MNgFE81QUWPyxgrWkORS+uRwj3BmPGh0Go=
Subject key identifier:   9B:C6:C6:FE:00:C7:58:EA:79:5D:CF:2C:63:D5:1B:DE:62:DF:3F:16
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       019746D4DC87A11901B4B08113FBC9E5FE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          15D1
Signing time:             Fri 06 Jun 2025 20:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:44 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 1kiFOzSUYK3pcMeNGPSk3j4Tzsg.roa (hash: vMMj9ST74YlPNcRgppnnEZwNxejYhCE+D5UgkKQqDFA=)
                          3: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: e/L07i30t1QeGJ3oemsPfYwuE5M00m0Pv/niBgCi3P4=)
                          4: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          5: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          6: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          7: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          8: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          9: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          10: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          11: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          12: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          13: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          14: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          15: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          16: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          17: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          18: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          19: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          20: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          21: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          22: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          23: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          24: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          25: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          26: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          27: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          28: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          29: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          30: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          31: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          32: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          33: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          34: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          35: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          36: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          37: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (hash: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=)
                          38: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          39: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          40: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          41: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          42: msTJH3LpvSSJE6Ri3OotLMxDeGA.roa (hash: TnZ7qzgV/HeyXjb0/V/imlQGl0TreqcUD4M56v/jCq8=)
                          43: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          44: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          45: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          46: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          47: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          48: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          49: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          50: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          51: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          52: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          53: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          54: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          55: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
                          56: ylEgvmf2Edwqr6JMpW-xH5LCR7c.roa (hash: BK+TL29JkN+DVc/LG21brTqrMPOr6JiJ4Q+YvOP4Kes=)
                          57: zZ3LXASmvnU-tG5IFxAXhcytpeY.roa (hash: vauvWlngvw9B9FLlnT3JWLQjDLxvQzC3J5a7IlzCo4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:dc:87:a1:19:01:b4:b0:81:13:fb:c9:e5:fe:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Jun  6 20:00:44 2025 GMT
            Not After : Jun  7 20:00:44 2025 GMT
        Subject: CN=9bc6c6fe00c758ea795dcf2c63d51bde62df3f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:94:23:bd:f0:35:67:d9:f0:49:f4:75:dd:
                    64:a0:37:85:43:4e:f3:6a:a6:27:0c:02:1d:b2:c4:
                    b2:9f:48:d4:45:b5:34:6a:25:c6:85:42:16:b4:06:
                    cf:9f:5b:6f:2c:af:8f:2f:bd:68:09:cf:91:86:b1:
                    f6:e6:63:af:0d:f2:a9:22:0d:4a:ea:d9:c0:29:d5:
                    87:eb:3c:3d:38:61:79:0f:29:5a:29:94:a7:64:17:
                    9a:e4:d8:53:73:00:11:ca:00:52:6c:91:25:1a:95:
                    47:bb:f7:ef:4b:ce:3b:01:a4:85:0c:88:86:34:95:
                    98:a6:d8:eb:c7:06:65:8d:72:80:b7:d5:4c:20:ed:
                    cb:89:0b:4a:9e:0b:83:3d:a8:70:f3:a0:35:7b:c8:
                    a1:6d:db:3b:7e:3b:f2:b2:8e:4f:f9:b5:56:7e:af:
                    53:db:5b:cb:d9:5c:ba:a4:9a:9f:a8:d1:6e:fc:be:
                    e9:b3:51:51:8b:21:3a:31:c0:9a:28:80:4c:0d:d7:
                    09:28:8d:8b:94:bb:7c:79:af:3c:d7:01:98:1a:ca:
                    fe:9a:87:5d:85:18:89:8d:09:3b:52:8c:c2:d0:80:
                    b4:8e:1a:b1:68:a4:54:c2:6b:20:de:45:d3:68:d3:
                    82:2a:25:04:ca:90:39:0d:b5:17:1a:3e:22:fe:8b:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C6:C6:FE:00:C7:58:EA:79:5D:CF:2C:63:D5:1B:DE:62:DF:3F:16
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:42:98:a3:be:36:5a:bf:5b:85:20:85:bf:e1:43:b4:69:19:
         57:43:9f:40:b8:40:43:9b:3d:bc:c1:d0:ca:29:1f:3d:f9:30:
         de:ea:af:98:e9:50:41:b7:25:c4:04:ab:ed:9d:9f:b3:62:5f:
         d2:42:05:d2:c1:a8:9c:6f:e6:4b:4e:ed:30:6a:4e:31:02:60:
         84:5a:78:b9:ac:db:7e:81:f0:01:69:d0:bc:f6:96:f7:ce:bd:
         2e:5f:78:e6:03:54:22:6b:d1:c6:30:1b:b9:71:06:ea:50:31:
         b4:bf:24:e7:fa:4b:6a:a4:8f:67:fa:ff:c0:3b:ff:bd:69:05:
         f6:03:e0:ec:67:63:7c:66:fd:19:82:ed:6a:6b:c6:1b:65:73:
         00:53:d6:53:19:d9:d3:af:87:bd:b1:a3:31:94:31:02:e6:a4:
         67:35:10:a4:4c:25:78:0b:70:f3:28:5a:12:fb:bb:8a:9a:26:
         b0:d2:b6:0f:c9:fc:4e:e8:fb:ca:53:05:d0:67:ed:ad:93:89:
         a2:b5:6a:dc:33:da:36:74:12:e6:35:d6:f4:3b:2f:52:4e:51:
         72:b5:a8:d5:22:53:1e:5e:68:a6:d1:fa:75:c6:29:ed:4d:e5:
         c4:2e:60:c4:77:ed:47:17:87:d6:79:0a:c1:f7:bb:c0:5f:17:
         30:65:b8:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1NyHoRkBtLCBE/vJ5f4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwNjA2MjAwMDQ0WhcNMjUwNjA3MjAwMDQ0WjAzMTEwLwYDVQQD
Eyg5YmM2YzZmZTAwYzc1OGVhNzk1ZGNmMmM2M2Q1MWJkZTYyZGYzZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6UI73wNWfZ8En0dd1koDeFQ07z
aqYnDAIdssSyn0jURbU0aiXGhUIWtAbPn1tvLK+PL71oCc+RhrH25mOvDfKpIg1K
6tnAKdWH6zw9OGF5DylaKZSnZBea5NhTcwARygBSbJElGpVHu/fvS847AaSFDIiG
NJWYptjrxwZljXKAt9VMIO3LiQtKnguDPahw86A1e8ihbds7fjvyso5P+bVWfq9T
21vL2Vy6pJqfqNFu/L7ps1FRiyE6McCaKIBMDdcJKI2LlLt8ea881wGYGsr+modd
hRiJjQk7UozC0IC0jhqxaKRUwmsg3kXTaNOCKiUEypA5DbUXGj4i/ot/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvGxv4Ax1jqeV3PLGPVG95i3z8WMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUKYo742
Wr9bhSCFv+FDtGkZV0OfQLhAQ5s9vMHQyikfPfkw3uqvmOlQQbclxASr7Z2fs2Jf
0kIF0sGonG/mS07tMGpOMQJghFp4uazbfoHwAWnQvPaW9869Ll945gNUImvRxjAb
uXEG6lAxtL8k5/pLaqSPZ/r/wDv/vWkF9gPg7GdjfGb9GYLtamvGG2VzAFPWUxnZ
06+HvbGjMZQxAuakZzUQpEwleAtw8yhaEvu7ipomsNK2D8n8Tuj7ylMF0GftrZOJ
orVq3DPaNnQS5jXW9DsvUk5RcrWo1SJTHl5optH6dcYp7U3lxC5gxHftRxeH1nkK
wfe7wF8XMGW4bA==
-----END CERTIFICATE-----