Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
File:                     a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json)
Hash identifier:          ZMlSPLHHYtsfz7p2hetzRHRWe+oND/OUzzif1WeShTs=
Subject key identifier:   94:5C:A3:0D:AB:A4:94:8A:B7:87:25:33:8B:75:CC:E4:10:65:AA:44
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       01991B77544826E4AE12189505202A6AEA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
Manifest number:          17B5
Signing time:             Fri 05 Sep 2025 20:00:28 +0000
Manifest this update:     Fri 05 Sep 2025 20:00:28 +0000
Manifest next update:     Sat 06 Sep 2025 20:00:28 +0000
Files and hashes:         1: 1-5eUrXFS-mBvBFAzMBYr7thfm9g.roa (hash: RJYu6dco2QdzYib1CpLJ1XzU7TkYn7kM5vZDgj+Qfq4=)
                          2: 26pcBryD5dVswsHtUMYBLmwemYE.roa (hash: +cVMtRYOiap5IAV2vHoON/QsXTdux9YwTXVnEc/UWag=)
                          3: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (hash: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=)
                          4: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (hash: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=)
                          5: 78ZyjDbZyNkN3FayuEyUnAtYdcE.roa (hash: g83O/P/9cvke2YEidLAvWtlDZVwvBFKTQOM7WmikfAk=)
                          6: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (hash: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=)
                          7: ACZ2w-GBagSgNrY3036o3-e-Yqs.roa (hash: RSgAhArW7RQeYQelUqAv5Bi0LBoSl2TBOlzzPUGVSs4=)
                          8: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (hash: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=)
                          9: Bi-w2vQ6q7Paqeb-8FWxe--YcbU.roa (hash: 9bBFk/y11iYrmgN87LW1/x7IiYYmSf4cmU0eu0rkk44=)
                          10: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (hash: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=)
                          11: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (hash: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=)
                          12: HMpahg815y5dLvRLadSLI9aRsZg.roa (hash: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=)
                          13: IcFuQIouJCuWuHO_yiXsv9D-BsM.roa (hash: 85qJOiM2ad9ExmakxtoyKPLzM0B0skhvz9w/Rt90g4E=)
                          14: KeNSVcNIveDRNN0Eoyb056mMz44.roa (hash: KxKJclC3t7SyZCwcHAS4oMcneZIsejj+HibsNh2NOPM=)
                          15: N994a833bc2uIsA--2ZFV_U7vK0.roa (hash: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=)
                          16: NNX3NhO0woxXF98anYaBIKxn8BQ.roa (hash: V3Enl+XbNx7OXKIm18lDqjvTWLxanoBWya7tgDVhp5w=)
                          17: ODFUWKpYaPLOOmJRIlRL0pQTI-w.roa (hash: HpDjnMyeNXyUzKx7D/ZEuNgQ0V3sG7+U1ei4TAQZwOE=)
                          18: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (hash: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=)
                          19: P7jpQYz_dktvYEApQ1HG4zZwUEc.roa (hash: NEeXpDKrquu4iF+gLfu51Lrnztx6B+hCuEcppqklv9o=)
                          20: Qg7YRAm5mzDF88r95rLP78GgSr8.roa (hash: mWW99hX2DywiuWdo27sg/nYSe3OqMGkXa5/1syY9LvI=)
                          21: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (hash: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=)
                          22: WzHsgM1kdaaSG27sWNnIqF--lu4.roa (hash: P08yGqA7Q0wy+/bHDehz6iUAVfaHVRXItXUsbmid5Oc=)
                          23: YYUKAK2F8cmjIDogLRScyFjxA3s.roa (hash: u5QuMtNIXq5Bh4ROu+k9IjhVvTjPtCkjIDCr4jQWPME=)
                          24: YrcaUlVHW2fyltCzVxW5srb_t8s.roa (hash: YyEdnBQrxhTsz3EF/MLdt6wJMANAV3iBNjSWCoo0bHQ=)
                          25: Z9-pCHbukVnLD87CbKvdfqMcjp8.roa (hash: 1VKomI6H8eJxRas/I2A1OFxgdNoUgegMh0Wu5FVC1Ac=)
                          26: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (hash: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=)
                          27: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (hash: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=)
                          28: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (hash: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=)
                          29: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: xvhJhnXIpXCSDI44fyG4dCEg1htwJT4YmKz3RizTX/Y=)
                          30: bL4QpEkGhQ7SFvt1p4570f2wAjw.roa (hash: VLEwmnAxRkzaJysdwmNToFGvk98WHCrz2Guz8+uOcTM=)
                          31: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (hash: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=)
                          32: cyZ1sTw8fJMJ0imtzY4vSPe1vTA.roa (hash: mq6LW/5tlRNhY67aMiyHZWFimK2nqWKi24D//Whvb/I=)
                          33: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (hash: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=)
                          34: fcBtCebpi-4K7X5NIslu13uDUsk.roa (hash: NUsnoh1mbJaQ/OI9xchtIzhWSkl4onfdWCVKXM/qj88=)
                          35: iQM89N-8pmdX0FKn2_ZUBdzCshE.roa (hash: NTnxEBzWzfIQmnb4pTpW6WXtbroKOIVyfaC55jLlJKo=)
                          36: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (hash: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=)
                          37: jNqX84RRwICbOmOsyyyD8-SEETQ.roa (hash: BYwZ6wAb4yTmr6zei/Clsy11v9hbMtuZ/ZmhoS0Qe4o=)
                          38: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (hash: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=)
                          39: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (hash: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=)
                          40: tOXM1ArNi_WlT9YM3bcgjCEuYiE.roa (hash: WoZWnVDNekQ1pmAx1W3mwlUwZGDjKwmVnvBatyWe8dU=)
                          41: tlKn03Ch2n039rtBjA5ofqd299w.roa (hash: 9PuwizLdWImEnrfTYLu1uBixtkLMu3z0UocdkAE0/2k=)
                          42: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (hash: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=)
                          43: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (hash: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=)
                          44: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (hash: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=)
                          45: wdcRzGakLe3jtYKRAcXH-gjC00w.roa (hash: duKEk5GHM/r1VrV4PFuMXDPuM6unFH0pIjUwPANnOzU=)
                          46: xFV94mhycLMDkO1NS4j7t6HntvE.roa (hash: A9Prynd/URC1jVssoaAU0w6tIKnFpphaGal/8eTJRlM=)
                          47: zf6pdNUpGphO6Df4cNnwGf8vsno.roa (hash: ECJKSpVkmXvbPK0APqCdCGrsrVqyutvoFLDEiGmDUxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1b:77:54:48:26:e4:ae:12:18:95:05:20:2a:6a:ea:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Sep  5 20:00:28 2025 GMT
            Not After : Sep  6 20:00:28 2025 GMT
        Subject: CN=945ca30daba4948ab78725338b75cce41065aa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a1:6c:d1:7e:d2:06:c4:28:7f:e9:27:ea:ea:
                    90:e1:49:c0:81:ae:61:dd:31:c8:80:ae:e1:76:b2:
                    c4:95:73:d3:70:ca:44:33:29:bc:8f:5a:4d:59:41:
                    72:c2:91:81:2c:1f:78:03:8f:dd:f1:8d:0c:78:af:
                    ec:96:56:09:a7:87:34:4c:f8:b8:ee:dc:a8:e1:2b:
                    ea:fb:aa:f9:1e:ad:06:ec:9a:95:59:cc:1d:d2:4e:
                    13:bb:83:ee:93:c5:a9:6b:70:c1:c1:d1:54:c8:0d:
                    8a:69:ff:1e:c0:c4:09:cb:75:40:3b:f7:61:96:5c:
                    dd:a4:54:1c:20:a6:8d:90:c5:e6:59:ce:f5:d5:5c:
                    e3:b7:db:78:0e:79:19:c5:06:30:f3:27:55:97:50:
                    a7:c3:3b:0c:ab:c6:01:01:87:0b:01:e4:d7:99:d5:
                    44:2c:71:fd:37:63:13:c1:89:0b:fb:a3:88:92:61:
                    6a:8b:bb:b8:9c:b7:2d:8f:8c:17:5d:61:28:90:0c:
                    aa:f7:a0:cc:b9:48:a4:01:14:24:fb:5b:68:a3:30:
                    a3:00:7f:6f:cb:af:ca:04:7a:f9:bc:bc:cf:9a:64:
                    c0:1b:fe:ee:01:d6:4f:2d:a6:fe:bd:9e:f6:c8:65:
                    2c:f6:1e:b1:f0:b2:43:79:05:f7:6e:93:27:f3:cd:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5C:A3:0D:AB:A4:94:8A:B7:87:25:33:8B:75:CC:E4:10:65:AA:44
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:34:3f:0f:9f:8a:ca:8a:d1:b3:71:01:64:1e:70:c7:6b:07:
         b4:44:96:32:dc:79:33:da:e4:41:d5:8f:03:a5:0b:ad:5c:d9:
         63:d6:39:d0:79:9c:e3:53:23:63:8c:be:44:70:84:21:46:43:
         32:38:c7:56:c4:ee:46:4e:6f:ab:b7:ca:36:df:dd:fa:03:7d:
         21:dc:5f:fc:b3:e1:63:a6:26:54:dd:e5:dd:e0:ed:35:b8:da:
         79:5c:e4:43:e0:df:af:d7:80:48:a9:db:b9:ec:1d:c3:98:3e:
         51:8f:a8:18:af:9b:02:34:95:81:6b:2b:ce:e5:f5:d0:11:42:
         c6:c3:25:f4:0a:b8:4e:9a:5e:10:90:39:36:ee:40:52:a3:06:
         dd:55:d1:43:53:5c:4d:0f:2f:e5:c3:f5:4f:bc:34:bb:d1:01:
         64:76:6e:1a:70:09:d0:d0:d7:d3:a4:3f:bc:38:1f:86:02:f4:
         ed:18:c1:d5:d4:71:93:ff:31:0c:b9:68:34:b8:68:35:78:f9:
         6b:66:51:c8:34:28:6d:0b:4a:13:15:69:ea:d2:11:12:7b:bd:
         3d:59:c6:eb:c4:03:06:0b:a4:f1:8c:be:a1:19:53:45:f3:6a:
         04:70:dd:67:1f:e2:18:b5:48:d2:ec:42:b1:8a:99:93:4d:6d:
         f0:4d:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----