Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
File:                     a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json)
Hash identifier:          /sJaqZu1GQ0Sv6x8DabeV/Y7vQeOqYERH8MAXe7WcOE=
Subject key identifier:   37:59:F8:82:55:0C:5B:14:C6:52:03:0B:9B:EB:61:33:5B:A5:B6:C4
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       01973007A5F37CC632D55C91BD58FAE5527C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
Manifest number:          16AB
Signing time:             Mon 02 Jun 2025 09:44:55 +0000
Manifest this update:     Mon 02 Jun 2025 09:44:55 +0000
Manifest next update:     Tue 03 Jun 2025 09:44:55 +0000
Files and hashes:         1: 1-5eUrXFS-mBvBFAzMBYr7thfm9g.roa (hash: RJYu6dco2QdzYib1CpLJ1XzU7TkYn7kM5vZDgj+Qfq4=)
                          2: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (hash: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=)
                          3: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (hash: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=)
                          4: 78ZyjDbZyNkN3FayuEyUnAtYdcE.roa (hash: g83O/P/9cvke2YEidLAvWtlDZVwvBFKTQOM7WmikfAk=)
                          5: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (hash: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=)
                          6: ACZ2w-GBagSgNrY3036o3-e-Yqs.roa (hash: RSgAhArW7RQeYQelUqAv5Bi0LBoSl2TBOlzzPUGVSs4=)
                          7: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (hash: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=)
                          8: Bi-w2vQ6q7Paqeb-8FWxe--YcbU.roa (hash: 9bBFk/y11iYrmgN87LW1/x7IiYYmSf4cmU0eu0rkk44=)
                          9: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (hash: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=)
                          10: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (hash: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=)
                          11: HMpahg815y5dLvRLadSLI9aRsZg.roa (hash: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=)
                          12: IcFuQIouJCuWuHO_yiXsv9D-BsM.roa (hash: 85qJOiM2ad9ExmakxtoyKPLzM0B0skhvz9w/Rt90g4E=)
                          13: KeNSVcNIveDRNN0Eoyb056mMz44.roa (hash: KxKJclC3t7SyZCwcHAS4oMcneZIsejj+HibsNh2NOPM=)
                          14: N994a833bc2uIsA--2ZFV_U7vK0.roa (hash: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=)
                          15: ODFUWKpYaPLOOmJRIlRL0pQTI-w.roa (hash: HpDjnMyeNXyUzKx7D/ZEuNgQ0V3sG7+U1ei4TAQZwOE=)
                          16: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (hash: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=)
                          17: P7jpQYz_dktvYEApQ1HG4zZwUEc.roa (hash: NEeXpDKrquu4iF+gLfu51Lrnztx6B+hCuEcppqklv9o=)
                          18: Qg7YRAm5mzDF88r95rLP78GgSr8.roa (hash: mWW99hX2DywiuWdo27sg/nYSe3OqMGkXa5/1syY9LvI=)
                          19: RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa (hash: VExSYS2yUuqfk1LC6juwXPrWXoN/wolLvgvP0orlLd4=)
                          20: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (hash: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=)
                          21: YYUKAK2F8cmjIDogLRScyFjxA3s.roa (hash: u5QuMtNIXq5Bh4ROu+k9IjhVvTjPtCkjIDCr4jQWPME=)
                          22: YrcaUlVHW2fyltCzVxW5srb_t8s.roa (hash: YyEdnBQrxhTsz3EF/MLdt6wJMANAV3iBNjSWCoo0bHQ=)
                          23: Z9-pCHbukVnLD87CbKvdfqMcjp8.roa (hash: 1VKomI6H8eJxRas/I2A1OFxgdNoUgegMh0Wu5FVC1Ac=)
                          24: ZXg_BxS7Pk5PnFbCUDR9h7yNBDs.roa (hash: 6YiThySKjqO+zWO6/exA8cQZuAb7I6Rfr2pXsPuK/iQ=)
                          25: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (hash: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=)
                          26: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (hash: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=)
                          27: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (hash: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=)
                          28: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: 0pIW7dCgaYecI9RuWZY9VZsrxgIIa//002pkbv5vaiM=)
                          29: bL4QpEkGhQ7SFvt1p4570f2wAjw.roa (hash: VLEwmnAxRkzaJysdwmNToFGvk98WHCrz2Guz8+uOcTM=)
                          30: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (hash: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=)
                          31: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (hash: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=)
                          32: fcBtCebpi-4K7X5NIslu13uDUsk.roa (hash: NUsnoh1mbJaQ/OI9xchtIzhWSkl4onfdWCVKXM/qj88=)
                          33: iQM89N-8pmdX0FKn2_ZUBdzCshE.roa (hash: NTnxEBzWzfIQmnb4pTpW6WXtbroKOIVyfaC55jLlJKo=)
                          34: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (hash: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=)
                          35: jNqX84RRwICbOmOsyyyD8-SEETQ.roa (hash: BYwZ6wAb4yTmr6zei/Clsy11v9hbMtuZ/ZmhoS0Qe4o=)
                          36: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (hash: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=)
                          37: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (hash: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=)
                          38: pKqwQHYAQVwQA8-VlPDLXZAz0n4.roa (hash: FtRhBNGJrrgeQUyfhFtxEZXHLCczjV3ylN6BLlE/5L0=)
                          39: tOXM1ArNi_WlT9YM3bcgjCEuYiE.roa (hash: WoZWnVDNekQ1pmAx1W3mwlUwZGDjKwmVnvBatyWe8dU=)
                          40: tlKn03Ch2n039rtBjA5ofqd299w.roa (hash: 9PuwizLdWImEnrfTYLu1uBixtkLMu3z0UocdkAE0/2k=)
                          41: uu8Trj_lWMJjlVPGVumowwLMRzk.roa (hash: Vija8CoIjrBT0gbQz3cogP7Dm+Z4weUwiVE+n23x8Pg=)
                          42: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (hash: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=)
                          43: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (hash: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=)
                          44: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (hash: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=)
                          45: wdcRzGakLe3jtYKRAcXH-gjC00w.roa (hash: duKEk5GHM/r1VrV4PFuMXDPuM6unFH0pIjUwPANnOzU=)
                          46: xFV94mhycLMDkO1NS4j7t6HntvE.roa (hash: A9Prynd/URC1jVssoaAU0w6tIKnFpphaGal/8eTJRlM=)
                          47: zf6pdNUpGphO6Df4cNnwGf8vsno.roa (hash: ECJKSpVkmXvbPK0APqCdCGrsrVqyutvoFLDEiGmDUxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 09:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:30:07:a5:f3:7c:c6:32:d5:5c:91:bd:58:fa:e5:52:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jun  2 09:44:55 2025 GMT
            Not After : Jun  3 09:44:55 2025 GMT
        Subject: CN=3759f882550c5b14c652030b9beb61335ba5b6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:3f:0a:0a:29:b0:73:db:ec:87:ff:39:d1:
                    ca:fe:76:1a:27:59:ab:f8:78:21:96:e7:07:35:fe:
                    4d:f1:b0:62:9a:80:d7:f1:73:a5:5a:11:09:28:34:
                    83:12:cc:52:82:a9:b6:c9:71:b6:83:95:d7:52:fe:
                    83:01:f0:3e:55:06:8a:f6:4b:04:d0:d4:ee:84:0a:
                    b5:ee:ed:45:e3:2f:8a:95:5c:d4:c3:4a:c4:40:51:
                    ba:95:ff:ae:42:eb:c6:59:7a:e3:45:23:f8:af:36:
                    c7:95:47:50:62:b4:c1:03:29:53:b9:d4:8a:61:b5:
                    f8:c6:b5:2f:49:20:87:06:b6:0a:88:24:59:26:f1:
                    d8:39:62:63:db:37:6b:5a:97:8b:2d:8f:91:06:1b:
                    72:06:28:8d:5d:6b:81:b6:11:bb:b9:ca:cc:62:a9:
                    2d:b4:e1:4a:32:df:6e:9d:1c:c5:d8:2e:e6:b4:ad:
                    fd:d3:c0:77:2a:55:a1:09:99:9d:a0:2d:e3:85:37:
                    f3:25:ee:25:9e:a7:01:5d:c3:cb:23:d6:f0:60:6b:
                    4e:93:e3:df:db:11:3d:37:51:e4:2e:b3:71:df:9f:
                    a7:e4:c0:ce:b7:39:50:5f:c5:2d:98:3f:0e:4e:2b:
                    ca:84:15:15:f8:c5:d7:2d:73:00:17:9f:16:1c:9b:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:F8:82:55:0C:5B:14:C6:52:03:0B:9B:EB:61:33:5B:A5:B6:C4
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8e:d2:bd:ac:01:5f:de:1a:42:4f:dd:ca:1d:9e:d2:db:64:
         f5:71:2a:b8:6d:8e:62:8e:1a:e2:ba:42:f6:a7:ba:65:9a:60:
         0c:7c:41:9a:70:b2:b3:4c:7d:aa:97:6c:f0:0c:43:18:d5:aa:
         29:15:23:11:f6:c2:34:a9:09:53:82:9d:63:67:8b:2b:a7:98:
         f6:8c:95:3e:62:83:e9:8c:1e:a3:b5:10:ea:dc:a8:3b:15:d3:
         09:22:37:39:d5:2c:aa:39:77:04:b1:f0:4a:59:fc:8c:c0:45:
         f4:e4:1b:4d:cd:5f:cd:63:f5:35:26:b3:ee:4a:69:93:79:33:
         ca:97:33:5d:17:18:c5:16:80:9c:0b:28:bc:2d:52:0b:a1:fd:
         cd:c8:28:c1:d9:03:ac:53:48:fe:3d:53:17:82:00:6c:09:f1:
         a4:41:9a:d1:61:05:ea:89:fe:b4:df:98:b7:c8:56:9e:df:8d:
         77:8f:eb:05:12:7a:c8:14:56:35:4c:5e:e7:66:8d:51:90:01:
         8b:4f:d1:17:5a:9b:fb:91:7d:1f:27:e3:7f:cc:06:1b:14:25:
         ae:51:26:0e:7a:36:53:bb:21:08:16:70:12:3b:7b:7f:88:6c:
         c1:c5:5a:5c:42:83:25:cf:24:7f:57:b4:eb:c7:a5:ae:b5:de:
         80:22:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----