Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          T7k3b9/phLcvd7eoTCxBe1Ujel6aGUMUv2wi5Nq1ifw=
Subject key identifier:   04:FA:65:42:1E:DD:45:6E:09:57:04:48:00:64:5A:FD:28:13:B5:16
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       01960264DFA64351AA6ECFB325D31A9A5829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0B56
Signing time:             Fri 04 Apr 2025 20:01:27 +0000
Manifest this update:     Fri 04 Apr 2025 20:01:27 +0000
Manifest next update:     Sat 05 Apr 2025 20:01:27 +0000
Files and hashes:         1: 1-wsV16Pa0xWRAOyYC4wXz0FU-Fs.roa (hash: TzGwJUxJ82lA4OSZNDwixbLuAmbsTPrEruD2CDlomPY=)
                          2: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          3: 3DmQglNYTP4uMHxeyPPkfa8kN5Q.roa (hash: ynop3XomNcYONsLi+FpslqEY0bVbgvKa90SPiuK02bA=)
                          4: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          5: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          6: 9T4D_AYHSTPYWdPSQPfprxFH3CE.roa (hash: cF6uVzyn8pWS9+OC3Wy6I1hLwEKciDsIddZfVcRTzdI=)
                          7: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=)
                          8: Cyb1gsyKRnDxbL9rMScuo1ozZbI.roa (hash: agOBuYltz4Jfed+xuF+5hrjHO3NDBwEnBi8eCmbJ+lc=)
                          9: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          10: E0BTLtOGRCgE7shsJ9zHdTovgwI.roa (hash: M+X7/sSR8qzYuzwNgQxNvGCDZocwzQo8c87DGDgS4LE=)
                          11: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=)
                          12: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=)
                          13: FxOjapXf2pPl_LSwlm8d32sW4Pk.roa (hash: 71ZJ5RBd2fDKrd44o5LBEopDO47GkZffr1JMfoqD+ZY=)
                          14: GAg0poe00EJ96oVazZoMXbSeKCA.roa (hash: 4QBwa59GY+2lC9orR9CgIj4/3XwnhJvvHTMzFyyFVZU=)
                          15: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          16: LS10qJyaRDsm6Bs31oDk6PmgVNU.roa (hash: RM4vt5ep/vO9ay8durizq+gnq7VpNBtBC9BHsw621mU=)
                          17: QkziaVrFwftxZYDqsXIGB4Jq2uw.roa (hash: pM3N/qTCiW8nIslpyb9l5cXJ6oSFLdGNgW8xpAE3kFI=)
                          18: So_XVf81y0yff5tiRM9T6wfxiFI.roa (hash: /9R1Xw1rux8XGra0y/ls+X0S7fa8zp372SXlAhhQnOg=)
                          19: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          20: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          21: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          22: YuzK84yE-VeaDfqQ6O3J9o15Kv0.roa (hash: EVKp3DpwGwk3zHFDB6I7C6vUQecOQerB/cDYFjxLfg8=)
                          23: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          24: alg23em52u81qKf3TWMm9rQtp00.crl (hash: lAk5jgjpgR/TzsJYRSuD0dVsNrA6YsZyqkLvvsOgwc0=)
                          25: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=)
                          26: dUZucVhNQiA4_H9f7QEsnWcOeB0.roa (hash: Y8Hh9nx1c9OjjVtaLg+Hiz7r4Upn8J/+8NQ1Px/kj0M=)
                          27: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          28: fxKWammhxktdopvkLoZ3A56OufQ.roa (hash: 08wF4FXl5oiKNSJuMhza0MfLxqdEwIGUPGz/746c+dw=)
                          29: ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa (hash: 4VUp3SMe9rs+Z7Hbxzz7UGL7lgkBSmttJcCWABv87SU=)
                          30: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          31: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          32: s_boRMsxilQWE8157RLOKzIWIJw.roa (hash: VFxN5+gRgYJCBlCCrJNx1xL78Rg8kJ1C8LU6TrYm+VI=)
                          33: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
                          34: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=)
                          35: wXM31OjkciEAlpEMjaTgfWzjXFg.roa (hash: 8xtREta2zMiUqhNWY7P3R7XpgYZpRP5WhwRQaDvmQ1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:02:64:df:a6:43:51:aa:6e:cf:b3:25:d3:1a:9a:58:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Apr  4 20:01:27 2025 GMT
            Not After : Apr  5 20:01:27 2025 GMT
        Subject: CN=04fa65421edd456e0957044800645afd2813b516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:c1:e2:a4:f1:3d:e2:3f:6b:aa:0c:cc:80:
                    cb:09:ef:22:09:4c:d0:2f:2b:12:f9:e0:8f:3f:94:
                    f1:ba:1d:8b:50:c2:bc:3c:34:5b:44:cb:1b:18:21:
                    0b:44:35:2c:fe:b2:ac:2b:2b:8e:fb:9d:17:36:1c:
                    c9:e9:18:f8:bf:9d:0c:78:79:1e:82:2b:8d:44:a9:
                    b7:0f:f9:e0:80:ee:d7:33:f6:56:18:b3:a0:d6:38:
                    3b:93:61:97:70:a5:10:82:e3:a5:93:1d:73:85:9b:
                    52:b8:4f:41:81:08:96:62:d3:77:b4:42:fe:a9:90:
                    56:8a:3d:cf:d6:90:6e:83:3e:1a:20:b6:fb:c2:b9:
                    d3:06:4a:07:d9:ae:1a:13:42:33:9c:20:50:6b:ab:
                    2c:24:16:d4:af:ce:3a:20:95:56:e7:a5:b1:5e:55:
                    f7:fd:c4:f5:c2:a8:f6:8b:58:b7:76:cb:f5:14:83:
                    40:cb:3c:55:9e:6e:59:82:4e:9b:cc:fc:e4:2b:ae:
                    5f:90:41:57:44:23:0b:0b:31:0b:f0:6a:12:d3:59:
                    b4:70:0c:c2:82:1d:34:14:4e:29:84:d9:3f:14:71:
                    25:69:5a:3f:25:8e:74:76:46:e3:c3:5f:f8:36:f6:
                    7a:4d:9f:ff:59:97:20:36:ee:d7:79:c2:29:a3:2f:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FA:65:42:1E:DD:45:6E:09:57:04:48:00:64:5A:FD:28:13:B5:16
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:71:9e:12:8b:86:4f:96:6e:eb:46:f2:f5:ae:81:8b:30:7b:
         f3:7e:2f:e5:c8:fd:d5:24:c2:95:70:24:67:77:0f:67:19:79:
         b7:93:ae:ec:19:31:c4:ff:7f:f8:cf:e9:ac:3d:b3:25:26:a6:
         15:86:56:18:6f:e9:54:ad:22:b5:bc:7d:46:7f:d2:fc:12:e3:
         26:09:a1:d4:65:d3:00:76:ae:11:65:4f:2f:c4:36:44:f1:0a:
         ee:36:d7:e7:29:66:bd:6d:68:ae:d6:e3:7b:39:42:a1:91:02:
         08:7b:a2:d7:d4:b9:d0:5c:42:c6:0f:3a:5e:5f:0e:cb:9e:c1:
         e1:b5:ba:54:6b:ce:35:2f:c7:70:70:a6:4e:fc:96:fc:1b:dc:
         53:05:05:df:1d:90:4b:e9:d7:9d:a9:28:9b:c9:fd:49:80:79:
         e2:ab:4c:7e:a6:e7:61:98:92:35:fa:94:6b:77:27:59:46:cf:
         05:9a:b6:f6:f9:be:83:95:54:88:13:a9:48:7a:3f:50:03:92:
         9b:fe:c1:9e:24:7f:06:f2:74:ad:b6:db:af:ad:51:12:65:58:
         74:11:96:31:a2:24:df:58:36:52:12:0d:9e:18:99:b9:19:08:
         79:ba:43:20:e0:69:c6:d3:0a:1a:77:b8:82:b8:9d:28:db:15:
         b3:39:e0:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYCZN+mQ1Gqbs+zJdMamlgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwNDA0MjAwMTI3WhcNMjUwNDA1MjAwMTI3WjAzMTEwLwYDVQQD
EygwNGZhNjU0MjFlZGQ0NTZlMDk1NzA0NDgwMDY0NWFmZDI4MTNiNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWDB4qTxPeI/a6oMzIDLCe8iCUzQ
LysS+eCPP5Txuh2LUMK8PDRbRMsbGCELRDUs/rKsKyuO+50XNhzJ6Rj4v50MeHke
giuNRKm3D/nggO7XM/ZWGLOg1jg7k2GXcKUQguOlkx1zhZtSuE9BgQiWYtN3tEL+
qZBWij3P1pBugz4aILb7wrnTBkoH2a4aE0IznCBQa6ssJBbUr846IJVW56WxXlX3
/cT1wqj2i1i3dsv1FINAyzxVnm5Zgk6bzPzkK65fkEFXRCMLCzEL8GoS01m0cAzC
gh00FE4phNk/FHElaVo/JY50dkbjw1/4NvZ6TZ//WZcgNu7XecIpoy9DtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT6ZUIe3UVuCVcESABkWv0oE7UWMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHGeEouG
T5Zu60by9a6BizB7834v5cj91STClXAkZ3cPZxl5t5Ou7BkxxP9/+M/prD2zJSam
FYZWGG/pVK0itbx9Rn/S/BLjJgmh1GXTAHauEWVPL8Q2RPEK7jbX5ylmvW1ortbj
ezlCoZECCHui19S50FxCxg86Xl8Oy57B4bW6VGvONS/HcHCmTvyW/BvcUwUF3x2Q
S+nXnakom8n9SYB54qtMfqbnYZiSNfqUa3cnWUbPBZq29vm+g5VUiBOpSHo/UAOS
m/7BniR/BvJ0rbbbr61REmVYdBGWMaIk31g2UhINnhiZuRkIebpDIOBpxtMKGne4
gridKNsVszngZg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:25 2025 by rpki-client