Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          MU1ht7NT9mEc0kc3IElcjCZjceha/FZEGdymMwkWE5Q=
Subject key identifier:   33:F4:50:BC:20:4C:24:F2:30:E1:89:B3:C6:25:95:B0:B9:BD:E2:AB
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       0197C7262B0FC2C75F771649214B51413E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0C51
Signing time:             Tue 01 Jul 2025 18:00:56 +0000
Manifest this update:     Tue 01 Jul 2025 18:00:56 +0000
Manifest next update:     Wed 02 Jul 2025 18:00:56 +0000
Files and hashes:         1: 2-gxvLC050rPyg0pBIuwjLWc1Cw.roa (hash: 1U8YnoACqQJDMJE5uRSPEGgs7vpW8J6WOx9xshbIsPE=)
                          2: 2GgxymSj789RBZZH6Qr311JOO3c.roa (hash: xxHGIN8RcP18Ff052v35zzO1Qu2FWHnYm7uLj+9oo4s=)
                          3: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          4: 2dufQoC5Jb0ve5IYehtGosKqu7Y.roa (hash: fBd1JLy+BQuX/FeJIoa6E39ivAOuTftwa/xPQ5dGjI8=)
                          5: 3JMEDtnuA6v8KKf4FVCxgbK4oN4.roa (hash: 0Qub+blZcyz/QgTRuTxgkxRc1Gc2PwuMNSOrgkAIbcQ=)
                          6: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          7: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          8: 7LfZ34jkVj6-hsL2r7ECksqembM.roa (hash: KK5qcoPr8RyUr7Oi3j2Zv7SSNXcoriOx3nxYfmh17TY=)
                          9: 9iiCvQxUod6DvEnzFdFsdupl_0o.roa (hash: vWfISYW79jvaDXYphE6gmSfEJChmyi+tOmRMgdqGhOE=)
                          10: 9vfmUm9RByccnOb6XlV_ph-gPk4.roa (hash: LNn9kutR9BeTRKC/HK+uI/57S0lDbgwp5ZsR1e9YOBA=)
                          11: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=)
                          12: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=)
                          13: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          14: EWRNmBQ7aB3XmUOecA52fy9YpXQ.roa (hash: ShVFz76WbjvkfVYqTT9SDbFD+pW+R3pcWgkit4QeGKc=)
                          15: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=)
                          16: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=)
                          17: GfzIravp1A-qM950EcQKAfu63d4.roa (hash: 4qKKF5LJkw69+LTSlZgQCwePECc0VCX/55ZPOTYfHHQ=)
                          18: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          19: MQQNQpnOLo7xjqCOz6nT8mwPN1c.roa (hash: 2PaPwlupHN5M6LnrEQtTQs0LPCM/gyDxtY5UHvVEJSQ=)
                          20: Sxy6K7e73qOvfCbb9KneoPvXeRI.roa (hash: IE71fGGjPNEzI1bTXZSPWcPLR3j32S+b4osxDkIoySw=)
                          21: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          22: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          23: XHtpEQoraqRFRPdlAEW9sCe6_rY.roa (hash: soXr8YiLhiu6P10YvfCxOODOvjvRErlJJgNef/tqi0c=)
                          24: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          25: Z_9aQ9yajBZ2JLgMPuP-5DT5zd0.roa (hash: 4CGz9OtQ1X/4la1NVBt5q/Fx1Bc3qLuZdDjOQydgtOs=)
                          26: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          27: alg23em52u81qKf3TWMm9rQtp00.crl (hash: lxu8mLTnU+ZQ9XW4OSmd3FM9z8PsGummIr88ts9nBAI=)
                          28: c4vYqF1tYFnE7ufF7Vande4OrQk.roa (hash: SGC5C7DpLVwd//1nD74m+Qyq9Cj3MluNv7n0feydZ0c=)
                          29: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=)
                          30: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          31: g-_U_ZQ6WoPDtEKmmE8KB6VVy50.roa (hash: FKIdBJ4K6Ik/oTZWTfO7K6hztUPX1QWBSTQJtuPCOzE=)
                          32: ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa (hash: 4VUp3SMe9rs+Z7Hbxzz7UGL7lgkBSmttJcCWABv87SU=)
                          33: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          34: lxkVaZIbX7I7bmN6ZBzzOQmtNdQ.roa (hash: LfvYFnIRA3jwfBQfIqqFV40UbcQgxtmN1lVv1rOE5/Q=)
                          35: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          36: sUyAiJFfSegxYPYQ3zI2TQB25y0.roa (hash: M94jlBY0zNafDZ0pmCNUNbPA+zqNkoYyovRQSUTW5xg=)
                          37: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
                          38: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:26:2b:0f:c2:c7:5f:77:16:49:21:4b:51:41:3e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jul  1 18:00:56 2025 GMT
            Not After : Jul  2 18:00:56 2025 GMT
        Subject: CN=33f450bc204c24f230e189b3c62595b0b9bde2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:f3:6d:49:1b:9b:11:c8:be:a6:00:97:3e:
                    d8:88:ee:30:47:71:98:f9:ea:64:f3:5f:a3:e9:ec:
                    56:02:48:fe:67:d1:4d:62:f2:09:6a:e7:57:38:59:
                    62:e3:b4:fb:12:52:cf:af:05:ce:af:71:d9:a1:ce:
                    cc:64:1e:8f:3c:17:75:29:2f:09:76:8d:38:46:5a:
                    9c:a4:58:01:e7:c8:66:bc:64:dd:20:95:2a:d1:4d:
                    c6:5d:38:6f:24:3a:a1:1e:4c:17:11:17:64:52:5b:
                    58:0c:68:34:b3:3c:e8:16:e5:43:a6:cd:9e:bf:c6:
                    2c:e5:00:97:8a:b8:c5:f9:be:e0:5b:7d:42:99:6a:
                    08:dc:01:90:0c:58:dd:89:2b:dd:33:e0:73:d1:fd:
                    f4:99:d1:87:8c:7f:5f:9f:58:e1:17:2d:5b:4b:48:
                    f9:d2:1e:1c:62:6a:25:2b:fd:9f:dc:37:08:a5:a6:
                    6a:eb:87:86:38:41:3a:70:ca:f5:9b:55:fd:79:f9:
                    d7:26:5a:a1:6e:16:e1:b7:c8:45:64:7a:5e:8b:5b:
                    5d:51:e7:b9:78:eb:2e:84:48:21:93:f1:d6:9b:5e:
                    31:fc:df:be:60:0c:b9:22:65:46:04:11:ed:d0:44:
                    fb:d6:6e:ea:23:13:55:2e:96:15:86:2a:7a:b8:57:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F4:50:BC:20:4C:24:F2:30:E1:89:B3:C6:25:95:B0:B9:BD:E2:AB
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:96:d7:9c:28:ab:77:61:b2:f9:2e:dd:44:55:4f:0d:cc:5a:
         e8:e4:c7:4e:73:a0:c2:54:2b:af:af:0f:c2:ba:b2:cb:a0:5e:
         e3:d0:8f:20:10:27:3a:16:b1:82:09:3b:30:bb:fe:24:33:f5:
         d7:ba:cb:5e:8a:53:c2:0f:f8:30:9e:8c:7a:17:25:d1:ea:00:
         18:41:73:48:b7:10:05:a0:4a:2e:b3:ba:b3:04:b6:28:b3:a2:
         a5:f0:bd:22:56:cb:16:e2:e3:58:7f:55:92:d8:ff:d4:ac:e5:
         e2:bf:4a:f3:0f:67:9c:7a:2d:34:3b:6a:f0:06:79:13:63:9f:
         17:8a:6c:ac:dc:88:1b:c7:76:ce:84:43:80:64:d2:1c:30:2a:
         e7:05:91:a7:17:ac:4b:b1:96:d5:ce:c3:4d:31:7e:66:9c:bb:
         7c:66:d2:08:b2:f3:fe:bc:72:df:91:f0:49:6e:da:29:05:6b:
         64:c0:41:d1:76:fa:9b:1e:27:a5:00:6c:9c:42:4b:b7:ec:cb:
         b5:a2:ea:58:05:4b:ca:28:73:cd:41:b5:2d:5a:bc:d9:b4:0f:
         37:01:ce:46:88:da:58:1c:87:72:70:24:c8:06:4c:ab:02:d2:
         9e:8c:9c:d6:8b:67:d9:2b:32:57:ca:47:96:d4:b4:26:5f:be:
         e5:b1:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:25:48 2025 by rpki-client