Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          HwiMoPYWFujKPhIYccZcUx35KVd+0pESp0sInz1gSb8=
Subject key identifier:   C2:9C:FD:4B:F6:DC:3E:7D:3D:B9:F5:93:88:4D:22:F4:86:39:94:49
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       01974DB2ED36270EFA190B8A6CE32DEE04F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          15A4
Signing time:             Sun 08 Jun 2025 04:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 04:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 04:01:01 +0000
Files and hashes:         1: 1--cUq91Mit5QH2cwWSOxBevK3nA.roa (hash: AeVg1wzE8EyDayqX6dUPTOAPPGnggkU3AZQPwR7KISU=)
                          2: 1-wSj_jNbSFZNPKzrs0H7fMlUYPs.roa (hash: QwucWuCpsfVGmeIL4+WbPwDASjNtyxA0uvqhnVE0kXk=)
                          3: 1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa (hash: 1mq5wz/1iFM0nRuaGbWeQP9cbSRi6hrmjA/870kNVwc=)
                          4: 1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa (hash: G0Gifm987y56WK0jOJQu1XmPLu2HpPxSaSdoMhrNoMs=)
                          5: 43W-eGhoB0OzAzZeV-7lIQQDIOo.roa (hash: Fa6j80QC7xY8XwzuoZlxIB/I65MycNffdEY3vuz4Q0w=)
                          6: 4cQzXFxUGlGjBPSq0EGUuwlerqM.roa (hash: RUnB3qpCxRiKVWfppqkGkTOE3BYzOLpwyJhoqNuHmnM=)
                          7: 7y1PMFZ77TvwERIOq36v9qt_I0g.roa (hash: XyYA5RSKyGwMjTqBAMbzkSTfG/qYbYS13qe9sSm88Pg=)
                          8: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: d48polOTX982hCbJPAZNH1OSvBODjbQEX9bngFqEgP8=)
                          9: 9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa (hash: E45sd3llDs2pTTLi6LJkzrRBxW0QqdLu4AwwGiPWU8o=)
                          10: Bi6ckjMzIjswtGZpm48D-Wo_OB4.roa (hash: an659zUeBPl2S8rcFc9akGr14egOC85nfKG/rUkJZjU=)
                          11: F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa (hash: 7lkthzwPyq0Nlj6C7w8YmFjCDc9WUOXo1l3objgvoAw=)
                          12: GBjsCsDFhAmCrDosbrIyM2oi_k8.roa (hash: QxxcHsFFWLY2BHIJuYq1eLGTUZDCy2Zq1QP773WJCgc=)
                          13: GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa (hash: bhQ1Ond9uTsWLPhHEPCKrqbxdo9J0XGoFGPdOwUnfm0=)
                          14: GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa (hash: UkvxRNX70aIvJXPzKAnXBIMmTpv2f/Y+Dlu3mnma0Ac=)
                          15: HJd9P_PlKCAbara3DxGKUKKnE7c.roa (hash: eUsrGFzXfQW/Dn1ODD605ExEOtBlWFeJQugMdp5/EgU=)
                          16: K64ZDclpadQbVzMQRV2i46uDmJo.roa (hash: tpnZn4EYuI03Em/aELkelIAivjX/DuvgaCfyeISarg8=)
                          17: OOj6UEfy7tJhVvIZwv67cVkbCsw.roa (hash: bFAFslFKUorfRmuJkRc7/SiL4ZsIaQRH0zH9zHF2pgI=)
                          18: OqF2eyJ9Nah0S4xGSjJYn_h3cTU.roa (hash: UaxiQV187imUDaob7M2RSZknrvaHjuJ3BY11Fvhjz2E=)
                          19: P0SW_klNDbhNIIK8YKXaPuabqTU.roa (hash: 5FirmEmGhJEAP0DJn1h14sCEI/dbN7Gdq6ZuKutBsJU=)
                          20: R2zForXg41Xz6ZiOvoYxYCONTtc.roa (hash: w6iKooFVAmcB+szcwr+F/c/HtbTWkbLs+qqPbY5EcAA=)
                          21: Uy3DNd8cAhKYVPioxN7PoymKedw.roa (hash: L7X4DMP3u2TfIijoOqDl6Vi5RU6BP6p/8G5SNNVhw+I=)
                          22: WWSW__MVqK6dx_k6tsS9bRZ--CI.roa (hash: 0n+w/A4d8z6b0u844BV3PGZBGD8lEvEB6AFFqVVHQn8=)
                          23: WeCt8pup8wDWF42xeyTZdR7k2GQ.roa (hash: EDkq8tNxM3yn5LOawEnrqC45Ne8Yoo76GfpxJFb6xWI=)
                          24: WiON6CdHeAs54FIwJq22Q-CMJYQ.roa (hash: 4t1adRl+qe2aNtYrRhoxvc66aXOa5Y+iHAm8U5xH9j8=)
                          25: Wkh7uioWgBi7hYTbHKGwmYv2b2o.roa (hash: y1Qn0vF6vc29BjpVGN0maHU654epEzVd2ncJ5AsSc8s=)
                          26: WkmV1C3n1xckvk24Dg23f_uuw-Y.roa (hash: 4b9CQ+UDGsSD1Yt4Z/0/FrLqdoM9ExyMXp455k6OTOo=)
                          27: XnRkLPnNKKkSG1UWNWWBdV7n3rI.roa (hash: BSh/QG5V0PdqCQRHLmCsYPsMOLFQjX1Hat7fPJRL1hA=)
                          28: YTrCa9l5vP3dQlEy3g4e738RGCc.roa (hash: 7QjYk31Rz2LLsB0LYuegGouh51+CsDDyqSFe7Sy9+c8=)
                          29: _F7ev2MBBxNUWA2zbKywRx1epIs.roa (hash: ab/PBGhlf8KsdKFVWCStEJO1EAqxAF8tNS/JPsSqUvk=)
                          30: bApeGU9pDTxTCcxiN5J5ipRkqMI.roa (hash: NZoPIqG6nJxYq38KIr9pSvoBY19L9DXRzBM19WHpf7I=)
                          31: bo414DK33mQjPnsi2XO_OhuOXVU.roa (hash: DFhqXQ1ALcgUKGfkab9Ecq2SNxSXtHhgzid0rw+LjqA=)
                          32: cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa (hash: Tm+oi/lD++p4PhyCp4bPhVckvck4FHBGPjkqfjDYDXk=)
                          33: ec458CzjY63_tDvq0835iuvNeqM.roa (hash: G8uWZDny6okXGyK8fXhTSuZAQxB4Or51R+hkoXknGf0=)
                          34: ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa (hash: po9RSn1vnUJn8LraWDgTGQkIzqjsRElh5uulYlg6a2I=)
                          35: f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa (hash: 2GF/hcmuZptIjGpBhlhl/n2eM7lvmTB8GpajvQTfO1o=)
                          36: gS472YuNqbJechBg2iBckT3KoLM.roa (hash: FBUuQCDwaticAhPspr/z6ZENec/pu4iMj4JBkdQRnVA=)
                          37: mWetSYOn1BkhZCQeBuy0aNAtp2k.roa (hash: 7QsWLfC1FbX4IQpj2Fc+FdTBylJTVc8Q6Q3mzopMiwY=)
                          38: oMsbWqKig1Jz9KhQZB1o-hLbsjQ.roa (hash: OocXoaK/KzmHtgXJpn4l6UhsAXqtzLQU0zedQi9+930=)
                          39: pSNhVcz4ozKQCN-LCUrqu4lNRzQ.roa (hash: J/f/1amfAJOlGnKb0ytkwZwxYnhSDPmLNiJU63xKnhY=)
                          40: pW41aiqhh4TGOa0SfOJoWwzIC9A.roa (hash: NOVcfPSERPAJVKGKnsOL5db9Ocxsd5SZKJKLS2fsK1w=)
                          41: qPU2_LO_IOLwIw_5UdC9HILGfrU.roa (hash: zovHlBAPS+CTTK/Pgho2T3I/C6ghppduwnAgw0j/qyQ=)
                          42: sIfXnkT6_MznqZrO1Lae926CR50.roa (hash: NCRNDrTiw+6us5+S0PADTvnopFARdQ2lLkezVhE/00s=)
                          43: s_gtffJAdOdCOTF8JrwlspZV70Q.roa (hash: EE3zvO+17D2lS+ma9Jbmozdr5I2JwhR0u6QEkn1ojIA=)
                          44: t1xRr6zeiMtxYaGtbe-W72-oQS0.roa (hash: OyceZDHizIoFdT4fRa8zkuIKpKmh7T2n1xLe+VKJ1cQ=)
                          45: tP6196eoGxZ8sJXtGB2BxyyaQkc.roa (hash: Yg1BpZOhleklDTz62pqYALAo96J1wsRiT1axu+WPIZ0=)
                          46: udEkF_6Cl582j3MhipXtkqh60QA.roa (hash: KGfzfkRSS/8LMCpAd+TJJyVg600JQWb1fQuNDHspP4k=)
                          47: vIJrj75gZXSeJTed1CGI6o-Z5nA.roa (hash: T+o0LnzwgxW5JkSyu3hg3ocAmMnSSVFEWIqTX+78bsI=)
                          48: wuHCt2BHh06Bfff_BuCtG5z_hxY.roa (hash: /M0WlOuHwpu23wrIhCr+n8JWrn1Ijygmq8J4TbPhLBs=)
                          49: yc-gqrsX0Dlayvck585FUtBbJrE.roa (hash: Ks7WQxTUjzq6wrRJQNHa/tYNzP+1BfHd4p2Dur1U0Q0=)
                          50: yugfCm59zW-OCysnWXdRGYmiLPI.roa (hash: dyiopA0j5b5DW/jiTg8DD9JZwVemiDlrthtnV32cs90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:ed:36:27:0e:fa:19:0b:8a:6c:e3:2d:ee:04:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Jun  8 04:01:01 2025 GMT
            Not After : Jun  9 04:01:01 2025 GMT
        Subject: CN=c29cfd4bf6dc3e7d3db9f593884d22f486399449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:3a:45:2f:0c:15:40:c9:16:80:aa:7e:e9:
                    e5:12:85:90:30:98:81:21:50:69:d0:ab:5d:32:42:
                    98:fe:fa:4c:6e:52:a9:16:43:16:0f:69:52:40:3d:
                    ad:9b:35:07:1f:18:72:4f:11:93:80:e4:2a:36:aa:
                    d0:07:c6:dc:92:2d:ff:32:59:e8:11:52:f4:66:a4:
                    e2:1f:0d:d5:34:90:3e:c8:08:bc:a2:fd:7e:2d:20:
                    46:0e:74:2f:d4:a6:42:f8:21:94:65:6a:46:f6:26:
                    f7:87:f4:4f:2f:53:69:6a:4c:4d:43:5f:c9:b5:25:
                    8b:5f:57:6f:a8:ad:0e:da:85:61:b9:38:2f:35:ce:
                    20:8d:5f:9a:c7:70:b3:50:e1:05:3e:34:dd:8c:3e:
                    75:84:dd:da:0b:57:91:63:31:96:6b:f1:e4:2d:ef:
                    36:49:38:26:e8:44:35:36:26:32:7c:eb:b0:a2:f5:
                    ff:c8:23:7e:4e:b3:d8:6f:ee:53:c1:c1:26:66:5a:
                    78:b0:2a:ca:50:9d:2d:6b:fa:ce:8b:ba:3e:31:b3:
                    16:a0:74:2b:87:80:a8:91:78:5a:cf:83:92:67:40:
                    67:aa:06:a8:63:ff:e8:6e:90:02:af:e4:68:0a:72:
                    c9:35:09:74:f4:63:43:f6:fb:1f:a5:2a:27:1c:78:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:FD:4B:F6:DC:3E:7D:3D:B9:F5:93:88:4D:22:F4:86:39:94:49
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e5:6f:e4:86:c4:41:e5:14:7b:f3:3e:fd:f4:d5:db:7a:b0:
         50:20:fa:17:51:71:dc:63:61:a9:9b:f1:26:42:66:65:58:5d:
         c7:0a:91:12:8d:8c:3d:b2:2a:78:9a:23:fb:d5:3d:3b:35:7c:
         05:6f:0a:ff:4a:9b:12:bf:23:b4:56:56:5a:c6:95:4b:a5:bf:
         d2:d6:76:6b:b7:92:54:37:f6:a2:53:d2:b8:40:99:39:dc:56:
         9b:99:c5:3b:26:1d:82:7b:4c:bc:57:f2:bc:0e:c1:e7:3a:5e:
         7b:b8:9e:1b:f0:2f:e7:ae:a7:85:7f:96:64:89:cb:4d:db:2e:
         4d:33:23:ca:38:18:4c:e8:ce:0d:84:b1:43:a0:f8:6e:9e:7c:
         81:98:5e:ce:1b:d8:3c:03:e7:b0:b2:12:d2:df:fc:e8:16:cb:
         9d:2d:04:45:70:1d:a4:49:21:95:76:30:06:83:11:6a:af:86:
         b9:37:c5:de:af:9e:dc:55:09:0d:f5:5f:e5:6d:bb:25:d6:ff:
         9e:0e:bb:b3:7f:51:d4:21:87:6e:2f:e2:cc:d8:e4:48:c1:82:
         2e:88:7e:a3:6a:9e:84:b1:27:72:28:82:31:c1:2d:0d:3b:62:
         dd:8b:37:3d:54:06:ec:1c:2f:c1:4e:87:c2:53:b6:4f:e3:82:
         3e:4b:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----