Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
File:                     1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json)
Hash identifier:          TE5F1xVRzhRM71SaAR/fspdVQqkfuFNpwYX91TwSuv4=
Subject key identifier:   E3:A2:64:11:13:09:9E:71:CA:FE:52:FA:51:85:89:6E:18:EF:34:A4
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       0196293B4AFDE15A9C555E12452515810B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
Manifest number:          096C
Signing time:             Sat 12 Apr 2025 09:01:13 +0000
Manifest this update:     Sat 12 Apr 2025 09:01:13 +0000
Manifest next update:     Sun 13 Apr 2025 09:01:13 +0000
Files and hashes:         1: 0O8PsfQQ837HZC6vH8HZdjQhz9k.roa (hash: Xwa6CcyNtMqGwJ8SwiL0+ATMW4k6h9G4j8VyDVTQCuQ=)
                          2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: +/tUxxvqTEmCkDsPVU3ZrCIdZ9NMJLCH6K0AP+0pM/M=)
                          3: 1NsIqndst_On9nYnvKQbaIFnFBo.roa (hash: ygRz+eSAvso8HH5S7ovVpP8CDuvADuXq1qx+4OzSDkg=)
                          4: 6DKPMNriuuz5czJiETGvSTeZJTk.roa (hash: Won6pxgmbG/3Nyt61zaGAHF2tGR423C85mRCMrJv3/8=)
                          5: 8wn9fj0PqtCdtrjvVjs-x_2PjzQ.roa (hash: 7UcC6PjtAm8ZGmqmm7X7V/2fmUSDRZoPvvaJOMKRRsE=)
                          6: A3pbn3ekni2GhddhB21U3DXwZ-Y.roa (hash: w6w3+UNeqriZJvvRJht0jP6LNOMWu7OkSkQqxZTL6Tk=)
                          7: Am3EHuazR5NKapUc7shNSbJ3YpE.roa (hash: WkPWDqODhGSWdXqV4LXZ2J8aMXMEbvI2EsaFMtrCqo0=)
                          8: C-vYvlFYfUXiwi5hu4BNg-H_RfU.roa (hash: Nlk7WgRdvB30t6f6caFVZOFs3Kxbuk6ZqeclTDKzs84=)
                          9: EZnxg9to9tj_CGFbyqX0_Anjt-g.roa (hash: bS+3tO9zhYQpPnZP8Cd0s84+g/0K57qgcaxrjbHpLjM=)
                          10: F-Xx3vyPK6Zuw2ickEOsmn77QZ0.roa (hash: TfUjlNMx1vYLh3UKPXaRyW/cNRHghaWp6CGNxQmhNw0=)
                          11: FfGr-un4M5qS3iAEhkFV09RmhD8.roa (hash: SGHONQWGkA5uEdcNNdqrKuafMozrB3z7UJ8XpLHd4+I=)
                          12: Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa (hash: xuz0ZazQYPtF7LGAYIk414qfYlSUwXjrvvWKQZrz71k=)
                          13: GiXPWO_M5_Qz7chgSaADKYyKdjQ.roa (hash: CR+t2FWeT4iCGvfmEuW7cscv5yFtp2gnGfSh1BKnw8o=)
                          14: GuBQqiW-LmEg8stIC6E4AIYuJEs.roa (hash: aTYnjaPKY9lXYdKDON5qB0M/NwQWopdVxCa+5FBEevo=)
                          15: JCdeVSQVLryQs_floRfjIOg1IdA.roa (hash: JMyYzR5Ytfu3qGv+sDPU3QLbpcRzcLEVb4d/DbF5OQk=)
                          16: Joxb-Ov4mOMwVlcCtX9JgcTGC7E.roa (hash: Yl9ue+rBszk7UzJ2CKvzC8soiMg6PpgsbcWehzUF2xc=)
                          17: KJ5M5xCQash8uZRKDjM1gqM6_GA.roa (hash: bGI5aTy4U/ATecO9V+TMfmED/aVfz5oBChs2Drp8ZoA=)
                          18: Kg3SmAND62QL3-SDQn-IRWTqb5U.roa (hash: e+aNLlkluG412rP8rKU5tgRjVlTnT3Y7a6yQ2b8GkaI=)
                          19: NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa (hash: ZIpNbtJtajAkg9tTb3DzFwtmkDZ5B+a0yULTgfFJCGM=)
                          20: NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa (hash: bd0jFVShVRoxlQ2yZQX5k4g9HNjTW4iyAU7DLnrdQJs=)
                          21: OCl4O_g8kh_MMdyOLYMnZrJN_o0.roa (hash: i1wR3mlRtlouSF3tMzR6qf6WRAKsPfUQiKuxrhK0qNU=)
                          22: OTTrSlclWCrRRWM2xxMcTqVQjHg.roa (hash: WiU4r6HmQH1aEfbGFidApr+E2bNSyNZEaoF5S1MwslA=)
                          23: QiI8gDDw-xAJA3ePxVIRRlGEYdI.roa (hash: C246FPX5mXJCm4V+/x93EQQYecFpNkWeuxla6G3+Gtw=)
                          24: RhTgRnEQVN7BS8zCeDKIuJodexE.roa (hash: kwTo3MfM5TV/NqXvs58S+K2AnfxciliE0IO9j6jlzFA=)
                          25: YIr3E_d8xjFFjCfVVE2xSLJ0-QI.roa (hash: mEm19hWHY9ASBemN4SZReP3DohObdxjngjK7Zv6yXiM=)
                          26: ZsPTXd00YGXAGdlpQHp_4GAJnk8.roa (hash: DOJ94Y4TwJdMVROCCdwmA1CtWDnmA8oBApNpI/15z7o=)
                          27: _KiSxOPdlZjyAMKBUu2shVHXjhI.roa (hash: CeCeupQAOIztWol191+Mn81JbkZ17ESdQ65PUeIBGfE=)
                          28: aM8ocR3q8EE7bdbXGv-dz1oPpSc.roa (hash: dnMtZt2ON0ayr7vduG77kGmQK0ucTfTmT1qnf7SK3u8=)
                          29: bFfYuWF2ASD_WhaKHcwniE-EJhc.roa (hash: 7I4u+C+7dGPFU5Dq9B4FirGYzRrbhUT5p5jlp8mFRMc=)
                          30: ctfmZD0DW9qLyBcmD6so3A9jsHU.roa (hash: aC0ussEPUWct/6A8nTu63p7949dtbgKcUheJu2lhu0Q=)
                          31: i9uIjjU6D0TwyVSI70dmfql9iHo.roa (hash: W4IdRWUbeBHC71fWImIcXMTbu5XSxGV9Lki4EkTvVKk=)
                          32: mwl0r7vx7glziPY_QItxRsSJeAk.roa (hash: 1Ot+hb3FMddnj8lrNQfPiqO4rxPdgpHynBKtjzrIzH4=)
                          33: npPe8XFZ6a2BHwdNHsqb1MolM3s.roa (hash: SYptx1aM+buVWFSsRUXazThSDntWvjmVRSFMm5fwB98=)
                          34: o68Ghde1n_EzeMSw-694dwm9M2o.roa (hash: Y6KCx3LRrw57VbzbPdLVCd2PGVgDxQ3gEG3VGoRjZt0=)
                          35: pUVRAGRxGer_PT9GoNVcHpcoPUc.roa (hash: 9De+mymT+37Q7sJV6Uh4eDoOTy/OcNptGN5ZBYfBFFM=)
                          36: pwoEOeTO5RZHQUnWOLHwrScd5mY.roa (hash: mY6C75sEFICze3RcBiamn1tgNhCa7rp79HYsNFFHVu4=)
                          37: tVUvr-ir835qPuLKFyOdFFNBgL0.roa (hash: 34yMqH+CkcVuhbR3epYX5ZLAzD+wDx846iBlOveXl40=)
                          38: v8DtO9sFqeKg9oTGngfTpCtjaII.roa (hash: JeKCa5d4cZjxM+nA63f6nRxZSxhVJ6hVpgcdWItAlHo=)
                          39: wbdQBewhjGL_o8gz03PFcbQEZfw.roa (hash: 0KEr302c4T/9hrqwNTvBUDuUACLhLVoyeo/Qw/qZOfM=)
                          40: yqHa79yqc_AhTdpIF1z57lBumTw.roa (hash: 3XrQ3wUDbCvMFbRIq0bvRcdv/vcwmJoIo/ROmgZoAgI=)
                          41: z7Kwn4LDCEPgPTaFc4eTapKvf_s.roa (hash: R68ngf3hyKpTSVCx0War1aNzwekx8c09pnwQjDY4JS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:3b:4a:fd:e1:5a:9c:55:5e:12:45:25:15:81:0b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Apr 12 09:01:13 2025 GMT
            Not After : Apr 13 09:01:13 2025 GMT
        Subject: CN=e3a2641113099e71cafe52fa5185896e18ef34a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:bd:75:20:e9:c2:a3:ec:2b:21:5a:cb:ae:
                    3c:0f:78:ff:d9:24:b9:7d:7d:73:1b:fc:9f:8b:80:
                    65:e0:42:2f:d6:78:76:59:50:52:26:5a:83:fb:98:
                    be:13:68:38:d2:be:b5:58:0a:d4:62:e5:5d:df:b1:
                    f5:a3:1d:d4:a0:26:f8:9c:91:eb:dd:e8:9d:f6:30:
                    ee:bf:95:2a:f8:26:39:3a:9c:98:31:62:9e:ff:cb:
                    4c:4b:1d:99:0a:ec:27:38:56:9b:46:ca:e6:1d:aa:
                    d9:c1:f5:82:d8:d8:4f:22:fc:b3:72:49:19:0d:b3:
                    d9:16:47:78:ee:cb:34:ea:b1:70:46:0e:d0:7b:79:
                    21:e9:25:8e:93:63:ae:ac:86:96:41:03:5a:24:af:
                    ab:3e:0e:a2:65:0f:05:d4:23:1f:f3:f6:e5:0b:0c:
                    46:b3:fc:3a:0d:ca:86:58:ad:0a:70:13:2d:93:b5:
                    b3:83:d9:7d:97:a2:d1:94:61:bf:b8:0e:f2:12:3b:
                    99:26:64:06:30:c0:6e:e5:f3:f8:22:7c:b5:7d:fd:
                    b9:40:3b:c5:da:ff:ba:ba:7b:28:68:04:a1:06:c9:
                    a1:8a:76:7b:75:07:07:da:fa:eb:e0:98:80:d8:83:
                    69:03:69:e7:2c:f5:76:b4:79:ca:4d:5f:e0:86:1f:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A2:64:11:13:09:9E:71:CA:FE:52:FA:51:85:89:6E:18:EF:34:A4
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:97:1a:4a:5f:4b:d9:93:59:e6:a5:aa:79:f1:65:2c:c3:e5:
         f1:f8:2f:79:35:45:81:0d:5a:6d:9f:61:9e:ed:23:b6:a5:87:
         8d:ca:03:f4:b2:97:e3:07:b0:16:dc:39:63:ea:70:e5:29:7d:
         ac:52:7f:06:51:2a:dc:4c:02:cc:c0:46:d7:2e:d1:4f:c3:d6:
         33:49:c3:ff:c5:66:53:db:93:b4:86:d9:4a:79:0f:b0:93:a6:
         ab:4f:5a:61:80:a4:d0:12:a2:52:23:f8:f5:f7:84:df:47:1c:
         0b:97:ab:68:b3:2f:1e:56:6c:f0:d6:4e:d8:53:6f:8e:e2:be:
         fa:62:a1:b8:ec:3d:ec:77:41:64:19:01:29:fc:ab:fa:1f:43:
         b8:b6:58:eb:69:74:8f:37:a5:7b:b0:af:07:f5:77:cb:87:d0:
         ab:bd:1b:2e:c7:07:19:f9:0a:a7:32:f8:52:11:0e:14:ff:f3:
         05:05:5c:26:ac:b8:43:9b:02:a9:f9:c4:fe:fb:76:88:a2:49:
         f2:74:6e:9e:ac:ce:0c:38:73:9f:6e:3e:ce:12:29:ac:77:3d:
         82:74:6a:2e:dc:3b:db:e4:b1:35:e7:92:b0:94:7e:34:10:4a:
         d0:72:00:f6:7d:7d:fe:6d:6b:a5:3c:cb:bb:14:63:52:eb:d6:
         a3:52:71:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYpO0r94VqcVV4SRSUVgQspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUwNDEyMDkwMTEzWhcNMjUwNDEzMDkwMTEzWjAzMTEwLwYDVQQD
EyhlM2EyNjQxMTEzMDk5ZTcxY2FmZTUyZmE1MTg1ODk2ZTE4ZWYzNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIu9dSDpwqPsKyFay648D3j/2SS5
fX1zG/yfi4Bl4EIv1nh2WVBSJlqD+5i+E2g40r61WArUYuVd37H1ox3UoCb4nJHr
3eid9jDuv5Uq+CY5OpyYMWKe/8tMSx2ZCuwnOFabRsrmHarZwfWC2NhPIvyzckkZ
DbPZFkd47ss06rFwRg7Qe3kh6SWOk2OurIaWQQNaJK+rPg6iZQ8F1CMf8/blCwxG
s/w6DcqGWK0KcBMtk7Wzg9l9l6LRlGG/uA7yEjuZJmQGMMBu5fP4Iny1ff25QDvF
2v+6unsoaAShBsmhinZ7dQcH2vrr4JiA2INpA2nnLPV2tHnKTV/ghh8i7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOiZBETCZ5xyv5S+lGFiW4Y7zSkMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJcaSl9L
2ZNZ5qWqefFlLMPl8fgveTVFgQ1abZ9hnu0jtqWHjcoD9LKX4wewFtw5Y+pw5Sl9
rFJ/BlEq3EwCzMBG1y7RT8PWM0nD/8VmU9uTtIbZSnkPsJOmq09aYYCk0BKiUiP4
9feE30ccC5eraLMvHlZs8NZO2FNvjuK++mKhuOw97HdBZBkBKfyr+h9DuLZY62l0
jzele7CvB/V3y4fQq70bLscHGfkKpzL4UhEOFP/zBQVcJqy4Q5sCqfnE/vt2iKJJ
8nRunqzODDhzn24+zhIprHc9gnRqLtw72+SxNeeSsJR+NBBK0HIA9n19/m1rpTzL
uxRjUuvWo1JxWQ==
-----END CERTIFICATE-----