Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          6v2K4ZEbGKpAO29nKuQS9rphib60MBU/1OOG68s5dyU=
Subject key identifier:   F0:2C:CC:8F:B9:F5:CA:5C:59:F2:BF:05:08:6C:54:3C:00:7F:FC:C6
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       0196729DCFFEAA5039B8DBC861C56492A793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          15DB
Signing time:             Sat 26 Apr 2025 15:01:07 +0000
Manifest this update:     Sat 26 Apr 2025 15:01:07 +0000
Manifest next update:     Sun 27 Apr 2025 15:01:07 +0000
Files and hashes:         1: 3B7NNbeKRnZEKDmHNY1KeC1srmc.roa (hash: b9ZXFcLIXXCFjVrGvvhUY9iQ4k5SaEKXRcy7m/BXZ+U=)
                          2: 4owpySNgzrf6v-2VVQAYWn-pSWg.roa (hash: JUakx+KjR2vT5hqODYhVy0j3ze4uAyKV+BYjGjKGsiI=)
                          3: 5C4YA50fBN7vcdBY1HqNC2bmMjc.roa (hash: sc/YMsXU3PgkkGc1oSkpeF8aFtzCCD0ar7drCdMUnQA=)
                          4: 5s5qGQoGev1jAV5c8T8dWS5HMq8.roa (hash: Br7JXU0oIeq94AWaj70g/oHJ4lU7FSYUKqT+ZWnKc5Y=)
                          5: 8IPQNKsJPkOpGC12sFlkQtMsYXw.roa (hash: Xs5ZWXQSLJ1Z58EHx7MQM3/jp/D+3KjEPCMs5TWn1es=)
                          6: 9GT9JJ3NQPGYhQ8veU5LdxHQVus.roa (hash: UBa7hSTFPahRK5n0WLcYKVjlEuqviO4o2tPIFJ++zTg=)
                          7: 9XV7PV-zT0NQ3uZmMVwK2FfVyc4.roa (hash: u+icYkT6O1GXqZHgV8iFPlgLQe9AYTs46MWAhb+d+n8=)
                          8: AJXSyfymc0ZNXaBD4wQ_CXojrNU.roa (hash: IEKfVlGCNO0k9/PEwkKVpaVd+QI7iET2CIAUyaqWhoM=)
                          9: Bby1ejbV1djGYSim4HEmAHCiD_Y.roa (hash: aZSf68W1ZGNJVTU1oTBsygHYsnrmM5pFMvGKFYKiV4I=)
                          10: CS3fkAwQa6jbpAuBFjvlkhT4QM4.roa (hash: B07gzww+qg1cGY1+Noy7EqGS0qu6LsylkSmHxbsB5UI=)
                          11: CihCYCcRfHmYDycxhVRrCslM7wU.roa (hash: 8EK8gvioDzV5jlwA4y5lAA/cSLy5nx2+QcBlr4T3sHc=)
                          12: D8Npx5yQG7Ze4tcNJRq2T-3oN70.roa (hash: oSyETx06tyNiiNec4JR5AXYmY/qLJxXp2+L6i3DOKho=)
                          13: DNBsRV7t2HVO8env59jVAjOxkhU.roa (hash: u04P8i3SwISYkJ0oEkWX35FdtSG4l2gXii7MGpdcKHE=)
                          14: DdFxlWbaGRT4CZL97qtlhoDJM0Y.roa (hash: M/MMli5M2T2c0uadxkb0PM0+WTS5b3KbAgN3Uh9mTdk=)
                          15: EC8RWNFJCuwwTQncl5DfzFYSaJU.roa (hash: /nklMpYhc5zKONNBtCKuXizg/to5ABQr9axNt5+yLCw=)
                          16: ElR1tFIaY2PsVDpiTByrXvXqpxo.roa (hash: iq5gGlEdNdHsXyZVWv/MPVHohphUvsytP0Ty+022UbU=)
                          17: GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa (hash: /r6B9YtsSkz5HiiZQ3D0LND5TwPnz38Pp1G53PkZKrg=)
                          18: GMmKt-5baeZVQ82hbvBrxYFlQXM.roa (hash: s5iUX/ExHm3pVTZBNgXMVP9bcmV8hfTJwbyd8w5AgEI=)
                          19: I6fa7upvk-8lxJh8Xg3J12wgh5s.roa (hash: bov/2d/GEEG2qFtvTVuW6lrqmm4nh/Cfgdq8NX02hTc=)
                          20: OkxhKGO3hHLaH6qZ2vA9JlrGREw.roa (hash: ytFzHiABycaJCtimxiXolzufiSd4PWYGRqD/u4TM94w=)
                          21: PegLLGDkYvs3XF-Lv9hiNho74dc.roa (hash: Vpb3C6Es4ErLDrckTZZ10f34MzLAYRtZRdftTDQsoSA=)
                          22: RMWbYdHceZbtSP3kPPphiVqhjKU.roa (hash: ZmPZq83tjvYdJrT/qGKDeRtwLFHx3yIuGdy+p00AfUY=)
                          23: S-O3TbcstTKMug___VSvS3cgrog.roa (hash: 3ebQ/8RxqwDIFEsCdZKDawRwthwgLIDNt8oqNlSOX+8=)
                          24: T9b3CGSu9TwHQys6esNNigNs-MM.roa (hash: 4HiH8CIapMTS2W3MG0LdLW7D9+NiWrCqVdKHuPMfhB4=)
                          25: TeTlCFhRmBWsP7NVZyOUSwULl_M.roa (hash: mg3r9BXAscolOOydLk1rXM5DK7srxmHtjMbydFKmjt8=)
                          26: UiJFgj53HRUljcsaPw_C3xHQ8sw.roa (hash: jdXS9rwe9fXCo5Cr0EwDavykrLDXeQzgKvuqbRIkEqg=)
                          27: Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa (hash: rWWNSNbf0TpPeCx9vIr9DCtT6kmAFEPWocJVPgJZlfk=)
                          28: bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa (hash: CYGIK7KvoAnIIXqAQFMxwpkIsLNOXXwRLcfsIwViZMg=)
                          29: cfR-hVEEWkEUwMw2M1V8-p4d8xk.roa (hash: wz/4Xbt1g81a52SFupsdpkNdqPVC6kO1L1AiSoDnAFg=)
                          30: eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa (hash: 7jK6GTgtOsW5ejSEUTMjmjF5N1YX94yuMyrHsebyc8U=)
                          31: fjv84iNlQrNIDl434ECeTTwr0W4.roa (hash: szzjxRTRI27CfDncELIdzVynm65szTrVvcBwbAR/+k0=)
                          32: hJ_BTbBrrE1DP__8DDhe52SVKU4.roa (hash: vQOjBEpXapD1L5OKTFCIZsaTYTd3BkhoB3Yz7me/w6A=)
                          33: j4X9hBaVyPVDHygvq-fZETVve70.roa (hash: z5G+VRr3oGmuSXVR1HckqXgI/DsnIY/XOw0j8sDgvBc=)
                          34: jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa (hash: /ylqB7KyfpIhWFWFpFGMmmVvMNfolX67eNrbZDEUJW4=)
                          35: mYW0ZahOVTcrAzTqNxYilfPfhxE.roa (hash: BwKgVg49yd12fGRJhBfLrcNhvxj8bT+foLtZZc8PITk=)
                          36: okLiPnx_37wLDBmkCPiMjbS6_g8.roa (hash: ASj3E5a6QDi3UoVchGVURUpzI7Z729JGPp26Uv4mP4w=)
                          37: q7b7nVWpkVbr40N_Opdu9wphH-A.roa (hash: qMPucfrLKsdpwIUrrq74FwUiMd/2EJmaJ5bJL+xDKak=)
                          38: sLqJ03Mzd2paUSWl89cFwcc4aoc.roa (hash: BdXE5xoW2k/8wUIc6tmTtpZOZ6amVghYGgF4PwTsgmo=)
                          39: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: zuG2ZkC756lp+7VQdXGJRH1N3yAWMVOsHVqMK/Ez4R4=)
                          40: tb3kec3C_AdEd3PbwhtotVTRyPE.roa (hash: 4jjavH36yHIelt71HPqT5lLNi8LGIY/f55sh9UE2dJM=)
                          41: vZ4v2lo2-sXeStle6vqKr87Cnyw.roa (hash: iuW5h9zDLSCcSeiWR+xV0dE4RiZoDLZqiq7ZP9qa/2g=)
                          42: yQlRBrLDeyn3TTj8ZtGhdV1-yK0.roa (hash: H5Od3PkOreooagwKDaRNuaNY56vK6MXBcQKy60Zytts=)
                          43: yuuB2KONhG_4U4b8x6sLfT_QyK8.roa (hash: nmT4hg/orDDfGbLVfXOBmgugDkVcFUxF1FfArL2tLbY=)
                          44: zbIR0kzSnqsQppAEnVlytUjNxzs.roa (hash: A5R4DtRsqGNnQjc0WtD6M5DgyLoDVTlkGrAxxgOsLFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:cf:fe:aa:50:39:b8:db:c8:61:c5:64:92:a7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Apr 26 15:01:07 2025 GMT
            Not After : Apr 27 15:01:07 2025 GMT
        Subject: CN=f02ccc8fb9f5ca5c59f2bf05086c543c007ffcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:c5:8e:1c:38:98:32:dc:bc:1d:3b:91:10:
                    75:ac:d1:66:05:30:12:ad:73:13:72:db:91:8f:dd:
                    ff:3e:ab:22:cc:f2:a5:38:71:e8:e5:77:dd:7c:a8:
                    f3:19:3e:b8:36:dd:81:55:1d:d6:8b:3a:a4:3a:c8:
                    a1:3a:77:94:20:d4:98:2b:6e:b5:29:1c:76:e8:1f:
                    48:77:c6:a3:7c:b1:53:72:5f:d0:39:7e:a9:14:76:
                    60:25:14:65:6d:b0:6d:d7:9f:24:02:6a:e8:da:44:
                    cf:07:9e:d3:3b:fc:3c:41:0e:45:3f:28:c8:c4:8c:
                    14:d2:ed:de:68:2e:de:9d:ff:1e:98:93:af:90:3d:
                    09:e5:a1:c2:14:31:7b:40:75:67:c1:67:0b:60:cd:
                    df:c4:37:ef:dc:17:75:2e:e1:20:8c:05:de:00:3e:
                    30:e4:34:33:ae:34:53:c2:75:45:41:00:ff:7c:13:
                    fc:c9:6a:ae:c0:be:ee:ce:49:b3:4d:6b:f7:0b:31:
                    c6:8a:bb:f7:bc:5a:02:8e:88:9a:77:6b:98:0a:87:
                    02:7b:5a:42:0f:55:3e:1a:73:3f:6a:83:18:a4:f8:
                    ab:03:dc:02:f8:e3:cd:ca:3a:2b:23:f3:ab:fc:35:
                    2a:fd:2a:cd:1e:58:ae:35:96:8b:38:43:dc:30:2a:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2C:CC:8F:B9:F5:CA:5C:59:F2:BF:05:08:6C:54:3C:00:7F:FC:C6
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:25:98:9e:e0:7f:a4:bb:f6:0a:46:5a:01:ff:c8:97:17:
         87:1c:ce:d5:e2:ff:07:d4:eb:22:4c:a7:5b:30:da:a6:dc:e1:
         23:37:2a:43:4d:7e:b9:b8:dd:53:10:40:18:ab:6f:a4:ac:3f:
         f4:31:98:2e:ba:5b:d8:dd:3e:c2:11:b1:28:50:3e:b6:58:b8:
         1e:2d:00:46:26:37:ad:c9:59:c2:e7:42:8a:c7:05:2e:a7:0e:
         d9:c7:b1:57:ef:ef:5a:d7:89:4f:77:cd:ee:c3:f0:26:05:5a:
         c8:a4:b8:6c:b4:1c:d3:40:37:0c:d0:c0:a9:0e:8a:56:8e:cb:
         7c:90:e3:fd:0c:38:81:b3:89:66:6e:f6:e8:0d:de:37:69:24:
         34:bc:14:ad:25:5c:09:b4:02:87:ea:a4:f2:f2:bc:32:50:5d:
         83:02:5d:be:ac:35:1e:c1:0c:41:ed:1b:af:6f:90:b8:6c:bf:
         70:db:b3:e7:43:a3:1b:90:bf:ad:10:ef:8e:73:31:0f:c9:94:
         92:f8:67:63:24:d0:e1:68:97:52:f8:f3:8c:18:0c:9a:12:fa:
         1c:20:77:70:d3:fe:76:4a:fe:ac:f4:84:d9:03:55:94:72:68:
         cd:98:6d:54:32:2a:c8:9d:d0:4b:72:91:99:6e:f3:20:59:9d:
         0c:35:2e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZync/+qlA5uNvIYcVkkqeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUwNDI2MTUwMTA3WhcNMjUwNDI3MTUwMTA3WjAzMTEwLwYDVQQD
EyhmMDJjY2M4ZmI5ZjVjYTVjNTlmMmJmMDUwODZjNTQzYzAwN2ZmY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo3Fjhw4mDLcvB07kRB1rNFmBTAS
rXMTctuRj93/PqsizPKlOHHo5XfdfKjzGT64Nt2BVR3WizqkOsihOneUINSYK261
KRx26B9Id8ajfLFTcl/QOX6pFHZgJRRlbbBt158kAmro2kTPB57TO/w8QQ5FPyjI
xIwU0u3eaC7enf8emJOvkD0J5aHCFDF7QHVnwWcLYM3fxDfv3Bd1LuEgjAXeAD4w
5DQzrjRTwnVFQQD/fBP8yWquwL7uzkmzTWv3CzHGirv3vFoCjoiad2uYCocCe1pC
D1U+GnM/aoMYpPirA9wC+OPNyjorI/Or/DUq/SrNHliuNZaLOEPcMCrCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAszI+59cpcWfK/BQhsVDwAf/zGMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVYlmJ7g
f6S79gpGWgH/yJcXhxzO1eL/B9TrIkynWzDaptzhIzcqQ01+ubjdUxBAGKtvpKw/
9DGYLrpb2N0+whGxKFA+tli4Hi0ARiY3rclZwudCiscFLqcO2cexV+/vWteJT3fN
7sPwJgVayKS4bLQc00A3DNDAqQ6KVo7LfJDj/Qw4gbOJZm726A3eN2kkNLwUrSVc
CbQCh+qk8vK8MlBdgwJdvqw1HsEMQe0br2+QuGy/cNuz50OjG5C/rRDvjnMxD8mU
kvhnYyTQ4WiXUvjzjBgMmhL6HCB3cNP+dkr+rPSE2QNVlHJozZhtVDIqyJ3QS3KR
mW7zIFmdDDUuGg==
-----END CERTIFICATE-----