Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          apR22WWTifjkpPWn/zJuqlUjYN4kuufA4zVfS66erMM=
Subject key identifier:   51:52:2C:A6:84:2E:F3:51:E5:0F:57:A5:9D:12:21:10:8E:35:79:E9
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       01976997EC37CFDE1DDCFFFD4A1A743F8A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          170F
Signing time:             Fri 13 Jun 2025 14:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:53 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 1tf4gDn3E8oQJBa1P8YsiAEqDhM.roa (hash: 79Cfn4DIphA5rCTAyXxPmRPIy+pQ3OnQkEroI7+/vWI=)
                          3: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=)
                          4: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          5: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          6: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          7: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=)
                          8: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=)
                          10: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          11: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=)
                          12: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: 0/Urle+FH/2K2fE+5S0zsqpRtZ+k4DI8auOrDeNpzMg=)
                          13: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          14: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          15: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          16: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          17: SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa (hash: 0t61EacIVCgeyWoWNgl6pkppBifI3GCHVv8rPuzvXjg=)
                          18: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          19: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          20: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=)
                          21: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          22: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=)
                          23: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          24: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          25: dbVfA_fXprSS4i2QZkFruITo2AE.roa (hash: rakhWVMFHWlUieRihs0aD8m0Lp0z1R0bTv8p0JLqNxw=)
                          26: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=)
                          27: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          28: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          29: jglHMQosHm5EePmNaCszZnbBZOs.roa (hash: R0FPP1nLh3wCW9tN4EPA/+UY2zsuEsyvpDHM+ViEarg=)
                          30: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          31: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          32: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          33: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          34: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          36: xWbPdMVEmuZApYkV6k6Ner-NdoM.roa (hash: SYfabwgoXXnYkPob3pQZnw3i3utOCTQGZ5zR8DFtm3s=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:ec:37:cf:de:1d:dc:ff:fd:4a:1a:74:3f:8a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jun 13 14:00:53 2025 GMT
            Not After : Jun 14 14:00:53 2025 GMT
        Subject: CN=51522ca6842ef351e50f57a59d1221108e3579e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:34:65:ca:2e:78:80:83:8f:2d:bf:90:99:
                    76:22:02:89:eb:dc:4e:91:1e:d6:a3:6b:3d:d4:76:
                    1b:62:cb:46:19:20:66:9d:61:9e:21:40:12:ef:8b:
                    30:70:91:76:72:4c:ad:a3:25:27:1b:92:d6:92:8a:
                    cd:b0:39:5c:4f:63:99:51:92:79:88:1b:56:45:21:
                    16:fd:b1:1a:b6:87:dc:92:1c:b3:1c:6f:79:d7:0f:
                    3d:81:13:38:ad:6b:87:20:03:45:08:7c:d6:a8:c7:
                    da:cd:e4:02:c3:f2:ff:75:e2:70:62:b3:81:12:ad:
                    a0:31:c7:75:7b:cc:9e:5b:f2:29:dd:a2:98:29:80:
                    fa:a2:bf:70:6c:93:6c:40:46:50:95:e5:79:65:43:
                    50:ac:35:ca:c8:2f:73:ff:af:77:a2:83:de:c9:6f:
                    88:7a:82:37:25:bf:ce:4c:2f:aa:7d:f2:2c:db:0b:
                    c9:da:42:09:4a:ca:cd:0e:86:ae:85:e3:f2:97:71:
                    4b:44:70:d8:4f:90:46:11:32:2f:18:06:d8:12:c7:
                    5e:7d:cd:9d:53:dd:a9:42:2c:69:6d:c9:a9:dc:5c:
                    b2:7a:f3:6d:25:6b:f9:7f:ef:7d:ab:34:06:03:d3:
                    65:5c:b3:d2:f9:d2:3b:c6:f1:26:3c:c9:c8:5c:85:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:52:2C:A6:84:2E:F3:51:E5:0F:57:A5:9D:12:21:10:8E:35:79:E9
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6a:51:fb:e6:8f:6d:8c:17:2f:68:c2:9b:23:50:b8:47:ff:
         a3:eb:ac:4a:99:51:52:a1:b4:e4:19:47:97:93:b6:24:48:ce:
         db:8a:92:4a:c4:85:3c:f5:48:27:09:51:b3:55:e3:b0:2d:3c:
         ac:ac:22:71:e0:b6:f2:b9:cf:83:92:7e:de:f2:fc:59:39:da:
         3b:e7:23:20:d2:71:33:cd:0c:1c:16:04:89:4b:21:98:5a:8a:
         29:af:57:b0:60:dd:e7:b0:f9:cd:01:5e:aa:f5:99:b8:28:dc:
         8f:54:58:93:f4:27:6f:c7:6c:f6:a7:c9:98:23:fd:55:b5:87:
         f8:74:bb:c7:d8:53:88:0e:af:63:e5:1d:dd:c5:cd:39:ce:3e:
         c9:9f:61:60:96:58:78:e5:36:52:ce:dc:a1:45:1f:44:90:02:
         34:b7:af:8a:2a:6e:4b:ad:94:f8:44:9c:a2:ae:e6:28:c1:0d:
         9f:53:91:19:f1:df:e7:55:65:71:a7:74:4a:51:4d:e4:38:28:
         f8:97:bc:91:de:e9:1c:e4:b6:b4:f8:5e:f2:62:33:a0:5c:ff:
         f4:8b:a6:0e:c2:8e:90:1d:dd:64:97:a7:d8:8a:cb:a8:ba:c8:
         90:08:de:c0:19:3b:bf:73:98:14:55:56:36:89:97:2f:b1:c3:
         d0:db:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----