Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          qJXtzLRtBASi61rIVAbQER0FPD4sgi+NWlYnMsBq2X0=
Subject key identifier:   EE:28:6C:8F:E0:E9:45:E6:A7:FE:44:54:8D:C3:F4:77:A0:09:2E:0E
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019672303B33B2EBC912EB30701DF0709B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          167D
Signing time:             Sat 26 Apr 2025 13:01:25 +0000
Manifest this update:     Sat 26 Apr 2025 13:01:25 +0000
Manifest next update:     Sun 27 Apr 2025 13:01:25 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=)
                          3: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=)
                          4: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          5: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          6: BY7zogmO24IEG5UVppQeS6Gd5vE.roa (hash: p8kUsZQCJoolGFVcidzfKv54az7wkfAAI5567t8FEGQ=)
                          7: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=)
                          8: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          9: ID4trGdaWKJu5BbNXALaxIjZ31k.roa (hash: Pkv6z01q9dvGXVnFDwkYMbgGkDFgHerMyDhgKR/xJeg=)
                          10: In6HHlbOKgo-tBtDKsZPQTlArGs.roa (hash: CFnMXJRMI0xcGsbclTIgiHmpFuGQYTKvMSrP+u/dCV4=)
                          11: JUEJ1bnTf0kwNpf0XsZJp2QsJAo.roa (hash: VZTjh3lQnDMpevPygqIRVRGJtopvsnGmz6ycKHPoHw8=)
                          12: MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa (hash: 2cRjKiLLq409oV3H3w03WuAOBjBM+sqVFpy4OKfY030=)
                          13: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: /uxblGvbutfqPRPUmDORwrzLe0zTHZTuwOylXMxMLxg=)
                          14: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          15: ObZzYN2E0kdZNeSLF4XNFHQWZK0.roa (hash: 85PbvghxphTHomH9hrjntHu2TbF8oiO3c8zwpKmiEd4=)
                          16: PE7M_PNES4VfYrOezPHtsiJVIgw.roa (hash: cIU86lSCql3IPuDO8lVSwh1Ibw7DhdUEMPDGwtFRQDw=)
                          17: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          18: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          19: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=)
                          20: UslAMNDGH2di8acO0CKRyggNeYw.roa (hash: Is2XzIL1X5KivLoJ0suQcLDIhE0bjKUklpVRev/W/oI=)
                          21: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=)
                          22: XQShfPP8T7NpXfHF3bR3ZAaS_7E.roa (hash: xjzNWhe5FpZ13zIe4c3zk/xvRI8dLOaIlu7Ow5qH8uo=)
                          23: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=)
                          24: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          25: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          26: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          27: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          28: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          29: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          30: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          31: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          32: o-h2A957dlcPkUpwvfVIlQ19QGk.roa (hash: TLWzVDizEQzpjZ25+tu4lXknyJozTbrV/Wbt2G8zyy8=)
                          33: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=)
                          34: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=)
                          35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          36: uCyH2-fPRpFibOOxTNl7u6CXQas.roa (hash: tlDsieQUw597/PTZ8W1911q4kuRCKAdlDdwHG1Otktc=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=)
                          39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:30:3b:33:b2:eb:c9:12:eb:30:70:1d:f0:70:9b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Apr 26 13:01:25 2025 GMT
            Not After : Apr 27 13:01:25 2025 GMT
        Subject: CN=ee286c8fe0e945e6a7fe44548dc3f477a0092e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:c7:8a:7f:7f:65:e2:37:0b:6b:e5:fd:e5:
                    4d:ac:1e:f9:c3:7d:fc:7c:e5:e8:5c:ac:c5:15:0a:
                    58:16:5c:d7:86:f2:33:6a:fb:bf:17:87:2a:d9:fb:
                    90:d1:be:5c:a3:8a:92:ad:dc:95:d2:5a:2e:4d:a4:
                    a6:2c:12:fb:58:a0:39:b7:36:73:8d:79:57:4e:87:
                    0e:6b:bd:f2:bd:73:17:b1:06:bd:b8:a4:88:3c:b7:
                    ca:b5:10:ab:02:79:63:48:7f:f1:9f:9f:a6:c6:d4:
                    56:57:c6:f7:e4:6e:13:87:b2:a3:7a:6c:12:41:d9:
                    f4:43:a2:aa:64:d5:6d:ae:fb:8c:f0:95:13:88:ae:
                    5a:b5:c7:c5:d0:4c:ab:2e:d2:3c:04:91:b0:3d:d6:
                    2a:8b:c9:08:83:f1:7e:1b:6e:be:f1:d4:5d:dc:ee:
                    f9:13:56:dc:7a:5d:f8:fb:5a:c9:4b:b4:42:ba:52:
                    f1:05:a6:6d:10:2d:a5:fc:b6:c9:f1:ec:4b:ed:35:
                    de:fc:32:50:03:86:0c:14:fd:d2:b3:57:63:16:a1:
                    da:4e:cb:4f:ae:4a:73:85:c6:fe:eb:05:5b:c6:c3:
                    15:86:8c:1d:a6:e6:32:48:ca:0f:2a:1e:e4:83:f1:
                    d2:ee:52:16:17:3c:8a:10:a0:8a:7e:74:ad:60:23:
                    8b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:28:6C:8F:E0:E9:45:E6:A7:FE:44:54:8D:C3:F4:77:A0:09:2E:0E
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:17:3e:be:b7:c9:65:ef:9d:37:3c:d9:4a:05:28:c4:cf:e4:
         f4:19:41:fe:45:4b:c8:5a:09:ba:be:c7:97:8c:ff:1c:2d:e4:
         b6:fa:fd:a2:52:82:81:b9:81:82:55:d5:85:0f:9b:96:2a:f9:
         21:67:43:a0:58:bb:42:ca:ab:96:c5:56:61:b8:66:ab:35:e9:
         d8:5b:97:3c:ce:ec:12:8a:63:1b:4a:d8:b6:c0:76:1f:63:f7:
         fd:83:0c:e9:c1:0d:47:17:4b:c4:cc:c4:b9:59:77:12:b1:10:
         ea:e2:29:49:b8:88:f5:fd:51:31:7d:94:d3:c0:fd:69:dd:71:
         38:eb:96:83:ec:83:b4:e5:bc:28:3a:42:21:ad:ea:93:32:30:
         66:44:09:e5:b1:6b:eb:8a:1e:6a:4f:9e:a5:5c:7a:09:13:5a:
         76:c8:bf:a9:dd:a6:ec:8e:b1:a7:da:1f:80:24:a8:8a:67:16:
         f1:12:b6:df:9c:94:17:80:1d:63:ba:31:59:ab:e6:42:a0:28:
         fd:2a:0d:45:dc:60:7a:43:af:3c:9d:06:f0:e9:db:57:34:4d:
         48:4c:5f:43:28:34:21:27:bd:9b:6f:4c:7d:ff:19:34:c9:c9:
         05:f6:bb:77:d1:4e:24:1b:05:44:c0:27:46:1c:03:27:cf:49:
         36:37:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----