Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File:                     bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier:          LoFCZN209ZTprc/zoGHaR+Tw+ZOp4xEHqQb0XK+HijM=
Subject key identifier:   6E:8B:D9:22:35:81:10:15:BA:F3:A6:2F:AA:3C:28:E7:E8:61:29:AB
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       0196760CC40322674CB4AD9AD2957D75582F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number:          1066
Signing time:             Sun 27 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:10 +0000
Files and hashes:         1: 0iVORbOC1yn1RU9MN-6NZSBLcv4.roa (hash: aAZ8Vbm4cCzopF3xvPSupzXl+Rmg+Qp1HP2+eIZg+u4=)
                          2: 1-H13vHXEt9msMsZOvqU-otxUOt0.roa (hash: Rgvq55zT5NBnfacf+JQZp1RRodipw94BIRoWgM8C2KI=)
                          3: 22sayLqNyf5mmpCVeQfzZdU0M-g.roa (hash: e7Nt6HxM+ugqjVxazGJZ+P+EJnvj8/9HUK9NFvnb4H4=)
                          4: 27vDklW69EuEanWUTFWokMvWngM.roa (hash: JTo44FsFJ95zRcPH3bpI8cZXGr6nvq17sMlCIIfDD2o=)
                          5: 4N5uvrjuNShBNQqLwhxizj6hANA.roa (hash: BFvgUFid4pNJNh+Ye7fkewmppaTZod7uXDSv4LNR8OI=)
                          6: 67KS9uxohx5qywMfA7rxHH4YscU.roa (hash: lir9AF6THQKzGsNxxFLnf0F3SF63YVXFyWaZJXVDD+M=)
                          7: 9INEJHy8ZUQsZkXJ3LToNxX8kZ4.roa (hash: KdS2sZMTtBI8DBanSx1tGmEyybopPJ/MA5ChS1PT+v0=)
                          8: 9bhpfQDLK302U3knqtNmpJUpoPA.roa (hash: bXmps9yNq4FnxJIrnc0Thg5iHt4hnwjCatzHO0SOKMA=)
                          9: AakZT8or1GzInGy_tZL_isQHHpA.roa (hash: rRCm9/MqXVvaZCgh1nfobAIEngUpqyrVoic6KsvUUnw=)
                          10: E4X29T5PIFttxKq8EE38HPjpzXo.roa (hash: xJD9cI/sTuw6YTXkaJSB88L1OwC4kEF2x+8kBxXooCk=)
                          11: FkEOeGCG6FOuT4U--JFdO1PewE8.roa (hash: eIbVZKlSGWPsJMIug3qSSnFjSdzCZQjxpUdDU4xeYbs=)
                          12: G79ZiP6DiuUmY7VmAtFD-2XkciI.roa (hash: QDU7EzIuPmX+SWvEl9yqhqLoetJzobkYRy/XDVVVI0Q=)
                          13: GQRXBMJLMJNUUoma4HkgBT7BJxo.roa (hash: vKY8BuLe5EuiohNF61YwmiR0yQcH0fmBnvvbjEVqHls=)
                          14: H8pLB57z5fPmVJMGj4akuTzBZ6U.roa (hash: KmqtvAKbOi2oAuL7c2rlf27e4ou+eIO58ZJSGtiydqo=)
                          15: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=)
                          16: Kwv1yUwYtcWcaNBZ6KPO95MKyTE.roa (hash: 8EFmYGHa2Ca7QupSPS4pv/DIhNTQn0ESKQFXQFpdKM4=)
                          17: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=)
                          18: PbZXNhzTy44dz4opY7EcI010jng.roa (hash: nmExN6JYMg41fJJNAOXoOlJJ6hB41c5F4k8ZYwAMDF4=)
                          19: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=)
                          20: TPGabRFCyApRYylnzXDE-1EJs9A.roa (hash: EAdDiGEy3TYUqK1VO+A8Od9DJIftaQ1NGNwmoQi5V2s=)
                          21: WG6LyvBNGDffIpI-sro91f49_9w.roa (hash: b/qtnEn82SM9GjcD6krB3YfyzXk8Gafv29kH0MahfZE=)
                          22: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: ksoz5JyJLUkIVnM1GIbNxP8Wu5bLoYPAHvhfOtcWAsY=)
                          23: eknd7AvZ78A2jpsWiLdD7r5PyWo.roa (hash: d0fU0qc8+0HlmnrsMQ3Ex2lp/A6PLPh3xmwGDWTtY/w=)
                          24: f5t7TFFLJ6eVzGO3VPTFIHdhhVo.roa (hash: hVo5HmKPNOyU1ejExC2VR32sZ7GoBIzBwGmWpLsdJ2o=)
                          25: hhE8yqqvIIlpuisRReuT9A6k1f4.roa (hash: J2rXjJaRvfkS0jCe1u8LbpFRxfez9lEpglQHrWMaJxc=)
                          26: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=)
                          27: l5wLjIjXWRZ_KLLADANlYyjPIv0.roa (hash: 1lqRp26N4T5cOIjlVSW2D9Cl4zwT2Ag93NKOMpX6XGg=)
                          28: luNvLtKD-DOQJpBUeL1aF_d3VP0.roa (hash: Q2ygPEhYS7ZGt1PTIM6raLUf+Ho8MzUsRUXw4zHyNlc=)
                          29: mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa (hash: ORm5qRABgNl1N4KGsHAqufuM1fGQIyB3FsBRWB7Oy2E=)
                          30: mu5vQENMQGT62T0XlilUIKP3ZMo.roa (hash: ovlRYMvdugoGVAXo7tSae+HYY/huAzodNxSfsvcMJW0=)
                          31: nENuRIXAPRwlljoVVbVN6tRNaOs.roa (hash: Zxh5bgJ2TquFeY/zYRUT5pMOM0/FFZZry3w70ve4WZ0=)
                          32: njV0BHQiQYQvZM8CvDTZl5TJsjY.roa (hash: 8CMg9ZsNR1wRS36isg5DG5jObGJbe2ocg6d/3kGoSXE=)
                          33: oFK59Q3C9TGh3OjadIioNiBOVT4.roa (hash: LP1kIHI3DX97h8zxZoYZWGIq//mTDS9bTjeGSRHWj7Q=)
                          34: pEq_9GNHyjlivZeD-baP0qm26qc.roa (hash: 9HW2pgKUS/HjiTOdvRQJWkPpcQXgVwsPhReH6Hvz2Ew=)
                          35: rItRPn2tLdB8J0VJiRArmvRDFps.roa (hash: meHFAyu6qCXc646PNr3KW0IVhpOYdjsRkvJ65NNK0Gw=)
                          36: s8S1W4cVAgNOzr7acXkokbSU8JY.roa (hash: /7uzkfFuCMpRspM3FdinCvV4M+jOL4OCx212IeV9ypg=)
                          37: v1PhGzvowzZYQbO9QCGajIpniLE.roa (hash: RAijyO1hBvjTWjwc6gf9ZfRu/IH2JcH+4bCfLxUSJzE=)
                          38: vpLxf1q5-MVmiV39db_Ph6LQBPY.roa (hash: OaQZhrU/Tck25ToiF/+vtK3pQYkkYAQV8AUucgwKr8I=)
                          39: woaauVoxvp4_WNTTTdGC5wmdObI.roa (hash: aMIfD8Bm7z/lNAu1jZ39w8jXOc4ZFrKw8zsUVcyxRTc=)
                          40: xcjIZOA8jY7byP-flru-cibOYXI.roa (hash: Ba1Ow09BLM/CKdmUj9NdR6ItGuQtCUmUpwjnknl0o5c=)
                          41: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:c4:03:22:67:4c:b4:ad:9a:d2:95:7d:75:58:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Apr 27 07:01:10 2025 GMT
            Not After : Apr 28 07:01:10 2025 GMT
        Subject: CN=6e8bd92235811015baf3a62faa3c28e7e86129ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:34:c4:54:7a:10:2e:a6:54:a2:c5:aa:68:
                    c6:e6:7f:7e:fc:ac:2e:8b:e9:bb:c2:00:67:11:6f:
                    c7:97:20:6e:aa:30:6e:16:91:b6:bb:49:82:fa:28:
                    78:76:14:37:7e:37:24:ec:ce:8f:d4:de:0e:61:92:
                    cd:b8:c9:71:73:68:8f:06:32:43:2f:5f:a4:01:c6:
                    f9:fe:84:f3:9f:e4:e8:3b:12:3a:19:8d:79:1f:ab:
                    ad:43:d9:78:42:08:e2:e8:9e:0c:ba:74:77:6f:fb:
                    55:87:51:eb:34:38:66:6c:be:38:3f:4e:40:61:73:
                    af:2b:13:f3:5f:90:67:50:48:e4:be:c5:17:34:a5:
                    07:87:fb:e9:60:0d:63:6e:22:c9:6a:76:e5:f5:d9:
                    c2:1c:18:9e:fb:eb:ed:84:b8:17:3b:dc:55:32:47:
                    e3:9c:31:9f:13:6f:0f:aa:f2:30:42:04:5b:33:a7:
                    e2:7e:d3:70:66:f6:e7:7d:9a:c0:49:c0:d8:f1:a2:
                    13:e5:64:c5:72:c4:87:28:9f:6f:65:6f:5d:c8:d4:
                    11:04:9b:01:ae:85:ea:88:9a:7d:52:8e:d5:37:a5:
                    05:f8:02:aa:f8:0c:92:c2:20:40:87:f9:bf:d6:c8:
                    d1:14:47:03:29:3d:3a:0a:3c:4d:fd:ff:db:f3:3d:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8B:D9:22:35:81:10:15:BA:F3:A6:2F:AA:3C:28:E7:E8:61:29:AB
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:82:44:76:53:28:05:bf:1b:e6:09:31:45:30:fc:57:09:
         3e:b3:a9:a1:21:59:38:25:fb:c6:95:76:f0:b1:d9:be:14:05:
         e6:ca:0d:30:d1:e2:85:7c:8d:10:01:8d:82:ca:06:2b:01:dd:
         b4:2d:6a:26:dd:45:3d:97:e3:ea:49:fe:74:9c:c0:21:4d:80:
         b8:68:bb:9c:1e:19:e9:58:40:16:43:ae:dc:ee:7a:78:43:92:
         28:f5:40:26:4d:f2:d5:47:c0:dc:bd:0e:57:10:0d:3b:10:4c:
         a6:d6:83:83:47:97:58:47:f0:9c:cf:dc:ac:74:5f:c2:20:c1:
         e9:f6:9c:55:42:2a:2a:ad:09:5c:a8:1f:3b:55:ad:32:fa:bb:
         72:b8:19:34:84:bd:c0:c0:d0:73:42:d3:66:71:d8:b5:68:53:
         46:3d:84:1e:2f:85:12:b0:74:2a:9f:eb:3b:f9:5d:c9:2d:19:
         41:8b:85:84:ba:42:2e:11:88:70:38:b7:fb:41:06:01:0b:f3:
         a2:43:9c:e6:4c:a7:7c:bd:e3:67:a2:c1:b0:10:fb:e7:d0:91:
         50:4f:fb:8f:83:75:93:48:96:59:6d:96:1f:13:03:50:ac:20:
         55:38:a9:a8:f4:4f:4c:59:a9:9d:9d:e6:d3:77:98:27:5e:75:
         38:a4:47:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----