Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          xiLj9XfsaZOKIOrc5mkU54ij96XNxKt9WKDqZBojClQ=
Subject key identifier:   B4:EF:67:D1:C3:FC:73:08:39:2E:74:D0:02:6E:3C:74:A5:2A:CC:06
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       01976A05CAAA2456570B11092022E08D33B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          0735
Signing time:             Fri 13 Jun 2025 16:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:53 +0000
Files and hashes:         1: 2DtFiNnZxsSvwyUABXFDH9xGeRs.roa (hash: G39uHphZZEEAkLxmvTSGrIOoh5KobplqqdurCmrnTaM=)
                          2: 4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa (hash: qDrq2XWyugrrzMadNyZODi+tYW3DV+sPLZzT49k0JrM=)
                          3: 637ySHaa7VPjeqlKlcPrhZ2yY2I.roa (hash: 5OCAk2cIQJcX+e/E05dY0NN7PiUYi4cdJimVcm3YI9A=)
                          4: 8_fakKxo1IWGgqQO4LSuBNgbX1A.roa (hash: mKTIf5Vhn/rPPi27Si4S/aAUjmxjU05O8m3X6BZqHi4=)
                          5: AaypEsEdVYUGBO9pIAcSnVHxcng.roa (hash: xIrmQSj5iiQlA0CWV5z6X22s4gAVeMqFSjtUBU0ngGI=)
                          6: Ct96xN1xgvlrzbLvxfSx_-BAtNk.roa (hash: lrSKsEpugh4eEEm3L2JaQTWeMJQdiHgI5ot+GMevkbc=)
                          7: F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa (hash: ieI0ZKZHt/S3fOpvysP/zC/yEti8uFPoDMgtPhCFeKw=)
                          8: FN6eGuuI_wxSJwtVgTgHksuIU2k.roa (hash: lcwy4N23aWEQwNKLPfOGbzSMxuSa2S19+LPrrtBD9kQ=)
                          9: HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa (hash: YrKgLZLOw/EtLShX/OiK2tyZzChYVExfgbBKDYbGseU=)
                          10: IzO07cDfXtxek4M2I1Iy4FbjBTM.roa (hash: SsoChbSg4dMYiRhLHZ+4qGEfaxOMUQB123/z9XrSJO4=)
                          11: JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa (hash: /te3H+VUTBpgy9VKLErG5yc6ITk4ZNAsCt35Sq14AnE=)
                          12: JhghdJ7VjztXKvkYZLina0WyjwI.roa (hash: 2GwdwgzZjwQGzAWsiR/XnPvpsFd9g9HIMvHZzUcynKY=)
                          13: JtAsjQszicgAK_Bz09MaZjgSHRs.roa (hash: 3F49sCHbl/xh5CG+U8kddXehfQts9G+pawy1bD9ilGQ=)
                          14: M9N3MaRnHMWCYC8Hk9zFSlj4D6Q.roa (hash: e786oWDXV8d4rdmxgjxOCoMsmqrUQ795MjKuKCqYgm4=)
                          15: MTcsB7pau_sj7fShnl0hskf_g1I.roa (hash: ZEyHwS4yMVYuUul4z8MpSjD2WFJ72elktQ3XV6XEcfg=)
                          16: Mai3hO1570LXs6RLr6YGrktOd4s.roa (hash: 3YqQQd9kN82zwoLCu2RB4M6k5ODGSKxhrf7vMbNdzEk=)
                          17: NzVn53qodIDSWt0vOG1oqhpGi_E.roa (hash: Lyhkl4afO2r+5/N5rOlPypCReelqQa6ct1JAxr+7elc=)
                          18: OfgHImIcPU1qqfBsI9N5ZXsiPNE.roa (hash: fgJeoJ7zWqkp9sr1PNmklE2TKICiDxPgDxk46jWpq8I=)
                          19: PrwKv-LxClxDWPIzpmtd0SUVKOA.roa (hash: PB5nadJ7Zlp7pGWpzoHOMgtzMAgNvx2fppNEsfjJQYY=)
                          20: SLLUMAJKxJq045JCLVs9H5nC9nw.roa (hash: /PN9Q7dD2zRwVKc/oYOK+/gsSuS6rWI59nDYoZCCVJI=)
                          21: UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa (hash: WJgBs9fu0EqbOTPPX09p13+s2t3z4+KFfuC6Uu5dHzg=)
                          22: UpxvyaO1w4UW5ThzZNiK11i8Iec.roa (hash: ts6x4xf+obI23cPBJb6wwaavJqR740WuylL0f/ZOTmA=)
                          23: Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa (hash: tk3tIBSeQBab5qYJNuQXuIHm0Fnq+pfGnO25obHRvCc=)
                          24: VZFGS-Fn4Kqjnwh23jee48-bApo.roa (hash: KDb7CTkFWG3SWfMMbnKx/BeDHCaf7g0U9ZYnth5W3TE=)
                          25: XhQy70S_UMvUlQqMS3Ri8w9Lzwg.roa (hash: pfzMfmapyb/YulZYQtRxTnmcCybmAdc60nKGcIcDJZA=)
                          26: ZGdAuUombv4vkBsPwiqPFlqYz8k.roa (hash: Vg0hs2FALGJK84oUteDgK6tbIxpNAMJc90q23NUJBvM=)
                          27: _BPKDl06S5B-WQij73gHPR1pC88.roa (hash: TpQi5kxvdYE7MlhfQqrq2bStKZhLcIZbpWTNfLLNzmc=)
                          28: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: xvWKoO4GjH+uD5g0UVHy7wTZRDArEe/EJtIQN0c4cvg=)
                          29: a_YSXRy0GEriEr_Yop65IVdtSPw.roa (hash: wLE2AzL6ZkOvLLE19J24Zeu03IrBHRQfEcPvlWi0nkI=)
                          30: gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa (hash: CbsxGhJhoE8yvGtURZm7/5jfNWzpy2kZAlBuSWC42H0=)
                          31: h738lN5c3TyKcj8anxVMoHPkxGE.roa (hash: pjqnFNlGOHySNRAPtEKFXim6O4weYwyodx7laOQF5Og=)
                          32: jMa6gCTiwT7u6_nY7rYAamQhAvI.roa (hash: /3kWQVn9yQP77uBrM8AVQhX9Si46/u2UopM8CejUies=)
                          33: kCw9KW7g2WHXSaE7taxeZTizKC4.roa (hash: 0phDtsrapiUcNDcI7I3hyFhO2oK9iXRAiRoI4U9hIt8=)
                          34: kc_pAgwEMNSsLD08APOQDGvFE2M.roa (hash: r5V1K4scPTshGUo0mmQh0b/PvpghTBmlsV1I1dOUu6Q=)
                          35: lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa (hash: OaGMS8N36o43A9RI4EoDlUQq50SWqO5qzGHhpWj7ufo=)
                          36: lPdDfmlD9RAxCyidA_ifam-2Uvk.roa (hash: sWKYz6K+L1Be8/sNsnQfCAv7/Dkkri5HUxz/km5Fw+o=)
                          37: lakNGIHUgcn6UKwdVo4OxV9sHyU.roa (hash: aFoG4y5uaHj/rfiT0o09JJpVEi7UfU1x/oN+QiewPRY=)
                          38: mR_wkM-dl3q5Zqavc8_wUxLBsck.roa (hash: mjWZ9wcnOPQZpY6H28O3iednkx7NStQEjrpDKJuynX0=)
                          39: nububswUFWNKZFUv1-WT-nusbw8.roa (hash: vJnbRRzz2QWrTYEfK7eqJvsQka1cyruMLjOKXSilJ8Q=)
                          40: p9UuQE7IxHiGiw_Tp8PySfk0XpA.roa (hash: Xqy9Em6AjRJ+I/gqlqDmb5niUls7eNf0tdPu3/cAQb8=)
                          41: rZwZbD_BSnHvyM26tCS0n-6jr8s.roa (hash: xlibK6LzsFxTtBrkroU3Mk7lzRkyAhSJ743saez43/A=)
                          42: sgXmikHZdaCmSd1V08WpxfXo-T8.roa (hash: KMsYSteYB1GHkuplXeSxd9o4LN0sSfty5BOhOvuqq1Q=)
                          43: smgQhR1WkDuLYZtnSt3KxLnFFME.roa (hash: Z1MOxUq6sxBXZipioFKdR/NpXqOoPsix9279r6reGW4=)
                          44: uHnUp8alk4kl7R1__u3juRedX1A.roa (hash: 2Hv2oFFIwo0j/kizpuCBjWy1nT4b1wl0hiQz103C3L0=)
                          45: wUKqgXn8I6QyKCOZp1fOP55CVHY.roa (hash: ZYh1IRJkBN+fN6othjda/ZeToNDoNn/k0haPoeVnCVQ=)
                          46: x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa (hash: b6Xbxc4B5PcQR/6u1pjeaDaXYfTGp9+tHTDdJzfSjXw=)
                          47: xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa (hash: 8AY4z5mbYOVzgbpSHBMZBweydiWSklrRLaeWro7dQDw=)
                          48: y_JsphXDGhtYIly7VDuihnNcQ5U.roa (hash: e2p81FmOY2QZWDBjWNf+vYK0z1VRG2fKaiv+Lz4SL1c=)
                          49: yqIKBNfi5omJAzcXnoCsrE6snzo.roa (hash: Opdk7PUfzB/ZuCfmlT3r82TvrvdyJuMBr+txoxstkgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:ca:aa:24:56:57:0b:11:09:20:22:e0:8d:33:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Jun 13 16:00:53 2025 GMT
            Not After : Jun 14 16:00:53 2025 GMT
        Subject: CN=b4ef67d1c3fc7308392e74d0026e3c74a52acc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:36:60:81:76:b8:96:b8:24:ff:54:5d:46:
                    b0:24:f2:72:82:7a:6c:84:bd:fa:b8:59:ef:c0:21:
                    e5:f4:0b:4d:c7:cd:ba:23:20:46:45:a2:e0:64:a8:
                    44:d1:6d:0c:ea:cd:59:dd:ad:b2:00:3c:16:a5:8a:
                    b9:c5:04:08:cb:2d:c2:dc:9f:2f:49:7a:3d:3a:a1:
                    8b:d4:30:38:71:9f:0c:b2:6e:c5:87:44:db:bc:b0:
                    e1:57:b1:9a:de:fc:2f:29:64:90:6a:7d:e9:20:f5:
                    ca:fb:55:ae:a5:b9:54:4b:a6:54:6d:0f:45:85:2f:
                    87:77:a4:5e:00:89:7a:b9:1b:d8:59:54:17:b6:10:
                    e7:e9:01:ed:b5:d4:0d:47:32:43:33:96:57:b7:76:
                    75:7b:2a:c2:bd:a4:16:4b:6b:61:7a:38:4e:48:b7:
                    03:c7:cd:2e:64:43:c5:2a:c3:94:3c:a1:e8:d4:fb:
                    fb:62:1c:5b:27:04:44:dc:ab:fe:95:73:84:9c:13:
                    fb:c8:9f:33:af:10:01:99:04:3a:64:ac:01:09:7b:
                    0b:57:a8:9c:51:ff:e2:3b:5c:0a:17:5a:51:9a:a3:
                    56:1e:d2:43:b7:94:25:86:2e:47:01:06:b6:e7:2a:
                    14:27:d4:fc:66:c1:26:bb:37:6a:d6:15:64:24:06:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EF:67:D1:C3:FC:73:08:39:2E:74:D0:02:6E:3C:74:A5:2A:CC:06
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:70:9e:c3:ae:95:6f:be:74:4a:57:c7:11:11:bc:f4:c8:
         cd:df:6c:f1:22:ae:6f:2f:a6:6b:ec:6f:27:e4:30:28:cb:14:
         02:77:be:87:07:46:26:32:b0:f5:7b:e2:e4:b8:fb:27:3c:86:
         03:6c:fb:2f:0f:d3:17:dd:8b:77:03:c6:ac:a3:ab:49:77:16:
         7c:d6:88:17:d8:ba:dd:57:c1:54:db:a6:82:22:b2:29:87:4e:
         f2:b8:3b:95:db:72:0d:b1:92:c9:a9:7b:8d:48:c1:14:b3:a2:
         73:8b:0c:0d:32:be:9d:41:bf:c1:8b:4a:3b:26:e2:58:9e:d3:
         b1:e2:e8:9b:96:03:4f:35:f4:e6:a1:b6:c8:52:e5:7c:9c:69:
         28:30:08:41:23:a6:6c:01:d7:36:b0:c6:7d:c3:a5:f2:b1:56:
         51:de:5b:b7:ee:49:94:3a:b9:43:d9:1d:cd:57:50:4e:57:d1:
         a5:40:43:81:1b:8f:02:75:b1:01:e4:21:74:df:da:c0:4f:fe:
         5d:15:98:3b:33:f2:01:e0:c8:c4:4a:68:5f:0b:b9:6f:62:11:
         f0:21:20:6a:7d:0c:b4:4c:a9:db:7c:f7:7c:75:9b:49:77:3b:
         8c:bf:e1:2e:a1:30:d0:71:5e:9b:ba:3e:60:e2:6e:8b:bb:c7:
         58:db:a8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBcqqJFZXCxEJICLgjTOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwNjEzMTYwMDUzWhcNMjUwNjE0MTYwMDUzWjAzMTEwLwYDVQQD
EyhiNGVmNjdkMWMzZmM3MzA4MzkyZTc0ZDAwMjZlM2M3NGE1MmFjYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtg2YIF2uJa4JP9UXUawJPJygnps
hL36uFnvwCHl9AtNx826IyBGRaLgZKhE0W0M6s1Z3a2yADwWpYq5xQQIyy3C3J8v
SXo9OqGL1DA4cZ8Msm7Fh0TbvLDhV7Ga3vwvKWSQan3pIPXK+1WupblUS6ZUbQ9F
hS+Hd6ReAIl6uRvYWVQXthDn6QHttdQNRzJDM5ZXt3Z1eyrCvaQWS2thejhOSLcD
x80uZEPFKsOUPKHo1Pv7YhxbJwRE3Kv+lXOEnBP7yJ8zrxABmQQ6ZKwBCXsLV6ic
Uf/iO1wKF1pRmqNWHtJDt5Qlhi5HAQa25yoUJ9T8ZsEmuzdq1hVkJAbjaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTvZ9HD/HMIOS500AJuPHSlKswGMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1pwnsOu
lW++dEpXxxERvPTIzd9s8SKuby+ma+xvJ+QwKMsUAne+hwdGJjKw9Xvi5Lj7JzyG
A2z7Lw/TF92LdwPGrKOrSXcWfNaIF9i63VfBVNumgiKyKYdO8rg7ldtyDbGSyal7
jUjBFLOic4sMDTK+nUG/wYtKOybiWJ7TseLom5YDTzX05qG2yFLlfJxpKDAIQSOm
bAHXNrDGfcOl8rFWUd5bt+5JlDq5Q9kdzVdQTlfRpUBDgRuPAnWxAeQhdN/awE/+
XRWYOzPyAeDIxEpoXwu5b2IR8CEgan0MtEyp23z3fHWbSXc7jL/hLqEw0HFem7o+
YOJui7vHWNuoSA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:01 2025 by rpki-client