Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
File:                     F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft (raw, json)
Hash identifier:          cpBl7VgUc2DIYf3TsBrm/RszErZTgUFp6+G0kpuxaZg=
Subject key identifier:   08:C1:91:C2:7A:D8:72:05:6D:E5:D7:B4:8C:4A:40:E4:3F:DE:4F:78
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       0196722F45DCBC9363D96C9050E3447970A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
Manifest number:          1538
Signing time:             Sat 26 Apr 2025 13:00:22 +0000
Manifest this update:     Sat 26 Apr 2025 13:00:22 +0000
Manifest next update:     Sun 27 Apr 2025 13:00:22 +0000
Files and hashes:         1: 15WXUl6AdHYJKCI04ETxyKrK4XI.roa (hash: feuAYUw4uTrmdzmHj+v5tbEK3tbUZlUayLhfwNwKARg=)
                          2: 23KMPeQbWn3Hezr2U3fF6vSsekI.roa (hash: deu59RLm1wKgBqajx/uB4Ha1F2dek3FuvSZTbJeY9N8=)
                          3: 39i_ssSfnMGTtg4YPYKzH5iWpBg.roa (hash: Wosjv0kh6GOd489g8tLpbbof7314STC/gj/KPvO7YR8=)
                          4: 6n0MYQi1ilR49kKQwdooOvoE7uU.roa (hash: 7U1bo6mM8BZJtYzW5h4tSQRNvrtTF4A214R06/x01GA=)
                          5: 7YB1xyOkXG3V2tFQOrFtzwWj-W4.roa (hash: MTxbM2wbHktDLPQ2XWg8zIxRyoHI6s+Z9jbKHh76FIs=)
                          6: 9G6E6O6wpgLZ9pKYTooy3mcegTM.roa (hash: FIlkJBPZahISiqf5HneR28EG8wxuX1KuoSMqeIkSPBA=)
                          7: 9O8IcndAWkwvcHSAJVLczJO27EI.roa (hash: +Qdbk8K/SlJ6hCrhnzJAsvlRShB3Z4yYs0mEKhPyCAY=)
                          8: 9aZ95QifJX_GhW9fNSqcGWs20Zk.roa (hash: MT6c+D8VSBmDoLD4lbwNYkYQue4fgMWxarfhzoqJSDk=)
                          9: F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl (hash: Tm8b1CoyoEFfMdkZO4QJ4tJx8FBf7YhuoI0H524DMZo=)
                          10: FMVEVEUKu1aBzY2T2n3whmnUrdw.roa (hash: vyUwk4GspbWM/07KbM0DZqkw/k+Q8zX/u4qYW5gv0f4=)
                          11: GtUJ2ssMAEwmFAXvMELN9Tsyduk.roa (hash: aTGTucVW933EQPKB8+bTzbhp6tE8gtwIMPTu3y4B9og=)
                          12: H7ZLyfm_R26mv-3BirQg98EN5oA.roa (hash: W9q4lMPN0OsuMky1RgDCH79wbEwHHlpUBYXjOIT+QF8=)
                          13: IjscXnepDG19vTTnlZ32WsyeN7g.roa (hash: vyk/ErF27dJI4TXiGfWR+wFLqNI0HVDT/SMI4+P6DOo=)
                          14: KQBuRgw8Y0KbmmlDf0vAM2YIaPA.roa (hash: QXf4EjAiEGLAr0x3Q6vwc7700G3/acnAdSocqpfwwj8=)
                          15: Kj3D8YAPi4rA9XUWdSOamKbFV18.roa (hash: BVc6EwErDffWh7dsaPUmwaCXoLvzxASeOV2hlt2Ehnc=)
                          16: MwaXZahBhKotnPeINlfb6nibK6k.roa (hash: xHrYQZBnykU6l0v2pScAckYcXCZo4bMsSLr9kmKKY+o=)
                          17: NOwFhWm932ceAr06p54B7tMm6G4.roa (hash: DlOrI7zqCt0bpzlzuJEYueFDlrq04KRyBU/5L0n9UsU=)
                          18: NfzO8bH3NibNfN58e3A_8qYMtVk.roa (hash: iIrZttFf5AZYY+2EMyN0Abx46ICaDa9vvFFaHPcIzvE=)
                          19: OJ98wFKScdj7NdhQ_owK4-QRidY.roa (hash: Xkbwckt0vgobcM+MYxSSHI4J0FZ49Vi/lW2BWrY5pD0=)
                          20: QuYfyHECL9u7YIDEFE906TX8dxg.roa (hash: 71f8Ca0uNtkIK5NyRwBepQ8l4F9xqs6tydM/OrOSxic=)
                          21: RVoVqvgGQLrhMMNAyBVpHDQC8nk.roa (hash: qjWfWeH3qk4tb0vDv/NcZBSbzzWXHCwJLXiy1k9n1+c=)
                          22: RzMFlxkjd3ZMyy1IWXN69UbPl8Q.roa (hash: 1apNRsmUbEEXrFhDoSrll6TEn0eL+zg3qgao8Q3U0kk=)
                          23: UfuWu8BIsS3Dk9jVu6yptXvDfWU.roa (hash: Cc/N6o5hspmrJFrzzEiw9J/C3xiDn6wAcoe57jwY/+8=)
                          24: V4CbGWiY48UAQUA_FKJdmKPe6aQ.roa (hash: CVn1M5zFeR98952DRwS89jPVdmWOanyakfyhjETu8iU=)
                          25: XWKyB1jed2GYVVJ2l_OfF9Ri3ss.roa (hash: x3qEhfwJs8K275j+7andcr5v6Udu5XhZGPShxX+tXv4=)
                          26: Yz9uALtxmsYX-pNDjaoDIBHGGJs.roa (hash: 5LT9AjhsYCw3bsWkJ4ZtinNKQHZ+QgGLKQbypJteb00=)
                          27: _9XCfWZ4dnLWFdUL8r6pzx7fxuk.roa (hash: RsVqk6Tgp9Jx74ByznH/3eULkWs9GEe73L0uA2kVfL0=)
                          28: bNe473CuzLFbw6FtDTk6uC1aKnc.roa (hash: WyN5wx8jB+23zEbDgP2rT7x1OsrZamVJ5yqkP6xnWls=)
                          29: bxVhRFkbdqV_8fMc5O3mpIVGFd4.roa (hash: iw7kwcqDdxWfjShSC4HtRUsx5Xc1fheMuJKPVn+mohU=)
                          30: c3I1Xi3M4MZ1Xl6b6ONKy34oQ5A.roa (hash: ze5HveqTg5jem/x2SmuCNn8oWb6WnGSQ8NZu4Y6ugxs=)
                          31: hiJOcFhCIaYVF0inXb0l1CLxcGQ.roa (hash: 5nUJ64t28lMCeij3h6K4dFq44+k/EywK+QZ4CiuYCT0=)
                          32: iqWrVdpLadD0ZhS_LKD_HbFqb7s.roa (hash: Tdz1rYCCKR8boOv5XZ6tOhQL6CYygZ0GN04QKLcP9mw=)
                          33: jBvm8nUfbpb7BfrHRo0OOHuGMWU.roa (hash: U/SoJD450psv5yiGY8liudDbGaNYsigdE8gEZegGneM=)
                          34: j_uLZa9Jojx_WFQ0saNqPvjxzpc.roa (hash: L5YX9QySYG7Gjr8Zd05ICO6wuuKPHnJWJB3CVedFV/0=)
                          35: juJXvc1Tq8wnuTTLmH47_Gp7M9E.roa (hash: 0VOZcEuYkeVCjKxlbivQ6RiJ545nUW8o/QChCsfMBNQ=)
                          36: k6Q40_A8oWnnWIvqhsNRLJGg64Y.roa (hash: WvRcCWBNnKN7iM2oUwqsloLV9yVzdse8LKHpGplUIEQ=)
                          37: kjZNOidGRKaYdxShfAMV7q87UPA.roa (hash: 0cnfySN2xjQ3MEgAffJbFZmtZLELUMAWcuobV3FR0kE=)
                          38: m3UhPvA-SpLG7TShQCiDyPQca9Q.roa (hash: vm1VA5ubKFPB0EH+5D0HkIyAqW2tfvF0amdeGl/jtcY=)
                          39: mPIEgyssPqs6bJGBVg1KyAlnTF8.roa (hash: vLIsHxAjYSgIm3zpvV05ojKSpb3Py1iQi3Z3bfaw1DY=)
                          40: oRj26DsRYCBlJNTpwqBL0inuLMA.roa (hash: Pxxl3cDYQEqOHh80APTIV2utRwsPPG0ZLguKvigaez4=)
                          41: p0wUclpPuevv4ypNQEUNWwoIJGM.roa (hash: N2jnTGwPGWAdRwXOQto72hnYK+KAB3JrINhTKOwTWF8=)
                          42: sXNHX7qnLT-mUjihTKCQEywD-u4.roa (hash: DSS/UBuJl2/CO21aa6eG2gYJmZ6QLTJVAyLyBwlzdcI=)
                          43: vUWHtEACbvjI0e-pActKL24z_hg.roa (hash: OHBnh5ay+SQLxHmmfsapl2j8OIud+GGkaDXnzGmrzcA=)
                          44: yeQLFrJs4WdLFKdKgzBIpjutlHI.roa (hash: Ugxn+TT5cBp3rhGWB31gVEyOkseuKcrjFWmkY2aT8ak=)
                          45: ziFeWtyl-a2xVwNuAduBHpaGzaY.roa (hash: WaR/w6ceA+XLR6uvK92LvgWyOC5O5lrjdns/Om4/A/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:2f:45:dc:bc:93:63:d9:6c:90:50:e3:44:79:70:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Apr 26 13:00:22 2025 GMT
            Not After : Apr 27 13:00:22 2025 GMT
        Subject: CN=08c191c27ad872056de5d7b48c4a40e43fde4f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:10:7c:91:01:b7:b6:47:cf:6d:a3:92:42:
                    82:34:c1:80:f8:11:46:e7:93:17:7c:7b:ff:83:b3:
                    3d:01:d5:ec:d6:38:fd:d4:72:4a:0a:e3:42:b8:b5:
                    8b:5f:69:47:7e:43:e7:73:3b:a4:2f:16:33:a2:39:
                    c2:2c:95:f9:77:4c:63:3e:e2:56:22:0d:d2:4c:5b:
                    ac:f2:d6:06:b3:37:3c:e7:91:1b:9d:b7:f7:d4:3c:
                    d1:b2:e5:a3:19:d1:4e:68:79:78:6d:2e:28:7a:07:
                    9e:96:01:0a:86:cf:fd:5b:85:c9:6f:02:99:ed:ff:
                    30:df:d5:fd:8b:41:ce:ce:32:ba:37:44:d8:cf:2b:
                    fd:e0:f4:de:36:e4:25:cb:14:68:d8:95:07:2e:a6:
                    a1:f0:39:52:a3:71:ca:08:3c:cf:d3:ee:6c:56:2d:
                    e8:b9:a6:38:09:c9:11:0e:83:3a:67:f6:e2:65:21:
                    40:d6:b1:d0:29:5a:f2:35:fc:13:a0:3c:18:ef:71:
                    82:df:89:d4:54:43:11:9f:17:3f:a8:96:fa:e3:6b:
                    6f:99:da:71:fe:c1:a1:bd:6c:1f:b5:de:b8:56:ec:
                    8b:f9:da:c5:b6:c8:79:d3:fb:1c:ba:25:9e:cb:ce:
                    1d:c6:e2:d5:aa:fc:f6:f6:1c:a2:46:51:fa:94:05:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:91:C2:7A:D8:72:05:6D:E5:D7:B4:8C:4A:40:E4:3F:DE:4F:78
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:56:33:b4:26:d6:bb:ea:ff:b6:5c:33:79:8c:76:94:10:
         ef:98:8a:90:d8:d7:bb:e1:89:a7:1a:8c:b5:3b:e4:25:1f:81:
         fb:ba:7f:7b:67:6f:2a:8c:88:d3:04:8f:34:61:e7:3e:62:99:
         7c:a2:7d:ba:96:70:94:bc:8c:95:28:bf:ef:ce:1d:b9:ac:a5:
         55:f2:a2:49:e6:21:78:7b:3c:37:60:9b:43:a9:ce:8d:45:cf:
         ea:2a:3c:d6:c8:a6:c8:3a:f0:a0:cf:cd:0f:c5:c5:5c:bc:8e:
         9f:e9:db:b2:54:a0:13:b6:fe:5d:4d:c9:24:15:c6:6e:04:1d:
         28:90:89:0f:9f:cb:b4:df:26:90:0e:56:76:29:77:52:3a:6b:
         e5:73:94:21:08:95:8e:cf:00:0e:af:d6:dc:1d:77:90:c8:cf:
         34:b4:e5:38:33:45:58:d1:96:fe:0e:fa:5b:ec:18:92:7b:bc:
         7e:12:ec:92:98:6b:fe:aa:78:c3:ed:45:39:71:34:d7:bc:28:
         71:0e:fc:61:a6:27:f2:c1:49:3e:7e:94:e3:1f:76:1f:b8:f3:
         0f:7b:3a:a6:4a:41:5a:ed:01:6b:2f:76:9b:83:56:81:a1:6f:
         fb:a2:fa:55:ef:cc:cd:49:d6:eb:73:88:bb:fa:49:62:b8:f6:
         cb:53:57:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyL0XcvJNj2WyQUONEeXChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwNDI2MTMwMDIyWhcNMjUwNDI3MTMwMDIyWjAzMTEwLwYDVQQD
EygwOGMxOTFjMjdhZDg3MjA1NmRlNWQ3YjQ4YzRhNDBlNDNmZGU0Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZsQfJEBt7ZHz22jkkKCNMGA+BFG
55MXfHv/g7M9AdXs1jj91HJKCuNCuLWLX2lHfkPnczukLxYzojnCLJX5d0xjPuJW
Ig3STFus8tYGszc855Ebnbf31DzRsuWjGdFOaHl4bS4oegeelgEKhs/9W4XJbwKZ
7f8w39X9i0HOzjK6N0TYzyv94PTeNuQlyxRo2JUHLqah8DlSo3HKCDzP0+5sVi3o
uaY4CckRDoM6Z/biZSFA1rHQKVryNfwToDwY73GC34nUVEMRnxc/qJb642tvmdpx
/sGhvWwftd64VuyL+drFtsh50/scuiWey84dxuLVqvz29hyiRlH6lAUA0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjBkcJ62HIFbeXXtIxKQOQ/3k94MB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/FWM7Qm
1rvq/7ZcM3mMdpQQ75iKkNjXu+GJpxqMtTvkJR+B+7p/e2dvKoyI0wSPNGHnPmKZ
fKJ9upZwlLyMlSi/784duaylVfKiSeYheHs8N2CbQ6nOjUXP6io81simyDrwoM/N
D8XFXLyOn+nbslSgE7b+XU3JJBXGbgQdKJCJD5/LtN8mkA5Wdil3Ujpr5XOUIQiV
js8ADq/W3B13kMjPNLTlODNFWNGW/g76W+wYknu8fhLskphr/qp4w+1FOXE017wo
cQ78YaYn8sFJPn6U4x92H7jzD3s6pkpBWu0Bay92m4NWgaFv+6L6Ve/MzUnW63OI
u/pJYrj2y1NXcA==
-----END CERTIFICATE-----