Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
File:                     a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json)
Hash identifier:          RY6aT59+qJgXWh3tbpaPbGO3G7nnLMqK8U1mxeQeuOw=
Subject key identifier:   3C:7E:64:97:69:2D:C1:B4:C2:05:94:90:F3:EA:4C:A5:F6:84:FD:C9
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       019671F86BF4FC5DE2A7DB089C957EF68F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
Manifest number:          1635
Signing time:             Sat 26 Apr 2025 12:00:27 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:27 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:27 +0000
Files and hashes:         1: 1-5eUrXFS-mBvBFAzMBYr7thfm9g.roa (hash: RJYu6dco2QdzYib1CpLJ1XzU7TkYn7kM5vZDgj+Qfq4=)
                          2: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (hash: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=)
                          3: 5ijCKdd_gdqJb0dOVlV120DJsgg.roa (hash: CsIHiwjanHJ1axbNYzJyLoCTMtEgXxRLKPjijoFJQBM=)
                          4: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (hash: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=)
                          5: 78ZyjDbZyNkN3FayuEyUnAtYdcE.roa (hash: g83O/P/9cvke2YEidLAvWtlDZVwvBFKTQOM7WmikfAk=)
                          6: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (hash: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=)
                          7: B4BNXoWv6BLTWTeZGtI5U2CT80A.roa (hash: RWTYaNXBqgx2XoY5aeQKw+K8rG7+FL9119pzltEHdlo=)
                          8: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (hash: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=)
                          9: Bi-w2vQ6q7Paqeb-8FWxe--YcbU.roa (hash: 9bBFk/y11iYrmgN87LW1/x7IiYYmSf4cmU0eu0rkk44=)
                          10: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (hash: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=)
                          11: DtbO94ZUzuSPpx9yxSPeQtDP6ug.roa (hash: qjfE506/LE++wXn51miEjUwj17Sr2ybeumy+gVqUMd4=)
                          12: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (hash: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=)
                          13: HMpahg815y5dLvRLadSLI9aRsZg.roa (hash: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=)
                          14: IcFuQIouJCuWuHO_yiXsv9D-BsM.roa (hash: 85qJOiM2ad9ExmakxtoyKPLzM0B0skhvz9w/Rt90g4E=)
                          15: KeNSVcNIveDRNN0Eoyb056mMz44.roa (hash: KxKJclC3t7SyZCwcHAS4oMcneZIsejj+HibsNh2NOPM=)
                          16: N994a833bc2uIsA--2ZFV_U7vK0.roa (hash: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=)
                          17: ODFUWKpYaPLOOmJRIlRL0pQTI-w.roa (hash: HpDjnMyeNXyUzKx7D/ZEuNgQ0V3sG7+U1ei4TAQZwOE=)
                          18: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (hash: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=)
                          19: P7jpQYz_dktvYEApQ1HG4zZwUEc.roa (hash: NEeXpDKrquu4iF+gLfu51Lrnztx6B+hCuEcppqklv9o=)
                          20: Qg7YRAm5mzDF88r95rLP78GgSr8.roa (hash: mWW99hX2DywiuWdo27sg/nYSe3OqMGkXa5/1syY9LvI=)
                          21: RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa (hash: VExSYS2yUuqfk1LC6juwXPrWXoN/wolLvgvP0orlLd4=)
                          22: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (hash: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=)
                          23: YYUKAK2F8cmjIDogLRScyFjxA3s.roa (hash: u5QuMtNIXq5Bh4ROu+k9IjhVvTjPtCkjIDCr4jQWPME=)
                          24: YrcaUlVHW2fyltCzVxW5srb_t8s.roa (hash: YyEdnBQrxhTsz3EF/MLdt6wJMANAV3iBNjSWCoo0bHQ=)
                          25: Z9-pCHbukVnLD87CbKvdfqMcjp8.roa (hash: 1VKomI6H8eJxRas/I2A1OFxgdNoUgegMh0Wu5FVC1Ac=)
                          26: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (hash: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=)
                          27: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (hash: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=)
                          28: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (hash: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=)
                          29: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: b1fx3RkE91tl01zfQRnRbWELyNmcub3xJ0VL+iVRJOE=)
                          30: bL4QpEkGhQ7SFvt1p4570f2wAjw.roa (hash: VLEwmnAxRkzaJysdwmNToFGvk98WHCrz2Guz8+uOcTM=)
                          31: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (hash: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=)
                          32: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (hash: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=)
                          33: fcBtCebpi-4K7X5NIslu13uDUsk.roa (hash: NUsnoh1mbJaQ/OI9xchtIzhWSkl4onfdWCVKXM/qj88=)
                          34: iQM89N-8pmdX0FKn2_ZUBdzCshE.roa (hash: NTnxEBzWzfIQmnb4pTpW6WXtbroKOIVyfaC55jLlJKo=)
                          35: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (hash: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=)
                          36: jNqX84RRwICbOmOsyyyD8-SEETQ.roa (hash: BYwZ6wAb4yTmr6zei/Clsy11v9hbMtuZ/ZmhoS0Qe4o=)
                          37: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (hash: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=)
                          38: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (hash: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=)
                          39: tOXM1ArNi_WlT9YM3bcgjCEuYiE.roa (hash: WoZWnVDNekQ1pmAx1W3mwlUwZGDjKwmVnvBatyWe8dU=)
                          40: tlKn03Ch2n039rtBjA5ofqd299w.roa (hash: 9PuwizLdWImEnrfTYLu1uBixtkLMu3z0UocdkAE0/2k=)
                          41: uu8Trj_lWMJjlVPGVumowwLMRzk.roa (hash: Vija8CoIjrBT0gbQz3cogP7Dm+Z4weUwiVE+n23x8Pg=)
                          42: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (hash: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=)
                          43: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (hash: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=)
                          44: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (hash: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=)
                          45: wdcRzGakLe3jtYKRAcXH-gjC00w.roa (hash: duKEk5GHM/r1VrV4PFuMXDPuM6unFH0pIjUwPANnOzU=)
                          46: xFV94mhycLMDkO1NS4j7t6HntvE.roa (hash: A9Prynd/URC1jVssoaAU0w6tIKnFpphaGal/8eTJRlM=)
                          47: zf6pdNUpGphO6Df4cNnwGf8vsno.roa (hash: ECJKSpVkmXvbPK0APqCdCGrsrVqyutvoFLDEiGmDUxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:6b:f4:fc:5d:e2:a7:db:08:9c:95:7e:f6:8f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Apr 26 12:00:27 2025 GMT
            Not After : Apr 27 12:00:27 2025 GMT
        Subject: CN=3c7e6497692dc1b4c2059490f3ea4ca5f684fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:d7:4a:46:8e:a9:ed:59:23:4b:db:b2:e4:
                    70:f2:e0:ce:33:f8:a5:1f:1b:ab:f1:86:06:70:2e:
                    05:c8:84:fd:cd:c0:1d:9a:36:ef:76:62:a9:db:dd:
                    a0:7e:e1:01:aa:82:54:80:d6:6d:b9:64:94:c4:40:
                    29:50:08:26:1b:f7:96:19:1f:1d:ec:61:ff:99:6c:
                    90:25:61:db:c7:43:84:8a:b5:15:14:49:5c:b4:ba:
                    d3:30:7c:a6:75:6d:4f:c7:73:59:03:05:27:fa:9f:
                    7d:c0:c5:e0:41:1b:92:f3:e7:fb:74:20:5b:d0:7e:
                    03:b0:28:9e:89:26:b1:e2:4e:41:d9:a9:b0:80:a1:
                    4e:14:9f:c7:11:38:28:f1:3d:95:c3:8b:4f:42:5a:
                    b9:5c:d2:8d:9d:c5:30:39:17:0c:e4:51:90:5a:17:
                    1d:32:f8:1e:21:5c:25:48:b5:c7:55:0e:e3:62:bb:
                    96:d3:31:8c:e6:15:9c:6f:27:2f:de:0d:1c:2b:ab:
                    24:83:e4:d8:69:84:e7:65:89:2d:be:c3:60:9f:e3:
                    a8:a6:0e:db:f7:ee:18:df:de:eb:70:21:ef:f7:6b:
                    2d:d3:ac:05:8f:f6:f9:a0:52:80:1d:75:7c:22:90:
                    c3:64:0c:f1:c7:0c:4b:c8:19:23:e8:05:51:1c:59:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:64:97:69:2D:C1:B4:C2:05:94:90:F3:EA:4C:A5:F6:84:FD:C9
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:e6:1e:79:80:87:39:1f:4c:28:81:5e:c2:c7:2b:ce:b9:
         6e:5d:d4:49:74:ac:dc:88:84:b7:ff:ac:3c:df:80:0f:6e:7a:
         47:0e:9d:e8:ff:53:bf:3e:c6:79:89:c7:e4:5d:35:33:49:ed:
         3d:b1:ec:2a:52:58:ef:bb:e3:22:df:68:49:76:e9:21:fc:ac:
         91:d0:8e:d3:e9:a6:06:52:00:34:09:d7:a4:6d:de:45:f5:8f:
         d0:2c:87:b9:46:75:5e:a7:be:70:92:56:86:bb:c3:a3:2a:10:
         94:e8:8a:f1:42:77:a1:8a:54:6e:5a:6c:68:35:2a:0d:1e:cc:
         1d:23:da:27:25:e4:a0:5a:36:b5:59:1d:41:eb:f3:5f:4b:c6:
         4e:2c:68:79:7a:3e:0e:89:f3:0f:53:a6:b9:ec:22:2d:0b:89:
         0a:f2:31:35:05:4b:40:8b:2f:1f:be:07:78:1a:50:67:8f:42:
         3d:5c:11:ee:93:c7:36:da:cd:60:0f:f0:99:b2:49:42:e1:ac:
         79:0a:4e:02:b5:42:52:b6:2d:dd:24:e5:10:c4:3d:80:b9:43:
         14:20:de:d3:3f:3e:57:d8:24:c6:1f:bd:2a:eb:df:18:cb:c0:
         39:f4:ea:0b:74:9e:61:0c:21:ee:25:47:55:29:b6:56:d1:86:
         fa:b9:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----