Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
File:                     a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json)
Hash identifier:          60/x/b3qJI3nUZ6bMER5/Tcn+9jgTCv+1N07MM7vV60=
Subject key identifier:   EB:9F:D5:76:18:F7:F7:66:EE:F1:72:98:26:EB:75:AF:86:F9:B0:24
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       0194BB971B6C6EB52536924893F57CF010C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
Manifest number:          1530
Signing time:             Fri 31 Jan 2025 09:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:28 +0000
Files and hashes:         1: 1-5eUrXFS-mBvBFAzMBYr7thfm9g.roa (hash: RJYu6dco2QdzYib1CpLJ1XzU7TkYn7kM5vZDgj+Qfq4=)
                          2: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (hash: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=)
                          3: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (hash: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=)
                          4: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (hash: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=)
                          5: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (hash: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=)
                          6: Bi-w2vQ6q7Paqeb-8FWxe--YcbU.roa (hash: 9bBFk/y11iYrmgN87LW1/x7IiYYmSf4cmU0eu0rkk44=)
                          7: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (hash: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=)
                          8: FeIgWL-JXcVZyg7NHclWFNhHu8A.roa (hash: n3pVgVErVQOKwlqQYoAbx8G8XzmGGNiJwZrt+IAfUQg=)
                          9: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (hash: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=)
                          10: HMpahg815y5dLvRLadSLI9aRsZg.roa (hash: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=)
                          11: IcFuQIouJCuWuHO_yiXsv9D-BsM.roa (hash: 85qJOiM2ad9ExmakxtoyKPLzM0B0skhvz9w/Rt90g4E=)
                          12: KeNSVcNIveDRNN0Eoyb056mMz44.roa (hash: KxKJclC3t7SyZCwcHAS4oMcneZIsejj+HibsNh2NOPM=)
                          13: MVUIjvldFGZm-gGmebvsOKXNzEc.roa (hash: +4/rRyIr4ccUmy6os+rMixRxTprdWRukvF6pnLzDSr0=)
                          14: N994a833bc2uIsA--2ZFV_U7vK0.roa (hash: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=)
                          15: ODFUWKpYaPLOOmJRIlRL0pQTI-w.roa (hash: HpDjnMyeNXyUzKx7D/ZEuNgQ0V3sG7+U1ei4TAQZwOE=)
                          16: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (hash: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=)
                          17: P7jpQYz_dktvYEApQ1HG4zZwUEc.roa (hash: NEeXpDKrquu4iF+gLfu51Lrnztx6B+hCuEcppqklv9o=)
                          18: RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa (hash: VExSYS2yUuqfk1LC6juwXPrWXoN/wolLvgvP0orlLd4=)
                          19: RnXt_3My3TQO32OmichNNAGWzvw.roa (hash: whxsxxP8jHSG11MD487IPHlTZbPtzlH5UrdBH22KMYs=)
                          20: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (hash: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=)
                          21: YYUKAK2F8cmjIDogLRScyFjxA3s.roa (hash: u5QuMtNIXq5Bh4ROu+k9IjhVvTjPtCkjIDCr4jQWPME=)
                          22: YrcaUlVHW2fyltCzVxW5srb_t8s.roa (hash: YyEdnBQrxhTsz3EF/MLdt6wJMANAV3iBNjSWCoo0bHQ=)
                          23: Z9-pCHbukVnLD87CbKvdfqMcjp8.roa (hash: 1VKomI6H8eJxRas/I2A1OFxgdNoUgegMh0Wu5FVC1Ac=)
                          24: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (hash: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=)
                          25: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (hash: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=)
                          26: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (hash: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=)
                          27: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: Oh2jHt5HDKH68ON1yhQNUM59GeBHdHHOS5JIxnSJQPo=)
                          28: bL4QpEkGhQ7SFvt1p4570f2wAjw.roa (hash: VLEwmnAxRkzaJysdwmNToFGvk98WHCrz2Guz8+uOcTM=)
                          29: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (hash: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=)
                          30: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (hash: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=)
                          31: fN12OcyCjHI3ANnN9syTUVCDBv4.roa (hash: Wo5l8OzC0nnRSA7NyDC2hCQ8QmfyhXiJRY26/wVQink=)
                          32: fcBtCebpi-4K7X5NIslu13uDUsk.roa (hash: NUsnoh1mbJaQ/OI9xchtIzhWSkl4onfdWCVKXM/qj88=)
                          33: gUorOpwmdoiJo845aKe1olZeyls.roa (hash: knHlcQfEGHQRnTnfaJ1SueZ0jioRQ/eSQRG3PpP+xy4=)
                          34: gvO77oU8ZPgJ1zym3lnxMWVJCP0.roa (hash: 8FEoCWkbFFH7kumwS0rcY3cqap7M7WeXGi43/rudItI=)
                          35: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (hash: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=)
                          36: jNqX84RRwICbOmOsyyyD8-SEETQ.roa (hash: BYwZ6wAb4yTmr6zei/Clsy11v9hbMtuZ/ZmhoS0Qe4o=)
                          37: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (hash: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=)
                          38: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (hash: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=)
                          39: sLpAUd8gkvErT8h8_-V4VQFcK74.roa (hash: nJPneoe2+YrgeIqoCSxmJtOasWeBxinx2VJP47KmFWk=)
                          40: tOXM1ArNi_WlT9YM3bcgjCEuYiE.roa (hash: WoZWnVDNekQ1pmAx1W3mwlUwZGDjKwmVnvBatyWe8dU=)
                          41: tlKn03Ch2n039rtBjA5ofqd299w.roa (hash: 9PuwizLdWImEnrfTYLu1uBixtkLMu3z0UocdkAE0/2k=)
                          42: vd93uLKD47Ez0V_RVgHh8OcuMNw.roa (hash: WK9AElhhvADVgAf9hI8yHLfnh9vL6jfnYwfR1O81baw=)
                          43: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (hash: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=)
                          44: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (hash: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=)
                          45: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (hash: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=)
                          46: wdcRzGakLe3jtYKRAcXH-gjC00w.roa (hash: duKEk5GHM/r1VrV4PFuMXDPuM6unFH0pIjUwPANnOzU=)
                          47: xFV94mhycLMDkO1NS4j7t6HntvE.roa (hash: A9Prynd/URC1jVssoaAU0w6tIKnFpphaGal/8eTJRlM=)
                          48: zf6pdNUpGphO6Df4cNnwGf8vsno.roa (hash: ECJKSpVkmXvbPK0APqCdCGrsrVqyutvoFLDEiGmDUxg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:1b:6c:6e:b5:25:36:92:48:93:f5:7c:f0:10:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan 31 09:00:28 2025 GMT
            Not After : Feb  1 09:00:28 2025 GMT
        Subject: CN=eb9fd57618f7f766eef1729826eb75af86f9b024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:f4:e2:e2:c9:d3:7d:02:22:ed:e1:39:63:
                    83:e7:41:13:03:59:c7:0a:1c:59:a1:66:78:db:52:
                    f5:88:cf:ae:04:29:03:f7:87:4d:87:45:01:8c:a7:
                    9a:e1:30:c9:16:00:b4:42:8b:2c:c1:ae:a6:83:ac:
                    22:36:a1:ab:37:ef:aa:36:ee:ef:6e:28:1f:d1:83:
                    83:69:95:a7:1b:ab:d1:fb:5a:31:08:a6:5c:b7:eb:
                    37:e1:6b:5c:43:62:03:05:b4:73:59:5b:58:af:e1:
                    e2:64:d9:40:91:a0:54:eb:ae:a9:bf:d3:12:d6:bc:
                    09:eb:e2:42:a7:95:ad:20:ac:28:e0:59:96:95:0a:
                    38:f7:47:6c:d1:58:06:78:8d:d9:b6:05:3d:e3:ce:
                    c9:94:a0:ef:fa:8c:3d:7d:47:97:5b:3e:6a:be:22:
                    6c:ac:b0:fa:f5:7c:3e:65:1e:10:e4:c1:dd:11:1d:
                    31:93:d8:cf:a0:80:11:b0:15:54:90:3c:fe:24:25:
                    fb:73:66:6f:c5:a0:0c:49:45:9d:49:b7:55:a6:3d:
                    81:b3:d6:de:89:33:87:0d:57:93:ae:ee:7d:ce:b1:
                    e0:1a:ec:66:54:da:96:e8:88:fd:9a:b7:00:cb:60:
                    b9:8e:b8:72:12:16:79:13:6c:73:6c:e6:6c:d7:39:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:D5:76:18:F7:F7:66:EE:F1:72:98:26:EB:75:AF:86:F9:B0:24
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:89:0a:d9:cc:d0:5f:52:93:e9:c1:3a:8e:b8:ad:34:19:
         6c:8d:3d:e6:7d:11:37:91:c7:44:a6:c3:3a:f5:30:25:f6:66:
         51:01:1c:13:49:32:ee:f6:dd:ac:bd:0f:c7:04:35:13:2d:3d:
         8a:7d:3c:46:3e:2e:3e:99:99:14:8c:78:95:1a:20:38:3e:c0:
         c0:50:ef:bf:05:f0:ce:b6:b9:f9:ae:31:ae:d8:6b:b4:19:75:
         0a:88:df:0c:75:75:ee:6f:d5:6a:ac:88:36:74:ce:5b:ab:31:
         59:79:3d:fa:29:9d:69:eb:82:3f:fe:8c:80:e1:fd:8d:b6:9b:
         84:9b:f0:42:90:29:14:66:81:91:b8:7b:bd:dc:26:b0:d4:2e:
         17:0a:b1:e7:d8:ba:fb:4d:32:da:e4:58:19:f8:c2:d3:fb:a0:
         0b:d2:76:85:6d:1e:58:65:24:6a:2c:b1:1c:bd:1d:af:81:50:
         72:05:1d:4a:2c:67:a7:80:0c:e0:63:ca:b2:52:78:17:0b:56:
         29:37:14:14:5c:62:22:b2:74:5b:b1:33:09:43:f4:0e:70:77:
         de:14:bc:bd:dc:25:29:8e:a5:80:46:6c:b5:cb:87:4e:a5:c2:
         f8:2a:47:80:72:0a:fb:c1:d2:23:9c:01:4d:66:f8:3d:9e:4b:
         7f:b9:48:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lxtsbrUlNpJIk/V88BDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTMxMDkwMDI4WhcNMjUwMjAxMDkwMDI4WjAzMTEwLwYDVQQD
EyhlYjlmZDU3NjE4ZjdmNzY2ZWVmMTcyOTgyNmViNzVhZjg2ZjliMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXf04uLJ030CIu3hOWOD50ETA1nH
ChxZoWZ421L1iM+uBCkD94dNh0UBjKea4TDJFgC0Qosswa6mg6wiNqGrN++qNu7v
bigf0YODaZWnG6vR+1oxCKZct+s34WtcQ2IDBbRzWVtYr+HiZNlAkaBU666pv9MS
1rwJ6+JCp5WtIKwo4FmWlQo490ds0VgGeI3ZtgU9487JlKDv+ow9fUeXWz5qviJs
rLD69Xw+ZR4Q5MHdER0xk9jPoIARsBVUkDz+JCX7c2ZvxaAMSUWdSbdVpj2Bs9be
iTOHDVeTru59zrHgGuxmVNqW6Ij9mrcAy2C5jrhyEhZ5E2xzbOZs1zkDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuf1XYY9/dm7vFymCbrda+G+bAkMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8iJCtnM
0F9Sk+nBOo64rTQZbI095n0RN5HHRKbDOvUwJfZmUQEcE0ky7vbdrL0PxwQ1Ey09
in08Rj4uPpmZFIx4lRogOD7AwFDvvwXwzra5+a4xrthrtBl1CojfDHV17m/VaqyI
NnTOW6sxWXk9+imdaeuCP/6MgOH9jbabhJvwQpApFGaBkbh7vdwmsNQuFwqx59i6
+00y2uRYGfjC0/ugC9J2hW0eWGUkaiyxHL0dr4FQcgUdSixnp4AM4GPKslJ4FwtW
KTcUFFxiIrJ0W7EzCUP0DnB33hS8vdwlKY6lgEZstcuHTqXC+CpHgHIK+8HSI5wB
TWb4PZ5Lf7lI9A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:51 2025 by rpki-client on console-fra.rpki-client.org