Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
File:                     a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json)
Hash identifier:          PnpmTPgAyBAqygU40cW/Y1dN2inhVASQ+efqUpoykxI=
Subject key identifier:   B5:83:D6:16:F2:D4:4A:49:80:19:BC:76:54:F2:98:07:05:C1:84:1C
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       019873AACFD9FE0C6ADAE2FC109336BC80F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
Manifest number:          1757
Signing time:             Mon 04 Aug 2025 06:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 06:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 06:00:30 +0000
Files and hashes:         1: 1-5eUrXFS-mBvBFAzMBYr7thfm9g.roa (hash: RJYu6dco2QdzYib1CpLJ1XzU7TkYn7kM5vZDgj+Qfq4=)
                          2: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (hash: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=)
                          3: 3tJhkLqXJZHut6-9QAWx91dDYt4.roa (hash: 0A0BjckjXlOWSmfpTQR6EfKnkea6bYIBUSieA5NDx5Y=)
                          4: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (hash: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=)
                          5: 78ZyjDbZyNkN3FayuEyUnAtYdcE.roa (hash: g83O/P/9cvke2YEidLAvWtlDZVwvBFKTQOM7WmikfAk=)
                          6: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (hash: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=)
                          7: ACZ2w-GBagSgNrY3036o3-e-Yqs.roa (hash: RSgAhArW7RQeYQelUqAv5Bi0LBoSl2TBOlzzPUGVSs4=)
                          8: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (hash: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=)
                          9: Bi-w2vQ6q7Paqeb-8FWxe--YcbU.roa (hash: 9bBFk/y11iYrmgN87LW1/x7IiYYmSf4cmU0eu0rkk44=)
                          10: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (hash: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=)
                          11: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (hash: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=)
                          12: HMpahg815y5dLvRLadSLI9aRsZg.roa (hash: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=)
                          13: IcFuQIouJCuWuHO_yiXsv9D-BsM.roa (hash: 85qJOiM2ad9ExmakxtoyKPLzM0B0skhvz9w/Rt90g4E=)
                          14: KeNSVcNIveDRNN0Eoyb056mMz44.roa (hash: KxKJclC3t7SyZCwcHAS4oMcneZIsejj+HibsNh2NOPM=)
                          15: N994a833bc2uIsA--2ZFV_U7vK0.roa (hash: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=)
                          16: ODFUWKpYaPLOOmJRIlRL0pQTI-w.roa (hash: HpDjnMyeNXyUzKx7D/ZEuNgQ0V3sG7+U1ei4TAQZwOE=)
                          17: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (hash: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=)
                          18: P7jpQYz_dktvYEApQ1HG4zZwUEc.roa (hash: NEeXpDKrquu4iF+gLfu51Lrnztx6B+hCuEcppqklv9o=)
                          19: Qg7YRAm5mzDF88r95rLP78GgSr8.roa (hash: mWW99hX2DywiuWdo27sg/nYSe3OqMGkXa5/1syY9LvI=)
                          20: RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa (hash: VExSYS2yUuqfk1LC6juwXPrWXoN/wolLvgvP0orlLd4=)
                          21: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (hash: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=)
                          22: XOb2k-Y9UE0j8BXxxjcUOt79CKc.roa (hash: Tvacjk/OfPcn13GPjAyWf1CcvmbvEQv5GTmOXLzwxBo=)
                          23: YYUKAK2F8cmjIDogLRScyFjxA3s.roa (hash: u5QuMtNIXq5Bh4ROu+k9IjhVvTjPtCkjIDCr4jQWPME=)
                          24: YrcaUlVHW2fyltCzVxW5srb_t8s.roa (hash: YyEdnBQrxhTsz3EF/MLdt6wJMANAV3iBNjSWCoo0bHQ=)
                          25: Z9-pCHbukVnLD87CbKvdfqMcjp8.roa (hash: 1VKomI6H8eJxRas/I2A1OFxgdNoUgegMh0Wu5FVC1Ac=)
                          26: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (hash: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=)
                          27: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (hash: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=)
                          28: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (hash: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=)
                          29: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: Ae/VjlV4tw+qBMvvXKDnHIDVKaOmbCh2mvhGrS41LIU=)
                          30: bL4QpEkGhQ7SFvt1p4570f2wAjw.roa (hash: VLEwmnAxRkzaJysdwmNToFGvk98WHCrz2Guz8+uOcTM=)
                          31: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (hash: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=)
                          32: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (hash: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=)
                          33: fcBtCebpi-4K7X5NIslu13uDUsk.roa (hash: NUsnoh1mbJaQ/OI9xchtIzhWSkl4onfdWCVKXM/qj88=)
                          34: iQM89N-8pmdX0FKn2_ZUBdzCshE.roa (hash: NTnxEBzWzfIQmnb4pTpW6WXtbroKOIVyfaC55jLlJKo=)
                          35: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (hash: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=)
                          36: jNqX84RRwICbOmOsyyyD8-SEETQ.roa (hash: BYwZ6wAb4yTmr6zei/Clsy11v9hbMtuZ/ZmhoS0Qe4o=)
                          37: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (hash: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=)
                          38: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (hash: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=)
                          39: tOXM1ArNi_WlT9YM3bcgjCEuYiE.roa (hash: WoZWnVDNekQ1pmAx1W3mwlUwZGDjKwmVnvBatyWe8dU=)
                          40: tlKn03Ch2n039rtBjA5ofqd299w.roa (hash: 9PuwizLdWImEnrfTYLu1uBixtkLMu3z0UocdkAE0/2k=)
                          41: uu8Trj_lWMJjlVPGVumowwLMRzk.roa (hash: Vija8CoIjrBT0gbQz3cogP7Dm+Z4weUwiVE+n23x8Pg=)
                          42: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (hash: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=)
                          43: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (hash: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=)
                          44: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (hash: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=)
                          45: wdcRzGakLe3jtYKRAcXH-gjC00w.roa (hash: duKEk5GHM/r1VrV4PFuMXDPuM6unFH0pIjUwPANnOzU=)
                          46: xFV94mhycLMDkO1NS4j7t6HntvE.roa (hash: A9Prynd/URC1jVssoaAU0w6tIKnFpphaGal/8eTJRlM=)
                          47: zf6pdNUpGphO6Df4cNnwGf8vsno.roa (hash: ECJKSpVkmXvbPK0APqCdCGrsrVqyutvoFLDEiGmDUxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:aa:cf:d9:fe:0c:6a:da:e2:fc:10:93:36:bc:80:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Aug  4 06:00:30 2025 GMT
            Not After : Aug  5 06:00:30 2025 GMT
        Subject: CN=b583d616f2d44a498019bc7654f2980705c1841c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:cb:36:46:54:52:50:14:43:5d:98:7f:2a:
                    fa:86:2c:0c:df:9f:9f:d4:30:99:4a:d0:d5:26:e4:
                    24:f0:80:18:b4:f0:9d:e3:c9:0d:2a:57:b9:c9:9a:
                    3d:84:0a:d9:3c:f1:ba:0b:e5:bf:92:5c:32:db:30:
                    5f:b3:6e:47:61:df:e0:07:37:0f:e6:17:b4:c6:d2:
                    0c:c9:a7:7f:fc:99:5a:14:59:30:c9:1b:7a:58:d5:
                    37:f8:11:a7:8c:b4:36:34:1b:ce:56:8d:a2:7c:bf:
                    9d:51:0f:bc:5d:a5:ea:3b:4b:5d:fb:35:09:a3:d6:
                    f3:d0:78:d1:c2:a0:0f:bf:df:70:43:b7:23:01:ae:
                    95:cc:e2:59:0f:88:00:db:e7:1e:ad:9b:06:ad:30:
                    e1:f3:38:9f:66:fb:15:93:11:19:4c:df:f3:ac:72:
                    d8:66:df:40:99:c4:17:ec:68:50:5f:25:d1:d1:5b:
                    d8:58:b4:94:12:28:dc:42:9a:81:87:72:21:7c:e0:
                    1d:95:6d:21:a9:e7:a8:7a:89:51:2b:df:b4:38:4e:
                    c3:c1:ed:ba:bc:02:fe:ff:94:fc:f5:21:81:cb:1b:
                    ee:a7:0b:4d:7e:08:6f:91:24:4e:05:6f:ea:f8:2e:
                    d7:e1:f2:91:95:ee:a4:a7:ed:31:53:4a:1e:21:01:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:D6:16:F2:D4:4A:49:80:19:BC:76:54:F2:98:07:05:C1:84:1C
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2c:84:6b:c3:40:a9:e9:2a:e3:66:d8:2a:6d:1c:a3:ae:ed:
         65:46:57:6d:ab:74:2d:c1:a4:d6:68:d8:e7:e6:0b:38:0d:72:
         51:8f:5e:65:68:b2:66:20:fe:f8:ef:ae:9f:6b:2e:60:22:be:
         eb:0a:e8:9c:52:ea:90:87:c8:96:ad:f1:c5:d4:67:01:8d:52:
         4f:27:5b:97:11:43:67:e8:98:f2:d8:82:78:09:98:e9:4c:ca:
         87:13:ba:0b:81:7f:37:87:7a:14:60:0c:95:19:4f:0c:ee:cb:
         f3:6e:22:5a:2b:bb:0c:88:04:d8:47:ff:26:30:4e:8e:83:84:
         d1:89:70:26:7c:50:13:8b:72:73:17:b3:ff:00:c4:d4:04:81:
         70:bf:ff:2a:15:22:67:33:0d:07:92:f0:c1:37:4e:d9:15:bf:
         16:7d:39:b4:17:7d:93:da:45:ae:3b:61:ca:65:d4:81:49:9f:
         8c:86:a9:2e:41:8a:c1:cd:bb:e9:69:34:8f:f9:c2:6c:e2:f0:
         3d:68:40:93:a1:b9:3f:5d:a6:f6:42:23:10:96:68:5e:9d:11:
         ad:51:47:26:3a:bb:61:83:18:26:66:98:31:7f:1a:f1:66:7d:
         ea:b4:76:83:02:d8:fd:86:0d:66:2c:cd:2a:0e:a3:11:45:a0:
         1d:4b:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----