Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          pxlYUoq5G9JpLDkz11a83VLw6Mgg2alk5iQGQOkdlWg=
Subject key identifier:   CB:41:26:35:ED:3A:BD:34:95:EF:A9:1F:51:D7:15:6B:69:78:99:DD
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       01976CCF8224BD4980EEBB4AD682940E4E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0C1F
Signing time:             Sat 14 Jun 2025 05:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:27 +0000
Files and hashes:         1: 2-gxvLC050rPyg0pBIuwjLWc1Cw.roa (hash: 1U8YnoACqQJDMJE5uRSPEGgs7vpW8J6WOx9xshbIsPE=)
                          2: 2GgxymSj789RBZZH6Qr311JOO3c.roa (hash: xxHGIN8RcP18Ff052v35zzO1Qu2FWHnYm7uLj+9oo4s=)
                          3: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          4: 2dufQoC5Jb0ve5IYehtGosKqu7Y.roa (hash: fBd1JLy+BQuX/FeJIoa6E39ivAOuTftwa/xPQ5dGjI8=)
                          5: 3JMEDtnuA6v8KKf4FVCxgbK4oN4.roa (hash: 0Qub+blZcyz/QgTRuTxgkxRc1Gc2PwuMNSOrgkAIbcQ=)
                          6: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          7: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          8: 7LfZ34jkVj6-hsL2r7ECksqembM.roa (hash: KK5qcoPr8RyUr7Oi3j2Zv7SSNXcoriOx3nxYfmh17TY=)
                          9: 9iiCvQxUod6DvEnzFdFsdupl_0o.roa (hash: vWfISYW79jvaDXYphE6gmSfEJChmyi+tOmRMgdqGhOE=)
                          10: 9vfmUm9RByccnOb6XlV_ph-gPk4.roa (hash: LNn9kutR9BeTRKC/HK+uI/57S0lDbgwp5ZsR1e9YOBA=)
                          11: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=)
                          12: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=)
                          13: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          14: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=)
                          15: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=)
                          16: GfzIravp1A-qM950EcQKAfu63d4.roa (hash: 4qKKF5LJkw69+LTSlZgQCwePECc0VCX/55ZPOTYfHHQ=)
                          17: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          18: MQQNQpnOLo7xjqCOz6nT8mwPN1c.roa (hash: 2PaPwlupHN5M6LnrEQtTQs0LPCM/gyDxtY5UHvVEJSQ=)
                          19: Sxy6K7e73qOvfCbb9KneoPvXeRI.roa (hash: IE71fGGjPNEzI1bTXZSPWcPLR3j32S+b4osxDkIoySw=)
                          20: U2PFthxJ7F2mSel2S5VEsWL5cds.roa (hash: VnmR6rK0a23jDw7iX8IiRVNjnkuvKH5yp7AMU/VwSYg=)
                          21: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          22: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          23: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          24: Z_9aQ9yajBZ2JLgMPuP-5DT5zd0.roa (hash: 4CGz9OtQ1X/4la1NVBt5q/Fx1Bc3qLuZdDjOQydgtOs=)
                          25: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          26: alg23em52u81qKf3TWMm9rQtp00.crl (hash: K4AuCnfoc5/n7ErH9AWMEH0zusHrYw61o33G+3fA6UQ=)
                          27: c4vYqF1tYFnE7ufF7Vande4OrQk.roa (hash: SGC5C7DpLVwd//1nD74m+Qyq9Cj3MluNv7n0feydZ0c=)
                          28: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=)
                          29: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          30: g-_U_ZQ6WoPDtEKmmE8KB6VVy50.roa (hash: FKIdBJ4K6Ik/oTZWTfO7K6hztUPX1QWBSTQJtuPCOzE=)
                          31: ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa (hash: 4VUp3SMe9rs+Z7Hbxzz7UGL7lgkBSmttJcCWABv87SU=)
                          32: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          33: lxkVaZIbX7I7bmN6ZBzzOQmtNdQ.roa (hash: LfvYFnIRA3jwfBQfIqqFV40UbcQgxtmN1lVv1rOE5/Q=)
                          34: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          35: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
                          36: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:82:24:bd:49:80:ee:bb:4a:d6:82:94:0e:4e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jun 14 05:00:27 2025 GMT
            Not After : Jun 15 05:00:27 2025 GMT
        Subject: CN=cb412635ed3abd3495efa91f51d7156b697899dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:aa:3d:8d:35:b1:bc:f0:61:32:63:67:33:
                    71:6a:87:06:eb:c0:b4:70:b7:e6:f0:76:0b:b6:ca:
                    f4:0e:9d:f4:89:c4:85:4f:75:bd:6a:90:34:a6:ad:
                    6d:48:5e:bd:d1:49:ab:fa:20:69:ed:00:98:2b:95:
                    3f:a9:a5:0c:5b:95:ec:50:85:10:51:04:f9:13:af:
                    1a:1f:b0:de:5f:aa:ed:98:b2:24:73:a2:0c:2d:58:
                    44:aa:c3:cd:32:a3:5b:fc:96:8a:9d:5c:e2:72:83:
                    7d:9e:f0:92:db:3b:6d:b1:8e:73:aa:c2:54:7e:97:
                    d4:5f:af:a0:a0:8e:a4:da:46:dc:7c:38:cf:c3:7b:
                    1c:a1:8a:ee:67:7b:3e:2d:07:04:e3:50:34:ba:20:
                    14:e3:7e:15:09:3e:10:f4:ba:d0:98:45:13:7d:b3:
                    9b:46:68:03:00:2b:d1:4c:2e:06:ca:03:5e:55:66:
                    a4:78:02:a3:57:ee:3a:63:af:43:17:3d:9a:7d:bc:
                    80:cb:af:a4:40:32:9c:ea:61:ec:d1:af:4f:dd:38:
                    7f:39:b1:9f:54:e5:b1:84:dc:cb:6f:03:8e:58:b2:
                    5f:67:c3:d4:61:16:bb:f8:9c:40:75:ad:e5:18:76:
                    95:d7:40:51:5f:a8:73:e2:1e:65:e0:48:10:13:8f:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:26:35:ED:3A:BD:34:95:EF:A9:1F:51:D7:15:6B:69:78:99:DD
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b6:0e:7e:5a:f3:99:1a:ed:1b:0c:72:2d:1f:0b:fd:d0:7f:
         ea:6c:98:fb:ea:64:5f:97:b6:55:5d:a9:19:d0:c3:2c:de:1a:
         aa:20:79:17:1f:56:67:3a:c7:3c:9f:bb:a3:47:6c:07:7f:ca:
         cc:28:95:b2:33:a5:f4:85:50:40:75:32:4c:a1:f3:f9:9a:16:
         f4:ce:1b:d1:b7:45:ea:f1:d0:34:95:a2:0c:07:2d:03:3f:a8:
         3b:b6:e5:e3:98:0f:9a:d9:14:1b:db:22:54:c7:9a:99:46:44:
         c7:fc:76:14:6f:21:95:e6:cf:f7:15:af:c1:39:e2:61:22:f9:
         fb:c7:33:ba:49:31:68:8e:a0:f2:6d:ff:b9:48:0e:9a:c6:b7:
         16:33:34:71:72:9a:ac:eb:9e:42:76:55:ad:83:c3:11:e3:d6:
         39:8e:2a:a4:45:ee:78:89:1a:e1:5f:85:2d:45:f4:c3:ec:00:
         3d:4d:81:4f:f4:4a:19:4d:49:a1:0d:e4:33:76:f0:e2:b1:bb:
         e5:15:7d:24:c9:15:97:e1:16:8f:2c:ab:40:10:cf:f0:78:29:
         1d:07:31:2f:95:33:40:4b:83:27:9d:3d:f5:66:ce:36:c5:28:
         ce:f8:e9:9b:29:81:9b:15:ec:0c:aa:29:3f:6a:ab:03:da:91:
         96:a1:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:54 2025 by rpki-client