Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          8CXh/F6Z/RzsdUNKFD/oRSU2KUBUNxHrSHLILu5INaU=
Subject key identifier:   22:AB:D7:20:04:B1:4F:4F:3C:F8:F7:E2:B0:58:6A:2A:31:4A:6B:E7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       01967153FCF9DFA4E4B78C6231E565D18F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          1225
Signing time:             Sat 26 Apr 2025 09:00:51 +0000
Manifest this update:     Sat 26 Apr 2025 09:00:51 +0000
Manifest next update:     Sun 27 Apr 2025 09:00:51 +0000
Files and hashes:         1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
                          2: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
                          3: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
                          4: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
                          5: 7wpqEnLbXsmQgEcRjhSFA1E1Ph0.roa (hash: HxVQp3Z1rMeJKbwsiheKb1cIlaSzxb9MNENJpb8we40=)
                          6: 8zj1s3Ptfil6Mh57viGcmhuNUQo.roa (hash: 4PzZD7bPpeIUKStdtl1x4+X4xSCXz5aci88yHdX7k3o=)
                          7: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
                          8: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
                          9: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
                          10: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
                          11: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
                          12: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
                          13: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
                          14: Fj1LHdywYxmpNZYAlA5jYdYU-2Y.roa (hash: mXJTyqInCONrh6olkEuXhmmFrOakqrl35XBlrBrFg1o=)
                          15: Gq_xCZdEzAOLUGgbxCsiI12vGe0.roa (hash: zD/DDfTlc7UMlvce/2TQOzHMx0TMXcX/Gj0yJXMu0iI=)
                          16: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
                          17: HWKuq43ra0KbMfQ1sxyaLKRxMYU.roa (hash: OmDhJNZj5y5DErtiCu3LMFfMUdiwxKehyMoTP4Ak7ls=)
                          18: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
                          19: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
                          20: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
                          21: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
                          22: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
                          23: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
                          24: NEBTrVrG2aOIqVsZMSsFHhwJFnw.roa (hash: f/aYHn25//7r/Dz9hT4MyKOdlYCxECJdfwrHVdjUJdo=)
                          25: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
                          26: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
                          27: T2nBcN90QL37RbdRO-q8DLQ77Ek.roa (hash: 31WpgwL2EfZ5Tm1AWagxgpt2F5zFwFiQsAAVBMSiTzA=)
                          28: TQoyMTaufag9Fh3qmegQelA2zNg.roa (hash: 95d7zIS7vKuMg1Mj7+fOLFO0LcohD9ziLzOdj+cFHi4=)
                          29: XyVBuSMO4tDMtKN2CT96qIL0ENo.roa (hash: sOGSOte2a4l6mbgCk/Nt1riATxr1NXH+i3dLb894BnA=)
                          30: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
                          31: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
                          32: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (hash: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=)
                          33: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
                          34: aVylZyEQwBXWctUuh01Kx-MnBpw.roa (hash: jB+XdgMQvp3EPtPkAQ+7tQq78v6NYgmRWUdO6oBD0tY=)
                          35: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
                          36: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
                          37: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
                          38: gMdD_VXSyo94G-BnLblB_ugIGAE.roa (hash: 9nCb51TSQbfXDAKCN53dfxa767DQLXFXaeqP+pGISx0=)
                          39: g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa (hash: 9gm8nIFVfkBHC0WnoRN2oeNjKj8xNcfn6S96jzdZ2t0=)
                          40: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
                          41: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
                          42: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
                          43: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
                          44: ml9vCja4mgcdfAYhpAav4-QETWg.roa (hash: SLf7cBw88J8YVYvHBLi3COobS3EgJxVzQ38+pYMKZa4=)
                          45: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
                          46: qDo3TPWSAflGinbz6cHuC3nUpKc.roa (hash: namWwO7xfyJQeGBYRk+OVSKMxdRhMqt19Fo5eex/BNE=)
                          47: rlNK_Q8k2eJC_qmSCeZxHZ_MfQE.roa (hash: IZQQ/6oS+G6OcQEcpL/b2sbx8obxVdk1R2/eXjMJinM=)
                          48: s5JGbcfAxZWJy2DrMtM0WwWRhus.roa (hash: SJj4fkJufFZa6/ohQiBhaQCM8kQ1vt6hwNW+jhV6Gac=)
                          49: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
                          50: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (hash: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=)
                          51: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
                          52: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
                          53: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
                          54: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: Cw1ewtp9d7Mr8ZWisXLDSDDOrmURB5VFJJEuSdYTHss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:53:fc:f9:df:a4:e4:b7:8c:62:31:e5:65:d1:8f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Apr 26 09:00:51 2025 GMT
            Not After : Apr 27 09:00:51 2025 GMT
        Subject: CN=22abd72004b14f4f3cf8f7e2b0586a2a314a6be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:4e:c5:59:e6:93:fc:03:6b:9d:72:7d:38:
                    1e:ea:06:1d:6a:58:d7:05:77:39:97:05:c5:e3:21:
                    61:dd:0e:5c:76:24:4c:37:5c:83:f9:09:57:ce:c5:
                    53:a6:32:91:4d:a6:42:43:67:94:2a:92:79:9f:76:
                    ab:eb:cc:c9:8a:d4:5c:68:e3:c6:6d:ca:ec:92:9f:
                    81:24:23:34:b4:92:5e:ba:ab:54:8a:18:36:dc:3d:
                    90:1f:f5:15:1c:4f:65:5d:67:83:cc:67:fc:76:57:
                    fc:c2:72:c8:40:98:67:9f:ae:fe:4f:1d:a4:04:43:
                    5a:5c:e0:9a:5e:a2:02:d4:a4:28:33:c5:e1:8a:46:
                    ba:2d:88:41:e5:74:a9:ee:b7:11:83:ea:c8:d9:33:
                    70:30:fc:28:2d:f3:5a:12:e4:db:24:fe:8c:37:e2:
                    ea:22:63:ba:5e:7c:cd:21:20:11:1f:d5:d9:1f:06:
                    2e:b6:e5:54:cd:db:d1:28:c9:54:b4:f6:7d:b0:ff:
                    ac:e8:1f:57:5e:99:83:90:29:20:15:87:f4:ea:a3:
                    bf:43:e1:c8:d3:18:1d:1b:eb:fe:1d:e4:1a:19:00:
                    50:d8:09:de:46:5f:26:08:f7:d2:e4:cb:9a:13:64:
                    81:6e:99:8e:38:d2:8b:44:98:18:2e:ee:db:27:74:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:D7:20:04:B1:4F:4F:3C:F8:F7:E2:B0:58:6A:2A:31:4A:6B:E7
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:fc:b4:f6:29:37:2c:a9:5c:2a:f2:48:e2:ff:42:ec:50:
         38:27:7b:9c:53:08:62:f6:ca:a9:96:2f:d0:c1:b3:51:7c:86:
         87:11:d7:66:58:8d:63:c7:36:c0:f5:57:3d:1e:be:61:ae:63:
         2e:7c:58:ed:95:91:88:52:2f:83:12:41:50:60:f8:fc:3b:87:
         a1:d6:48:bb:f3:58:1d:98:8f:18:9f:ba:b7:28:51:15:ae:12:
         9d:0f:b5:ae:82:fe:8c:40:c8:3d:e9:5e:54:a1:4a:a0:46:6e:
         46:0d:b9:cc:2c:0d:fc:7b:b4:9b:07:be:68:52:9b:cb:ee:19:
         b3:10:78:da:a6:21:8e:61:b8:e1:a8:84:12:13:c4:01:bb:9b:
         a2:66:95:7c:f4:47:b5:53:94:3f:44:15:4a:0c:4f:9d:e3:da:
         f5:eb:4a:58:a8:df:80:3e:c9:5e:a8:39:67:4c:a5:a5:f1:75:
         ed:69:dd:49:d2:f9:f8:d8:ff:85:33:89:69:c7:ba:70:3b:49:
         28:0a:68:e1:98:0c:90:e2:c5:d9:b0:f8:2e:4a:d6:83:7a:68:
         1f:08:fa:b6:e5:8b:21:2c:82:bb:4f:d1:10:48:d5:fd:4c:fd:
         f9:1c:a4:bd:e7:f4:d1:64:7d:45:b7:69:cd:25:fb:9f:82:5f:
         81:3c:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:49 2025 by rpki-client