Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          l/gksDt1YNXTZcL6fgDF5Nr4PdPrb23tin7gT9XANY8=
Subject key identifier:   06:A6:68:A3:D1:78:CB:F5:3E:E2:99:F7:C4:5B:5C:FC:7B:AA:29:2F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       01976D06DD43F8F0DB1418017C09E4D2BD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          12B2
Signing time:             Sat 14 Jun 2025 06:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:55 +0000
Files and hashes:         1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
                          2: 1qzzzMsFo8_dNcnpjmA26nKBy90.roa (hash: NY0/0uQm7IvrFs73ctfOjnSep/hdUbDE1SSePlvoxU4=)
                          3: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
                          4: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
                          5: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
                          6: 7wpqEnLbXsmQgEcRjhSFA1E1Ph0.roa (hash: HxVQp3Z1rMeJKbwsiheKb1cIlaSzxb9MNENJpb8we40=)
                          7: 8zj1s3Ptfil6Mh57viGcmhuNUQo.roa (hash: 4PzZD7bPpeIUKStdtl1x4+X4xSCXz5aci88yHdX7k3o=)
                          8: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
                          9: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
                          10: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
                          11: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
                          12: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
                          13: DtAA23cNuJ7y19_ek2Lm2GoNNzc.roa (hash: ipPp835g2AET9b2DCEigzO4cZ5ar7ldRfIBrt9qaIQo=)
                          14: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
                          15: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
                          16: FE0c1VvpWzRV2ZfkFWDrtMTG7aA.roa (hash: xKTg3UgZU5B9LJC1eWYo71uat6vXqftS36KjjNPDiq4=)
                          17: Ff6PjCKYxksSpT1f0K8hi0k7er8.roa (hash: VflQNvUfdCGYwmZ2tB2YKnhTx72Pgu7vVHPUvzvijoU=)
                          18: Fj1LHdywYxmpNZYAlA5jYdYU-2Y.roa (hash: mXJTyqInCONrh6olkEuXhmmFrOakqrl35XBlrBrFg1o=)
                          19: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
                          20: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
                          21: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
                          22: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
                          23: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
                          24: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
                          25: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
                          26: NEBTrVrG2aOIqVsZMSsFHhwJFnw.roa (hash: f/aYHn25//7r/Dz9hT4MyKOdlYCxECJdfwrHVdjUJdo=)
                          27: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
                          28: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
                          29: QPp3ShO51Vxq9wUSQpAjxaZkM9Q.roa (hash: S0nBXUW8Iz/PPL58aOwa+KW9UVmq6rlyOkpScxCXtE4=)
                          30: TQoyMTaufag9Fh3qmegQelA2zNg.roa (hash: 95d7zIS7vKuMg1Mj7+fOLFO0LcohD9ziLzOdj+cFHi4=)
                          31: Ta-Jng8bCeWcapI-4Br5-Z9YPK4.roa (hash: ZXEMtyYZ68+dYUKGgJwGRiHDozsTZWFiUEvbDn+U6vU=)
                          32: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
                          33: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
                          34: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (hash: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=)
                          35: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
                          36: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
                          37: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
                          38: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
                          39: fWAfX3KpvP6KHVwuJR6oEj4CXnQ.roa (hash: 7Asl2MelB+M4yfnzUpkkQrmPhCU/0GL0ifTu9RCxXRU=)
                          40: g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa (hash: 9gm8nIFVfkBHC0WnoRN2oeNjKj8xNcfn6S96jzdZ2t0=)
                          41: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
                          42: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
                          43: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
                          44: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
                          45: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
                          46: qDo3TPWSAflGinbz6cHuC3nUpKc.roa (hash: namWwO7xfyJQeGBYRk+OVSKMxdRhMqt19Fo5eex/BNE=)
                          47: s5JGbcfAxZWJy2DrMtM0WwWRhus.roa (hash: SJj4fkJufFZa6/ohQiBhaQCM8kQ1vt6hwNW+jhV6Gac=)
                          48: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
                          49: u9fQ--7ZUbrJjJsrcl6-1mKFvp4.roa (hash: 9vM5BmcIuAVq5ukvOsVD6+0zY6eczhRk6fykT/FMvyQ=)
                          50: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (hash: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=)
                          51: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
                          52: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
                          53: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
                          54: ygoxlnzUMwYl-AABOcuWljKAIyY.roa (hash: e04wIPkk+nWqjtfdwm12mx1fb/1bKH/GdSMkDDExvgc=)
                          55: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: 126cWVO+9RzvW9u68eBttNu+FHJ050DcJUXHHZ14chg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:dd:43:f8:f0:db:14:18:01:7c:09:e4:d2:bd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jun 14 06:00:55 2025 GMT
            Not After : Jun 15 06:00:55 2025 GMT
        Subject: CN=06a668a3d178cbf53ee299f7c45b5cfc7baa292f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:fb:96:db:a2:d2:ee:69:0b:5c:6d:56:53:
                    fa:3b:de:03:2c:1b:da:5f:59:99:54:36:dc:e1:ca:
                    01:17:31:7d:20:e5:6f:5f:31:16:c0:86:67:b3:b7:
                    44:24:67:f1:ea:68:21:df:16:5e:2a:c0:d9:fe:31:
                    65:d5:63:df:b2:97:25:71:ae:d8:20:f6:c7:82:e9:
                    07:51:df:d1:85:38:d1:1e:a8:e2:0f:b1:e8:7d:ee:
                    99:c4:84:98:14:d4:4e:90:9b:b1:96:9f:a9:8d:29:
                    ee:55:8c:6c:ec:ad:2e:b0:07:69:11:da:a1:05:a2:
                    b5:23:b7:9b:c7:75:3c:8e:ef:3a:21:d1:76:87:1d:
                    7e:5b:8c:42:20:5a:56:05:8d:c6:cf:85:d2:81:11:
                    c4:e2:00:3c:c2:b0:2a:97:d9:23:28:dd:b6:91:ee:
                    80:dd:08:1a:ec:71:63:50:e1:0e:81:b0:99:63:88:
                    d9:71:10:2d:c0:07:d4:6f:dd:b1:61:dd:90:b5:8b:
                    9d:f5:8a:90:d2:ee:73:9c:06:88:d4:9a:e9:f4:3f:
                    c0:a3:06:63:35:c4:75:bf:59:f2:bc:7f:12:10:13:
                    c0:96:e0:ad:27:90:06:29:02:69:f8:e1:1f:75:8d:
                    9f:fd:24:93:87:41:0d:8b:71:b1:54:9c:5b:59:36:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A6:68:A3:D1:78:CB:F5:3E:E2:99:F7:C4:5B:5C:FC:7B:AA:29:2F
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:b7:b9:84:49:62:71:0a:7e:b8:84:0a:aa:85:80:b2:e0:
         8e:b9:30:ae:9f:a9:d7:04:6a:96:6a:64:8d:b8:c2:55:56:d2:
         21:0b:a1:40:cb:0e:6b:dd:1b:e5:a1:e6:bf:3b:a0:62:40:5e:
         58:e6:3e:dd:1a:af:84:3e:11:1f:3f:47:dd:9f:fe:18:bd:f3:
         24:e0:ed:96:69:b0:e1:fd:62:51:f3:0a:8f:62:25:bd:b9:55:
         77:8a:9a:52:69:dc:87:61:41:86:f5:4a:aa:86:da:e2:3c:4f:
         d3:02:f0:90:36:fd:1c:7c:aa:16:76:3d:3e:b4:60:63:f1:80:
         a0:7f:c7:12:b5:0a:99:f0:a5:5e:e6:5a:ff:48:3e:d4:96:dd:
         0e:2d:a8:6f:1c:6a:c0:3a:2c:cd:b9:8c:65:7a:d5:56:f8:02:
         15:85:32:03:27:02:22:ce:96:92:06:ad:bd:c4:88:b9:d2:39:
         dd:4b:fb:17:b9:bc:9f:57:df:a1:8a:57:f3:3c:ad:03:ba:f8:
         70:43:57:cf:1e:fe:14:2f:eb:dc:2c:73:52:70:a8:9e:a9:b4:
         07:9a:c9:1d:49:45:94:a7:81:89:23:5e:68:43:65:89:55:54:
         4d:bb:00:9f:cd:5d:b1:b6:c0:9e:52:7f:8d:3d:2c:19:8b:1b:
         8e:fb:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:09 2025 by rpki-client