Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          LZLhft0mGkcylJDyvEpocDLLw2JcnfgSr/wlIu7L4yI=
Subject key identifier:   FC:AD:31:BF:D0:43:24:05:62:D1:FE:7E:2D:C6:14:B7:E8:05:C3:FC
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       0197BA7D3C0190DA28E320911AB34CA9D323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          143B
Signing time:             Sun 29 Jun 2025 07:00:58 +0000
Manifest this update:     Sun 29 Jun 2025 07:00:58 +0000
Manifest next update:     Mon 30 Jun 2025 07:00:58 +0000
Files and hashes:         1: 0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa (hash: SPYZBsTv2MNh1qyA2xq5tH1xrGTzoY0rK9rAvW0asOo=)
                          2: 1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa (hash: dcfuBWAVvDzz9GpSqGo/OZzT5vbmtFCpLz+pXMeuFkc=)
                          3: 3LgD2pWeokaJnu7AtKvUjtGF1K4.roa (hash: EUbwmkUwuSMcYd+jHYxrR2mUP8puunpDHahZx+0W+pc=)
                          4: 3cL278tMfhHRt0jMeGBsuK_6tdE.roa (hash: 9Jvsf+gu/Bz99BEJw/Qs3de4jjh1Gye98YTVVsGjiIs=)
                          5: 6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa (hash: 2tOtZzMlaS8Y+/JP7ae7uNFPL8Y8C/sjWCJwPgz2D6M=)
                          6: A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa (hash: lE06Mjh97LJaUQ/w1auWux3C8TovlUNXB3RO85AG9OU=)
                          7: A49d_BeiTEUQG4p_3mJzcU9LAxc.roa (hash: Yk0iZpFyJXXMqGPy0ILeZNptWZYqa7K2r7Sh5AS5hIk=)
                          8: D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa (hash: 7cRbUgZAzkqORhvBRcVH2i2M6t3Q6qZCnPwfq5AZPQw=)
                          9: DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa (hash: uVhqZq8hFXzpst7g4lUJZCwbTahSvmYx+Wbki8iJE20=)
                          10: FMEvE8lRSqQ-c4n53FDffBkErx8.roa (hash: GlA1THHMaPutrg5iNRsJwfVrQRoJ41Dni2qIntaImAw=)
                          11: GIOmfmHCMocjivkrgQOQCDT39Gk.roa (hash: CeNAySO4uUs7Vr01dtrCsDXUZqihcLaXgfCKLkV9OxA=)
                          12: Iv7XsxWXHnyoVpEd4DC_3XASFeY.roa (hash: RkiFvafvAi0w5FjSv5Z+cDcQDkhTTLcusqCEJERJr3M=)
                          13: J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa (hash: Ci6kg2a6GSjpPc9RFHsQWbp71+Q5BJmxJkaiYnBdvGA=)
                          14: J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa (hash: ZT8/tzUWsV32mp8ODBnGUiawz3yA5cw8UBFbLvsiiBI=)
                          15: Kwu503K5TQ6mKB9wIlqJIRzuA5U.roa (hash: D2DY/gDYtav/Dsf8JETmsRPCOwdw9kpocKeFf8s9QAs=)
                          16: MFeBsVEFv-VXfJA4s0kbwDLrsao.roa (hash: EMCcoY2pdOJ/xwyHG39NdP4RUjuyAAIrDAvEM6JIEKM=)
                          17: MFuSjMaEcH_KfJOuOTM_egeHxuM.roa (hash: gSvthfvoW6hKh161OH6a/3I+TpE1mQXg8q3eHq/8gkU=)
                          18: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: x+0vY/K8OQ5BOcJOKJ+A3yx8q8eow0/RX0wRDxCZJTs=)
                          19: PW87IxcR8NO4WUeOitQNh5EtNhc.roa (hash: abtoslPQuSyoMS7yrHdnRO9jo2QkBlO9JvhCml8oipM=)
                          20: Pevz6EWQXEb5yVp9lKenzNIdBdc.roa (hash: qGmkuDrxspXM+mBcJKKqEwtYtBwpIYoUjNRrKJA7ruA=)
                          21: RO_vqVjc-WToTVgA2LecnPN6dt0.roa (hash: jWGNKA1BOvpll3zjMK7kK32ayXj4dMaMQ6dbhZt9Q8o=)
                          22: RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa (hash: 9uDtpLtRIp3Z50Qzu21CuIdk3zj29vKS3wKK9lm5Lyg=)
                          23: SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa (hash: tgYoh8E5W71tyTIqSyUElR8mNX+J76OHaL8Cs33nYQs=)
                          24: S_pHPsCNWukS-WUFhIXy-OSJe2o.roa (hash: CgIqwLllc8CTWv043HB1kGIdlsthfsikGWfcwzjk14A=)
                          25: U2iNflEHT3HIL-S9ukQcbf1cEE4.roa (hash: CmjocmnsbLnvfp3fpATzHwZwgEQxqvdIsJxJ7LRGUnw=)
                          26: WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa (hash: WAiPSFNwflOwr12Zue1faOYw7xwtb69ioqP/IRmI9s0=)
                          27: XJn6uz5-oygXgu4ZAc2om2Be0WQ.roa (hash: Y9gNxCERt7wH5/baWKBp/m59FpcWgCGrLReBBXmd6l8=)
                          28: Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa (hash: Crv4Pgd3B0w5ftY7wmKEGbhnAr8LA9YDu34JHjjTqtw=)
                          29: YyzLMTt87Ecy3ghXnphVjvqquQ0.roa (hash: ZwuNLZzvOtpWGtNlX0gjt9977y68KkozP3OVholZME0=)
                          30: _kwy9bDSccd3Rtu2SHd2nC9AWHs.roa (hash: S0KPjYm8+CTV9bHwk2kn78YNa61JdUHm026b4f57gYU=)
                          31: _qmxXaUzf56vuAEeSX5cGmijCbE.roa (hash: viB6e3ueTpguKC/GVLNdZbsbrWgb9vrKHxLtN4x4ChY=)
                          32: a2QST08vhAuM6YzseDeOjRqXeXk.roa (hash: lMOk2f76mI5XqI13RnVVzTMO4e/gWq+iR4UTwWxTKW4=)
                          33: b1DT6ospwzst3YJkd_0LR059Sno.roa (hash: FX1wepEOkF8A9hAFZM7i5GnZPOJgUdJorm4d827ZEso=)
                          34: b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa (hash: LmA3Cohl41GAEztGDTKc3Ga2ZxVmadMDX0gNG66wU94=)
                          35: g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa (hash: 5+QoeL2CSfIj5AnV36tcPb8Se6mkOWP178b805IjUzk=)
                          36: gb13af6kKgtlfQFdYQtCupgkRjQ.roa (hash: WlJgR2c//WMYosfMkR2CJaWVw/G4EQYofJSeZrH4jNE=)
                          37: ipTg348ZUOHwTFCERWv85x5upVw.roa (hash: 16jKgCClYBo+eCIMwkt7ZjD/Ascu9zEJCZArBRFo1ac=)
                          38: jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa (hash: MlNZfYRq0YeYuGTlp+S0bdyWWJDClUExqjVU2jALhT8=)
                          39: luhgkGvXoSBeo49IDDTu1_s8AjA.roa (hash: 9H2kNdWwK/olweSvXdAl8KgICVS+D/OaSJX7mmjuiAk=)
                          40: lyu6R4gm1GDGGWrprfi3lQB2gi0.roa (hash: SnWsapf5S+uAoqHYWK233NyQQsjjVYaX6QjiNNmT2oI=)
                          41: mErkWeU3I8mGIE7o-s9X2fk5o5s.roa (hash: VUpCAKhA9EiJ9ug9Oc5wXy4xs0jXv9yffBf1VGddEjc=)
                          42: my4k0_ivDuUGyBw3mHJZ8SCPZrQ.roa (hash: DJVXpvSVC65t6DyhISYYJXNS1LFS4kO5R9YQf3IOo4E=)
                          43: oZdG4eGf7a8nQ-LsuE-l7MTCS18.roa (hash: 5c15Pb7KH72jzhvecKBamgtcszwWgCVUEzSxuUMdHSM=)
                          44: qJ22okdD8cK_emCAng8rI9cPrbU.roa (hash: WUQnBOwIu5J+Q0plEqLVlVFpmBiC7eLrEJFqZ2HqzGw=)
                          45: rVRMkskBzwl9zi-JY6YFOAI1hcA.roa (hash: v08kT5N9ZXsSCeQYLs3P8oE3ZLKAofwCwujUwPJ72Pc=)
                          46: saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa (hash: TKYq5bkvZmNzmAS5U9vl5b3QXUiEmUHsR8998Y8ephk=)
                          47: ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa (hash: Hgc/3TJtI5yynn7M0w0nfY5PZGQECx2OAgvuax5O8ME=)
                          48: xlkcSwD0mmtZPgi3xXKhycAWYyM.roa (hash: BAhCmE0YHR0xQbs06CAdD0yavtNQmtlINBJ1oX8Gqn8=)
                          49: yJts8iRe97z0LBku4nfeAAQmzuI.roa (hash: Kml13BMft8IVP0nzevzpw72P/X7Z+HrpFqQAw2Yg/rY=)
                          50: ydjj493UN6JAAmZf6D9xQrp5Fuc.roa (hash: r/+ra3gt0oRo1h5IYk68eH88kHv7hYOt8DrkYcFlWmE=)
                          51: zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa (hash: YDgq8a39d8LckxrdlKsf3y4bYTg9xyEVGHD8tb4DwoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:3c:01:90:da:28:e3:20:91:1a:b3:4c:a9:d3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jun 29 07:00:58 2025 GMT
            Not After : Jun 30 07:00:58 2025 GMT
        Subject: CN=fcad31bfd043240562d1fe7e2dc614b7e805c3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:71:e9:4b:32:7e:39:95:07:2e:53:6a:44:
                    a3:94:42:f6:be:36:06:d1:b7:9f:63:47:0f:6e:9b:
                    3b:eb:6e:0b:22:be:60:e9:01:86:34:ef:7f:5e:de:
                    30:2a:a1:85:ef:c1:22:24:61:83:6c:75:68:0f:c7:
                    83:80:6f:5e:95:7a:b8:2b:20:b9:c3:0b:8c:c0:8c:
                    a1:7c:0f:bb:44:30:7f:da:b1:7f:b9:7c:73:b2:02:
                    90:82:37:90:24:8d:09:1e:b1:5c:ac:6c:82:57:15:
                    56:2d:bb:ab:0d:cb:a3:89:79:aa:b8:78:86:7b:d9:
                    3a:6a:2e:e8:59:59:4f:8c:3f:1f:00:8b:5e:fa:69:
                    bb:38:fe:e9:3f:a4:ae:7c:74:bf:42:c5:9c:85:ea:
                    a7:31:e9:35:c2:c5:51:21:1f:33:cd:bf:18:6f:ad:
                    92:4e:05:00:9e:95:d6:ef:15:02:f8:e6:d9:d0:54:
                    c5:c7:82:26:9b:06:2d:91:0f:46:2c:e7:36:7d:a7:
                    17:c6:58:07:4f:c8:50:a2:3c:d0:e4:4e:7f:bf:49:
                    b0:9e:53:73:5a:b6:5e:6d:0e:23:74:e8:78:d7:2a:
                    04:2a:ba:da:0a:a2:31:ca:0f:5b:94:e3:dc:ec:60:
                    2b:30:66:1e:7e:02:18:fa:c4:ad:84:d2:ac:dc:84:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:31:BF:D0:43:24:05:62:D1:FE:7E:2D:C6:14:B7:E8:05:C3:FC
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:e3:e5:a8:12:5a:55:70:e7:43:50:21:54:c7:d0:e7:0e:
         b1:ff:d8:38:04:e8:9a:1e:5a:28:a7:f1:7c:47:d5:58:d8:7f:
         c1:62:52:c4:a4:50:4c:23:23:ee:49:0e:fd:39:07:1e:50:0e:
         ad:05:a7:b7:d9:d1:fb:cc:dd:f7:0d:a5:64:c5:e5:ad:61:ea:
         7b:af:c5:4c:b2:0d:c9:f0:be:d9:7c:ee:01:07:e5:d3:60:87:
         fd:04:fd:94:38:40:c6:f3:ae:54:3d:2e:1f:49:d2:9f:a2:97:
         a6:71:6e:c9:d8:9c:45:8d:5c:77:6f:ec:7d:0d:f6:10:a2:4c:
         d9:a3:bd:44:a9:eb:41:07:11:07:31:0a:53:64:86:17:31:34:
         72:e5:8e:bf:e9:bf:9d:2b:13:76:83:12:63:eb:2c:c5:5e:30:
         98:12:cf:29:d2:ed:ee:93:b7:2d:37:67:f4:39:11:7b:3d:89:
         86:2c:ff:c4:73:93:63:14:a5:9e:0f:2c:9e:b8:28:d6:a3:c7:
         31:49:dd:6b:0a:9c:50:f5:f0:8a:1f:6c:23:1f:9e:39:da:c2:
         4b:62:48:33:ae:db:ac:cc:c0:2b:d6:5d:0a:00:88:16:45:0a:
         c6:a0:d6:fa:f7:32:00:fb:82:fd:53:a9:f4:af:ab:c4:f2:0e:
         19:56:5e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fTwBkNoo4yCRGrNMqdMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjUwNjI5MDcwMDU4WhcNMjUwNjMwMDcwMDU4WjAzMTEwLwYDVQQD
EyhmY2FkMzFiZmQwNDMyNDA1NjJkMWZlN2UyZGM2MTRiN2U4MDVjM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5Zx6UsyfjmVBy5TakSjlEL2vjYG
0befY0cPbps7624LIr5g6QGGNO9/Xt4wKqGF78EiJGGDbHVoD8eDgG9elXq4KyC5
wwuMwIyhfA+7RDB/2rF/uXxzsgKQgjeQJI0JHrFcrGyCVxVWLburDcujiXmquHiG
e9k6ai7oWVlPjD8fAIte+mm7OP7pP6SufHS/QsWcheqnMek1wsVRIR8zzb8Yb62S
TgUAnpXW7xUC+ObZ0FTFx4ImmwYtkQ9GLOc2facXxlgHT8hQojzQ5E5/v0mwnlNz
WrZebQ4jdOh41yoEKrraCqIxyg9blOPc7GArMGYefgIY+sSthNKs3ISoxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPytMb/QQyQFYtH+fi3GFLfoBcP8MB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2rj5agS
WlVw50NQIVTH0OcOsf/YOATomh5aKKfxfEfVWNh/wWJSxKRQTCMj7kkO/TkHHlAO
rQWnt9nR+8zd9w2lZMXlrWHqe6/FTLINyfC+2XzuAQfl02CH/QT9lDhAxvOuVD0u
H0nSn6KXpnFuydicRY1cd2/sfQ32EKJM2aO9RKnrQQcRBzEKU2SGFzE0cuWOv+m/
nSsTdoMSY+ssxV4wmBLPKdLt7pO3LTdn9DkRez2Jhiz/xHOTYxSlng8snrgo1qPH
MUndawqcUPXwih9sIx+eOdrCS2JIM67brMzAK9ZdCgCIFkUKxqDW+vcyAPuC/VOp
9K+rxPIOGVZe9A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:21 2025 by rpki-client