Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File:                     CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier:          XrWqJe7Tm1G7SkmAFIrbLLr18F8UqUFLiZMhgoNMSG8=
Subject key identifier:   16:10:96:C5:FF:D7:EC:3B:EF:7C:E8:32:92:2F:78:3F:4C:3F:37:65
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       0197B745A27E005F218A9A37CC21366BDEEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number:          15D4
Signing time:             Sat 28 Jun 2025 16:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:23 +0000
Files and hashes:         1: 0WVAn9YvgOWg_yNJalsG8HWMv_4.roa (hash: o9Uyp3iYPto8Ogeet4RXU658pKPPwu/4VlXDv2Wj41I=)
                          2: 1-HibKYNRlVckj_iTZXhupR1bakY.roa (hash: Pbr797a3iSuwQPzQuuhzHtYhPcEF76lPdVXFTnoW0hM=)
                          3: 1-M-VbyCsItZcG9hA_XDnasi-D8A.roa (hash: b/qbiDYWw8CaeeHb6nquKsuF2wjB+A0cqxq8LMSb+5Q=)
                          4: 1-kWteBemYeM6XkcJ_ZUss1hXG38.roa (hash: 53KhatrrAtQ3Krc/O/sxE+vOAlFJYCo6re5dXOrYPbw=)
                          5: 11lOaRU7MF7FcgxE4R9XRkIdnqo.roa (hash: M2CH14vyLfisxEvGm4ORm0aaawOu/BRSvOS3W2Ud6h0=)
                          6: 5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa (hash: KPRBRfXnJeYECt7rkwbA5HLNQN041J0Mdk2L9JLyBZo=)
                          7: 5luPFN5i1lVouRmEBcyTwypwbk4.roa (hash: NHJ5Mbfg05vw8ufC9Y1UIjix6uHWmtoYQh4zJ5PimRw=)
                          8: 5uoV4iXBKOHPftTz02DmU-CdsdA.roa (hash: 2mpqQFSXOUV6zOOM8zKnqxs62eDdoR9K/P9KflUVZuE=)
                          9: 5xoa_s9hHCqBdRVojMZQkieywOI.roa (hash: dLkmlG+BPyJ83dYgEjVkZRzgqQ7WrHrEwODRUOEeHuU=)
                          10: A3kgD4Yh6ZMjOUE4gcsu8drzx2M.roa (hash: rSbRVMQTbgAlKJRB8d21HopmvnA8JdFqIMhpnSws1rA=)
                          11: AbAEVxebdm5G6D1PAcaC5LnGsN8.roa (hash: Dq6Ap6xJijHogpVYcHLyNczvNtcQKKUMlCLwYT3XZ8M=)
                          12: B2R_-aZKC-fKD2cM0Y_ju4yWqAo.roa (hash: tBZsJi3mmXm6MIP7FFZRS9nAQq34IKAHgmKAGADHUfg=)
                          13: BI3sgIaTUM9B3H9IM95i6cQ79tI.roa (hash: lcX08Q/BWVZC00vOiV25sRoANDFaOIFw5t/+Q+BGNvA=)
                          14: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: bpmyXbgl9zr+0prjZE2tOtDuZfLFgNRRMOBm1z44Zrc=)
                          15: DDGgge6d5LlDy5dfWiBTroZGTmE.roa (hash: zUOcG6+MR1ospsTENGFCDauMx9GhwzFthN3G8vcsKdo=)
                          16: DN8DQEopeZn2s_vginrteZyRblg.roa (hash: zusAIGD0N+4YFi9tXrSAhBA0eAPQf96DOjVae8bFzrU=)
                          17: DeT4H9vHwyuu35zhI-U0tyFq8YA.roa (hash: d0w+8cvUotAVfyvFf8K4WVYM3e72pkNRc5Y9xUxniZE=)
                          18: EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa (hash: Us3Y5yljNy3p7flzVkHUSVVxPFvWxXzsb07771aSlx8=)
                          19: ELbRMj9dpYGXHBkS3x9fr4fVjNM.roa (hash: pFN7vf4Bi+e7UowjcIQLdhSSW0ELN5XtTgINgLEACV8=)
                          20: ETH1wFBSXTyIScZMuYhOjWG7_Xo.roa (hash: 4pgFORs2NoGVTWQG8JLEHJW5hEBDfhwioOYGj1ZkQ/k=)
                          21: Ehc3A5wFyxSxaVu2JN_l2n6bEM4.roa (hash: 7Tt2rA6zfiq0xOHK0YG3vUvHjTlygYo8XF+ji7LgCg4=)
                          22: G4d6Vi8fwpfBMbAKMprgK-hp9Io.roa (hash: pSEwB6TkhO46uqD2vIRYPbUeH5EsncPmsM5P6q2Yt9c=)
                          23: GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa (hash: hMPbKb1NXJhU4uvH0If2mxxGXgVJxSXaj+jSWiiTlE8=)
                          24: J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa (hash: h0eilDzFJc63ldeHb0QL9b1OgF0191jasEAOBuxrT4M=)
                          25: JIaqKyRqQoYvD8TsrxLTXGlz8w0.roa (hash: Do5yTPKJtBZsvnrJAT23fp5uIOvN1opbLPvdDKN40vc=)
                          26: KhUy9UUnOlFas6aD25pl3uvHOgo.roa (hash: pRLRdQeFQBTTu2BRQ6e6LQQWDfH1gqbpxEW93Q6xIJk=)
                          27: NwTJLgWLnMQ9EeqpznhmvvPQgvM.roa (hash: ViH5oqEBI9vRU6MTGLiUbaYIP8vxiKBaD+q325XXZOE=)
                          28: PFn-sywxKaqL-MQoHYaDo3Ylvxg.roa (hash: 7M/nt+kbs5nOYGFBdJB98Fe7ciYZvkhYXohc8zrAuko=)
                          29: PsSM5b3oLk5wUeBSmklEPX40UQ8.roa (hash: ktnZORaDvt42fZYrrjp7EBxS9xvZh108Mt9SBXfu83A=)
                          30: PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa (hash: 4OKKH899BiMarrXaTVhgCrQZ8xaivHpsNV8dYRA/+C4=)
                          31: Qfd2pQFSud35Kd5afgx_HllnhlU.roa (hash: AVzGY15QZRw23nEpfQHWMOhslLM4/l7mK/LlAJnwT6k=)
                          32: SVAo8dmVNs_cgWnjmR5t-BqxJsg.roa (hash: YTFvZ6MXaLQqcE67dzd6EDQHER7pxnY4XSKLt9tK4LI=)
                          33: SrF5yr5Pqaq1Ja-_kcWWL91gbc4.roa (hash: 2vqcvGcuZtO87Apo8Qmd6BopBmIN2/9Y++vnVJ5lTDM=)
                          34: TUFAZf04oKU71K-dzly3Tm0m00k.roa (hash: 8Q/4UFhDOuKqDkvv68K1gJSZ0i88GSnNRtnULQsx+Ss=)
                          35: V-LCmOe10R8krDgxZ26_D69-M1s.roa (hash: e5tLg2l3aiV5VWqL3jXIWtw0V144t3f3X8rGhSYx2N8=)
                          36: VKpWLCVvnM9Bk9gkuramrbyr9oI.roa (hash: iufCNvmg9pyXxypfL82+6UjxiEFR4YOVBGjjYXCmNCA=)
                          37: W4x_U8KKzKhD7jUq27wP_pnDHSQ.roa (hash: FvDjm270NNg4f/ya97U4H5ElApGRQootXEuMHYZH6cM=)
                          38: XC5_IHXanKyEQtqSapG74oOlfsk.roa (hash: 6QAptJczYTkTa4ac/1nerDggXpMWciCFJDGSnNvSP2s=)
                          39: YenQr5nH_V3kb3uSF9W13TFvB5Q.roa (hash: GpHupGsKceamB9tAnqXoExG/BKA3+rfzw7wdC7Z1p8s=)
                          40: ZMGiCYqIYbLxIDFLGSrZr7x3AKA.roa (hash: WLL9B2mOtaR0OnLgCRktu1TUID/GGlBWdDeo/4knmL4=)
                          41: Zi1QbNVUNm3mfz1CTqhQtalYVwM.roa (hash: gT07hI4kfkPaZsHUUATtMtjxeDaYW50HEiIkbWM7BGA=)
                          42: alXjjyJjACKReiBWFe9q2LojJSA.roa (hash: 0CGeb6hxkkcv5NiB3c+nNxG+nWc/zDf3rldJ9DYLqso=)
                          43: d0OziBiaSaqujGGg39NmZm8WAQc.roa (hash: wPE4wVxV1u8jFuZvEhRcVJN0ZIEnlAfJeb7rkOgWfjo=)
                          44: dEQn4gfsJRxfhqKslfN41v3D4hc.roa (hash: TZ0sobRJ9WMYF6aBcf3Cq1/T45j0yE6z5roNHeVXmhg=)
                          45: eo3YEkR_kIlvbYQzw6Gy-UPzN1Q.roa (hash: JLhOns4DewIU/XF05/PioRQMuqO3MR2c58DWu+qOVVQ=)
                          46: gQLDHDpGBQlgALs9GcfAUzVclt0.roa (hash: DRtfp1UtfULNf5WPwgIsVkdZx6FfMZanPaD3QZoUync=)
                          47: ifEtStLPeAA8jKJ4MhxpZv8xwu0.roa (hash: SHKwnaRe/appNbcVWvQlAJculHJjzlHZPzKL+wqnct8=)
                          48: j0kswT18M65pGw9oZ5vF0p46VKQ.roa (hash: 32N3pVed44e+OfqPtN7yUzxwpydaC6y88MI0aFPEPT8=)
                          49: jY7niDqbHThw-tNhaxyppo0lcEY.roa (hash: V1mUjItVWw410qTmkUZlb5i/69zvNslDL21/SgXV274=)
                          50: motJg_hClgvKFxrmI0ThBISo3lo.roa (hash: 1+GgeLsk0bVXeFjHtsYrISwKmvPy/YI4vUXD5HuoJw0=)
                          51: mvBA8v6ECbu_1CHCq3Ygov29IXM.roa (hash: 66IPvJEHtgW9wEKAU5V3GW2FisJZNIcyhujZbbm68Eo=)
                          52: nxm2z-N8DzZSbo0806BLGjh1MGI.roa (hash: LBhQJnrLYwLBMi2jNJHPP6NuErBJyyIWsF2qumnunWA=)
                          53: qz_DmGy9IAKXRI9f4REmBeW1T9Q.roa (hash: AyfH+v4itEz/GELogPNr7gp6yMRLDbtAVMRnMQ0R1Zk=)
                          54: rF-q7agOPCH4-t_lEDeqW9htfmY.roa (hash: BtOMLbBjtNuDENxRwlH88b+1W2N7L+162hA6Uib2VAY=)
                          55: tKWY7-wssBbVkK8gi5xh_V7LyWo.roa (hash: 9iQCM9DBb9SNVfP6FnCOqNxt4sGo669zHK843eqyeJQ=)
                          56: uprewwcTXCcmQN0Ey7EpJWORj44.roa (hash: QV157YO0Y71rObCzvJ0bY8O5Oh3zS2lhjp5uOHkyL5o=)
                          57: xVpekrjNm2Ym4WMpRSG3_hwYsv4.roa (hash: sahJiwW9mBR8LlyaT8TmE2NDfFoKYM4WzqhrscZG6Os=)
                          58: yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa (hash: e8Eyw72rq0/GtFG8y5QenGef6gli7tTz0dJgGjM7CME=)
                          59: z_xZZaAWa8QdNga7zU3z3y_ctgs.roa (hash: 3uv9J0zNy4D6OdhhkaZfxXnVW6d77XB4ndHuoNeUg80=)
                          60: zgMzIdhRlx-sM532UYZ-ab0aXII.roa (hash: DccIHmb2BgsXvdBuA8mWTiKispMrxrNFl+zv/Fzyie4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:a2:7e:00:5f:21:8a:9a:37:cc:21:36:6b:de:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Jun 28 16:01:23 2025 GMT
            Not After : Jun 29 16:01:23 2025 GMT
        Subject: CN=161096c5ffd7ec3bef7ce832922f783f4c3f3765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:59:d8:03:40:28:04:ae:9b:de:f0:e3:db:
                    f7:5b:38:7c:fd:f1:c9:07:0b:a0:78:07:78:ed:5e:
                    57:52:a7:96:d3:a8:d2:62:41:e9:bc:72:a3:5f:3a:
                    7b:60:09:4e:d0:62:7e:19:bb:7f:c3:d2:3a:ab:ae:
                    6e:c4:50:b1:20:ab:c9:57:9a:73:aa:73:ae:19:53:
                    3b:93:04:23:ee:ea:91:20:ae:30:4c:dc:25:f2:1a:
                    f1:9b:91:e9:ff:41:5f:85:81:fe:f0:1b:b7:88:93:
                    3e:f8:68:37:dd:02:e0:24:29:9d:12:e1:6d:4b:b5:
                    2e:34:02:d2:e2:ec:6e:ef:c6:e5:71:c5:d2:50:2b:
                    da:8a:e2:6a:83:be:6b:c2:d6:fa:7f:f0:19:cf:5c:
                    d9:49:e9:f3:4b:5e:0d:37:5c:a5:d6:e2:fe:53:cc:
                    d3:52:51:1a:18:c8:bf:07:47:9d:53:7c:eb:f4:68:
                    76:71:7d:01:2b:b5:7c:d9:2a:45:49:5e:29:4b:8e:
                    6f:b1:8c:8c:82:c7:6e:f0:14:b0:0d:04:ec:c3:4e:
                    36:0e:92:17:18:40:9b:25:0f:f0:71:f1:2c:6f:06:
                    d0:ad:ec:ab:c1:d5:a4:76:26:14:ab:e3:b5:b4:6b:
                    00:e7:2b:68:52:c5:0c:0b:59:33:0f:f9:f0:ee:ac:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:10:96:C5:FF:D7:EC:3B:EF:7C:E8:32:92:2F:78:3F:4C:3F:37:65
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:da:ef:b7:b0:7f:b1:5a:e3:23:4f:9d:bc:fe:24:59:d5:d7:
         e2:fe:24:cf:89:ea:57:f2:bf:11:5e:69:08:bc:be:cd:9f:95:
         30:49:02:ca:1e:a6:a0:72:15:61:19:d2:f6:bd:5f:52:bd:ee:
         14:52:4b:91:85:a8:31:f7:23:5c:4a:54:6a:fa:d1:ce:82:87:
         8a:0b:65:85:41:2d:24:c7:4a:3a:32:f6:62:5e:36:ee:6d:43:
         a0:aa:b3:7c:5b:ab:01:94:7a:e4:50:a8:2a:5e:4b:50:21:89:
         4c:53:7f:f2:33:4c:1b:1b:58:80:e9:12:91:13:1d:f3:04:36:
         14:88:4d:2c:81:e9:0f:3e:5d:af:7a:ba:57:e6:57:44:66:63:
         73:f1:3b:7b:10:14:ab:37:78:82:72:12:fe:f4:c9:30:1b:0d:
         b7:b7:9e:cf:6b:cf:29:5f:eb:01:8c:77:1f:e8:e2:92:67:c9:
         90:5d:ea:05:be:32:bb:ce:d2:e9:eb:7b:53:77:fb:1e:dc:29:
         a7:a8:20:54:e8:ca:1d:45:83:38:0a:0e:df:aa:a7:13:8a:b5:
         9e:bf:df:b9:52:1c:ab:bc:2f:79:c0:29:1d:78:e7:9e:b9:4c:
         f4:42:dd:ab:e5:c9:cd:66:9f:4a:a9:2e:3d:26:9a:44:95:f0:
         49:bf:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----