Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File:                     ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier:          YxfrY3abLI2OiEK0dQ8U3P/+HW1iVrMYfP6yt3qjC7U=
Subject key identifier:   64:21:BF:65:36:78:4D:D6:01:68:7B:50:3A:D5:B8:D4:AB:E7:DE:A2
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       0196A3C0E472961992F9575CA80249F4DE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number:          161F
Signing time:             Tue 06 May 2025 04:00:49 +0000
Manifest this update:     Tue 06 May 2025 04:00:49 +0000
Manifest next update:     Wed 07 May 2025 04:00:49 +0000
Files and hashes:         1: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=)
                          2: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=)
                          3: 4ukJa7HMkT7DBb2bYcfynHYUCtI.roa (hash: 50MwC4CJiyXyLJrN7qbX2kdlux7tIAVe2IdkMEIjYog=)
                          4: 56ynW-tMrHzaNsG7sH1wdFERI2s.roa (hash: IKfB0xjiL+k3DgvsHtHSeQu4uN+X+KGo7/petrFvOV0=)
                          5: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=)
                          6: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (hash: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=)
                          7: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=)
                          8: BBKqIumEvQjL8b0aHvJsG7_dv_w.roa (hash: sS+JRPTTyxHDwSasc/B/8kRhyr0hzWqPDr1h36aZ+vc=)
                          9: BEw66KwGaDpNGuctYyTzRaeDMKY.roa (hash: 2Cvt+YK8270i/MHi20fdRW23pfUye/fJdXAY9zC78Hc=)
                          10: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: Fw5vcYSJWQfkGEO97lU9E6/OMokL3X8YuErfvF1RQMs=)
                          11: Gp66wYREOc1h9eDQ4Jl1zol0dGY.roa (hash: cbxRjqYTk6aDdWomh1V0dsmExBRlWyKb4b8IjMaBUTM=)
                          12: LTyECeNCqqjLKolS1FQDHB0szi0.roa (hash: NMqquUf8k9Vi9iSmBBgAYLF5elpajsX2duO3ac5f7EA=)
                          13: NKKNKwKeM7BlTiZnda9Yz8Cz51k.roa (hash: eOYKSrPX4eKXl8WLWzwJl6t743IA9dMacABMn1dWxLc=)
                          14: Ojlwg9x75cm9yCRg1uRbtV9JzOQ.roa (hash: ogbfSoUm1OyL1fGJJ+4TLmGx+iphSaqafx5096ZmO90=)
                          15: PDCQ_tcZw8HWtOvB4qdfFfnGv2w.roa (hash: rOsSzp/2Qn7zzipRULSHdV5Ez72cOtvODtaM0ekkqKs=)
                          16: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=)
                          17: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=)
                          18: SJHvhaCpGVpEu19gR74F4_s00OM.roa (hash: QYvmEj267N2mBcF32kZnO8aAG/fQkwII3VAx268JC6k=)
                          19: TOO1C7Nfoo8I9jGT7tEPWovt-Dk.roa (hash: yJoNXkc40BQiMjXHd4+xV9gjbcua6Ni6TVwfda9wbCE=)
                          20: VQNQwkBf4DKiAyptu1NuzZNk1DE.roa (hash: KvtJJO5ZGQ49qNKAGMorGsOIb3EaRZS5YhJcNfPGvO4=)
                          21: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=)
                          22: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=)
                          23: _LfFtEsXYCblpYFMFTx8R3UNSd8.roa (hash: /kHbXgsOfLV12xroXM3TmLwBBc306X8k3iTXevjsVe8=)
                          24: cxwuK9Z0rB7HylKEUoR3Yg2ezws.roa (hash: ceM/yHHu6KSw6DQvKp1J3q+MTikdPxdgqZ19CLACXgY=)
                          25: f8HNGqYZ56HDzKMkA97HvxLpDaY.roa (hash: UaI0iT5qEh6DsVjN4hoPGEtmvVSAkZnS69Ts1ZSzz7Y=)
                          26: g35tTn32QbT-bAwoUi98fNimhp8.roa (hash: 1Z+8GgnLMcbNoyJqOCvdplvh0vT0gEGnRnHP4B7CkZ0=)
                          27: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=)
                          28: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=)
                          29: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=)
                          30: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=)
                          31: s0Lr7YuNvhvXYPcKrrFVoUy-LO8.roa (hash: a5e7ib7Q/DgMeBDM9u9FOonj1h8M13aRP36qAw7iBFY=)
                          32: tjYwqQeBxSVgFYzX84lkDNu9j30.roa (hash: gJ1kbe8SJbUDjR4HicbmD9bqr8NrbADsMiLRzf2DJUs=)
                          33: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=)
                          34: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (hash: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=)
                          35: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c0:e4:72:96:19:92:f9:57:5c:a8:02:49:f4:de:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: May  6 04:00:49 2025 GMT
            Not After : May  7 04:00:49 2025 GMT
        Subject: CN=6421bf6536784dd601687b503ad5b8d4abe7dea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:1c:4a:53:6f:d1:fe:6b:c3:83:2f:92:16:
                    d6:e4:d0:de:8e:d8:f8:0e:9e:12:0f:5f:8b:00:6b:
                    69:d6:3a:a8:e1:1c:8a:d9:92:d9:0d:56:f4:8a:d0:
                    72:d3:9d:69:70:89:70:05:0c:83:58:5d:b3:37:c2:
                    22:e8:f3:cc:c1:61:27:38:12:f8:fd:2b:b2:88:95:
                    b2:cf:8d:49:67:e1:36:67:94:50:ca:a7:9e:0f:8a:
                    2b:39:53:57:13:b0:8b:4b:51:af:5c:e7:42:d5:10:
                    92:67:a2:62:2a:71:b8:19:ca:68:41:67:53:ca:55:
                    e5:84:cc:94:95:07:af:7c:9b:4d:42:b4:77:3e:d6:
                    0f:0b:14:88:b2:cc:b3:8f:f7:42:f9:7b:94:02:36:
                    40:78:6c:48:b8:f8:29:85:19:d5:55:18:d4:33:d6:
                    e3:29:bb:70:44:10:54:1c:b3:5f:0c:42:24:68:a0:
                    2e:f6:79:43:98:76:5e:a5:a6:f4:8a:ca:12:11:89:
                    e4:4f:9e:a8:6e:2a:97:1a:a4:f8:02:43:36:aa:b8:
                    50:52:60:a2:6c:75:9c:85:1a:cd:6c:63:e4:05:64:
                    85:f7:16:0f:60:af:21:58:16:92:61:7f:b7:67:c8:
                    ab:9e:00:04:10:59:31:12:ff:32:ba:26:84:5b:03:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:21:BF:65:36:78:4D:D6:01:68:7B:50:3A:D5:B8:D4:AB:E7:DE:A2
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:be:de:aa:59:b8:b1:36:25:05:3e:f7:79:70:84:e3:6d:
         5a:bf:97:3c:17:b6:b4:34:f3:19:19:2f:37:23:c4:09:9b:73:
         0c:45:50:79:93:c8:90:26:3e:41:0e:c0:a3:21:05:6c:03:1b:
         ae:0f:8c:da:52:19:cc:97:d7:d7:11:8f:b8:2d:5e:ed:71:17:
         d0:ee:92:3d:7b:5d:a6:77:6f:d3:3f:b8:f4:3e:8f:18:04:5c:
         7c:de:d6:1d:3d:a0:fe:d2:c7:6f:8e:d0:76:72:0c:ac:5c:f5:
         63:26:b8:44:a6:fb:04:51:0d:93:77:c1:2a:46:73:64:c8:f0:
         1d:a2:c1:80:b1:2b:2a:b6:3b:f3:17:e1:c9:bd:b9:27:bd:1a:
         a7:fd:be:fb:36:0e:18:ed:29:12:3b:7f:12:1d:19:89:1f:37:
         73:a7:9e:66:56:76:8c:07:87:ef:71:c7:65:8d:f5:08:98:c4:
         a7:10:21:1d:a4:8c:a4:84:61:87:24:90:44:37:db:33:ce:5e:
         1f:59:7e:24:a7:e6:48:31:db:4b:7f:c9:8f:df:55:a9:78:8c:
         43:89:ce:2b:1e:f9:da:1a:81:54:e4:37:0e:a3:6a:b0:42:c6:
         c7:82:c9:f3:ee:19:c9:ee:fc:15:26:bb:e2:31:bc:aa:fb:b2:
         fa:7b:47:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajwORylhmS+VdcqAJJ9N5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjUwNTA2MDQwMDQ5WhcNMjUwNTA3MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg2NDIxYmY2NTM2Nzg0ZGQ2MDE2ODdiNTAzYWQ1YjhkNGFiZTdkZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ0cSlNv0f5rw4MvkhbW5NDejtj4
Dp4SD1+LAGtp1jqo4RyK2ZLZDVb0itBy051pcIlwBQyDWF2zN8Ii6PPMwWEnOBL4
/SuyiJWyz41JZ+E2Z5RQyqeeD4orOVNXE7CLS1GvXOdC1RCSZ6JiKnG4GcpoQWdT
ylXlhMyUlQevfJtNQrR3PtYPCxSIssyzj/dC+XuUAjZAeGxIuPgphRnVVRjUM9bj
KbtwRBBUHLNfDEIkaKAu9nlDmHZepab0isoSEYnkT56obiqXGqT4AkM2qrhQUmCi
bHWchRrNbGPkBWSF9xYPYK8hWBaSYX+3Z8irngAEEFkxEv8yuiaEWwMfBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQhv2U2eE3WAWh7UDrVuNSr596iMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxm+3qpZ
uLE2JQU+93lwhONtWr+XPBe2tDTzGRkvNyPECZtzDEVQeZPIkCY+QQ7AoyEFbAMb
rg+M2lIZzJfX1xGPuC1e7XEX0O6SPXtdpndv0z+49D6PGARcfN7WHT2g/tLHb47Q
dnIMrFz1Yya4RKb7BFENk3fBKkZzZMjwHaLBgLErKrY78xfhyb25J70ap/2++zYO
GO0pEjt/Eh0ZiR83c6eeZlZ2jAeH73HHZY31CJjEpxAhHaSMpIRhhySQRDfbM85e
H1l+JKfmSDHbS3/Jj99VqXiMQ4nOKx752hqBVOQ3DqNqsELGx4LJ8+4Zye78FSa7
4jG8qvuy+ntH5Q==
-----END CERTIFICATE-----
Generated at Tue May 6 05:22:26 2025 by rpki-client