Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
File:                     8EpYBH83u8BXlEu_jK2HQoeVkto.mft (raw, json)
Hash identifier:          tfPq6wiFvt38Z7Y1xThAcaPEytuYPfACNGn909djKns=
Subject key identifier:   78:97:E1:16:AB:07:22:49:63:D3:06:F8:96:1E:42:C7:6E:99:66:D9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       0196CE3D53ED4214DDC1AD0CB245D4EEDE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
Manifest number:          042B
Signing time:             Wed 14 May 2025 10:00:47 +0000
Manifest this update:     Wed 14 May 2025 10:00:47 +0000
Manifest next update:     Thu 15 May 2025 10:00:47 +0000
Files and hashes:         1: 1-aQ0GnxVrEVlGjWCi3NaYsPkesg.roa (hash: +3mk2sWVkE+uaFZ5ZJrtNPPCIQ4hekmcEYuQDX27zMs=)
                          2: 1-hiM7eNJrrB4KxTl5odRANWPNSM.roa (hash: JZintPfYJlodCt3O40zYeOK96s2SUQ7yU+YQLIM3K3U=)
                          3: 16nS9ZVI1S_xIedGLDT0GogWFk8.roa (hash: 3vo/ahGqFtN4lhm2wpJoRKi5qUwgScl2x0ipjOS5FW0=)
                          4: 3LVaNB3KvQ965s6UullJWswPfp0.roa (hash: NBkjOrmtXqy4cOSfRjbCEsV2ppZ0hs9sC51ZL54sXAY=)
                          5: 4NPOuZp1bS_Uz2zSSwivAhnZ4p4.roa (hash: iVhV6w27cKWM7Kk6nyuzQNw7vPaZe1d0NSCMwXzWiZk=)
                          6: 7M4uvN9sxhoPn3aqlvD3scYtJGk.roa (hash: OmufU6JcmL9dKo1LMsfdtAf23qPN90eSFInQhtTCwb0=)
                          7: 8EpYBH83u8BXlEu_jK2HQoeVkto.crl (hash: mTioUKtznWr27/gzWYphoqBQtvscq9xTBOr9P4lEB2I=)
                          8: 8fZjBEylQQ7G4Nfq9kl8eMsKPWc.roa (hash: ePHu4BkekyMRgboF78REdrHsv7fK/ffAGw8dzHK32Xs=)
                          9: BPnLchZ5eaff_Txl2HsyiCoZeD8.roa (hash: ea2YSPSOGF9z6JHafxJIW9lVHsadoP3mGOg/OZ8Dh7U=)
                          10: DyA1tFdYex1CDIuoIphpHH3D-NA.roa (hash: /CBkdq6Cl/6kWa0GXz6XPerkjcFWEwnxwHHFN4+nkf0=)
                          11: Elw5UXhx2UaEnLV2EuqtJ32OHnk.roa (hash: ja7+j+sQT6nOers6AAdzRunO2qy0Vf7hB6OxEdfVESI=)
                          12: Exmz-bkpR5hUSWGHLwLIMLc2Yq8.roa (hash: jcbl+HMqw20dWPkAT19tZYwQ/gZKFFWGJc2Eptz2PWk=)
                          13: FJa2Te4IdXZzDvWXox20MrY4wdU.roa (hash: gGBM5iRrWO+bwKCOQfVZA40SaoM6PTWRNW2N8HN/6as=)
                          14: G0UVoOQ8yVB9V1s57eJhr5aDEH4.roa (hash: qzVMfko1qrcYhU4koqEeXTwaQuZOFCHnfY01TTxgRAU=)
                          15: GMbSDfAevrOxJ5cPxDTION0X5XQ.roa (hash: YHM0CnCUyDsEfug4VKGtOO0gWnY2QxJdtLt6iKPesAE=)
                          16: HQRNXHsfn6gVh_mUFTiuf5jKCxw.roa (hash: yNitZET5RJZkRrmEE7A/phM4T+s+wOhxD4CXOz+3H8s=)
                          17: IBcrQV3Tt8YSA-XQBHFBDTdB5eY.roa (hash: Xm8OwW8fqybxpg0qV+RfRWFgdtf/8+NPsHoKgHyUgjg=)
                          18: IfUSZ47cuzQulgLsruCHYRsa130.roa (hash: EUnu8q7eVqfHutdwfxzXbgFkgleKe14//20XLpaCuak=)
                          19: Jc387TmtDV_DzUPYNeoIg9E33A0.roa (hash: s24NtE5UXDc2WukE00Cp3sVkp7j43WWazSrbu1sWBwQ=)
                          20: LYMZh-8zmmJQALRoTJSiAy1xVXQ.roa (hash: G06Sl16Ng8eeY3gv7tMq+fX/m50tj1xA9Uh5PHKbHb8=)
                          21: M17OGFxMCHXGm0t10p_mE7wR6Tc.roa (hash: X4vr1PuBZ/dvhmklnpBOkIGPC5MMC2CVZZ3r2SgR0KA=)
                          22: MMY7e9orpXneAd1jpUcoqhrPNGs.roa (hash: xlAsoBQdjoIMWnYsFAQRaRtmSO+WE//QF5drnQ0y98I=)
                          23: N9lGBNANMfTIMRn8Jiq8tTAP9AU.roa (hash: /syDE6BHpSq20HIZj+8xFI8NVgoDC4MSqcrWeHN4emo=)
                          24: OHPK5224ms-GF1aJCPsDsb357QY.roa (hash: Zr3j7tjk6Qy3/rJEuO/M9v8x8pQYbNlF5/AmsRT9r0o=)
                          25: PXEdZVvSMb6Ea_s8w3c0j9-yyNE.roa (hash: YW1UjO31lL0Fn0BsRdsu06vc+hRyUlv9S9fdp5M6KFQ=)
                          26: RdK3FxnAhkYPX98yWfjo7DAeI08.roa (hash: rbc9T8wFnuY1eGGhGKpqFEjZU7Ty+f9Qb/UTCRgvkZM=)
                          27: RnHYZETtZEovf9Beb8Zw2Kq1VgU.roa (hash: MP+saCc08R902hMq8aAV6CgytaJDTwftQ8Pzfdx+aqM=)
                          28: URcS44h5p_ee9dsnwhclak6T8jU.roa (hash: PloYM4VGnKlDlq+Kl1UcDwczYmFtR6608rE1ZX7nGRk=)
                          29: UUkaqr9snPAYCuLUqRpebrsPS3w.roa (hash: GjZsudpn1zZ5LGPOhxlqRuUgcQfu+Do5rPRjHtQebAA=)
                          30: WnTdhYImrAblkURqwr0fOZCZkGY.roa (hash: fU08TnIoVMIfXoWGqkKUCjFy0riK446KfwVJ3HP2NHM=)
                          31: ao5kHB6uQR7dTkWrMfH1pOh3vT8.roa (hash: K6xsq9gjDkswE1JX6e2BmIRfZg9kSk6bV3B5UrlUmoE=)
                          32: baBxVxKYocLMp3OrjCBJnfA7nkw.roa (hash: aJ1ck3Zmvmz1tHfRZp4Iok52+Ye4C+na83RusZJqnq4=)
                          33: bn_tXcfAQ1KLYjUn5SJy9KXTinc.roa (hash: ZNPuYyvo5iyCfUlUv7/WHZcW68TZ6wk3S21c9BS8NS8=)
                          34: cRs9np0-Hb2Pp7Gy4xvjqlSG_08.roa (hash: 8YhJCGrKf2Y8cr/A27+l5ullMea9kiCVBRr6JpUlM+4=)
                          35: cpTY6qX2f47hxdeXGQo0SY-yxBw.roa (hash: be8pg/PeBaIU1DwD7XMfsPAPC9zrZ+0COMwYwae3S/8=)
                          36: dYiyMxBIxfsl6RVPznRWAdlaoqE.roa (hash: eLJsFKH9UdrJpV5I8lq1iv0Quc7VQlKQcS4onl0LwUw=)
                          37: dnI4qgcDjYpTj_JP6l78yLmJaS0.roa (hash: Tp69kzkTS+SZyymArhQ4utuzl0yT2YEEPPHPgNj3fK4=)
                          38: fLbQB6B27HpUALd41M7mwbhRKt0.roa (hash: ezTCMXSZaI4r9mL4Cuel+B5CuJvdzymWM1WlLbgkKyM=)
                          39: kOBga6etiZVZzmZl7WKf_MvjPdM.roa (hash: EjRGbQWwCltfI2wPUkjaoS0GcuhKYWj4cY54bpUjuUo=)
                          40: lMajzcJDPzB_F-VCGZzdwhSfpg0.roa (hash: buzJFfwDBVqbVE8oCgmcIkz9LpTiGy+dRrAKG1LrA7k=)
                          41: ms9J_lkzJUc1PlPtCHGRd-S1WbM.roa (hash: c4CvUrcWF3YxJ86jWtuqaYhzAZweWLDMjEKOcOkdOrg=)
                          42: nXlLKOpXi-sJyTScZU0PCKJGkFE.roa (hash: hvgv4aTQjVlXz8nwn/MxuT2eA5jAqXBXVi/LOKhCeOE=)
                          43: oMzwmstp6zrD3At3avSoaBK3hAo.roa (hash: 8PnyI0kL8i6bYnpsnoYp4rBhTUwwbbvugRAvfcmzU5M=)
                          44: qmB76vyZqCg7p7QAzyJ2yMLxMCo.roa (hash: SUyqBROF7gyZH9RGeUTqKMx2Kc5Io2yfZMqSxecVy4c=)
                          45: rmuqy-xExjile8qJp1uOFOrQbPc.roa (hash: FBnylWmYGnDek9Q6c4M/TqkLAHqiejS8YPOAIKdvnTw=)
                          46: rzSYXMd4cZBCRD3TTumHD44RWxI.roa (hash: epTeUZEF9BYSY3NHSPNkCp4tHAAekmILWGBWAt+JPsA=)
                          47: wkRQLb3GIywGTBHgS-3jW6Vf-4M.roa (hash: g4wY9UsqS4lC+ooP/XiCVTIA8ZFynFyWVIR/Srx2dK0=)
                          48: x17WA3sSg4P38AbB39frPJDqAYE.roa (hash: 1O3Iaf1UeQKRgcFwqZv/5ixCUOlb4OICtJVg3TkBghY=)
                          49: xlz5cxlOP8wU1rRS7vQDBbyZbAI.roa (hash: TMgufs18Jyzo1gVxoROmRG+tYJ3b8XSa3gyzmDIKCUs=)
                          50: yeBEMK0WOgYdMFICJ8vZ_cWOme0.roa (hash: qiOINY/cn8YEDAmuQTaGlkCP5P8Lvc8wEzD+/y83uA4=)
                          51: zTeR0g5KBHiT06WLJWwrQn0fKP4.roa (hash: qD/Oro7lLiXcXWbUZHSIDXyhNOVhdsxWgG4/W0eZ46c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:3d:53:ed:42:14:dd:c1:ad:0c:b2:45:d4:ee:de:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: May 14 10:00:47 2025 GMT
            Not After : May 15 10:00:47 2025 GMT
        Subject: CN=7897e116ab07224963d306f8961e42c76e9966d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:f4:88:e3:93:26:36:9a:07:7d:07:3c:2e:
                    ef:18:74:48:5a:2f:d8:d6:41:93:57:b4:01:a2:35:
                    4d:07:c2:fb:55:c0:e4:f5:72:06:f0:da:2c:49:b5:
                    5b:1d:b5:83:89:51:d4:15:77:5d:e7:2b:37:4c:cc:
                    7f:40:b9:de:70:01:62:da:91:ad:b8:0e:d7:eb:e5:
                    32:14:0f:82:a6:26:1e:0a:ad:66:33:ed:2d:ed:76:
                    35:cf:62:9e:cf:b2:10:69:18:cb:31:d1:71:b2:b2:
                    b4:c3:e7:60:11:52:ed:51:2d:e8:2a:1d:a5:3f:d0:
                    6d:7b:4b:04:cf:d1:18:53:35:0c:e3:88:98:a2:90:
                    ab:d2:47:70:88:82:85:33:e3:d4:3b:ae:b0:68:cc:
                    96:e0:bb:8e:5a:63:af:c4:f7:64:d6:f9:14:70:c2:
                    fc:a6:60:c3:51:95:d9:de:09:f2:c7:03:bd:67:75:
                    67:49:15:57:67:89:b6:48:a1:66:86:99:e8:d6:55:
                    91:9f:40:41:62:f2:4b:d8:8f:6a:ed:c5:8f:34:7b:
                    c0:69:b3:7a:cd:66:6a:1c:d5:d3:bc:dc:24:27:60:
                    56:ce:d6:71:87:29:61:75:77:b8:45:78:78:14:b5:
                    2f:33:d4:02:cc:02:52:eb:14:ca:8a:52:9e:66:9f:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:97:E1:16:AB:07:22:49:63:D3:06:F8:96:1E:42:C7:6E:99:66:D9
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f0:d6:29:e1:df:8d:60:aa:de:9e:4e:2f:98:d5:25:01:b5:
         46:c3:c6:24:51:21:3b:68:a3:52:f6:96:14:42:4e:72:bd:f6:
         ad:0f:77:63:e9:26:62:5c:38:88:7c:59:2c:b5:8e:0f:ec:fd:
         6e:15:62:66:4b:97:d0:dc:ba:0b:3d:03:cd:79:86:88:39:2e:
         64:53:18:40:71:91:d7:ef:52:ec:0e:c9:2f:f7:b3:fb:ef:f6:
         1d:ed:81:26:5f:a6:20:f3:a3:fd:34:fc:ee:3f:4a:a6:25:58:
         6e:c0:fd:7e:69:02:20:ae:49:a0:09:21:69:6c:4a:d5:84:2c:
         98:58:da:e6:b7:ce:90:82:11:92:2e:cf:28:f7:26:81:32:3f:
         a2:c8:ff:d9:14:33:0e:2f:df:11:5d:38:71:c0:ad:c7:8c:6a:
         ef:82:4e:a4:a8:92:96:d3:3f:80:fe:36:d8:56:d0:63:25:c2:
         cc:79:e2:71:33:35:40:d6:10:3a:09:1d:1d:02:1c:63:d8:6a:
         a5:1c:16:d1:db:d3:03:c7:98:40:c8:fb:13:93:36:3d:4f:f9:
         0c:35:2b:87:3d:26:e6:ab:0e:28:eb:8c:3a:92:fb:21:8b:29:
         9f:75:85:89:6a:6e:8e:a4:cd:9e:da:3b:e1:49:9b:93:17:c7:
         a4:fb:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----