Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
File:                     jVnEMj92fOT_yF2q0gi5DAT70-k.mft (raw, json)
Hash identifier:          HLLUKKEspcWRZ9IWpBlXbZnLctnUdqd6rxxPGd00xh4=
Subject key identifier:   77:A1:9C:92:6D:86:F4:8D:DB:9A:50:DC:96:13:B9:B9:19:24:06:33
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Certificate issuer:       /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial:       0197B8212B47FCF1A6842ED4E82368EF10FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
Manifest number:          15E2
Signing time:             Sat 28 Jun 2025 20:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:10 +0000
Files and hashes:         1: 1-bXCmOO7MByRB2cKGxFoBtApB44.roa (hash: KZk+Kqf5DP/YwFWz5wHR4Ho4S84kOAwSuXiZDD4nq80=)
                          2: 2QUhVLq-qunSYiDYRxwfyOTts9A.roa (hash: D1zUxpfKGnv1SlGyahBlg+dIothtUOjyZqIRX/Nsk/U=)
                          3: 3mgP9DrHq_E84M4g5nyj39KGrww.roa (hash: JjU2E2yM3qXKm2+bX94STgIawOIl+f3U2gXV8ORDSaE=)
                          4: 6x7jPbmHAR3nXiTHCYVvspstJQA.roa (hash: dMCDn7tfJdIyaEGGGQ+8OXtcvObKJWVdmbCQacmx/dE=)
                          5: 7pl-SuA3Gp3HIl0-4oO-hbqh1VI.roa (hash: 1NAj5UfDOdJhzCucpweNiw3LcFLBqoVu4h4q4LN/d2E=)
                          6: 9ATHMDpOhgxh88NgrqIA6dVM3Gk.roa (hash: Ds72d/xwNa+mvoqRa6cLUlNcXhPkz/dsrYaEbqH+Oh4=)
                          7: AfKRqLSzH6502idiDx6FWbmMGUs.roa (hash: 7n4MiMOQ4bPTurFY5QVijQVZeMHF92INkEsS41lcYhI=)
                          8: BMbNy19GeL1bX8neyMsJyK4aEIU.roa (hash: kmgxNAiXL4L1yGKb+6c+ZIfWxCYiiahIHB6dWkzUY98=)
                          9: C5quferRLbMCQHksIrOQCe23jHs.roa (hash: UmsfV6ddTwb9nJIjHMlRsjJcTxKLX3HNGQU3fUE+QvQ=)
                          10: Cvz8gHReEWuuN790Cjz0aCdsRwM.roa (hash: rkQdQDxszu4GAjOaMEiooNtTlY/YHd4/uxJaT5JC9RM=)
                          11: DRqkuBEinQOqvGRLtyttGFuAw_A.roa (hash: JVCGVOt0ab/NpeMTi+g4KKvOXMxnz2j02xCj4KzemQI=)
                          12: EoaADIl_LSn4PTQDKd1ZzjG0AGg.roa (hash: QhWdZKgKEBiDDlAwI8AUTWfu/eEM4dQdoqBKjsEhccU=)
                          13: FYzC_o_rv0oba_yIPB6_C_2LqAs.roa (hash: HvSbeKjQHpV9isPlfEMfiO0SF70JEg4qI20FPG0HkoI=)
                          14: FrvqkSHwjbblJ9JCevEy3LmN2cA.roa (hash: tLNihWutttaa61WHUIyQ2PH1W0/ZUvjaDvlOqFNnZbg=)
                          15: I2RMpoehzZUh9-QRH1pg1Pxoj0s.roa (hash: ex6A31hRg88+duFCCpZlcBqGssiM0JoiLjHCVzjtA8s=)
                          16: IM3jkTphC9VARelZMzYXbS6OoOk.roa (hash: OSTpwFaAnjf89a8v2pPip+6H79PMOvZ32w9oktsxC38=)
                          17: JgbZ0ql-oOG12xXVwl4EnangI1U.roa (hash: Dk4gFZlEWmjuZCA68KJ5+f+i9m0ZGMrukxQ0CZ40EBU=)
                          18: KHYzoNS7whQWhAX6wwWz5xsXODc.roa (hash: INDmVEaHcrnM4+K9Zkf8Dd/5wuYRgb4Len9a/VGSdQQ=)
                          19: L2LZHhkDEnyP0Ci3wPd3ep-m3-c.roa (hash: ST/eP+PQmM29+aEnXfcI5/S1IgAjQkXdrCqR3PhW+eo=)
                          20: LEwFqapli5PxNuCUoQySFZJ8NTA.roa (hash: 0bCoC8acOLS1UmGJWuUOLHXelEEtMHRmh0LXsAUSe4w=)
                          21: LXS2q_efBkm47eksjaeAiqtvOCo.roa (hash: oVtrton7b79HRlpDE6W7iWblifK4EUoN8uBqv/ht2Ng=)
                          22: L_qI58UHz7A1G3jr9KMVQdw-N8M.roa (hash: npu1F2Ny91U219oriv3ulczEgxUKtP2Dyq68OCFdu7I=)
                          23: MJpROYFYcY4fIUUe6OPvBVoZh2g.roa (hash: imMSKLBJvUdfZ9SIRkai/+5VibeeDQw4Db0FzbkbOzA=)
                          24: Mt8hC-xjYQlC-N6qBidIsHShzXo.roa (hash: sWSpbylQcehNgOmPoTPaNcGeqPpTTf4vD2YerrVnAec=)
                          25: N3QO9mAJ3Kah4lcu6LfQJpnNPaA.roa (hash: EhgCDUbDhlo/u3oroq/Vf+OE/EjUn768F1keGXxvXXU=)
                          26: NAmoDnUjsSUgyqQNSqaeJioeWC0.roa (hash: G+2UFEHtuAD4NNq4kS+cLg5NJ3H3PpatR/iew7xB0oM=)
                          27: P1E18rB0vudcCgEJk4cHNNscKe4.roa (hash: I1pAXbx7hKq9ts7g+6X1gt4WvS+w/+PEIRGV9MlGl/w=)
                          28: TTSbgeEMLa3E_ET89kmhbvWRt_A.roa (hash: 8pa/N1xt8ugY+2hfLv/q6JQGYgRfNEDx7qaPGd/Mb/0=)
                          29: UHTtePt1uACW2YkzvmZSU1JXU_k.roa (hash: 1Ld3N+6FJyke3UOzPFt7uuXO4KUSVmdmHZT6X2OXbQw=)
                          30: UMbeRLYaYfBz7ZqoWAVk65ZAKDw.roa (hash: CMu3V8810nprnNp2zv9tF8oCmSsSPTpzL8+xyy/5uNo=)
                          31: V0lHMTRNh6Z9X9abKSEIj6P9raU.roa (hash: oljkCUdyMsQrd7hyLC/crb+L0ZBGknvkLRO3oauiPiY=)
                          32: VX884Jp0L0-mWQ8rBHmw7E9igJw.roa (hash: sqHY3cW1lutniIxIgW80Si0sFONPkGWAxJpWIvbCrzc=)
                          33: W7jW7elq9s7zjaK4-5hCDYgKdmU.roa (hash: UW7ec4el5UceSQtRwMeWy6VKhs0qbAN3t6WafoxmZFI=)
                          34: XKVQ7IXMXTOOtulO1uMyTiIBK_A.roa (hash: YTw+Tfr8lNPAno6Flm19cBYBnvcGbiU9Zlxuzz61kaQ=)
                          35: XrusPaGpGNqoD7iZ531THJ79emU.roa (hash: eySOqFHCiESajlHxeD/xFXpNWpahGrGfQWM0FTNr5MY=)
                          36: bBnnNEw_Enofyae9K82jPfLHcm4.roa (hash: 5ZP5NqKpjLJceuyxINPHdqu5aLVoZVycTc6G5n8rWZU=)
                          37: bQYL7CS6Wmwh_Wiu6BMmGj0kiCg.roa (hash: 38/TJOeKb5atrScxgyPeLNXd8DOPfEy2ep0eDnYP4BI=)
                          38: bQYTZW5U3iqNsbft6bV_DhfzLuY.roa (hash: fln6b4E3QyBcqXd7/6gIOmXixj+xnAym0PZhNWWLM7U=)
                          39: bcASiS9P934Vg-sy3L8qyKyNBm4.roa (hash: JqTtwmNOJq5VvTUmveGFEDUhTx7j1UVVu5VAz13wv38=)
                          40: cHrqG1kNUS1CYIyeDpx1eAA0ZJs.roa (hash: zkPVDnObrepzaJvXzbvs6uE0l2sUph/kYKdG56cmSw4=)
                          41: cgzTdEZPmNgBOOy4ZisbnPg33DQ.roa (hash: dyF7y8ojVlwglzB7vz7ngYfh2GiqNGPUjJEcuniSr/w=)
                          42: dPWQRCK8tRywmupRDBF6DjHlK3w.roa (hash: x3kzJU8BweqPucCaALH2PYkhzYGBJVs7x16v7REGfN4=)
                          43: e4oAR-PtFLFvLGVK1M5U3IlL_mI.roa (hash: ANcg1f8SMyG1hFTSDhwpk4pnz3UDRFkP3FN2jTIR5tc=)
                          44: eEphrrq_SWbTHQZEglpjykQv4Qo.roa (hash: T/9366RoPEOeXWZW+d95Urmtc7CVmtPsbS48Qdr703E=)
                          45: elDZ171ww7UWUhqrCrNZcvBA8c0.roa (hash: 93dwoviJD40BU71DrS7pFF6+d00iUVutOL3tUmjVDro=)
                          46: ezrVSQ0ubysLZBIp0U1n5_nLB9g.roa (hash: UUGsREmH4B6bDZIO+6B/C16eYMW9FgFYSsuf8rM6E4M=)
                          47: fH6sDXGetVRI3hPF5HUONeCp9Wk.roa (hash: TP0W3HK5IE4cMM3rJUPFtgS4EyWeD7TnO/X/cjEszA8=)
                          48: hUSYkKDaeMUF1V8rMJzw3jPzXXM.roa (hash: J3RggwpIZw0ObxGVEReL8wOWxfUPPiYQTge9+vFLRbg=)
                          49: ip2R2Tisi5jKbc_qdgXBOWJFXtw.roa (hash: 5bdUYd5Eza7CtSh3uHJB03RxYnN5gu3Ya/NrYpmoSqM=)
                          50: jKfvj4Xywc6X63DWkdaMvg1-ltw.roa (hash: UxMN7VGhqJiLMUgCUidSvycJhqdsfBE2g0NQS1EFzRo=)
                          51: jVnEMj92fOT_yF2q0gi5DAT70-k.crl (hash: qjzr+e5HEasW+covS11dvMwFbIcbH7s7czuMJ+hm/dw=)
                          52: kmseDDPsfZyLHw6lSPpSy57aWf4.roa (hash: TXhaMP6UbjVr4/iaalHGSlVKxmprZPoIEh5A5dZX96E=)
                          53: lRD6maZmBb5U1_WohkEw__Nqbf8.roa (hash: 61xquWrXWN+KUjD8mZcLMIEjB+WB6ZCJWf6rzFTdXjI=)
                          54: oFSBRj33665d5YAokVRWa7tObUA.roa (hash: q6t2tZyNypzSEW4SaiqrvLTavpWbpUR9zN70CNvQfRA=)
                          55: pG1Bdsuf0_FV53a0V5-fXU6QPcU.roa (hash: EE/2MTb7p6dCpTayP3ZWsQTxamGzXh14iXDHyH+GCs8=)
                          56: qgTORgc2jktiJyvMUk6ZEhrMcSE.roa (hash: Hb4TaSeOpI0P2qVX09Xw6mBehAH0rxD+TK7XrVztvRk=)
                          57: rBcfLSQ6bQmfFvYC_ifRhgH0lgo.roa (hash: 1DVPS8TC6XqyX5RftCow/MMKQAL1/7NoIuGKtEc7azA=)
                          58: xBNBAykD7UjoP2A6ym40DYlnoSc.roa (hash: oBy7+mmoXXVFQaYagnQmI+BJwG//i/qwABhTBVrDzYI=)
                          59: yjnwve9VZeaHi-3CXqtllo4WdPo.roa (hash: WA7EwoGEGMljyqpgeJdqa6J+Ku8E4d4I5NTIiFkV1O4=)
                          60: zU_CEmzNekOdGIaV9E-YcQVEgaY.roa (hash: apdCNstDdtuUKl2Ac7+rlBxK5mQ1VeM/Rju/0b+86wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:2b:47:fc:f1:a6:84:2e:d4:e8:23:68:ef:10:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
        Validity
            Not Before: Jun 28 20:01:10 2025 GMT
            Not After : Jun 29 20:01:10 2025 GMT
        Subject: CN=77a19c926d86f48ddb9a50dc9613b9b919240633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:6e:b1:c5:f8:77:ee:43:04:ea:e4:0c:00:
                    cb:e9:87:e1:6c:79:eb:59:38:c7:41:18:06:03:d1:
                    cf:bd:ab:1a:39:4f:d4:7e:59:32:40:a9:96:6e:1c:
                    a2:e4:34:75:ba:d8:82:e4:9b:36:4c:f5:7a:1a:7a:
                    eb:1a:20:fd:78:4c:af:1f:b9:8f:d9:e0:ac:25:e1:
                    a7:15:84:97:5d:39:ae:f6:75:9b:a6:0b:55:63:59:
                    55:ab:89:45:7e:d4:ac:8e:6d:c3:00:2e:07:04:d0:
                    2a:a6:6f:28:2b:7d:8b:e8:62:95:66:24:23:da:29:
                    93:21:a9:85:f1:2f:11:ba:5d:3c:51:d6:3b:d5:57:
                    a0:5e:28:ac:3c:09:ae:91:f5:26:4b:d4:1e:58:92:
                    9b:c3:68:59:57:5a:95:40:8e:25:47:07:ef:ed:22:
                    0c:80:2f:8b:68:80:bf:cb:78:b7:4b:da:34:10:46:
                    ce:e1:71:db:43:6b:de:7f:77:83:37:76:3b:d4:5e:
                    6c:5e:43:aa:9b:ba:75:f2:d5:a9:b0:26:5d:66:97:
                    66:14:3e:28:12:4f:15:61:32:a4:e4:b6:e5:5c:24:
                    3a:25:21:20:7c:a2:38:3b:25:56:fd:2e:0d:4f:4f:
                    e3:3e:47:c8:41:66:5b:3c:0a:da:b5:8e:63:55:82:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A1:9C:92:6D:86:F4:8D:DB:9A:50:DC:96:13:B9:B9:19:24:06:33
            X509v3 Authority Key Identifier:
                keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:3d:5a:20:bf:87:71:ec:61:87:8c:14:9e:ba:3c:52:88:
         8e:90:e1:78:a8:9c:72:57:37:b1:66:2e:11:38:96:ca:5c:31:
         8e:4e:c1:54:64:70:88:c6:36:87:65:3e:89:ee:27:90:46:1d:
         6f:ec:f6:7f:02:68:f3:36:73:fc:88:45:ba:47:a6:0e:35:39:
         98:f6:cc:01:28:93:bd:5e:66:65:44:83:fa:4a:be:00:0b:4a:
         23:72:ce:15:dc:e5:95:b9:33:c2:75:95:a8:03:2a:90:e0:57:
         b9:a7:75:e0:52:64:2d:66:3f:04:20:96:4e:0d:d8:ed:7c:0a:
         58:3b:89:73:25:0c:e4:53:14:cd:9d:05:2b:27:d9:34:83:03:
         e5:d5:89:81:03:a2:07:03:91:0a:59:4c:6c:91:7c:88:d8:0d:
         8c:f7:33:53:b3:0f:ab:79:88:3b:96:9c:8f:5f:8c:75:2a:81:
         b7:d0:17:c9:e4:77:bd:89:9f:ea:cc:ea:97:8b:3d:f4:4d:09:
         a3:8a:fb:c2:9a:b1:9e:1d:c7:e1:95:92:f9:6f:d9:37:e2:22:
         ca:d8:cb:78:88:ee:4d:a4:f4:ae:da:d9:e5:01:19:f6:05:ef:
         93:1a:39:3e:3b:a1:3f:a6:98:0e:2a:0c:a7:a8:0e:b2:f9:13:
         20:30:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:05 2025 by rpki-client