Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          5qnPFSut/1/kgOHlk+RFGIE6djyAZUix9CgByX1K9sg=
Subject key identifier:   50:2C:3A:38:3B:63:94:9E:46:04:55:48:E9:23:5F:88:88:0B:9E:48
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       0196BAED11CAB610C3B7A9BE715498460422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          1558
Signing time:             Sat 10 May 2025 16:00:20 +0000
Manifest this update:     Sat 10 May 2025 16:00:20 +0000
Manifest next update:     Sun 11 May 2025 16:00:20 +0000
Files and hashes:         1: 1--cUq91Mit5QH2cwWSOxBevK3nA.roa (hash: AeVg1wzE8EyDayqX6dUPTOAPPGnggkU3AZQPwR7KISU=)
                          2: 1-wSj_jNbSFZNPKzrs0H7fMlUYPs.roa (hash: QwucWuCpsfVGmeIL4+WbPwDASjNtyxA0uvqhnVE0kXk=)
                          3: 1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa (hash: 1mq5wz/1iFM0nRuaGbWeQP9cbSRi6hrmjA/870kNVwc=)
                          4: 1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa (hash: G0Gifm987y56WK0jOJQu1XmPLu2HpPxSaSdoMhrNoMs=)
                          5: 43W-eGhoB0OzAzZeV-7lIQQDIOo.roa (hash: Fa6j80QC7xY8XwzuoZlxIB/I65MycNffdEY3vuz4Q0w=)
                          6: 4cQzXFxUGlGjBPSq0EGUuwlerqM.roa (hash: RUnB3qpCxRiKVWfppqkGkTOE3BYzOLpwyJhoqNuHmnM=)
                          7: 7y1PMFZ77TvwERIOq36v9qt_I0g.roa (hash: XyYA5RSKyGwMjTqBAMbzkSTfG/qYbYS13qe9sSm88Pg=)
                          8: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: N2GCXC48ZpqX91qBJv3q0sxeJ+pNjUCxMXiqrqMkk9U=)
                          9: 9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa (hash: E45sd3llDs2pTTLi6LJkzrRBxW0QqdLu4AwwGiPWU8o=)
                          10: Bi6ckjMzIjswtGZpm48D-Wo_OB4.roa (hash: an659zUeBPl2S8rcFc9akGr14egOC85nfKG/rUkJZjU=)
                          11: F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa (hash: 7lkthzwPyq0Nlj6C7w8YmFjCDc9WUOXo1l3objgvoAw=)
                          12: GBjsCsDFhAmCrDosbrIyM2oi_k8.roa (hash: QxxcHsFFWLY2BHIJuYq1eLGTUZDCy2Zq1QP773WJCgc=)
                          13: GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa (hash: bhQ1Ond9uTsWLPhHEPCKrqbxdo9J0XGoFGPdOwUnfm0=)
                          14: GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa (hash: UkvxRNX70aIvJXPzKAnXBIMmTpv2f/Y+Dlu3mnma0Ac=)
                          15: HJd9P_PlKCAbara3DxGKUKKnE7c.roa (hash: eUsrGFzXfQW/Dn1ODD605ExEOtBlWFeJQugMdp5/EgU=)
                          16: K64ZDclpadQbVzMQRV2i46uDmJo.roa (hash: tpnZn4EYuI03Em/aELkelIAivjX/DuvgaCfyeISarg8=)
                          17: OOj6UEfy7tJhVvIZwv67cVkbCsw.roa (hash: bFAFslFKUorfRmuJkRc7/SiL4ZsIaQRH0zH9zHF2pgI=)
                          18: OqF2eyJ9Nah0S4xGSjJYn_h3cTU.roa (hash: UaxiQV187imUDaob7M2RSZknrvaHjuJ3BY11Fvhjz2E=)
                          19: P0SW_klNDbhNIIK8YKXaPuabqTU.roa (hash: 5FirmEmGhJEAP0DJn1h14sCEI/dbN7Gdq6ZuKutBsJU=)
                          20: R2zForXg41Xz6ZiOvoYxYCONTtc.roa (hash: w6iKooFVAmcB+szcwr+F/c/HtbTWkbLs+qqPbY5EcAA=)
                          21: Uy3DNd8cAhKYVPioxN7PoymKedw.roa (hash: L7X4DMP3u2TfIijoOqDl6Vi5RU6BP6p/8G5SNNVhw+I=)
                          22: WWSW__MVqK6dx_k6tsS9bRZ--CI.roa (hash: 0n+w/A4d8z6b0u844BV3PGZBGD8lEvEB6AFFqVVHQn8=)
                          23: WeCt8pup8wDWF42xeyTZdR7k2GQ.roa (hash: EDkq8tNxM3yn5LOawEnrqC45Ne8Yoo76GfpxJFb6xWI=)
                          24: WiON6CdHeAs54FIwJq22Q-CMJYQ.roa (hash: 4t1adRl+qe2aNtYrRhoxvc66aXOa5Y+iHAm8U5xH9j8=)
                          25: Wkh7uioWgBi7hYTbHKGwmYv2b2o.roa (hash: y1Qn0vF6vc29BjpVGN0maHU654epEzVd2ncJ5AsSc8s=)
                          26: WkmV1C3n1xckvk24Dg23f_uuw-Y.roa (hash: 4b9CQ+UDGsSD1Yt4Z/0/FrLqdoM9ExyMXp455k6OTOo=)
                          27: XnRkLPnNKKkSG1UWNWWBdV7n3rI.roa (hash: BSh/QG5V0PdqCQRHLmCsYPsMOLFQjX1Hat7fPJRL1hA=)
                          28: YTrCa9l5vP3dQlEy3g4e738RGCc.roa (hash: 7QjYk31Rz2LLsB0LYuegGouh51+CsDDyqSFe7Sy9+c8=)
                          29: _F7ev2MBBxNUWA2zbKywRx1epIs.roa (hash: ab/PBGhlf8KsdKFVWCStEJO1EAqxAF8tNS/JPsSqUvk=)
                          30: bApeGU9pDTxTCcxiN5J5ipRkqMI.roa (hash: NZoPIqG6nJxYq38KIr9pSvoBY19L9DXRzBM19WHpf7I=)
                          31: bo414DK33mQjPnsi2XO_OhuOXVU.roa (hash: DFhqXQ1ALcgUKGfkab9Ecq2SNxSXtHhgzid0rw+LjqA=)
                          32: cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa (hash: Tm+oi/lD++p4PhyCp4bPhVckvck4FHBGPjkqfjDYDXk=)
                          33: ec458CzjY63_tDvq0835iuvNeqM.roa (hash: G8uWZDny6okXGyK8fXhTSuZAQxB4Or51R+hkoXknGf0=)
                          34: ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa (hash: po9RSn1vnUJn8LraWDgTGQkIzqjsRElh5uulYlg6a2I=)
                          35: f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa (hash: 2GF/hcmuZptIjGpBhlhl/n2eM7lvmTB8GpajvQTfO1o=)
                          36: gS472YuNqbJechBg2iBckT3KoLM.roa (hash: FBUuQCDwaticAhPspr/z6ZENec/pu4iMj4JBkdQRnVA=)
                          37: mWetSYOn1BkhZCQeBuy0aNAtp2k.roa (hash: 7QsWLfC1FbX4IQpj2Fc+FdTBylJTVc8Q6Q3mzopMiwY=)
                          38: oMsbWqKig1Jz9KhQZB1o-hLbsjQ.roa (hash: OocXoaK/KzmHtgXJpn4l6UhsAXqtzLQU0zedQi9+930=)
                          39: pSNhVcz4ozKQCN-LCUrqu4lNRzQ.roa (hash: J/f/1amfAJOlGnKb0ytkwZwxYnhSDPmLNiJU63xKnhY=)
                          40: pW41aiqhh4TGOa0SfOJoWwzIC9A.roa (hash: NOVcfPSERPAJVKGKnsOL5db9Ocxsd5SZKJKLS2fsK1w=)
                          41: qPU2_LO_IOLwIw_5UdC9HILGfrU.roa (hash: zovHlBAPS+CTTK/Pgho2T3I/C6ghppduwnAgw0j/qyQ=)
                          42: sIfXnkT6_MznqZrO1Lae926CR50.roa (hash: NCRNDrTiw+6us5+S0PADTvnopFARdQ2lLkezVhE/00s=)
                          43: s_gtffJAdOdCOTF8JrwlspZV70Q.roa (hash: EE3zvO+17D2lS+ma9Jbmozdr5I2JwhR0u6QEkn1ojIA=)
                          44: t1xRr6zeiMtxYaGtbe-W72-oQS0.roa (hash: OyceZDHizIoFdT4fRa8zkuIKpKmh7T2n1xLe+VKJ1cQ=)
                          45: tP6196eoGxZ8sJXtGB2BxyyaQkc.roa (hash: Yg1BpZOhleklDTz62pqYALAo96J1wsRiT1axu+WPIZ0=)
                          46: udEkF_6Cl582j3MhipXtkqh60QA.roa (hash: KGfzfkRSS/8LMCpAd+TJJyVg600JQWb1fQuNDHspP4k=)
                          47: vIJrj75gZXSeJTed1CGI6o-Z5nA.roa (hash: T+o0LnzwgxW5JkSyu3hg3ocAmMnSSVFEWIqTX+78bsI=)
                          48: wuHCt2BHh06Bfff_BuCtG5z_hxY.roa (hash: /M0WlOuHwpu23wrIhCr+n8JWrn1Ijygmq8J4TbPhLBs=)
                          49: yc-gqrsX0Dlayvck585FUtBbJrE.roa (hash: Ks7WQxTUjzq6wrRJQNHa/tYNzP+1BfHd4p2Dur1U0Q0=)
                          50: yugfCm59zW-OCysnWXdRGYmiLPI.roa (hash: dyiopA0j5b5DW/jiTg8DD9JZwVemiDlrthtnV32cs90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:11:ca:b6:10:c3:b7:a9:be:71:54:98:46:04:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: May 10 16:00:20 2025 GMT
            Not After : May 11 16:00:20 2025 GMT
        Subject: CN=502c3a383b63949e46045548e9235f88880b9e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:7e:84:01:cf:a9:e0:b4:ca:cb:5a:f6:19:
                    45:e0:e4:61:af:6d:d2:34:7f:47:39:8d:30:5b:d5:
                    90:9e:18:15:bf:42:ee:cb:18:51:27:30:b7:b6:e7:
                    ef:0d:37:d0:8b:1b:07:45:a5:a9:a6:2a:fc:03:2b:
                    30:0a:57:85:27:d9:70:7b:d8:12:c9:3f:40:45:37:
                    6a:fa:56:bc:94:1b:fb:04:95:71:88:8c:98:83:4d:
                    57:17:7c:1f:6a:ce:18:3e:8d:51:97:ae:68:67:54:
                    d6:b2:8d:a4:cf:9c:62:ab:ba:01:fe:bc:b2:2c:09:
                    f4:67:bd:1e:54:c7:8a:7a:27:b2:19:a1:48:7a:dc:
                    37:b5:82:0e:05:a9:32:af:ec:f1:c0:35:51:e4:e7:
                    c3:4b:44:1f:73:73:d8:a9:25:81:36:1c:95:b8:38:
                    57:c1:8e:73:13:05:69:b8:72:3b:64:d4:9a:b9:17:
                    ce:07:a6:7e:eb:1a:3c:34:d9:1f:cb:f3:de:8d:87:
                    37:9a:3f:86:d9:62:44:d4:2b:c5:a6:ec:db:e8:50:
                    f9:f4:e3:aa:64:37:62:50:62:cc:7b:82:ad:56:35:
                    01:84:a3:e0:cb:81:c7:8a:c4:bc:04:e6:ec:a6:3a:
                    91:b3:63:c3:cc:fa:38:a5:f1:bd:5f:8f:60:25:59:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2C:3A:38:3B:63:94:9E:46:04:55:48:E9:23:5F:88:88:0B:9E:48
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:1a:cb:4f:cc:20:47:32:15:92:ab:cd:42:90:aa:99:02:
         63:2a:b1:59:84:6d:96:61:61:5c:23:14:fd:69:18:e7:a0:2a:
         8e:98:e2:1a:b5:3f:40:ac:8b:4b:76:30:fc:21:b2:41:0d:0e:
         a0:6b:d4:00:7a:85:d3:bd:3c:32:6c:cf:0f:91:5b:eb:04:81:
         e6:7c:62:8a:db:07:95:89:7d:c1:39:90:3f:c0:05:8e:c8:fb:
         b5:19:32:be:3c:7e:6a:d6:a2:b0:81:8b:26:b5:3f:10:f4:12:
         63:f4:6c:4f:1e:d0:fc:59:e2:16:45:f3:49:07:40:3c:7a:f8:
         47:67:dc:6e:a2:8d:4f:10:63:01:34:fb:80:be:49:3f:4e:ac:
         fd:17:08:3e:cd:1b:96:5d:2e:3a:d5:22:ed:10:c4:a5:5b:76:
         e0:35:9a:d7:65:b8:f6:cc:71:2a:f0:b1:e6:1c:ee:43:7f:0e:
         50:71:ff:41:9c:9c:f3:c0:7f:72:78:0c:64:6d:e7:05:f6:de:
         19:44:f4:8c:e0:24:0c:41:9b:d2:13:76:6e:fc:5f:0f:aa:4b:
         50:a7:28:fd:7e:93:d1:25:8d:4d:0e:95:21:3d:ad:bd:54:29:
         49:04:22:d9:1d:74:8b:d2:fd:82:05:cf:99:58:65:c4:f0:23:
         ec:85:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----