Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          LQ4bQql32umwif6LYN0UibTqucEpfhS5I/ap1/h0DFM=
Subject key identifier:   EC:4A:85:AF:3F:32:3F:8A:32:47:27:19:15:F9:19:D6:1A:03:9F:EE
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       01969FE3D00A41CB6D8B74C1C7C18C80F470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          15CE
Signing time:             Mon 05 May 2025 10:00:29 +0000
Manifest this update:     Mon 05 May 2025 10:00:29 +0000
Manifest next update:     Tue 06 May 2025 10:00:29 +0000
Files and hashes:         1: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          2: 1nt7KKZ_kaA4th0sEgXg_btvGGw.roa (hash: P3hRQakGX2DJeRwO8m5JnZZQAfAIlClGhi09lkYemow=)
                          3: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          4: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          5: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          6: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          7: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          8: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: QX8/irNIMrgwuzSSddnar+FBj+hZHiWymRriB4zt3F4=)
                          9: AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa (hash: l484VXhb55rIiF/y4SkOcQOfu2WyfAjYkWmS1k5CH1c=)
                          10: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          11: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          12: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          13: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          14: FXYvz9E0JYqF8RzOei7ox1lSgbE.roa (hash: oUsJ92odAeW0Rii1JU/A8TMIgyDgz0YKa9dc9QUQIOI=)
                          15: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          16: GlJLYgf16agSfqwntlZ-9s0ycuE.roa (hash: H/pf+nizH//gW/qa/JKNB79H5K4HjIq/Ki214ycp+sk=)
                          17: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          18: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          19: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          20: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          21: JWUtJ2f_fqaelId9wo2GjVb6i3I.roa (hash: eOAzBZvj9W7ivZAmw2Ur7lTZT2YCVmDQnUXI070cbl8=)
                          22: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          23: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          24: NEfw7uDro6RqhjU8Fywg8cuqvzk.roa (hash: vdW+pYdyNoqoBJe2vsedZizZQj8kJ9GbuQcTyC/bcow=)
                          25: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          26: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          27: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          28: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          29: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          30: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          31: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          32: fgXOYlOn8katcS6MMyCw4pAx-po.roa (hash: AB1i+66TTW5eKzQUMm/K95jLLcwZ4U/B834LTt2ayNo=)
                          33: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          34: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          35: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          36: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          37: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          38: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          39: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          40: yZgl1zyLJKgQpTHOd8kSTVljdNM.roa (hash: f2YDZTloIVUPbF+TnGafTEX+6riOCFoEhWnQt6Ptf2I=)
                          41: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e3:d0:0a:41:cb:6d:8b:74:c1:c7:c1:8c:80:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: May  5 10:00:29 2025 GMT
            Not After : May  6 10:00:29 2025 GMT
        Subject: CN=ec4a85af3f323f8a3247271915f919d61a039fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:e5:a8:75:ad:36:08:af:d0:4c:6a:ff:f0:
                    b5:ff:96:21:0f:98:68:21:86:8e:27:f9:08:16:32:
                    ce:4b:88:3b:42:98:10:2a:85:42:80:d2:ca:26:34:
                    56:d1:f1:a8:4c:15:05:3b:42:ba:5f:09:26:42:4a:
                    81:c1:54:07:a2:10:e1:3c:00:dd:14:14:9f:a2:01:
                    c4:1d:21:59:da:6a:c2:e5:ff:87:b4:41:1e:5e:91:
                    6c:63:97:67:f5:4e:81:71:31:43:ec:51:97:25:e3:
                    66:45:ce:59:93:ab:33:07:80:f9:09:a9:e5:8c:2b:
                    7f:a7:51:65:ed:76:51:30:a8:8c:cc:4f:6e:8e:05:
                    6c:7c:e2:58:e8:fc:6e:46:b0:2c:ed:28:be:25:6e:
                    1f:d6:54:a5:81:b6:36:b7:69:67:04:b1:d2:22:8c:
                    ab:43:52:af:03:ac:09:19:94:65:12:55:25:b7:94:
                    6f:3a:35:cc:32:19:81:cb:88:17:ca:47:56:c5:b6:
                    22:71:29:a0:e7:62:07:ac:8b:2b:e6:ae:65:ac:5a:
                    97:ea:3f:4b:05:9f:0f:16:b6:34:7e:b7:0e:63:80:
                    72:bf:fe:47:b4:ee:6b:5b:92:70:cc:f4:39:ea:6a:
                    c1:8f:77:13:b1:05:b5:c0:81:34:cf:68:61:96:51:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4A:85:AF:3F:32:3F:8A:32:47:27:19:15:F9:19:D6:1A:03:9F:EE
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:5b:b0:7c:25:04:9d:73:a4:08:a5:30:d6:aa:dc:97:90:
         e8:79:a1:50:e1:f3:9f:0a:d0:2a:14:b6:55:a0:a5:ec:1e:09:
         88:8c:ad:87:6e:12:b5:49:8e:7b:df:fd:c1:3c:1e:10:8c:17:
         20:75:29:7e:55:53:8e:49:b7:c7:c8:d3:b7:1c:7d:56:c3:4a:
         24:ef:a5:98:0a:c2:70:35:19:03:31:12:69:93:4f:76:f2:00:
         f5:f0:4c:82:bf:9c:3e:35:6b:97:69:e6:cf:ef:c5:3e:76:8e:
         41:f7:c3:80:29:91:6b:c5:91:62:63:ce:c7:d3:9b:9d:20:00:
         d2:9f:7e:1c:c0:0b:ad:a4:10:20:04:88:b0:80:4d:cb:30:d1:
         a3:7d:d8:0a:be:c8:2d:98:c2:27:77:da:24:85:a7:1a:16:ff:
         5e:f2:8c:7e:44:90:01:b3:8b:12:16:81:6c:79:03:ab:ae:0d:
         d2:40:5f:72:75:d8:54:ce:c2:e6:c1:73:cf:47:bb:05:34:64:
         5a:dc:9d:d4:c9:67:c3:14:34:60:c6:ff:4a:fc:ff:7b:d6:da:
         fb:1c:e0:4b:d9:3a:de:cd:a1:e1:1f:69:dc:0f:fb:e5:8b:de:
         f2:e6:a1:33:7a:df:c1:ac:36:4b:8a:f0:44:74:fb:e4:c2:90:
         70:ff:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----