Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
File:                     MH9f4nQKK23kw3CdKWQRWzyWfaE.mft (raw, json)
Hash identifier:          0mpjJYnUnx3tMK/a0/uwtQAoRYg9Oos+37s+mWu49n8=
Subject key identifier:   86:D2:38:D5:D6:7C:24:8A:A1:5C:BC:FC:61:86:4D:34:86:0E:D0:15
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       0197B6A0E911942D33BA35DAC8FE2729FBA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
Manifest number:          1677
Signing time:             Sat 28 Jun 2025 13:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:28 +0000
Files and hashes:         1: 00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa (hash: /nCoLNktQTRkwf19+RkLZm6+K8Um4Om/CE/FhAF+NuE=)
                          2: 1-COYrNmS4Yj9DuD0Iitd9unCCQQ.roa (hash: JYNBrYFYnRoWLArFqkMLwPLI1r5eBOC15oN7aK1rASQ=)
                          3: 1-lpBuKXXx8g9yxpi6iuVgN2ZkaU.roa (hash: RgZnA77LWWsGNIxky5OwYiVUFovIqwLxtj+NYBSAZ9M=)
                          4: 1dc_AoVDsergaSgV7R-3yql_9KE.roa (hash: a9qa0YzuaGBz3jd/Pf5UATBtpu300fCkvirZYtsQepA=)
                          5: 3WNl-m7gCvquDzEDrkwIQEg6pro.roa (hash: FxKNwejyJuuX0RG0vdRP0TUvJlDOzXxsIbbdxEYJvWM=)
                          6: 6EnYKRUPOG0Bajz58Rzdix-x9Hs.roa (hash: hj5dsY/14wcoPQMYFN+FDqGIoYmYmbl7lzQUbFpSl9g=)
                          7: 6FhDGvyiE15m5in3JxEtWm2LQvU.roa (hash: Qb2nBgiw2wjL0NKInr8G6lRKGlTQkFAoRZAC/5y/JJ8=)
                          8: 95jWS9jKpRrroELAnGEuEqeiVuk.roa (hash: 9oQPUKrBIIejm5soFm9BOrvY+R8e49uut81KixCREME=)
                          9: C9rTZ6_iu1FXRg451e341Atg3Z0.roa (hash: XcWEYMD9cUcIh2EC0BBKyyITu1rFp8td9cXo80ANEyQ=)
                          10: Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa (hash: +iIyFBA3ZhKNuVhyNzUqDLxWmuz7/LHtk6wG8bzNLCw=)
                          11: Dcl4o4Mo7N0s3M3iAQoKIPl9m2g.roa (hash: SVwXdwnjQoGTLQZCk0CvIrT8UoqR6f7tYRnOAGH0NIA=)
                          12: EdlEeGF0p-ph_-EZ90A8Cv8g-lo.roa (hash: bxOL6/VDd4hVc81yHqPsVHT8CDLp/qHPAVWZhIxPWDQ=)
                          13: F4z4cRp1o2-2fDGziBvSnYHbVpM.roa (hash: 2wAWhkLWWqS0rO2Q1Az6KgQGqplVuffj57lG+uTxooM=)
                          14: JI0eb8S1GNh05B8yRPp4g-MmznE.roa (hash: vofbBr6agtDCq9C2DcAavwwJSfex0/8B3Z91wfqPM6M=)
                          15: KF8itGoY1xLI5AYmY-m8xyJCd-M.roa (hash: 3x8CCjFbHcFE+DJK2zQRD0PbpgAm7tcfoBUcCbuoWVU=)
                          16: KSKxvPfPoQ3-9nZ5IaAyZyw0eVA.roa (hash: Ldllwbeq3sVnl6+zDKpnVxt8zPewHEjiNMebEvP4PkM=)
                          17: MH9f4nQKK23kw3CdKWQRWzyWfaE.crl (hash: FdI83myCdlPGakTK0K9wF87bUc5KIozzIqjbylEXoI8=)
                          18: MOnyvymPV70rA-n7s2qFGgmyraY.roa (hash: 85Gf5MFfTrOZBrJ3gxPjNi7Zx/lmYfRY4Lsl6tbceT8=)
                          19: Na5QZvVlGuZQeLfXORY_9aEEYSo.roa (hash: 7zaWEKU6Pa667pchWMlNtONL4EFj3rNY7MR9JwlAuWs=)
                          20: NfrImU14VyPFoYoWbQqSwcjt0NE.roa (hash: MQdzlW7R+JzkpiS+Sg0oeOl5PeyecnB8iAb1AGvWxuA=)
                          21: OoYqylkHzmwaVAMQUI6VbW19fUY.roa (hash: GTuWmeM87GVOh1bcDtRCfkyFY8mWiN9eSfyMgGPB+zE=)
                          22: StSv8ki3Hfy1kt0rrrfueNG7XQE.roa (hash: n5KuwRYffa0Ye2MfTHYi4Ou9cVdpBRC7za9HK1Mdc+U=)
                          23: UpgKqZKDk6DocsIHKTjtNdmcKOA.roa (hash: ks27GBa0bjdMoWqX1B0YBEH3qIWHeKCvjtYKHznBta4=)
                          24: W1J1-YCCiOxiAdhCBpIGiI6-ens.roa (hash: qQljpaYP6KShT3JCLBM16HPQvI04wWe99FsoBr17EDc=)
                          25: XZVtjWmGJy5TJN5gkclvuaDTx08.roa (hash: +A3dF//QsJfJLVvgoQOwQfNBd3HuH3X5Enj0ICpyoDU=)
                          26: Z9ftDVnLuDarY233BHukY7esuz0.roa (hash: 8IP/yjkR/p4P5xW7keZ1mbS3Olm9wSVSpmHnR8UNIxY=)
                          27: a5vhXTFxFnmVktk1fpfvlo_HM2M.roa (hash: jBANqiVsO0TchdCr8Pw27uhxGmAd9aIES2vzyb+GsNU=)
                          28: aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa (hash: K2mPF2eHRJwmWDINxTS4kipEwWDutquLs7wNrJd3zo4=)
                          29: afF1dxl_LmNwCvwOu-CxTaBAPsE.roa (hash: 2PsecFqYTcXE3Me2mMpOXpuvsS4y86LFqJBD0VQl4Yk=)
                          30: hIqJAfSnn9KNywKp0QfHCh8jdEs.roa (hash: SVYSpB2PXKZBd+1YFg4Zcu+R5qUNSr3ksyKlguLNrhk=)
                          31: hnNCMqI9YyQmLVJaRmoHDg0oFJw.roa (hash: 3WF8XBqeLBvMATAkTQCQPWs8yFZIPbFOVIgvg6VS8Ow=)
                          32: k4dE6GVK9WXXHG3YD6YqaU59DBE.roa (hash: gfljlL3cqgD/q79IzT5OLmzpfKZUJCewNF1J+kEHTmM=)
                          33: kTAZ1eq_4NqZeUF8WiyBjLmzzOM.roa (hash: FbN3ktB3aIhk7lj6tCA82i2iYB31YzcLrswYNQRr2fk=)
                          34: lJ6fQmJpUrygjwQ7p4vFNR2IY6U.roa (hash: snpJIFfEXOeeZi2wyUsc1W2H/jHRZEfTq7mq/daKXhA=)
                          35: nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa (hash: Kkbt3awiC7wXEdfElBvXbg7tTE4YJO5Q0eMabJjQuQ0=)
                          36: o033YbxU_4pqzhTYeW8KgBTyJFQ.roa (hash: dhvpupNA3tAu+C5YNjmZoQsdlwc5TGF6rdYGFnIKpdI=)
                          37: ogWtRj9AJ-3VS3wVOcqhrepWr84.roa (hash: z7l4qX9iNc6t/itsLZx/1qV94NBFb0s6x69mJ0YgY6g=)
                          38: qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa (hash: x3hukl87lsHfId1sEhc10WEbYF6R3yTOTAtjx/H0dM4=)
                          39: rXpni-4ALcocOhcZ1QqAO1mIJGA.roa (hash: FRAHJFSzOsHBC4a0opWl+1Gehcqt2UuiLhry14uVIHQ=)
                          40: up9aTXGTu3ADzcv5qInbkewu-1w.roa (hash: 91EsBDEwQXOTu21RhlDjU3sKcr3Zi6i0xCDeA7ULnnk=)
                          41: wSL45AIT5EJXXFGp5vg6M2DPNCk.roa (hash: 1wb4FcpLDXgZHELKVN0aczuYaHIxl0jPkQS+LI1QUhs=)
                          42: yMSRSUOaD_I9-_w6JSkVSof-73c.roa (hash: IIoX68dv6Vr/WkUd893+l+Jc8xvnAeBmWPaJowHnKOE=)
                          43: zfjWVaBt_BelAB4wLgicMa-3gUk.roa (hash: mUXFCeRc2Y4QqbwjvPvmqd3yvXigvxAWleegmSOAAXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:e9:11:94:2d:33:ba:35:da:c8:fe:27:29:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Jun 28 13:01:28 2025 GMT
            Not After : Jun 29 13:01:28 2025 GMT
        Subject: CN=86d238d5d67c248aa15cbcfc61864d34860ed015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:b1:32:41:74:7e:13:e0:ae:1b:22:0e:9e:
                    75:54:e0:d1:df:01:d8:df:11:2c:3b:f7:29:08:ab:
                    bb:c7:a1:ad:d4:75:4b:33:9e:8d:67:c8:e6:af:d7:
                    4a:5d:7d:c7:72:14:30:26:28:09:7b:90:48:b0:e2:
                    87:07:56:78:37:58:45:ba:16:3b:d2:e7:0d:81:f2:
                    a3:eb:b6:78:00:41:00:a0:c9:57:1f:de:04:10:6c:
                    ea:7a:f0:37:32:12:0b:c9:21:0f:aa:5f:b4:61:5e:
                    5c:f7:7f:df:96:7b:8f:dd:5f:24:a2:96:c0:df:7d:
                    f9:95:48:a8:81:56:75:79:ba:bf:9e:14:96:c5:a0:
                    c6:25:5d:c9:c7:eb:28:1d:1a:41:53:28:e7:3f:87:
                    e1:29:f4:4b:45:87:64:32:f9:56:a8:19:db:87:9b:
                    60:ef:bb:9d:df:9e:4b:09:a1:05:60:11:2f:9f:9e:
                    df:64:a3:08:69:d3:55:a5:55:f0:27:ab:88:72:42:
                    1f:56:8e:4b:49:06:51:39:34:c1:5c:6c:92:3a:22:
                    ef:12:f3:87:8f:79:f0:93:9f:e7:81:a7:5b:37:57:
                    e6:8f:4b:68:bb:6c:ba:25:89:90:94:12:99:db:6c:
                    c5:3c:41:6d:77:12:1b:80:40:d7:d4:a4:76:aa:9a:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D2:38:D5:D6:7C:24:8A:A1:5C:BC:FC:61:86:4D:34:86:0E:D0:15
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:70:bf:6e:7d:f0:fd:a8:85:04:09:ad:0c:be:6c:1e:a2:e2:
         71:cc:34:34:db:49:e5:d4:ae:fd:ae:e6:56:68:ae:72:25:ae:
         dd:58:09:36:e1:4d:3c:4a:87:a0:4e:cf:0e:ad:a3:d5:07:04:
         8f:62:a5:2e:f1:b4:6e:93:0b:6f:29:35:50:68:72:61:30:4a:
         5e:6c:67:08:cc:fd:11:5e:47:69:83:e0:45:86:0d:dc:71:ad:
         25:e1:09:8b:6e:ce:f2:25:e7:2f:2c:8a:51:93:42:c1:c7:76:
         e0:54:f3:5c:37:f0:e4:bc:d2:47:ca:f9:8b:74:eb:ff:cf:91:
         02:d9:ad:b0:11:b6:3c:a9:57:a0:b1:18:10:34:0d:a6:2b:0c:
         c5:e0:84:a3:9a:4a:ed:6d:cc:8b:1a:0e:bc:5f:0d:90:45:de:
         dc:10:e0:2e:d9:fa:da:59:fd:c1:7b:a6:e6:a0:58:f0:0c:c8:
         56:66:07:aa:e9:bb:d6:e5:d0:ac:41:62:8f:3d:a2:98:41:50:
         ea:6a:ff:d9:e8:97:94:de:54:9a:e8:33:aa:88:67:a3:56:2c:
         30:70:44:3d:70:dc:f9:d0:54:c6:cc:28:db:b3:e3:30:98:80:
         b1:56:47:6e:28:9b:3e:8b:69:1d:f5:33:90:ce:e2:86:ef:55:
         87:36:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:29 2025 by rpki-client