Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          wTS8nnjqP/sUA3pvLFQFHO+03z0vKZIrfsx2oWrzlfE=
Subject key identifier:   90:04:6E:F1:A5:C9:D4:E8:54:4B:F1:CB:B0:ED:BA:88:B8:F8:BE:99
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       0197B745C14ABF95DD798CB180B312706C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          0201
Signing time:             Sat 28 Jun 2025 16:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:31 +0000
Files and hashes:         1: 1-FLwx-Jy20x9TsKTgVra0VDGLCI.roa (hash: wYExt0oEgJsljCXxJYDrQQFL3A/9soRSgwhaFbNC2m0=)
                          2: 1Q0UXkJd-TfRbK7BKgSoSPbozUI.roa (hash: QAHfJOYxgI+kMM+oWSa3whwte9TS5mi9F2v/jezbaTs=)
                          3: 3hAgBvDGSMT_l9ox3L_p9jf-T9A.roa (hash: 0YI1GCFO83+XAPwsaYqpDxr2GgHzNz2wso9ALQPXTRA=)
                          4: 3r80YRRCMWUbRMdMpLfHbiOlbfY.roa (hash: H258573yULGCyQ//7b3dYX7AdntI0XJVVhAGkNnlimQ=)
                          5: 6ogVQUHBYYTz25iaBADgawv60yQ.roa (hash: 6hElMUOlfb8OLrcKTvUV6O0D4gV1WFXbakb6RG/fQjY=)
                          6: 6sKepJ27UpBLjSdqmn3KBLPniMI.roa (hash: WCLetK9JTDdG4/uZYX9DMnQXhs5gvrvw80YDnmEgPTI=)
                          7: 7ktGOCiuaxNVf6xdAfkeuisyla0.roa (hash: Cf1BWWAsGXAZCHjkjhZN3wO4tojImkJt3W6WEZhY+MU=)
                          8: 9PSapFMTPNk4IdNW9y6poBt9F-8.roa (hash: 8bpN1GnvHuxF0OMzhkYo8NajNlF4XsVoLSST5wsn0Zk=)
                          9: Bq_bmxbtCoj574nrr-P_sU_UnH8.roa (hash: ep0kklezsEsm6fyrAzHrNiZIZJ18JWgZ7crTbymB5hE=)
                          10: CX1FqPz_rB1rFYm-Mpz-D8387mU.roa (hash: wCnxW0V26P20vCB284mcfIA47doSr/9lS3o6lcuYrfI=)
                          11: EKGpGQHoAZjHd9Nvg2r3sp523lI.roa (hash: L5XLIobFq44kbAJ5nVhGWfhQCToybP4gMKFg8103kqQ=)
                          12: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: qThhCxR5wFU9KJzWnGOiz6TcUBF6VhC9L1ZCBsNuUXg=)
                          13: LJzc1LSPgx4QIfexUgZXlPyOsBM.roa (hash: mSfJR87+dxbiNgyu8fxRwqnptgr734BfWL94Ukn195o=)
                          14: M2pVezoeP1XqbhlA1W4rb2r9c8A.roa (hash: 9CvBeLUIHoaPRO/Zpyiw7pu6+iGMnqL1XIixDXxO25c=)
                          15: NInBjN9VmlWR0kM4IJbb35yXX4Q.roa (hash: Xo8oHJvXCsMZHqguc/mGbBAJsi6xT4kk+UYEDvmIVeA=)
                          16: OUUenB6cE4WLgcqCuJFd8IuWKI0.roa (hash: bYUqjF/gzi4PflmRwarPOZmoix/hwBusI2ITPO/AI+4=)
                          17: PHjk7HksQoreVKkNoHfGHx9i_5s.roa (hash: LsNFpMXLkk/tBemYYBeM13khUpwfZGn1bGo9IS0Am88=)
                          18: QrSOGH_LL13bmxtsbtKw1YQWiPI.roa (hash: BtD6o4b8L0Ir3CPJyunXO5nZp0ZvlZq4rP3EM7bOxXI=)
                          19: R3mRHKwy3JP67VvuFVM4yTcpo_E.roa (hash: 2ClDjZI/s2ADOp7sfR6YP3vc5C899tzn0f8a9Pmogfg=)
                          20: U52mVOk99igqhqPv8HFUemMxWjI.roa (hash: YUEj329L0D9eTRAFxzIGa/94YS4hgP0ffCPrOs2YH8E=)
                          21: VmM3dRQSyheIEs1bfX6FhbZgi4Y.roa (hash: CqVnaJfL1WyuZw1AEmEyn+1VnCcw8/hgNy0BSvot+34=)
                          22: WTNBF_DUhiABbLvBm0Q2E8ST0t4.roa (hash: vnL+M30OJkCVhlLMKx87A1VJIfeesUcrQ6F9e1Y6wIo=)
                          23: Xr9pef6wt6oZMj86bb13WyfgjzU.roa (hash: hxedRL6/r15pw12lUSQwQ/PVriArCwJCc90hVD0tU2Y=)
                          24: YuZ1gy3tlOodeJ0GnL8VDGo65Og.roa (hash: BC3v0Dl3cG1aikvL7OWlvbHbeypg204fJkwz+Gf4ia4=)
                          25: _CpNwsCs8u4x1l-Yk6-tFdixLuE.roa (hash: NucdduJg4PQVBxsaTVCZv2Ciqs6o3dV0eUALrJQNTYM=)
                          26: bwObaSjCJpxHqyn_J2Zc1UyaDpk.roa (hash: 5LCroiKS+KLVcq5iSNcFsFpFOJRUYv9Ix+9NXv0YNEQ=)
                          27: hIcithgnwkKFu-8UYMKlIgWUAXo.roa (hash: fxqLAgUgvuqWdhmMJOHuYbURP/VRyG9WmXRMDttj7LE=)
                          28: jpAqXna3C0BjwOBpSfF6soVZcO0.roa (hash: d+qMaS9a2yeSfULyHTLZ9m6sHcw2gyPQTuA5wZETi1Q=)
                          29: jpRHBZLf_q4Ab3-HF019A6C7iC0.roa (hash: XPIdJosbQpsOENbhceS7WOOyP4m8ucmeXHipAQ07T6I=)
                          30: lr4DFCAJKtFd-NxgSOwyNda4ukg.roa (hash: QO9i2PupmQrAXsHGKNVS9TO3V5iVOt7g36S98iPKAR8=)
                          31: mDlfzk4wNcANo3pVoYUMvhrU6g4.roa (hash: TrUq+GUBBSXz+fyCZ7h/cGjhjZW08YcEMQLvZ2IOsF4=)
                          32: nW2fx9NHAZYj2U_OZKxWIdlKWdw.roa (hash: Y6FF2n2W4tBg8uDZfppVIhjbKYSuBfjm1W1yzPBYgso=)
                          33: o5PX18oyMa6qVJCJKVS00mHQnqQ.roa (hash: /ctS4mvyxqWrxzGSYOkCadxtEZhp9YKWaqfprngBNaY=)
                          34: ppRNI4iSiOqT1CYaFUSvQhxAmxE.roa (hash: gOucl2Pwo2OrFoobsos5v7pq9g4A69RHIeq7N4KQNRg=)
                          35: qw7p6clS2YhsNdDV7OVEHG57THA.roa (hash: ln6YKQpvxhfRCoiu+0hB/cJGGn3tv26jLKFncu+e4tg=)
                          36: rA7j8bEErgP7AvTsNy_ett5NxTw.roa (hash: G4G3NJoQY5uMbj/h2+BpwuW+DfhWAn3O+FHfXMH3cHE=)
                          37: rLmkerNpNMKEEptaj-3sGSaO8Tc.roa (hash: UDaHZvqKpCq/QNJtMj3Fo135cadvlXNDPr0XNybIHmY=)
                          38: tZUvv68-yM-usja9DUYIDzAXY2I.roa (hash: Q0hNbY9f430OK9DvoeHPSnA7JLwYZhiJ1vkImwKJv4k=)
                          39: wQXPeq1MflXb2H-2oLhYyrHTfs0.roa (hash: j36QQBzZ5Pm2jknv1zLm2Q8L2z7JBHtOw5DR45sE6Pg=)
                          40: xL-4tERBYhvX8_aDnKV8HCKxXrQ.roa (hash: l0a54sZs7mvO5yVCnHO9BeY5JawFgum/aC2heZYPowk=)
                          41: xL2UhtkQsQl3DQnbY_Ka3_6XQTo.roa (hash: 5eAaxUjgmgkqu4BwWhkZKr/g62runERo/g7IiX+jYqg=)
                          42: zyXIQuVTwJxcJ2OHbgjeCLiF9QA.roa (hash: fJ4pbQi6AnVBGDfN/qt0T5SrZQEfXmFu9/ASjbvnGCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:c1:4a:bf:95:dd:79:8c:b1:80:b3:12:70:6c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Jun 28 16:01:31 2025 GMT
            Not After : Jun 29 16:01:31 2025 GMT
        Subject: CN=90046ef1a5c9d4e8544bf1cbb0edba88b8f8be99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:1f:57:94:55:8a:62:1b:6d:12:48:61:b5:
                    28:77:85:ce:1d:e9:d3:67:75:c0:63:44:08:1f:a9:
                    f6:54:b5:63:a1:c5:8c:5b:6b:7c:55:86:e4:5a:c0:
                    fe:d1:0e:6f:f8:f3:c1:6f:c0:32:6f:dc:17:32:ec:
                    4b:73:8c:ff:8b:f2:cf:ff:0b:a5:fc:e8:db:db:62:
                    c0:a2:b3:63:0f:fe:00:80:37:5c:36:41:32:a1:bd:
                    36:e3:ca:b3:40:46:3d:f9:d2:5a:d7:60:60:8d:e7:
                    ba:62:74:34:3a:95:eb:29:54:46:f1:80:31:01:dd:
                    e9:82:52:b5:59:c1:5c:bd:fb:3e:78:13:8b:da:3b:
                    2e:ea:ce:6d:c1:c9:1d:7e:8c:89:42:85:b3:9d:c4:
                    c5:2a:98:cb:1f:ef:68:64:6a:82:97:62:b7:46:d6:
                    a7:8a:4e:03:40:8c:7c:b0:97:86:99:5a:77:c4:7c:
                    5e:3c:3c:7a:f7:67:43:2b:64:a0:62:2a:39:de:99:
                    a0:99:08:00:9c:d8:8b:05:ed:41:6d:6f:f0:a7:db:
                    17:74:fc:43:e2:f6:41:af:f0:40:96:0f:bc:cc:cd:
                    60:be:2a:9e:53:8a:6a:9c:16:02:41:75:fd:b0:41:
                    8c:ec:6b:77:2e:2f:cc:8b:48:85:86:b6:ca:1f:d7:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:04:6E:F1:A5:C9:D4:E8:54:4B:F1:CB:B0:ED:BA:88:B8:F8:BE:99
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:87:6a:b1:5b:94:e5:60:97:47:7a:a3:77:2e:11:18:c6:
         c3:d7:0c:cc:8b:1f:2e:fb:d6:db:88:af:63:8f:9c:6a:90:ad:
         95:e3:f7:70:60:8e:35:19:9f:d5:f0:13:7c:d3:8f:a6:45:f6:
         c6:a4:fe:49:d4:33:3f:55:b7:29:01:f3:58:bf:0a:18:d2:7f:
         b0:37:bc:79:0d:ee:cb:aa:e2:63:b8:2e:84:68:e7:4f:5c:e3:
         c4:9e:95:43:11:0a:94:b8:e8:10:2d:57:94:8f:14:ae:d6:7a:
         6d:62:ab:26:d9:23:7c:db:34:a7:8d:9c:43:c4:7e:88:5c:0b:
         98:e0:76:29:e3:43:ed:aa:96:22:6c:dc:42:8c:25:ab:69:e5:
         38:a0:56:ec:43:2d:47:c6:09:1e:61:dd:c5:8f:41:ca:26:cc:
         f8:09:4e:f7:88:99:5e:9b:c2:91:2d:c6:aa:8d:ff:b4:58:ee:
         3a:71:0b:b9:9f:c0:61:b7:5b:af:47:fd:99:d9:4e:c5:36:2a:
         be:7c:35:d3:7c:2f:16:2b:e1:99:f2:bc:c3:05:6b:93:91:2b:
         1f:96:f4:4e:59:b6:77:15:f4:fc:5d:ad:d5:78:f2:c7:06:56:
         3f:46:50:53:d6:c0:2a:61:74:33:47:89:64:46:6f:71:5d:a1:
         2b:1a:76:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RcFKv5XdeYyxgLMScGwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy
OGI4N2UwHhcNMjUwNjI4MTYwMTMxWhcNMjUwNjI5MTYwMTMxWjAzMTEwLwYDVQQD
Eyg5MDA0NmVmMWE1YzlkNGU4NTQ0YmYxY2JiMGVkYmE4OGI4ZjhiZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9UfV5RVimIbbRJIYbUod4XOHenT
Z3XAY0QIH6n2VLVjocWMW2t8VYbkWsD+0Q5v+PPBb8Ayb9wXMuxLc4z/i/LP/wul
/Ojb22LAorNjD/4AgDdcNkEyob0248qzQEY9+dJa12Bgjee6YnQ0OpXrKVRG8YAx
Ad3pglK1WcFcvfs+eBOL2jsu6s5twckdfoyJQoWzncTFKpjLH+9oZGqCl2K3Rtan
ik4DQIx8sJeGmVp3xHxePDx692dDK2SgYio53pmgmQgAnNiLBe1BbW/wp9sXdPxD
4vZBr/BAlg+8zM1gviqeU4pqnBYCQXX9sEGM7Gt3Li/Mi0iFhrbKH9dz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAEbvGlydToVEvxy7Dtuoi4+L6ZMB8GA1UdIwQY
MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt
YjQ1NDBjNzRjOTRiLzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi
LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsuHarFb
lOVgl0d6o3cuERjGw9cMzIsfLvvW24ivY4+capCtleP3cGCONRmf1fATfNOPpkX2
xqT+SdQzP1W3KQHzWL8KGNJ/sDe8eQ3uy6riY7guhGjnT1zjxJ6VQxEKlLjoEC1X
lI8UrtZ6bWKrJtkjfNs0p42cQ8R+iFwLmOB2KeND7aqWImzcQowlq2nlOKBW7EMt
R8YJHmHdxY9ByibM+AlO94iZXpvCkS3Gqo3/tFjuOnELuZ/AYbdbr0f9mdlOxTYq
vnw103wvFivhmfK8wwVrk5ErH5b0Tlm2dxX0/F2t1XjyxwZWP0ZQU9bAKmF0M0eJ
ZEZvcV2hKxp2YQ==
-----END CERTIFICATE-----