Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
File:                     HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json)
Hash identifier:          S0Iwgtx29XhpxuuCzuLfLq3KjYMYUJJyyge10XyzL4A=
Subject key identifier:   D0:EE:36:24:70:2E:17:A2:BE:39:8A:6A:0A:1E:67:A6:2C:62:2B:87
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       0197C7AF488B82A8837BCE5B9EB06F795E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
Manifest number:          0560
Signing time:             Tue 01 Jul 2025 20:30:42 +0000
Manifest this update:     Tue 01 Jul 2025 20:30:42 +0000
Manifest next update:     Wed 02 Jul 2025 20:30:42 +0000
Files and hashes:         1: 0v94mnKmrgYtt5y2MQGuDazjxjA.roa (hash: 3Fy3bWz7jcZoEFMt18MGzYWf/tfMkeytNpRPKao8d4A=)
                          2: 1EKmpmLrhgEWrPL4W3egou3tKhc.roa (hash: ut1VDOBCE4msMsHhztUxD5FDBOfdw81wBHRbz+SOmeA=)
                          3: 4UTVL84CluwofCyF3QbkXydXokM.roa (hash: XooEuP7k7P1/pyb6Ciwpqw0HH6UX5hTa1/1P7c2BPEI=)
                          4: 4hx7X-qAofbTlhwwVV-AQ6KXp_w.roa (hash: OBb8406LAIV4rFPWUu9hOe5P2joW2t0g3DbKGweRhoQ=)
                          5: 5e7ZfoyEUlzEMbdgooa6I84IFKo.roa (hash: e+v7t3QSdeaX3T+vcii1nxSjQvZ+1UheB871eQGtO2w=)
                          6: 9UIWvr1OfNDaGDV1NFy_9NnoTYM.roa (hash: tixaefTMG5hslITfoqhr1S/+epdx4nSuGQbGRhnUPxs=)
                          7: 9tE0dhjecz_vEPgQYKZazxJZpXs.roa (hash: ybs354Sqw4G0DipKA3jVjo1yJgYq86p+0PfMWE0k7zg=)
                          8: BiYy-3cNnmjtrAmd4IyDKjC1hag.roa (hash: CMPQjEJY4FNWwrWuS/Ldv6drhXKE8URWV95UhdhdCMQ=)
                          9: CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa (hash: sD732gCP9DEw8s9H4wJkzWgViHWbKEY1xx697cAAzh8=)
                          10: DFllakhYeoutBATf4MzktTkzMHA.roa (hash: GuxDJWqtKXhEqBdraQY6S/n1UWX945Zxw/dwDjpnHZI=)
                          11: E9wVhtIxaZaxe5i4Dz65V9mI8YE.roa (hash: JXV+8LqhwGrJp1sc2icXMtzcRDiN+ufICW/F3M8NBNg=)
                          12: FzO4e4bNgL2TJdVxa4jrF-Nkgdk.roa (hash: FJyL2rrAc8+BztgLEvgk7vaMyJa1/Z6aEDRCooU142Y=)
                          13: G4C51JT3OmCVcaSkVzmku4EsPfQ.roa (hash: BmuIj2noq5vl5ugeRq2+5NB4DNlC7/C9uM2BT0aPa/I=)
                          14: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: hzFnM2qKq16O3hdhPM3CDyce1W3lXq/iWGnyjJdbCZc=)
                          15: HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa (hash: FQAxLC3PSJc2T88Euwq7LFUYTEkvVvSw9fr3e7bH7tM=)
                          16: K2eEFp9iH9k7gLxEMfpK9KLE2JM.roa (hash: 0lQdeVhxJN9HNN3eM0TqRZebl98boqiebb+RTNPno3Y=)
                          17: KL_oocCv4khkyRa25dlbyITRdjc.roa (hash: 4wKDO2i1BeDNJh2oVpIy70ysxuQo2aRiUjHzNsE7zKM=)
                          18: KOI25PzdTkm-0xZVhCT_xtTg5-s.roa (hash: 1o0QY37vh42XXWTJhB6P/HZwmg8ud9LsKS5XYNkdPhE=)
                          19: PCrnzM27m_gargGZ9ylIhhzHvSE.roa (hash: 6s3SRX4vbA35QaqChMrHCzmBjK50KbRqLwu/jy5I+uw=)
                          20: PX5qL5TwsFhf-09OufUwOC6nOEo.roa (hash: VELgMvcmhCqoQ+EySyYZqoEGcBD6C3/Z95zGs7MadCg=)
                          21: R2R3dYwVExujkP_3YEzS5IWSFks.roa (hash: iCdIt4hjH3rsHPjbBwBDkiRUbawLUhZbiZd908W2whA=)
                          22: T_9uedx-DDCLwyL-0yVYoY8ZyQk.roa (hash: MIaIP+4vaA5/qIMV/fq117jQ2jxAOPFsl5mWS6lIxj8=)
                          23: TxUte2UJ9SRYfI0Kkfto-EOhFA0.roa (hash: jgnG8ECsuht9mADq610Na72eHRyPpWoKaV58yYAI49E=)
                          24: TyejWy3JMbuHPbI-YINhRswkn6U.roa (hash: ddeTozCzeGdeH2UQO6NJHuZFd1z2I2vHOsvjsVc+KhU=)
                          25: UexI4Z2MHoKJX7UArvShMTnFH1s.roa (hash: OG+DMZt/nQN7JQoIC3moczIdzt0YyA+sScQJwQ63uLM=)
                          26: Vif29W-3fcIPPVlWCYw3gqQgj0U.roa (hash: mBKo6kBp5aKtDQrGaY+LTFtjbW2WOx4wgeIf4JrxaMQ=)
                          27: Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa (hash: nOlX7buINhy7ODIRgajp3PMZ+ShNH0qVTw3tydvl1+c=)
                          28: b_esdvwuL7HMMRsaUDaWOqTlMVY.roa (hash: pwo77eC9fZ605tPPzC8qd5eRG6DFX9632hHdiz08KNM=)
                          29: clGGL9s85YgTAJ-RMjz5lCzOP5g.roa (hash: xPkxg9x/lb7QNTjqVIebB4jEI4Q8WiVxGZsDwX+/iUM=)
                          30: eeNIld-CwPVcfEVGzgUCMqVFpyY.roa (hash: uxo9SuC4/NypmA3tJNrIjhVovnUTOlUmyteCbIDqups=)
                          31: fybirwPvyVJCXrxqtV-YK27b-o0.roa (hash: j9pC/jVEGbL7C7VXWKxLXKyhy9dEXnXl93ohOUBPwNY=)
                          32: iDHKoOkn76ewvGMKtSvQ55oreVI.roa (hash: FdmrkxRsqXjJl6GApfB2yCowxyhEWG38nOt3Zk2IOgw=)
                          33: jO0YHugIq7HCIPMGHVHj4kRva8Q.roa (hash: QRL5VnCHnmSVIj8k1MbQ4hocg0exEbhVxrcrQIT02ac=)
                          34: mtOyHCDFbEN52MPoQC2Q-k_KdmA.roa (hash: r3EoA0ly4TitVzLXwjhS8X5/zGogMJB24chyqpQhXH8=)
                          35: orZxC-53BDBk1U6uuSN8DRaau2c.roa (hash: HOGL1GzBKb2HP//0y1ozzX/F3kqSictn9tpzoAyDhSI=)
                          36: qbdx7MO8RSAlwqbxpASsr14cSKA.roa (hash: fI2y1jlcbzYlnjfu2Ks9glXIa3iKarC/TwaXWJLy1xA=)
                          37: tbFN4uJzRU21womPSI5KkKj3qmg.roa (hash: cTuOYvRU7Ql1EyywVLIjraQ+WjjxuydXASBnsAaUEgY=)
                          38: u_xpoEFdMS4XphSvfLjhMqrSVCA.roa (hash: F/zktMNsr2weptvJLM+lhhTnzjBLxkGzNeypTL4hxZk=)
                          39: uhmFxnEKd2nWDe4y3QSW_tBBf5k.roa (hash: 3Bs+fdH+UE5EdQY+qhv9fnBOPcXhnzSeBJNZNfIjD6w=)
                          40: urVdPzAr5hcmUa_BCZWJpXPsm3s.roa (hash: q/f+k2J6pg2/lVHaao8qrOCAoWMApYxChxvdtUZ21VY=)
                          41: w8J-75C32xvXkSz5WijhXC1OSko.roa (hash: m3pGMRPqlRljWba6Q8zEoS0PnVTWcZqWHqek/sDGl/A=)
                          42: xpnbOWgAfiIJZmpjmdv34zXX7iA.roa (hash: hxYTr7x86gGFLz4Uj6fKUzE6Fc/CR0rrmrlRUyOVlSA=)
                          43: zAVxvux3Ij4Ln78b1yGsEJeiCfQ.roa (hash: 3NnVEWj3eRCtReW6v/aye01x2yi/QEBSea/+eiByuhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:af:48:8b:82:a8:83:7b:ce:5b:9e:b0:6f:79:5e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jul  1 20:30:42 2025 GMT
            Not After : Jul  2 20:30:42 2025 GMT
        Subject: CN=d0ee3624702e17a2be398a6a0a1e67a62c622b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c3:cc:1f:f7:d5:d1:e1:5b:03:63:98:63:d1:
                    ec:e2:76:13:fa:b7:ef:fb:84:fc:98:7f:63:b5:ed:
                    14:72:68:0b:fb:f2:64:b6:87:12:59:70:b9:19:6d:
                    64:b2:6e:0f:49:71:34:7f:21:45:b1:58:27:03:74:
                    c0:5d:8c:a4:53:14:d3:49:95:de:e0:50:34:c7:b6:
                    4f:32:8b:6a:ad:70:7e:35:a5:5b:3e:63:70:6f:7e:
                    6f:8f:5a:09:c8:b5:8a:d6:69:5e:dd:19:11:3b:10:
                    c4:02:c5:af:ad:e6:9d:43:61:08:3c:d6:fd:2c:74:
                    97:a1:a3:4e:82:1c:0d:3d:a2:1d:8e:7b:a6:52:7e:
                    be:0a:34:12:45:d8:a5:e3:db:61:dd:dc:01:73:bb:
                    31:44:b6:a2:b7:ca:2c:f3:5f:f2:d1:ed:9d:41:23:
                    11:53:a4:b2:aa:3c:aa:3b:ea:29:b7:25:65:1f:da:
                    70:ca:95:da:c1:64:db:52:9c:18:fd:c5:36:37:81:
                    06:0b:2b:b6:78:7d:75:0c:d2:6c:bd:44:65:7e:cf:
                    1c:4b:19:fb:29:17:43:be:92:4c:9f:51:36:84:61:
                    cc:b1:a0:cc:b0:71:79:6a:51:ed:44:7a:aa:6d:dc:
                    eb:f2:32:01:ca:00:82:63:35:0c:f7:8c:47:67:2d:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:36:24:70:2E:17:A2:BE:39:8A:6A:0A:1E:67:A6:2C:62:2B:87
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:c3:cc:8c:0d:37:49:08:a9:e1:7c:70:34:b9:9a:42:e9:
         ee:ad:ac:be:94:22:7c:61:83:18:d8:1f:ad:52:95:44:4d:88:
         97:6d:99:f5:9b:63:1f:1b:88:54:81:e8:91:e4:3b:ec:fc:3f:
         ac:52:d0:40:35:bd:17:1b:ab:10:eb:9d:ea:7b:6e:5f:a0:54:
         79:92:44:29:71:0c:fa:e1:d8:01:f9:ef:0f:a7:d9:f9:53:fc:
         11:a1:32:2c:1d:b1:21:e3:9d:5f:a3:14:65:81:ce:6f:6d:95:
         3d:ee:16:97:a0:f3:69:05:7f:48:19:e4:3e:9b:b0:79:d0:73:
         bb:78:0a:a3:6d:9c:41:45:fa:cc:b6:d6:37:46:d7:10:23:62:
         d2:1b:8d:d5:d6:4a:e0:ed:74:e7:30:0a:17:90:08:0a:90:4d:
         2a:50:71:d9:fc:3a:fa:90:96:8b:87:91:b2:1e:de:25:8d:51:
         ef:6e:b4:09:86:12:1b:5a:a6:f3:35:e3:0a:de:92:8e:fc:87:
         d7:16:56:85:91:37:2d:97:80:6d:30:dd:55:47:b8:b7:42:ed:
         d1:35:a3:7a:f3:1e:28:08:b8:61:c3:0d:7a:87:b8:9e:10:5b:
         7c:f8:8f:ac:4e:dd:26:56:e3:0c:a9:94:d8:26:02:35:26:c2:
         0d:8c:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:16:07 2025 by rpki-client