Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          QZ7nOFpDNt/Sy1whyxPEja9WPTvzEw0cAa8Z+fqmRD8=
Subject key identifier:   11:67:C6:8E:3F:AD:D0:AF:68:18:6A:E5:CC:BD:6F:80:15:5E:A8:A8
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       01969D87CEB93CDAA235976B3509293EDA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          15A3
Signing time:             Sun 04 May 2025 23:00:45 +0000
Manifest this update:     Sun 04 May 2025 23:00:45 +0000
Manifest next update:     Mon 05 May 2025 23:00:45 +0000
Files and hashes:         1: 0WVzWJG1rgIAV0kLDRDyeBCR_TA.roa (hash: uYyyFo7BUkZvbMkd0A2+lJFy9VE4MPkRhot0wRNavZE=)
                          2: 0fkfNJNcgCF0bgtJ9THGzgcqzN8.roa (hash: 2OoZu9r1Wd+T9o4nJLv7KklX45JdT1nwjKFtbBsYews=)
                          3: 1-A-QA-_AjVUZ4rL2aqlnJb4OEnY.roa (hash: 8o47yyHRx5XOwPi+KE63QVHpBtLvNB5PiBx0UCIZe6w=)
                          4: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=)
                          5: 43Lev2KmmsX2oQjHWOVqR7pGv_o.roa (hash: X3cJ9btnCgxa0qcBGYYxWGeuURRVSrnur28C/7enAsQ=)
                          6: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=)
                          7: 5l1FOYERpzwjCWZ7FNTbyAsfM5o.roa (hash: v2uCv1ouDdkiX0lyLyC8bVmuGUM1Kkuub/JlhDDXphQ=)
                          8: 7v7zPiSwf_za11lTC54_J6QS9tU.roa (hash: o3PqyZiDxPsDP8hfldoctzjoxtcGEXizsSGCO88ZyRA=)
                          9: 9_F1V2cr-2qmu0BHm3AVSU-qPxM.roa (hash: GRV3fAC1E+nhKcHh6o0uVmcQSg4jOW4KJF2Imhd7LJ0=)
                          10: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=)
                          11: CAoRm_NPK8PfeGJv38H3DAAqgwY.roa (hash: EdFjhhEvB+nVaMBUtV2CyFZBHaxTW29TZ7K1aFMV1ck=)
                          12: G4N5RYla6fjlsBv4AqQQ8H19rRs.roa (hash: /cOKslqtRznPZkTvknnJYZdRjHaMmTcA0TEYmAIJqIQ=)
                          13: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=)
                          14: JpAui5634AEUJhh37Wh_vZRvbVI.roa (hash: kYgmciBc6zEHfesfWH2bJDQb7SHUX9fP72N5IHTx3+Y=)
                          15: M_Z5OG01qKfHRU0thM0hkTqyX4E.roa (hash: hn+/oPvpd4mb7jjhlAfQomOPIaOtr1F9YOcPlnqwWgg=)
                          16: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=)
                          17: N0lDGVk0p7AcoRLY5EKnIKUZJ_I.roa (hash: 4jYpZBr+LgVTino1CNOAvWdIN+AhM6noIwU+uxMVojE=)
                          18: NJbMFgEWR8OCOcj-4vA3BkIS944.roa (hash: MWZ/EMVCArGx30ry9vrlbraU7VZaJ+T1oviZlNEjkZM=)
                          19: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=)
                          20: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=)
                          21: T6FuvnVJtTiDQWsvxgr8orCk9Ec.roa (hash: nWxEhVbf38vpuJvcxfSEnZKoW7anxOD2vfrvVNM+o2U=)
                          22: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=)
                          23: W2dVuhdvkZPCT4xbWj4hASghcGs.roa (hash: nMnqrzO3QlTClxSDTq/6l+sFo3+5m+fCPUztpwysE7s=)
                          24: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=)
                          25: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=)
                          26: _TDYA4JrZGUt-GGHL5bnvHjHJVE.roa (hash: nUAqzK16311Ox8sqhCQ0j74tfnNox6VtiVuEJ25ju6c=)
                          27: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=)
                          28: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=)
                          29: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=)
                          30: eY2HUAll7fDnreBQhRAKJKSb0kY.roa (hash: EWy2Lu75sciEu8/fmP+MiOxG/sgdglQMCzvxx2HZI0Y=)
                          31: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=)
                          32: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: 2UASuHSaFyMqOXdWpGKO2cZRTumJacI1/XS0Gn/Ul28=)
                          33: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=)
                          34: s2ACVztzA1vsZj0LeR6CzlnTOm8.roa (hash: oz7Vsf3An5MBbrJmvyyxPiGXT2v35uRZRv/m5nuw4mg=)
                          35: tH9WPK3_uWF3vLS6DlnKVCMMN0E.roa (hash: EHLhUNTXUDdrdsOY3Wig8TACqPCPV2imol00Ow5NhQ4=)
                          36: vJHGOA0KHjRfMKlYQ7_Py25Rox4.roa (hash: tdVVI7b56aFQgi+odsqYA6gQEoRboQqZ6BFmzhkuKvI=)
                          37: xOvbONmuHLggj1kz21tIox0xOws.roa (hash: ds3rCPllIr2md5+i8qtkfA5r8fRJicK2asbgHg2K2Q0=)
                          38: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:ce:b9:3c:da:a2:35:97:6b:35:09:29:3e:da:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: May  4 23:00:45 2025 GMT
            Not After : May  5 23:00:45 2025 GMT
        Subject: CN=1167c68e3fadd0af68186ae5ccbd6f80155ea8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:58:6d:eb:89:bf:71:ab:c5:a4:83:ed:d6:
                    e5:85:2d:0b:83:d6:3d:56:c7:73:72:74:e7:28:76:
                    98:4d:57:7d:ed:81:9e:ca:7a:13:08:f7:29:ed:33:
                    49:a4:d7:23:ea:42:01:2a:db:f7:d0:89:ea:11:38:
                    9b:7a:8a:75:1c:12:f4:5d:8f:9b:be:e4:9e:a9:9a:
                    11:d4:1d:ba:99:6e:4b:26:0a:5a:a8:08:26:b3:cc:
                    2b:36:34:9d:b6:6e:ae:0c:d8:05:24:9a:94:35:18:
                    df:25:1f:9d:c6:3b:ee:3e:ba:0d:bd:ff:f0:fe:80:
                    7a:c4:6d:43:6d:82:32:4f:fa:cb:3e:a3:2b:7e:77:
                    8e:ab:c4:c1:ca:64:68:7c:ad:f0:95:eb:95:5a:80:
                    4f:ab:67:fc:9e:c7:2d:d5:19:14:f4:31:fc:80:9f:
                    eb:ef:54:42:da:f0:85:a6:f5:c8:ba:09:38:4d:1a:
                    3a:55:81:e3:54:d5:93:77:12:0a:a3:98:6b:1d:7b:
                    ba:d5:b8:ec:40:3c:ff:14:3c:83:7f:96:fa:22:0d:
                    cc:8f:62:35:63:70:c4:1a:4b:2a:e6:81:56:3f:17:
                    40:fc:04:27:cb:93:b1:30:92:c2:91:89:31:d5:f8:
                    75:d1:9f:cc:46:59:1f:72:53:04:9a:38:65:eb:d2:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:C6:8E:3F:AD:D0:AF:68:18:6A:E5:CC:BD:6F:80:15:5E:A8:A8
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:d2:ca:eb:17:3e:63:5e:0e:20:7f:3f:69:00:ac:e0:ce:
         9e:10:bd:24:80:f5:cd:a3:c3:ad:e5:a2:a5:47:6d:99:2a:4c:
         22:a7:f9:b4:d1:54:9c:5b:7f:98:6d:4c:d7:f8:07:9f:29:79:
         f6:0b:71:c4:bc:10:45:9f:17:75:11:fa:87:f8:7c:67:9e:4b:
         93:a2:6b:7c:51:38:2d:2d:e2:4e:19:a7:8b:e3:e1:26:db:f3:
         8a:82:44:aa:06:ed:75:33:8a:1b:2f:0d:88:84:3e:2c:b6:3d:
         5f:f8:4c:ab:7c:5b:4f:99:5a:18:79:d8:09:19:a0:fb:6d:14:
         9c:e4:17:88:3e:e0:e1:f8:09:79:6d:d2:a0:6f:45:9e:7d:04:
         06:76:10:e7:74:22:dc:03:eb:93:1e:52:a5:db:ed:18:8e:a7:
         8e:f0:77:77:91:ba:81:e6:b2:ee:9a:13:6e:0b:25:a6:94:8d:
         44:7d:37:fa:2f:9e:09:24:b6:4c:78:6e:f9:96:d5:a7:e4:39:
         d2:18:0d:9c:f3:85:de:91:5d:44:cc:e5:cf:42:c1:7a:65:a3:
         0c:e8:f9:d0:63:c1:d3:3d:c6:8c:38:31:60:76:64:61:c3:91:
         5d:49:dd:c9:4d:e4:23:98:37:68:8b:0b:f1:47:c3:bb:55:ab:
         49:af:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----