Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          kHfDVWGzdqDO0FFj16XB9TPIhcmj4vO+5Q1hdsIFXaY=
Subject key identifier:   1A:2B:C1:EF:61:2E:40:24:10:50:10:94:3E:E0:FB:04:75:EA:23:C0
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       0197B70F1DB0A077CDC1147B5688B4A8BAA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0C00
Signing time:             Sat 28 Jun 2025 15:01:50 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:50 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:50 +0000
Files and hashes:         1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=)
                          2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=)
                          3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=)
                          4: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=)
                          5: 8woUP6r-ibcD8Si8xgPKnYyWtls.roa (hash: cizwexdio5wbMFSxOZP/v1aL4yXiU7uHgqRe6ZRnDlI=)
                          6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: uny1KCF0g8lGCrRIN/h3y64z1/+2D+uJHtyJLxFLqTs=)
                          7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=)
                          8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=)
                          9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=)
                          10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=)
                          11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=)
                          12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=)
                          13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=)
                          14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=)
                          15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=)
                          16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=)
                          17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=)
                          18: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=)
                          19: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=)
                          20: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=)
                          21: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=)
                          22: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=)
                          23: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=)
                          24: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:1d:b0:a0:77:cd:c1:14:7b:56:88:b4:a8:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Jun 28 15:01:50 2025 GMT
            Not After : Jun 29 15:01:50 2025 GMT
        Subject: CN=1a2bc1ef612e4024105010943ee0fb0475ea23c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:56:5c:ed:56:5d:d6:9c:ab:7f:87:60:d1:
                    28:36:cd:d9:e7:26:78:d8:ec:a4:79:38:53:55:21:
                    6b:b6:03:aa:cb:f7:19:f8:3b:eb:ae:8b:af:21:14:
                    76:7f:54:5d:bb:97:f4:82:e8:c3:5b:cf:f1:9a:7a:
                    c0:0e:25:4d:d4:26:18:3b:b2:73:6f:a3:4c:c9:07:
                    f0:b8:63:3d:bf:ba:83:6e:50:b1:ca:cb:c7:87:62:
                    26:05:38:30:69:8e:5c:15:3f:53:67:12:2b:48:bf:
                    05:fb:89:42:54:78:f5:1d:f6:dd:29:4f:5e:a3:fc:
                    b6:07:60:a8:25:1f:48:80:d6:f3:f1:7b:29:f5:dc:
                    6d:b1:ab:7e:3f:34:84:06:3a:15:91:26:94:e4:65:
                    91:b5:25:9b:bc:5e:41:89:9e:41:6c:21:59:28:5a:
                    89:c1:66:3b:11:9f:d4:e1:d9:e7:86:65:42:38:c0:
                    d1:5b:b9:5d:b1:05:02:87:ec:83:06:c6:eb:12:14:
                    3f:01:2d:b8:78:ef:08:88:b9:53:dd:ec:1c:6d:9c:
                    b3:af:88:07:0c:af:9a:e2:2c:e7:4e:90:4c:7a:b4:
                    d6:ea:c8:c5:36:22:31:9f:d1:27:fb:a7:43:79:d9:
                    9c:52:ac:98:27:60:43:b3:fc:cf:6d:80:fb:84:f1:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2B:C1:EF:61:2E:40:24:10:50:10:94:3E:E0:FB:04:75:EA:23:C0
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:61:6b:81:fc:b8:18:eb:c6:ec:4e:d1:43:8d:37:c6:59:44:
         1c:ab:d1:2c:77:c2:5b:8a:b7:3a:fd:93:31:9e:dd:0c:b7:86:
         f7:3a:8d:5f:30:0b:d7:e5:26:e7:e6:9e:3b:4d:76:da:fa:28:
         23:75:98:2a:d3:87:62:a1:1d:5e:a9:90:98:af:26:66:90:c0:
         1b:f4:87:64:b4:bf:7a:75:89:f1:f9:28:0b:cc:31:4a:7c:96:
         a5:53:f8:bb:97:94:ec:d5:23:37:08:74:c8:0d:5f:ce:33:11:
         26:e5:c9:57:cd:9d:6a:d3:aa:59:63:85:c6:44:c7:4a:66:d8:
         d9:82:75:c7:8f:d5:ae:94:73:34:ad:a0:7f:d7:c8:1b:d7:04:
         55:45:f4:cc:20:09:35:37:f6:9d:c7:22:92:87:78:1a:04:b1:
         1f:45:01:08:30:4d:8e:05:13:91:f6:6a:ef:94:f0:56:08:ed:
         b8:d1:9a:a9:bd:14:23:0b:43:8b:c7:71:f2:f9:41:b5:78:e5:
         7a:aa:6f:a7:dc:8c:8d:09:aa:4e:23:94:6e:df:a9:51:5b:9a:
         b2:f4:84:42:26:55:a9:31:dc:82:a3:83:68:d6:75:cb:ea:ee:
         74:a7:3f:63:03:2c:a1:c7:16:6d:1e:3c:89:c8:ef:4a:52:06:
         01:7a:d8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dx2woHfNwRR7Voi0qLqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjUwNjI4MTUwMTUwWhcNMjUwNjI5MTUwMTUwWjAzMTEwLwYDVQQD
EygxYTJiYzFlZjYxMmU0MDI0MTA1MDEwOTQzZWUwZmIwNDc1ZWEyM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih5WXO1WXdacq3+HYNEoNs3Z5yZ4
2OykeThTVSFrtgOqy/cZ+DvrrouvIRR2f1Rdu5f0gujDW8/xmnrADiVN1CYYO7Jz
b6NMyQfwuGM9v7qDblCxysvHh2ImBTgwaY5cFT9TZxIrSL8F+4lCVHj1HfbdKU9e
o/y2B2CoJR9IgNbz8Xsp9dxtsat+PzSEBjoVkSaU5GWRtSWbvF5BiZ5BbCFZKFqJ
wWY7EZ/U4dnnhmVCOMDRW7ldsQUCh+yDBsbrEhQ/AS24eO8IiLlT3ewcbZyzr4gH
DK+a4iznTpBMerTW6sjFNiIxn9En+6dDedmcUqyYJ2BDs/zPbYD7hPG89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBorwe9hLkAkEFAQlD7g+wR16iPAMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWFrgfy4
GOvG7E7RQ403xllEHKvRLHfCW4q3Ov2TMZ7dDLeG9zqNXzAL1+Um5+aeO0122voo
I3WYKtOHYqEdXqmQmK8mZpDAG/SHZLS/enWJ8fkoC8wxSnyWpVP4u5eU7NUjNwh0
yA1fzjMRJuXJV82datOqWWOFxkTHSmbY2YJ1x4/VrpRzNK2gf9fIG9cEVUX0zCAJ
NTf2nccikod4GgSxH0UBCDBNjgUTkfZq75TwVgjtuNGaqb0UIwtDi8dx8vlBtXjl
eqpvp9yMjQmqTiOUbt+pUVuasvSEQiZVqTHcgqODaNZ1y+rudKc/YwMsoccWbR48
icjvSlIGAXrYhg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:11 2025 by rpki-client