Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File:                     dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier:          PL2yzXG0Knes9KErnxW6CK6rHvBcrJWYqTzkPsrJKlc=
Subject key identifier:   80:DC:BF:2E:19:A6:C4:F7:B0:9D:F0:0F:62:83:F6:AB:A3:6B:F9:1A
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       0197B88EBEB1EEDA64C3C6CBB5DA7683FA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number:          0DB7
Signing time:             Sat 28 Jun 2025 22:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 22:00:51 +0000
Files and hashes:         1: 0vKKa1d1-a3nsAZsZCo839Z0MBs.roa (hash: nF1172I6GzWR4fsS//xQZxKSKhBW9Jwp0lhMkf3VEHw=)
                          2: 1-AIi-_fQE9Zw_jzdXpZvHAJNInk.roa (hash: S7DskItYnL/F5vv4ZlExJfBZqUHm9HZ4XrNRyYZBlGQ=)
                          3: 1YkuTSmaNeM99AT_szUK5oLsJV0.roa (hash: 6qUnLKrysaF5PnvpHmoDTCMWTFxOhfgj1mqiBjOTe24=)
                          4: 1nfBmmG7KbbR8DnKH7lP1KuhNh8.roa (hash: T0sycLT3/UxmIjbYQ+bOKStsPPPIcNFmp6OwoDtRLKQ=)
                          5: 2pl2Sl-diunsZv-X1xDfcacZESQ.roa (hash: SGZLc6KSJvJiXyci/DBhSPsrTj4/6Xpxbx5tcaKgogE=)
                          6: 31A6_ehvBKsfGVDtFooQhLXH0iM.roa (hash: dsMXP7FTcH0rSBZ7d/sBuVAuPoqLFB5tU5E0bIntVYg=)
                          7: 3adlXu9UdiqbVK8KXPmNPBFbva4.roa (hash: EJVXWOHEAMEc47CpVV43468HlejdrMkqfGDd8fXYTdo=)
                          8: 5duPmqwXQoarjhRREa9M12q0LMI.roa (hash: zmiFXyZAg+aBE4YlbQqa7EOu9c6/Mmqa7UXhDEeFpq4=)
                          9: 60eIn0VN45RIj-vR-y3bpL4yCdM.roa (hash: 72pNS84vVLj1UnJZFUVixKjT4YU2nH077D/faDBa9bU=)
                          10: 7JXxNfBFM3BEqtldsXmEKamRaOk.roa (hash: jvrGG3m259+/aKJ+QVXqTQP0zBO8rA6AZKOWOn1grpM=)
                          11: 9TaqhsU24aQ2AxAQwMy4XQKH6LU.roa (hash: WgoS/nhvjW9XMI8XzrVgZor+FdLw77EJZ11j3yQR76E=)
                          12: A2kOd83XlurKeug3oOCuPMQWoqM.roa (hash: TkzZouTi2vryIZ7xJqjRBCl1ZZQ9vf4xqv971+/fZVo=)
                          13: Au61mZI-htttLesl4yy0MLLWdgg.roa (hash: +tDBV4VgluoM9FI1HSD304mwdSWIN3f6hp8YtvJ9X6w=)
                          14: Avsyu6b6NVxYkf6X_q_nnw7ehoc.roa (hash: 4zpQXnbZi1DFLcalMENFIs49gI1fkeakU+6rA+Vt+Zk=)
                          15: BJRMIMLUoNWYqGJbDBSp90TMlbI.roa (hash: r+6EpUqWuuTXsne75OcdE3MkiyvwvTYaY51DrFP/ey0=)
                          16: BuqjNgBweqNLnNC3y6l25ZNe9lE.roa (hash: 3IwpkqYoqPWFY8mIBH4Ql9MvV+Y6c7/vsfg9Jwd/Cp8=)
                          17: CBiODbhkfA8pquq1a462Y8zBxfk.roa (hash: tqoKmW2W4/hm6OTTGtYbwqEY7og1wM0EuBkSzNxx7Lw=)
                          18: DlqdIQI6FVQl-ro8neXTyjOh5dE.roa (hash: lZ3g7pVM/XY8ky+nHkBqbreA/7Px6G51zVJ1/JDPng0=)
                          19: FcC6p_qeAbtQsZOZCnuCOvaQtfw.roa (hash: Jb9R1aDX4sFzxS0p1WW5Ea6+8DWY+rsM+UP/OKo1sOU=)
                          20: GQoZ4pQGFFvUB7jxlMg3uA-2HoI.roa (hash: JKfsYMUnPWxZ+hnIELajWpHydkFj3Gv1UtrfFLWfQLI=)
                          21: Hjik1cLk55gmkT0mX9BBDdrm5ZY.roa (hash: uDSFE3en9avge395hVHI6x6hXRKRQG+2ZatAGOgwdVY=)
                          22: IWU0yN5lxfh4aUxaRA-DioY_p9A.roa (hash: lro7824MfGW0EN5ZSTnDw/XV8uUIgOJ725CTgVE4t40=)
                          23: Jh89lS-7cJJWx8zvvkz4Py-QvjA.roa (hash: IpIfcWNQZBdZ9PxdPrzjdBDVJEsfhwVsQP6UVO83urM=)
                          24: KFcp7LdjVy35SahWFoUS7kgm_jY.roa (hash: qBkHofmKdbWf5SOainG+rxowFZlm817tFXm74T4JNR8=)
                          25: LHSn4hmcEhVYt3mmylxo9K9eZBs.roa (hash: /mRVur9QlsumpRxG8SJ/u3Kb872Ife1CLOhCQq2wCVc=)
                          26: O2VA2BZ6F3RJtY3AefLbDqbjATc.roa (hash: k12I4WD7YbIAGRU14UiZG26tiBA9XRNMqPcFVKP+8t0=)
                          27: OCw1udSAReLAsFz_erSWBmdqyM4.roa (hash: 5eUZkP4P6CTElC5OVGVkkPU8IahekeC5ufPO615Qa9U=)
                          28: PROal0FixJZ3W2ACc_DxYEXQlL8.roa (hash: LtHnlleM7ot8LBUleBsLI+QVnc77DijWTom4oe0lyBk=)
                          29: QD8rfcXrFLBv5ho4olBdPC1p818.roa (hash: dkERnkYt+qFsFa7JHkV0epWToLTcYSQMGJn1mguBlCM=)
                          30: QnP3rjSXAya4q111ORTc4fWOKy4.roa (hash: rjVxk7JBDVCRVwFh1RMiJlF4usn4gdiKDrFhNu7yCVQ=)
                          31: SHVliV8XMe3mR6yqOziT6sX58YQ.roa (hash: ouvpuTM11fktVQq0dMf++ddinkq79NWzu4p4qqeE2Yo=)
                          32: Taew90LrITUNXWEUlG92GSZizj4.roa (hash: tCoLpi3SKQ5YEAOD+WHKJDrZxFw4R47l6+pDVHgYeLI=)
                          33: VV03O10Ak9GphsezqITF8UBndo4.roa (hash: /Uvf5KDYlZcfuz0KI0o0tgIwygpPPgdM7QOdmxpaBwY=)
                          34: WGJ99XGaJh7skBGQoXvYDlpBLUg.roa (hash: ByZ7aX7sT5x1n3O18fpW4i1dWSQUUItWNkg4JqwxdJg=)
                          35: Y56Gciif-2amsx2dXrP9fHRusqQ.roa (hash: fDWZnk5W7B7Ljpur47rgBYvk4mpvoSPiiS1+UZWUXFA=)
                          36: YfjMGFYwhtytWdQ3LqN362SiRDQ.roa (hash: zOzyTVbMHHK8W/nh5e1F+xXrInh94k4vvHdiERq+ErI=)
                          37: aQakZoVpblIF2l8ftAcQYXpdYPs.roa (hash: Qz6LkCub4Rva7m+YCvP3MwxbyfAomWKSd3klSr+E1Ag=)
                          38: akMGCQIi3m5Z6oQfmYWwXm6Sr6E.roa (hash: hIvO4f0efFyMLQwXwU2X9ARgI00goXkJDlPknTYgoNk=)
                          39: ax4thkGoEPtvtGu_YZxYj9LFa28.roa (hash: eWFKhN+RnKTUUxtCYQyuPYtjJoxT6IBR2XInsRv4m7c=)
                          40: beZ7lH8hrnPfpblkYum9nSpHi_k.roa (hash: 0beIcur3K2WF3b2cBEFEvhkfim8wSnu7ud2d6583fXU=)
                          41: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: M7zCY/Nihsu7Dj0VJ5gvTBXO0xWpI3XiF2QTinepuCU=)
                          42: dmCtcIdQMhbwJeIudKTLOx_b0VU.roa (hash: aXzf7nY4YbUC0M8Kx5plPg9SATFrH4ks1C81TO/xeno=)
                          43: g-RHwRA0fquP8J4Xv3uB4JqTyDE.roa (hash: MB10WoakxZ7o1+tlvQJIspwDHpxPYehoZvnIOs8eSoU=)
                          44: iGjDHiacDg07Nn_8t_jKPZUdyQo.roa (hash: N4xKDLTQx85Mq7u4tlZrfDt5CuWu99EJK6G+vL3Pee0=)
                          45: ihbJj35SfiNKgMjoDGpV06NT6KE.roa (hash: KkvSmx3se5Nm7pPGtEV1SFiEuCL5NXpB0XReHMuUTd8=)
                          46: iyXEZLPTvQZGB7JlA08fIx42APM.roa (hash: m2lSKMzTmPpQ92wJ50iZbM3YMPJEh5hhfuRN69m7pJM=)
                          47: k9HJTkafgF--72589k90a4lZbRo.roa (hash: RkTGERNMYFKpgq9NhwcvcVDU4yuwFnnQ3yyw3oDq0VI=)
                          48: l_DVOUIWZeQzN_ud687FQm9N3XM.roa (hash: w8Ed2YFV5Z6Tfw1wykkzmpAQiiRwBTRKZzDMXY+18/g=)
                          49: nnK9sBNz8F6oqIJNiEqdyUKpxBU.roa (hash: 4pYw53tp6LoTRJOiuUYEH+f4SmiKvacrxPCRdUZzbtg=)
                          50: pCndi1ZXV1mC4ZG8G28b0EXavY4.roa (hash: QIh9bllo3i2ecy+DeV6KBQsP3Ac4e7xnH/vJAvg06/0=)
                          51: pIiqmAhh4Efmjii00YcovJnqa0s.roa (hash: OMG9mB1P/OPHsZ0mJOPrtZjUwn7+m8UALiq+yKbfM8U=)
                          52: pwPsYJfs2vnUf15_MeMU_hA-6CU.roa (hash: smjjAOw4zvZQ0c4TXCjwjpB3rI9MVKm+DRNb4qequDk=)
                          53: qIUofiNUFwxbkOh-Rgb1sv8n3ek.roa (hash: Gi9FPFk4uTQFZQ6i+EVGdedkAv5cDx+m98eiuI3qMjo=)
                          54: rNDOvM5UxXc5fH47oHCEP_VORSM.roa (hash: hLwFkJIpP7sAFfrwj7IvT50Kv+kzkPnYlFZV3e8VSCU=)
                          55: sLNOwUrIwFPK64zmLRJaWPIrTU4.roa (hash: 3ibN2G4+83QFGEwcpZhX9yLirTlPp75UHcXHyL9uKrI=)
                          56: vXaInH9GMVRsh2fS9hIvaiSoFdA.roa (hash: a0cNwrBuY/oV0A/g5UU/CxyDLathCf+t22Rqy9aezE4=)
                          57: wr1QjjbaIx8zS-gf7sfmtC6EaUg.roa (hash: Ku8TT9Iv1vaF97HhehSBh3VCqIIIMAGFRU8uS6/XagY=)
                          58: yg8g1KIBeXcOZoIOeFDLKsb2Ys4.roa (hash: bXqIK7YAgTX1XR2ZVmmqzCL+IfHFOCwdW0H3gNQ2jXk=)
                          59: z_ymd7tHSlm_rmTAykuJ944SJZU.roa (hash: arBCwgxjD2OcevnfTJJCzPi43dKp3HfsbnMHINjxg+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:be:b1:ee:da:64:c3:c6:cb:b5:da:76:83:fa:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Jun 28 22:00:51 2025 GMT
            Not After : Jun 29 22:00:51 2025 GMT
        Subject: CN=80dcbf2e19a6c4f7b09df00f6283f6aba36bf91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:4c:d9:20:97:bc:66:01:ac:bb:d5:b1:81:
                    b2:b9:8e:24:b2:4c:55:1c:6b:62:a5:af:8a:80:cf:
                    bb:a9:52:3e:f6:a8:23:56:d3:48:a8:ab:e3:2c:c6:
                    84:0d:c7:bd:42:e9:d7:66:c5:11:2c:85:a2:2c:f4:
                    ba:d3:1f:01:69:95:ed:e5:24:17:bd:16:14:27:24:
                    b7:0e:57:3a:64:8b:12:1e:7d:cd:43:46:3d:2d:0f:
                    a5:ef:23:ee:ed:59:4d:ef:96:ba:25:90:95:1c:53:
                    54:21:62:5c:ac:01:9b:6e:55:ca:a3:d9:51:72:9b:
                    49:4f:b0:93:d6:03:0e:ea:b5:fb:aa:4c:2b:fe:ea:
                    2f:2f:4d:e5:29:5b:8d:81:78:97:6c:43:01:53:c6:
                    1f:ca:5f:b0:48:a5:64:e7:a0:19:3c:1c:44:54:dd:
                    93:00:3f:5f:d5:41:f0:f7:2b:a7:19:84:a7:67:76:
                    bb:76:e7:28:25:d1:53:c2:2b:c3:64:d5:e5:87:57:
                    48:7c:c0:f0:4c:ec:ed:9e:7c:7a:2e:05:16:75:ec:
                    66:0b:15:cb:70:5d:c3:cf:b1:dd:6c:44:5b:3c:d6:
                    7b:b5:7d:9e:40:c6:98:f9:f5:76:07:53:d6:81:55:
                    71:3d:84:d1:97:7f:2e:8e:ae:dd:8d:0c:3b:bc:0c:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DC:BF:2E:19:A6:C4:F7:B0:9D:F0:0F:62:83:F6:AB:A3:6B:F9:1A
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d0:f9:4c:68:35:6a:22:32:81:af:f3:4c:89:a9:38:a9:ac:
         9b:8b:b1:fe:b0:5a:51:12:e5:50:51:7d:c0:40:5a:b5:af:be:
         e0:b8:b2:e1:64:ca:bc:1a:56:d7:cd:31:13:a4:76:18:5d:d5:
         63:8b:c6:60:8d:16:32:59:7b:92:20:f3:e6:c1:20:7b:64:d0:
         d2:6e:19:56:a2:00:74:d8:2b:2a:90:55:1c:b7:e8:ac:4e:96:
         64:d7:a8:22:76:4a:03:92:fd:df:89:14:d1:be:9d:13:d2:14:
         1c:9c:9d:28:7b:0e:e5:29:b8:0a:cd:1e:e7:7d:e7:26:9c:c2:
         04:a4:b7:76:32:ad:7c:8d:db:a9:a7:cd:03:22:0c:b1:84:9b:
         78:69:0d:92:b3:03:10:a7:36:00:17:02:fb:39:d4:2d:b2:55:
         15:97:72:4b:2f:2b:1e:bf:82:b6:47:90:b6:e1:d4:4e:9b:dc:
         ea:f9:b5:bd:8f:4a:5f:4f:48:23:76:bf:75:79:f8:99:ab:db:
         53:43:33:63:f0:19:fd:91:3b:d9:3a:e5:34:8e:a8:5a:d9:03:
         5e:d4:2b:bc:f4:30:95:96:48:77:d5:d9:93:f4:b3:d1:81:cd:
         37:25:aa:d8:eb:c8:b8:2b:fc:5f:ae:b0:0d:ef:d8:66:fa:15:
         a3:d8:dc:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jr6x7tpkw8bLtdp2g/oCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwNjI4MjIwMDUxWhcNMjUwNjI5MjIwMDUxWjAzMTEwLwYDVQQD
Eyg4MGRjYmYyZTE5YTZjNGY3YjA5ZGYwMGY2MjgzZjZhYmEzNmJmOTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZxM2SCXvGYBrLvVsYGyuY4kskxV
HGtipa+KgM+7qVI+9qgjVtNIqKvjLMaEDce9QunXZsURLIWiLPS60x8BaZXt5SQX
vRYUJyS3Dlc6ZIsSHn3NQ0Y9LQ+l7yPu7VlN75a6JZCVHFNUIWJcrAGbblXKo9lR
cptJT7CT1gMO6rX7qkwr/uovL03lKVuNgXiXbEMBU8Yfyl+wSKVk56AZPBxEVN2T
AD9f1UHw9yunGYSnZ3a7ducoJdFTwivDZNXlh1dIfMDwTOztnnx6LgUWdexmCxXL
cF3Dz7HdbERbPNZ7tX2eQMaY+fV2B1PWgVVxPYTRl38ujq7djQw7vAyIrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDcvy4ZpsT3sJ3wD2KD9quja/kaMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxtD5TGg1
aiIyga/zTImpOKmsm4ux/rBaURLlUFF9wEBata++4Liy4WTKvBpW180xE6R2GF3V
Y4vGYI0WMll7kiDz5sEge2TQ0m4ZVqIAdNgrKpBVHLforE6WZNeoInZKA5L934kU
0b6dE9IUHJydKHsO5Sm4Cs0e533nJpzCBKS3djKtfI3bqafNAyIMsYSbeGkNkrMD
EKc2ABcC+znULbJVFZdySy8rHr+CtkeQtuHUTpvc6vm1vY9KX09II3a/dXn4mavb
U0MzY/AZ/ZE72TrlNI6oWtkDXtQrvPQwlZZId9XZk/Sz0YHNNyWq2OvIuCv8X66w
De/YZvoVo9jchg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:35 2025 by rpki-client