Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          gar3mTB4UO6TU9wirOvkjxvHBfrgpZrlPfkLpUD3lAw=
Subject key identifier:   ED:6F:D6:44:45:A5:E1:6C:0B:40:CC:43:C0:B2:1D:AB:01:90:60:6C
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01964D7E546CD1359455A5A76028DE983DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          137E
Signing time:             Sat 19 Apr 2025 10:00:46 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:46 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:46 +0000
Files and hashes:         1: 0TcqWmBbS4pZwVBptkq4lqA5c5Q.roa (hash: SPYZBsTv2MNh1qyA2xq5tH1xrGTzoY0rK9rAvW0asOo=)
                          2: 1XXH5Tc2jjPAzQHYwkwVQAw_gHI.roa (hash: dcfuBWAVvDzz9GpSqGo/OZzT5vbmtFCpLz+pXMeuFkc=)
                          3: 3LgD2pWeokaJnu7AtKvUjtGF1K4.roa (hash: EUbwmkUwuSMcYd+jHYxrR2mUP8puunpDHahZx+0W+pc=)
                          4: 3cL278tMfhHRt0jMeGBsuK_6tdE.roa (hash: 9Jvsf+gu/Bz99BEJw/Qs3de4jjh1Gye98YTVVsGjiIs=)
                          5: 6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa (hash: 2tOtZzMlaS8Y+/JP7ae7uNFPL8Y8C/sjWCJwPgz2D6M=)
                          6: A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa (hash: lE06Mjh97LJaUQ/w1auWux3C8TovlUNXB3RO85AG9OU=)
                          7: A49d_BeiTEUQG4p_3mJzcU9LAxc.roa (hash: Yk0iZpFyJXXMqGPy0ILeZNptWZYqa7K2r7Sh5AS5hIk=)
                          8: D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa (hash: 7cRbUgZAzkqORhvBRcVH2i2M6t3Q6qZCnPwfq5AZPQw=)
                          9: DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa (hash: uVhqZq8hFXzpst7g4lUJZCwbTahSvmYx+Wbki8iJE20=)
                          10: EOkVjV5eJ5w7I3Gua2OORTzsBCE.roa (hash: QNcx8DC5wr3i7rdgzUlgNqxBhDMeKmlRxPYfe3OB2H4=)
                          11: FMEvE8lRSqQ-c4n53FDffBkErx8.roa (hash: GlA1THHMaPutrg5iNRsJwfVrQRoJ41Dni2qIntaImAw=)
                          12: Iv7XsxWXHnyoVpEd4DC_3XASFeY.roa (hash: RkiFvafvAi0w5FjSv5Z+cDcQDkhTTLcusqCEJERJr3M=)
                          13: J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa (hash: Ci6kg2a6GSjpPc9RFHsQWbp71+Q5BJmxJkaiYnBdvGA=)
                          14: J6jwomPMeZ1BKUT1HKADpUVqL4Q.roa (hash: ZT8/tzUWsV32mp8ODBnGUiawz3yA5cw8UBFbLvsiiBI=)
                          15: Kwu503K5TQ6mKB9wIlqJIRzuA5U.roa (hash: D2DY/gDYtav/Dsf8JETmsRPCOwdw9kpocKeFf8s9QAs=)
                          16: MFeBsVEFv-VXfJA4s0kbwDLrsao.roa (hash: EMCcoY2pdOJ/xwyHG39NdP4RUjuyAAIrDAvEM6JIEKM=)
                          17: MFuSjMaEcH_KfJOuOTM_egeHxuM.roa (hash: gSvthfvoW6hKh161OH6a/3I+TpE1mQXg8q3eHq/8gkU=)
                          18: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: Eid5NMSsWiupcxZ/h+PP3E+wpnL9kslWmxsCdG9oWMo=)
                          19: PW87IxcR8NO4WUeOitQNh5EtNhc.roa (hash: abtoslPQuSyoMS7yrHdnRO9jo2QkBlO9JvhCml8oipM=)
                          20: Pevz6EWQXEb5yVp9lKenzNIdBdc.roa (hash: qGmkuDrxspXM+mBcJKKqEwtYtBwpIYoUjNRrKJA7ruA=)
                          21: RO_vqVjc-WToTVgA2LecnPN6dt0.roa (hash: jWGNKA1BOvpll3zjMK7kK32ayXj4dMaMQ6dbhZt9Q8o=)
                          22: RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa (hash: 9uDtpLtRIp3Z50Qzu21CuIdk3zj29vKS3wKK9lm5Lyg=)
                          23: SRycxRgb7-ZLpEXgHls6Rg1GkZE.roa (hash: tgYoh8E5W71tyTIqSyUElR8mNX+J76OHaL8Cs33nYQs=)
                          24: S_pHPsCNWukS-WUFhIXy-OSJe2o.roa (hash: CgIqwLllc8CTWv043HB1kGIdlsthfsikGWfcwzjk14A=)
                          25: U2iNflEHT3HIL-S9ukQcbf1cEE4.roa (hash: CmjocmnsbLnvfp3fpATzHwZwgEQxqvdIsJxJ7LRGUnw=)
                          26: WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa (hash: WAiPSFNwflOwr12Zue1faOYw7xwtb69ioqP/IRmI9s0=)
                          27: XJn6uz5-oygXgu4ZAc2om2Be0WQ.roa (hash: Y9gNxCERt7wH5/baWKBp/m59FpcWgCGrLReBBXmd6l8=)
                          28: Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa (hash: Crv4Pgd3B0w5ftY7wmKEGbhnAr8LA9YDu34JHjjTqtw=)
                          29: YyzLMTt87Ecy3ghXnphVjvqquQ0.roa (hash: ZwuNLZzvOtpWGtNlX0gjt9977y68KkozP3OVholZME0=)
                          30: _kwy9bDSccd3Rtu2SHd2nC9AWHs.roa (hash: S0KPjYm8+CTV9bHwk2kn78YNa61JdUHm026b4f57gYU=)
                          31: a2QST08vhAuM6YzseDeOjRqXeXk.roa (hash: lMOk2f76mI5XqI13RnVVzTMO4e/gWq+iR4UTwWxTKW4=)
                          32: b1DT6ospwzst3YJkd_0LR059Sno.roa (hash: FX1wepEOkF8A9hAFZM7i5GnZPOJgUdJorm4d827ZEso=)
                          33: b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa (hash: LmA3Cohl41GAEztGDTKc3Ga2ZxVmadMDX0gNG66wU94=)
                          34: g64IDCaPNJ9ZShV_l_bo46HmhJ0.roa (hash: 5+QoeL2CSfIj5AnV36tcPb8Se6mkOWP178b805IjUzk=)
                          35: gb13af6kKgtlfQFdYQtCupgkRjQ.roa (hash: WlJgR2c//WMYosfMkR2CJaWVw/G4EQYofJSeZrH4jNE=)
                          36: ipTg348ZUOHwTFCERWv85x5upVw.roa (hash: 16jKgCClYBo+eCIMwkt7ZjD/Ascu9zEJCZArBRFo1ac=)
                          37: jJ_1uHLWKiQkF1iVYcO_4bXIskw.roa (hash: MlNZfYRq0YeYuGTlp+S0bdyWWJDClUExqjVU2jALhT8=)
                          38: luhgkGvXoSBeo49IDDTu1_s8AjA.roa (hash: 9H2kNdWwK/olweSvXdAl8KgICVS+D/OaSJX7mmjuiAk=)
                          39: lyu6R4gm1GDGGWrprfi3lQB2gi0.roa (hash: SnWsapf5S+uAoqHYWK233NyQQsjjVYaX6QjiNNmT2oI=)
                          40: mErkWeU3I8mGIE7o-s9X2fk5o5s.roa (hash: VUpCAKhA9EiJ9ug9Oc5wXy4xs0jXv9yffBf1VGddEjc=)
                          41: my4k0_ivDuUGyBw3mHJZ8SCPZrQ.roa (hash: DJVXpvSVC65t6DyhISYYJXNS1LFS4kO5R9YQf3IOo4E=)
                          42: oZdG4eGf7a8nQ-LsuE-l7MTCS18.roa (hash: 5c15Pb7KH72jzhvecKBamgtcszwWgCVUEzSxuUMdHSM=)
                          43: qJ22okdD8cK_emCAng8rI9cPrbU.roa (hash: WUQnBOwIu5J+Q0plEqLVlVFpmBiC7eLrEJFqZ2HqzGw=)
                          44: r8sCfMXHKwVQTxd3-LpH3e90iB4.roa (hash: XN8RmLcnoxt/WPGgSHiY8kH+52ulObJNdo26UAX9pkc=)
                          45: rVRMkskBzwl9zi-JY6YFOAI1hcA.roa (hash: v08kT5N9ZXsSCeQYLs3P8oE3ZLKAofwCwujUwPJ72Pc=)
                          46: saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa (hash: TKYq5bkvZmNzmAS5U9vl5b3QXUiEmUHsR8998Y8ephk=)
                          47: ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa (hash: Hgc/3TJtI5yynn7M0w0nfY5PZGQECx2OAgvuax5O8ME=)
                          48: xlkcSwD0mmtZPgi3xXKhycAWYyM.roa (hash: BAhCmE0YHR0xQbs06CAdD0yavtNQmtlINBJ1oX8Gqn8=)
                          49: yJts8iRe97z0LBku4nfeAAQmzuI.roa (hash: Kml13BMft8IVP0nzevzpw72P/X7Z+HrpFqQAw2Yg/rY=)
                          50: ydjj493UN6JAAmZf6D9xQrp5Fuc.roa (hash: r/+ra3gt0oRo1h5IYk68eH88kHv7hYOt8DrkYcFlWmE=)
                          51: zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa (hash: YDgq8a39d8LckxrdlKsf3y4bYTg9xyEVGHD8tb4DwoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:54:6c:d1:35:94:55:a5:a7:60:28:de:98:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Apr 19 10:00:46 2025 GMT
            Not After : Apr 20 10:00:46 2025 GMT
        Subject: CN=ed6fd64445a5e16c0b40cc43c0b21dab0190606c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:ae:86:7e:5f:e3:4f:3e:af:1f:ea:fb:6f:
                    cb:6a:bd:74:1f:52:dc:ce:64:5b:0f:1f:28:8a:f0:
                    be:53:fb:79:5c:83:70:90:75:bc:81:84:cb:2b:53:
                    44:b5:29:d2:a7:4c:87:93:b9:e5:55:2c:45:12:88:
                    be:86:bb:c2:3a:8f:26:bb:57:6e:40:8e:f6:53:2d:
                    cf:68:89:8e:07:4e:d8:f2:33:ea:89:0b:50:47:00:
                    eb:57:01:47:9a:55:34:88:90:12:51:be:1c:67:2d:
                    69:b4:a4:d0:af:0d:8f:08:25:2c:c4:c3:37:85:b9:
                    49:ac:21:82:52:26:6e:1b:10:af:52:80:7b:f3:fb:
                    41:0b:01:7c:9f:87:11:1f:63:43:f1:c0:69:d8:61:
                    96:e2:8f:14:7d:73:43:23:d9:49:96:f9:08:8d:97:
                    fe:9f:b4:e1:ed:43:25:2d:96:ab:9a:20:5f:fb:79:
                    ab:6a:04:d0:00:2b:e5:ce:17:b3:09:ad:cb:c8:f0:
                    98:e8:50:9a:38:61:ea:f6:f4:00:77:fd:d7:92:f1:
                    86:52:c9:72:52:d5:af:47:45:51:38:bf:09:b3:e7:
                    f2:1f:0b:4f:ec:92:de:47:8e:6c:da:59:be:a5:44:
                    24:3b:4d:d5:4b:93:54:f8:f3:31:b8:ba:9c:35:80:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6F:D6:44:45:A5:E1:6C:0B:40:CC:43:C0:B2:1D:AB:01:90:60:6C
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c6:33:a4:87:59:49:09:e5:b5:e2:8d:e0:aa:a8:9d:22:f6:
         2a:a2:86:35:73:1f:c8:f3:77:3f:e1:ee:e2:14:f5:11:27:21:
         ce:26:e4:b1:f7:35:87:72:58:a4:14:87:32:2a:6d:62:30:e2:
         ea:a5:60:b8:0a:ab:95:15:c8:80:f1:f9:e1:1c:bf:43:11:03:
         d2:86:1d:6c:da:69:b1:33:14:6f:fb:67:12:80:3f:78:40:18:
         46:82:e5:b9:4e:cb:b3:60:0f:d1:74:a5:f0:26:01:c0:d7:dd:
         7f:9c:bc:c7:45:e6:b2:de:ec:6d:dc:17:25:62:14:f2:75:de:
         15:c5:3e:92:e3:e1:e0:e8:ae:a5:c0:80:f0:62:20:ba:68:f8:
         8c:87:43:4a:93:54:40:47:6f:f7:50:ec:a0:18:0d:26:08:1c:
         9b:93:01:ca:5a:a6:f9:6a:7d:3e:41:e3:5a:a5:bb:ad:10:16:
         4b:12:de:3b:f7:7e:2a:63:5e:f3:74:87:69:5c:f7:3a:87:c8:
         fa:03:e8:5e:01:30:8e:3c:b0:1d:70:ff:ab:74:b6:33:52:62:
         d4:d1:a1:21:d5:70:4a:b7:68:b4:f2:c1:c6:92:fc:48:8d:fd:
         38:22:2f:31:d1:d2:8e:a0:49:79:b1:3c:ef:e0:22:41:33:2c:
         38:03:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----