$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft File: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft (raw, json) Hash identifier: qZtY6FrJXf2YuhNJ+8T6tzcQ6MQbGHXOEPLrukFwKeo= Subject key identifier: 8C:B6:A9:91:AB:B3:7D:B0:F0:1A:CB:B7:0F:45:36:26:8A:FB:26:96 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019A04487D14868E1635098D60F1A93F2540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft Manifest number: 18BE Signing time: Tue 21 Oct 2025 01:00:50 +0000 Manifest this update: Tue 21 Oct 2025 01:00:50 +0000 Manifest next update: Wed 22 Oct 2025 01:00:50 +0000 Files and hashes: 1: 0VerGYtqkn-bpkLU4lNyPROKJKI.roa (hash: 0VzsdR9TcNCTx4hJtj6JD1JHzxfylckxiznc2AWvLwU=) 2: 1-acserkdaRwKD1ZOt9mnNNr_tGk.roa (hash: 6hEtVWrVnbgrhSvEQ68FfjrHt5WP9Jfl8fiwkMXiUDI=) 3: 2NzLzMOeFuBmYcrjiyDs5_DFYgI.roa (hash: UjwWdB8k577gYTCkJHn1rSTdVabHuDeCfYMOytlfWbk=) 4: 4MTCoZyyEtH_vzMsUYNakC4E7C0.roa (hash: BTIVteP/7TKIeEXWkihlgppxA5PBx1UODmPt55wHJSA=) 5: 4b9wapi-A3xvohc41Khc1lUVmhg.roa (hash: iNy46VLu2un4QkjNe7VEFguyWUL0vvJsdCZlhuaclZQ=) 6: 5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa (hash: BkNNieru96Ok0gqv++x1NXt1ZiRd17b/+Pd802cp/Gk=) 7: 5zoRP68EVGDpXKwRwzUsGLHu-RY.roa (hash: +G8Jr7o2yQYUluTJTvXDAD+vj+5ImCPfksbZKx/QVjg=) 8: 6DVPDCQohGQiaNds16rdPlZiRvw.roa (hash: XeGD5J4Hpow9txd/2EVxLTyVWVtpgaF4ntUOsHRKUzI=) 9: ADGW21X--XpG2WBIYj5kIM1Z0-g.roa (hash: 9A8sa2id1+8ByNAMewXe7FMcF817DiqS5V9Qri3bdTE=) 10: AgHhdFIVbhSxp_Ce6ZQK7tJjzDA.roa (hash: 2xw4pjgmaeFc2E8tx2jGw1C8I1RJmUolHegoZ2xzlhE=) 11: BScWdljv0AQRTZyIvglOZ0oFBE0.roa (hash: S79FUTXfJV4hESBGmFYG1R6KYPNaNufbRNEZRwYtCR0=) 12: BjGl9Q72g_Ec259If-Jk56BpizQ.roa (hash: ZmMAA1yu7c6D1XkjZod31MG9U+mujHQhvFcz7QsWW3s=) 13: GZHZPJmf7RyW5zTVm9SoInBaz7M.roa (hash: pImt30tW7QWNNF1Yl5Fn7uTWW3W5BRuszKZDTcV35V0=) 14: HT9n5XGxiSRGbixWv-3kz0mWWh4.roa (hash: iHpx3TCWPvIoST4OBGoxr/waO+FYhNZeiOZuEYotXaU=) 15: JW8AyJFJPkQ1ZGONgpNYjy_UapU.roa (hash: 7j/1BSk7JznLZDNSRYDx/seCvE0WvECGanSxETBdFRU=) 16: Jo9_8piUxg2wee4-7hJARk5rotE.roa (hash: vqLLjwPcKVEzxJ3q8XfOQ/ryqpCfo/jKRQDYOnt6bJ4=) 17: KvaEQEmYbbYuHslL-MGtAyo-m2o.roa (hash: X5W6uO0llg8M0/nBFAkOWtE1oQ1OqXNWwnS/1SvBYmU=) 18: KveiqQQD52CVcDLxGnLBbDsvlrY.roa (hash: eEqFx+YvI7BKpBptp/G76x1tK3Hsbq60UrWrsB5Irss=) 19: LMXjBxSACWe23B5KJVgWjys-RW4.roa (hash: bXK/65j0IbvpFBLJOgM7eXPZPRVnlnzA2N/1RiBf40M=) 20: PNtLjxOL7gRSUmnaVLmWWzAdAvM.roa (hash: BRRmmysrxzY2RZDQDWvnLLEjHznI64v1YrJqfUUVaUA=) 21: PZ4VVKcxrMc7oYvh3zWOLIPD9xI.roa (hash: YRFQiony92NXWZK+Luws0NaTyMsVloeoGrQea5zGfWQ=) 22: PgY9eC0GTGur7lXkP8C-Vcydtzo.roa (hash: cHKIiCHkoLVeALBFTVW4+IuzRQ5OxJu0hqF2Xqb9S2s=) 23: Pt_kqhUVP7qzgFhuBfbUwor6518.roa (hash: nfZ0mrw1nnxJ9QFducx2cIWx34EQtCuHgVGws4THm6A=) 24: RSdOaSCVA6ogR36fNmSEfGUHdAQ.roa (hash: IUUzQDet8SkqHV+8ZTZJqpqrDR0834YedORjDV1jlUQ=) 25: RjTJ2EaIZfE051tXU0vuScbwBZk.roa (hash: TowX0WWdHApvFSISjmRiH2FsG9LnVvVrELSSI98m3So=) 26: S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa (hash: GjF5x01fdvJu7nYuxxfVRo6MwcjIthDWhsqgii6EbWo=) 27: Yed44AUAbqpY6pzy3aMkteNGQ_g.roa (hash: FZrMifpRX5lyJO47EzwgH+UZbzIMubq2K2YsFTZ5WZI=) 28: Zj7G4eqMQ--NMz9Iaem4ej8INXk.roa (hash: nn6Yr5BKZHLdyBPl2qx/+69m6iOonMzzHWeb6X89uC8=) 29: ZoLEzONyV7QLYdtKb-afMNYwfxM.roa (hash: 6iQVIakQz29QPi7Lled6TnK/5AIOd4jPu/15Q3XroLE=) 30: _8ZQWuUaGZ9feBTbscjwZbx48pM.roa (hash: TNfC23AEZS88V+zreqHVoePX0RM2CaFufz271/b9FGE=) 31: _pImZxEdb-uxEuuETWSCY_AdJ4U.roa (hash: U8mqknH3/BdXsrKKvoV4sJEmqyPPEyNl0NePL0IqXJM=) 32: a50NC_KbZ3PAjC1mndgRcsuXyn8.roa (hash: s97CymR7q1YMF5NI8Qg8aTQzotgVHDsGx5ZdFa/dmDM=) 33: akm-7yAJiDonZBQxnVV1OGdrWQI.roa (hash: BSCm3cC8faCYf4qKzPFWFm0eV0aPG9+6iYZqT1LMlXw=) 34: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl (hash: tvchZgGWOwAuGcLKWY2S5EkSsbleyx8EcWVPVfOcD9I=) 35: b87Ytvc_OnLAU1-AiNzrR9Ndx_A.roa (hash: V6H++cmx7ABhwsJs47K6MKjpAOnt/75CprhxJ6Gbmq0=) 36: bPcb7e-NJ7Z2SH9EgFM8b6qhWMo.roa (hash: cSuLgZBe93F6gCkIqEsIiO7Y7gkLDrAZSfqQyAIXd3Q=) 37: cKm65Eb_WOsg0rJgahrGEn-QzNM.roa (hash: pkezS3MrD2s+itmukvNwqj5ekac2E5fRWqLx+Gd03qs=) 38: fB-ssibWXaRRn-H-CuY5gFjXB58.roa (hash: +rRXgbrojhz8T8xdIQ3ATRqFXS8HI9jaMh1zG4jjEV4=) 39: j6pbHRlnLOfwSmwNrUk0ef6vnW4.roa (hash: O/TV8Iikok5Y3gpICIdfIlFsIJTjWip0oG8I80DYIV8=) 40: jSJQSQmK6OCmMpfkIvfuFMwXqBw.roa (hash: gHpAU9/XCfY4BU4/j9JcKIH3Em7CoHTJDpBe7CHrKoo=) 41: kwLsvJubF1R5RcHPfrHTgEiidVQ.roa (hash: 8F/U8WfP4yqCl8XRLCwa8B75MvfEIKGjXp9DIFsIfN0=) 42: l5eLjRRQiofbgCfgGWC1ESLA0cI.roa (hash: A6wsuiAvc2IMJwsxkxrsjHGVGqfe958bhgt4EvG4y/o=) 43: mIgyZPNQz_V8Vv1YV4Vlevkp8d4.roa (hash: aX/qCseJBqwQ/FBxq2G9wm2PFYIjPFa1FTgA6vKJk5c=) 44: myv5FV2ZT9Ls5MevHdTYqEA_MJA.roa (hash: 1YzQOOkMlFwUdOarp93EdHT73EeNJxXmq8VtlTgOrEU=) 45: oZF03SCszKU2cMFKPHn0SejT3WE.roa (hash: MKtFJeKMbxiX1UyJd+qjchXyf2ETcu1hFYsMiuf1WXA=) 46: oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa (hash: bjJY96goKiZV3xFO6+9vadLGgV/G2i2Ywu0z1Lu4FeE=) 47: p0MUFXpVkZgtsSlPABpC9tRNWwQ.roa (hash: nwwnHtipryYbCGtYcP4T5i/NkJIrOO1hIAZjs1xr3Vg=) 48: p9BoBQcHvWcnfK5Z-dzz9tIRMIc.roa (hash: kfZyqesNLF5uUfEX65NwLN/N1UO4kuNU59afntzdAO0=) 49: pH2myNTapVaRMb1vIKSY-j1gQAk.roa (hash: VyYIuuB2lASzOywoXfXVwPswU99oB/DW5uDbfLyHo/k=) 50: pKgW_epUKKqINQVkGFPfKQN_JME.roa (hash: MpYnxhEKRzbjZbG7ScaYIGMVo8jyEDa8wL6U3lmWFGs=) 51: pvsSuq2_ISueFX_CCuNovFb8QGg.roa (hash: fa+ELqCcEOm8djRQuSiQu6ZPzxIh7taBxjF45f55b+I=) 52: sfiiRUAjRfERzQzOjrmgcvA1cxs.roa (hash: TshRmkkazw7tlKnVOHwzooNI7hK6rsPouvDraJCoRiE=) 53: tytOt0Jnfng494nz1KKHM9Sv9O0.roa (hash: X8Jccjcf1DxYOMfZ81BKWuP0hjGe1KZM0ZKEWTJbdz4=) 54: uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa (hash: ndWd7SzVAqTlN/7xiWhTaXhcDTar2hjRQoFL1p1qfwY=) 55: uaFeOb3ZlsDhBvdC5DMfN4a2b_I.roa (hash: C+Q/JJpWz+OpRjzqLkpJWwNsijdGi5P+0vA5yzfq5BA=) 56: w0ZNcMcB-bV_ZuH0hz4E--VU2Vo.roa (hash: v/Cb++4Ig4m2ncnNcoRi4jmKgzmundzsjJp4HEYTTkE=) 57: wQVHsxN8lTBq5V_pewzOq7Laf0k.roa (hash: w2m+GM7WmHsey3doCl3U/Uda3tGjG/DaokFOWdlHDKk=) 58: w_gzCBRtpUsiPnUGxqZUGzD1VAI.roa (hash: UW9r/G1zt1vXti13hE3C7ezuEbsxdhFejGJfjJIJOm8=) 59: y94XHlBCW5YOW-6BdKgO-tlv_u0.roa (hash: FJGHpRnDkpY26xr1IUdzh+HyGoGoo1yGkxkAEbUhPfA=) 60: yTW90bASwHZeI4yV_g0HwxDDXW4.roa (hash: Umd/138F1q1aSdfkPlZxFfW+dIm+U+edvDhCvzupFUM=) 61: yYxM37nNOq_TV4NpKIVgHa0idwM.roa (hash: PpyKS/PDZE9gzuoyI90eCE2wlMAhgSpTrd9ux3dKRDk=) 62: zEa2dnUGnYvh0EPESqkpwMgCh4c.roa (hash: WiceWAQsjC0ge+PDdbm8fdHkk1bbMCXxbb5e8qEyYHc=) 63: zMycwWf9Tpp5xSB6-C5UFRiyMQU.roa (hash: oLzSeqmsbJ/B++9sA71n/u3LkcCkqvS26sSAP1tYoR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:48:7d:14:86:8e:16:35:09:8d:60:f1:a9:3f:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Oct 21 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8cb6a991abb37db0f01acbb70f4536268afb2696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:9c:bc:34:15:c2:37:a0:b0:dd:5b:0e:62: 9e:78:70:af:89:76:6a:d1:eb:95:18:4c:a3:a4:2a: a6:1a:8c:31:54:9e:df:de:a8:a8:4c:73:28:2a:57: be:7e:0e:6e:04:c3:7a:8c:bd:d8:16:1c:58:fa:12: d1:db:e2:5d:39:a3:a9:5a:09:20:13:ff:0b:fc:91: bc:24:3c:dd:1b:25:f7:25:ab:e2:01:4e:9d:c5:78: 49:8d:2b:73:cf:2b:47:d9:a1:d3:6a:9a:20:b0:7e: 38:3d:a6:c9:a1:48:07:ec:b3:49:64:77:4f:0d:cd: f9:a0:47:e9:5d:28:d7:29:c9:cd:96:f3:59:53:0c: 79:d7:42:d6:9d:1a:41:81:c5:32:28:dd:6a:6d:06: 82:b2:88:4f:c2:4c:0f:42:3a:ad:8f:d9:f3:f2:68: d2:2b:d7:c5:a0:ad:ce:3c:b2:d2:9c:fd:a2:23:24: 59:33:e9:8a:be:2a:74:52:92:4c:93:17:9b:81:5d: 2b:6f:1a:29:5d:03:36:81:8a:48:ef:7b:51:1b:12: 4c:11:dc:de:df:d3:25:6a:81:cc:a1:cd:b8:62:8a: 0d:4d:25:a0:94:54:46:4c:8a:7c:e3:ab:1a:1d:e3: 14:16:c1:68:45:9f:3f:b3:87:01:19:5b:82:18:9a: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B6:A9:91:AB:B3:7D:B0:F0:1A:CB:B7:0F:45:36:26:8A:FB:26:96 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:75:c9:db:a7:ec:df:f8:9b:07:73:04:cd:53:6e:b5:96:b6: 3a:dc:04:fa:93:c3:b2:3d:33:5c:27:44:56:b4:a8:cc:a5:a3: 62:43:b1:e7:49:1f:67:7b:5e:c3:ec:69:ec:e5:d0:d0:ea:c4: 8b:3b:2a:e4:ef:45:a1:95:ea:4e:52:36:1c:c8:ae:74:7b:de: 85:10:6f:1f:ad:f8:5f:cb:c6:72:5a:63:ea:03:42:bf:5b:24: ea:de:6e:84:bd:8c:56:9b:a2:48:07:af:44:1e:3d:ad:80:64: 34:d8:71:77:2a:f0:d5:6e:ec:94:d2:d3:01:c7:6f:bf:51:2c: ed:a6:3f:1e:e6:b7:93:9c:0b:54:13:af:17:bd:78:fb:a5:63: da:67:84:db:1c:9c:72:12:d6:1d:44:93:70:50:3d:9f:05:48: bb:60:a7:b3:7f:ea:08:ce:c4:79:d8:b6:ca:a6:c9:8b:1e:ba: a2:c8:92:2a:08:d8:71:5e:08:d8:f7:32:c2:f7:32:e3:84:c6: ef:10:c2:ac:7f:b8:78:19:fe:87:b5:f3:04:92:f1:52:5e:a6: 94:c9:24:93:85:d7:50:f9:af:8d:41:7d:19:1d:87:0e:8c:79: df:5c:e4:df:6e:6f:2c:3c:07:d0:c1:9a:9f:b7:cd:3d:8a:3b: 52:4d:9a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoESH0Uho4WNQmNYPGpPyVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMDIxMDEwMDUwWhcNMjUxMDIyMDEwMDUwWjAzMTEwLwYDVQQD Eyg4Y2I2YTk5MWFiYjM3ZGIwZjAxYWNiYjcwZjQ1MzYyNjhhZmIyNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXqcvDQVwjegsN1bDmKeeHCviXZq 0euVGEyjpCqmGowxVJ7f3qioTHMoKle+fg5uBMN6jL3YFhxY+hLR2+JdOaOpWgkg E/8L/JG8JDzdGyX3JaviAU6dxXhJjStzzytH2aHTapogsH44PabJoUgH7LNJZHdP Dc35oEfpXSjXKcnNlvNZUwx510LWnRpBgcUyKN1qbQaCsohPwkwPQjqtj9nz8mjS K9fFoK3OPLLSnP2iIyRZM+mKvip0UpJMkxebgV0rbxopXQM2gYpI73tRGxJMEdze 39MlaoHMoc24YooNTSWglFRGTIp846saHeMUFsFoRZ8/s4cBGVuCGJrh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy2qZGrs32w8BrLtw9FNiaK+yaWMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnXJ26fs 3/ibB3MEzVNutZa2OtwE+pPDsj0zXCdEVrSozKWjYkOx50kfZ3tew+xp7OXQ0OrE izsq5O9FoZXqTlI2HMiudHvehRBvH634X8vGclpj6gNCv1sk6t5uhL2MVpuiSAev RB49rYBkNNhxdyrw1W7slNLTAcdvv1Es7aY/Hua3k5wLVBOvF714+6Vj2meE2xyc chLWHUSTcFA9nwVIu2Cns3/qCM7Eedi2yqbJix66osiSKgjYcV4I2Pcywvcy44TG 7xDCrH+4eBn+h7XzBJLxUl6mlMkkk4XXUPmvjUF9GR2HDox531zk325vLDwH0MGa n7fNPYo7Uk2aXw== -----END CERTIFICATE-----Generated at Tue Oct 21 07:48:12 2025 by rpki-client