Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
File:                     b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft (raw, json)
Hash identifier:          gFO+p4YnG4jRcUxakr0/abOr5EgI/Jx2vPNf4q/U0MM=
Subject key identifier:   54:BF:F7:E8:E5:9F:10:60:31:2E:47:E5:8E:9C:80:28:A5:FA:83:58
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01973B65857A400518EF7D1AB66CB23FC421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
Manifest number:          16DA
Signing time:             Wed 04 Jun 2025 14:43:18 +0000
Manifest this update:     Wed 04 Jun 2025 14:43:18 +0000
Manifest next update:     Thu 05 Jun 2025 14:43:18 +0000
Files and hashes:         1: 0lZ4WwipJ-KvsXe4ZGys9NACiUg.roa (hash: QrFmzpIm4MczSEVI5hA5LdZ2rdAAM8rVP77wt/9ZMEs=)
                          2: 1-acserkdaRwKD1ZOt9mnNNr_tGk.roa (hash: 6hEtVWrVnbgrhSvEQ68FfjrHt5WP9Jfl8fiwkMXiUDI=)
                          3: 29GT6zvhDIiDp_VQDEbz3EoJDPA.roa (hash: 5eb4KEuKMjFg5PwuTzotiuOTjTE6AK8jqIQdvJTCROg=)
                          4: 2NzLzMOeFuBmYcrjiyDs5_DFYgI.roa (hash: UjwWdB8k577gYTCkJHn1rSTdVabHuDeCfYMOytlfWbk=)
                          5: 5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa (hash: BkNNieru96Ok0gqv++x1NXt1ZiRd17b/+Pd802cp/Gk=)
                          6: 5zoRP68EVGDpXKwRwzUsGLHu-RY.roa (hash: +G8Jr7o2yQYUluTJTvXDAD+vj+5ImCPfksbZKx/QVjg=)
                          7: ADGW21X--XpG2WBIYj5kIM1Z0-g.roa (hash: 9A8sa2id1+8ByNAMewXe7FMcF817DiqS5V9Qri3bdTE=)
                          8: BScWdljv0AQRTZyIvglOZ0oFBE0.roa (hash: S79FUTXfJV4hESBGmFYG1R6KYPNaNufbRNEZRwYtCR0=)
                          9: BjGl9Q72g_Ec259If-Jk56BpizQ.roa (hash: ZmMAA1yu7c6D1XkjZod31MG9U+mujHQhvFcz7QsWW3s=)
                          10: HT9n5XGxiSRGbixWv-3kz0mWWh4.roa (hash: iHpx3TCWPvIoST4OBGoxr/waO+FYhNZeiOZuEYotXaU=)
                          11: JW8AyJFJPkQ1ZGONgpNYjy_UapU.roa (hash: 7j/1BSk7JznLZDNSRYDx/seCvE0WvECGanSxETBdFRU=)
                          12: Jo9_8piUxg2wee4-7hJARk5rotE.roa (hash: vqLLjwPcKVEzxJ3q8XfOQ/ryqpCfo/jKRQDYOnt6bJ4=)
                          13: KNlAoqyQzi7-1u-gk423fXd-fqk.roa (hash: d0CymcnZWf6Tqsq8jUmID0nMStCCIzwj424+Qb4S5/Q=)
                          14: KvaEQEmYbbYuHslL-MGtAyo-m2o.roa (hash: X5W6uO0llg8M0/nBFAkOWtE1oQ1OqXNWwnS/1SvBYmU=)
                          15: LMXjBxSACWe23B5KJVgWjys-RW4.roa (hash: bXK/65j0IbvpFBLJOgM7eXPZPRVnlnzA2N/1RiBf40M=)
                          16: MAtFsiCs-1F-523L9frydALwyy4.roa (hash: 2oSZs+/2GJf0TVw2qN8JKhmCjL7EV9WGTizvjqbOhwQ=)
                          17: NyHJJYZDTwZZmeIot6SdEsIdX_4.roa (hash: GHg3UIr5T3WVKzRS+VHat/S8DDlmOajYIXetnJ8rm7g=)
                          18: RSdOaSCVA6ogR36fNmSEfGUHdAQ.roa (hash: IUUzQDet8SkqHV+8ZTZJqpqrDR0834YedORjDV1jlUQ=)
                          19: RjTJ2EaIZfE051tXU0vuScbwBZk.roa (hash: TowX0WWdHApvFSISjmRiH2FsG9LnVvVrELSSI98m3So=)
                          20: S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa (hash: GjF5x01fdvJu7nYuxxfVRo6MwcjIthDWhsqgii6EbWo=)
                          21: Yed44AUAbqpY6pzy3aMkteNGQ_g.roa (hash: FZrMifpRX5lyJO47EzwgH+UZbzIMubq2K2YsFTZ5WZI=)
                          22: _8ZQWuUaGZ9feBTbscjwZbx48pM.roa (hash: TNfC23AEZS88V+zreqHVoePX0RM2CaFufz271/b9FGE=)
                          23: a50NC_KbZ3PAjC1mndgRcsuXyn8.roa (hash: s97CymR7q1YMF5NI8Qg8aTQzotgVHDsGx5ZdFa/dmDM=)
                          24: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl (hash: Mixp00fyVw9UHTyoPZvsFBbsdwRaZ41pjC8htj5vk9M=)
                          25: cKm65Eb_WOsg0rJgahrGEn-QzNM.roa (hash: pkezS3MrD2s+itmukvNwqj5ekac2E5fRWqLx+Gd03qs=)
                          26: hcWCxsNXJ9yg5Hoze1tY7q8fcf0.roa (hash: Cm/pymKAKLUiskldZpXb8kvJL0aycJOlWqVALOBQDjg=)
                          27: l5eLjRRQiofbgCfgGWC1ESLA0cI.roa (hash: A6wsuiAvc2IMJwsxkxrsjHGVGqfe958bhgt4EvG4y/o=)
                          28: oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa (hash: bjJY96goKiZV3xFO6+9vadLGgV/G2i2Ywu0z1Lu4FeE=)
                          29: pKgW_epUKKqINQVkGFPfKQN_JME.roa (hash: MpYnxhEKRzbjZbG7ScaYIGMVo8jyEDa8wL6U3lmWFGs=)
                          30: uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa (hash: ndWd7SzVAqTlN/7xiWhTaXhcDTar2hjRQoFL1p1qfwY=)
                          31: wboa4GFuKPAHSjlL19CraoPZtI0.roa (hash: q0p0Ewl3YQdtiZtG8VyV1iiK+dSNeMPQkM8753mzfJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3b:65:85:7a:40:05:18:ef:7d:1a:b6:6c:b2:3f:c4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jun  4 14:43:18 2025 GMT
            Not After : Jun  5 14:43:18 2025 GMT
        Subject: CN=54bff7e8e59f1060312e47e58e9c8028a5fa8358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:b1:bf:6e:a2:1d:8f:b8:ec:00:95:d9:f6:
                    06:92:0e:55:c0:95:b7:af:38:db:71:05:87:5b:b1:
                    96:f0:3f:73:6b:59:92:3a:e7:86:19:ed:7a:c1:9b:
                    43:5c:ed:a5:88:cb:df:00:eb:c7:0c:1d:99:a9:5d:
                    85:7f:fa:15:11:ba:7e:65:6f:ca:87:ed:59:1b:fa:
                    f5:4b:87:6a:b2:57:57:4f:54:7e:48:b1:7b:48:16:
                    7e:aa:e9:9e:f2:a7:ec:b5:6c:2f:bc:5f:ca:28:f5:
                    67:15:e5:d9:0c:bf:a4:12:eb:38:c4:f8:27:e8:cd:
                    ac:23:f9:57:84:35:17:5b:de:0a:61:3c:9c:df:69:
                    dd:f4:a5:37:b5:69:4f:5d:5a:10:c0:ab:a5:37:9e:
                    2c:90:2c:18:83:03:66:f2:58:fa:f2:85:99:d6:3b:
                    66:9b:68:76:8a:09:4a:43:1d:f1:cc:f0:5e:29:63:
                    b3:6a:db:0d:bf:44:89:47:26:d2:c1:37:ed:3b:cf:
                    c4:c7:85:0c:b3:cc:0b:a6:75:13:bc:3f:cc:95:d7:
                    f9:63:7e:1e:90:58:a1:39:62:7d:fa:f4:84:4c:29:
                    2c:e4:59:38:cc:20:1f:d0:fe:54:b0:45:7c:e0:86:
                    13:a3:32:54:2d:4a:77:3a:b1:fc:25:b7:7b:e1:3d:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BF:F7:E8:E5:9F:10:60:31:2E:47:E5:8E:9C:80:28:A5:FA:83:58
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:05:97:d2:9f:08:da:8a:43:bc:fd:ea:1d:2e:33:07:74:
         73:92:1d:f6:2e:02:2d:ef:d9:00:fb:aa:bf:94:52:d8:e9:df:
         c0:31:e7:14:45:42:aa:40:98:9a:83:48:77:cc:39:9a:22:ec:
         94:a8:c2:72:ac:74:8a:6a:99:77:4a:b1:f2:7d:9c:ef:b2:0e:
         d2:10:13:dc:4f:a1:14:1d:4e:70:90:86:5c:92:a2:bb:f3:ea:
         41:bc:eb:29:3d:26:91:cd:0c:36:9a:4b:5d:48:a4:b7:d8:25:
         6e:ab:12:a8:7c:c0:09:ce:84:ab:06:f4:f9:ff:6d:60:98:c8:
         0d:44:1b:64:58:2a:d5:35:4f:a9:e8:40:2b:98:ae:80:b9:9a:
         2c:78:7c:b5:32:14:30:03:d3:0d:6f:52:81:a0:67:69:37:48:
         d1:28:33:a4:b9:eb:74:c7:1e:ea:60:3a:c8:7b:a4:a5:48:05:
         06:8b:0d:16:b8:b4:5a:fc:45:b4:9d:2e:b6:f9:3a:e5:79:10:
         ca:13:71:e4:48:21:06:7a:83:54:83:56:1c:2b:48:c4:dc:7b:
         7b:ed:14:a4:0e:50:6c:26:88:ac:fa:a9:93:9e:80:1e:43:0e:
         30:53:69:bf:61:9d:22:e8:bc:23:ce:97:ce:60:4a:39:73:7d:
         e6:06:14:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc7ZYV6QAUY730atmyyP8QhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwNjA0MTQ0MzE4WhcNMjUwNjA1MTQ0MzE4WjAzMTEwLwYDVQQD
Eyg1NGJmZjdlOGU1OWYxMDYwMzEyZTQ3ZTU4ZTljODAyOGE1ZmE4MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaexv26iHY+47ACV2fYGkg5VwJW3
rzjbcQWHW7GW8D9za1mSOueGGe16wZtDXO2liMvfAOvHDB2ZqV2Ff/oVEbp+ZW/K
h+1ZG/r1S4dqsldXT1R+SLF7SBZ+qume8qfstWwvvF/KKPVnFeXZDL+kEus4xPgn
6M2sI/lXhDUXW94KYTyc32nd9KU3tWlPXVoQwKulN54skCwYgwNm8lj68oWZ1jtm
m2h2iglKQx3xzPBeKWOzatsNv0SJRybSwTftO8/Ex4UMs8wLpnUTvD/Mldf5Y34e
kFihOWJ9+vSETCks5Fk4zCAf0P5UsEV84IYTozJULUp3OrH8Jbd74T3i0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS/9+jlnxBgMS5H5Y6cgCil+oNYMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9IFl9Kf
CNqKQ7z96h0uMwd0c5Id9i4CLe/ZAPuqv5RS2OnfwDHnFEVCqkCYmoNId8w5miLs
lKjCcqx0imqZd0qx8n2c77IO0hAT3E+hFB1OcJCGXJKiu/PqQbzrKT0mkc0MNppL
XUikt9glbqsSqHzACc6Eqwb0+f9tYJjIDUQbZFgq1TVPqehAK5iugLmaLHh8tTIU
MAPTDW9SgaBnaTdI0SgzpLnrdMce6mA6yHukpUgFBosNFri0WvxFtJ0utvk65XkQ
yhNx5EghBnqDVINWHCtIxNx7e+0UpA5QbCaIrPqpk56AHkMOMFNpv2GdIui8I86X
zmBKOXN95gYUog==
-----END CERTIFICATE-----
Generated at Wed Jun 4 22:48:25 2025 by rpki-client