Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          HEe8f6avbHHjMo5i+9m5/pEo/ROf9QfE6kFMmctlCSI=
Subject key identifier:   B1:58:C1:CD:A7:B7:B0:2C:66:78:84:BD:01:2B:8D:1C:65:D5:2B:97
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019767A9428EF890D5C3267FE95ADE368401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          0DE3
Signing time:             Fri 13 Jun 2025 05:00:35 +0000
Manifest this update:     Fri 13 Jun 2025 05:00:35 +0000
Manifest next update:     Sat 14 Jun 2025 05:00:35 +0000
Files and hashes:         1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=)
                          2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=)
                          3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=)
                          4: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=)
                          5: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=)
                          6: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=)
                          7: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=)
                          8: ERVdycpY4bKVWQxSzavqyLO77UA.roa (hash: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=)
                          9: FMoS-o9DiVgUmecx3SfvDXEo6xw.roa (hash: 1UzCsZkjWYFE709BjoGlEdeWX/dMS9WtM2S2yyY1T4U=)
                          10: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=)
                          11: Gb0UHBAB0Dc0hCzGDJbXXC0YxPA.roa (hash: 7raBqAGSGU7xoGR3vt8m25hhNoG1Gw7C5q3QDR2lkQw=)
                          12: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=)
                          13: Hld29G1DWYar_V03vvNEEAXl32I.roa (hash: g5H45h/y6fGU8XE9r1rX3k8z88V8C5urUpMK18n0TuA=)
                          14: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=)
                          15: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=)
                          16: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (hash: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=)
                          17: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=)
                          18: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=)
                          19: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=)
                          20: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=)
                          21: WcNfc2ebH1nabssdIAaljgMAMvI.roa (hash: gIeR1+oo2boP6Zw5hratvRw93AbF/Ul3dA94pgz+zkM=)
                          22: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=)
                          23: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=)
                          24: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=)
                          25: d0u-ehuUqLrY5tyibnzgkeCwZXc.roa (hash: 0qBz5naJyINGxrtms8qZ9KJTRQQ0DHsskm0N3y0uv2g=)
                          26: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: IXNETN6Xr+1if70vO8sqhmRWfLbdqt8kWrFLE/C6qqQ=)
                          27: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=)
                          28: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=)
                          29: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=)
                          30: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=)
                          31: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=)
                          32: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=)
                          33: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=)
                          34: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=)
                          35: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=)
                          36: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:a9:42:8e:f8:90:d5:c3:26:7f:e9:5a:de:36:84:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jun 13 05:00:35 2025 GMT
            Not After : Jun 14 05:00:35 2025 GMT
        Subject: CN=b158c1cda7b7b02c667884bd012b8d1c65d52b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:dc:b4:0d:b9:8e:a6:e6:13:2c:3a:1c:5e:
                    05:26:26:d8:b4:d6:cd:b7:bf:23:8f:fb:b2:b7:18:
                    18:d3:15:ac:be:8f:25:ef:cc:7f:e4:b6:3e:53:be:
                    f7:2c:57:a2:4e:34:75:b4:5a:f2:bf:d8:79:a6:a7:
                    75:cc:15:a6:53:03:2e:65:8a:69:de:97:9b:25:c9:
                    1c:a3:2f:c9:37:ab:03:06:d5:36:d7:ee:84:fa:f2:
                    87:9e:b1:e2:5e:02:e1:59:66:fc:82:f2:eb:ad:bf:
                    76:a6:9b:f6:ec:25:e6:4c:69:a9:6a:47:e1:43:f8:
                    6c:ac:cc:2f:18:64:06:ae:e5:c8:b2:4f:81:62:e8:
                    5c:73:d4:34:2f:d6:0d:12:3e:39:68:34:03:42:ba:
                    85:12:18:b3:f0:75:10:41:8b:11:f3:e2:11:36:bc:
                    1c:09:ff:d1:03:f6:1d:f3:53:68:43:2b:ba:e3:fa:
                    91:59:bc:73:4c:84:4d:0f:d7:1c:c5:b7:8e:96:6a:
                    10:6a:6d:67:47:21:a4:d8:46:52:1a:ba:68:14:a1:
                    26:f3:66:43:3e:45:75:33:1e:a2:17:42:c5:d2:b4:
                    1d:be:59:7a:fe:b9:6d:a3:23:70:83:70:9c:97:2b:
                    9e:b8:a9:e1:fc:24:f9:94:ba:13:ee:ce:cf:3e:36:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:C1:CD:A7:B7:B0:2C:66:78:84:BD:01:2B:8D:1C:65:D5:2B:97
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:67:e4:ed:ce:dc:93:3b:47:ce:5b:59:bc:62:4c:06:b5:8e:
         a4:3d:15:aa:1e:82:c9:d3:a9:59:b5:62:46:91:bc:02:8e:55:
         d7:3c:63:95:67:a4:81:71:d0:d5:22:a0:ed:6d:d5:a3:81:c2:
         f9:3c:65:27:32:33:ba:bd:81:35:0c:fe:bb:d5:de:af:d3:9e:
         42:38:d7:4c:58:2c:b3:eb:18:e8:8c:e8:26:3d:b3:48:0e:35:
         e8:32:f1:19:9c:35:9a:52:54:65:75:8d:cb:d7:b0:56:dd:80:
         e2:9b:e6:59:20:af:f1:3f:c2:9e:4b:a3:cf:c3:79:a5:3e:2c:
         99:2e:4e:15:08:c6:60:76:03:c4:08:a6:9e:ce:9e:cb:a2:1e:
         bc:b1:45:9e:69:d5:fb:96:b7:b6:ea:3c:b2:0d:a6:d4:85:fb:
         30:8e:90:86:65:f2:d6:a6:58:cb:58:37:c0:3b:35:b2:50:e3:
         ae:2b:01:9e:31:2f:3b:0b:68:cd:7c:dd:ab:1b:05:db:b2:29:
         af:00:fb:3c:6d:a8:9d:5d:c9:61:11:68:5b:e7:0d:da:18:44:
         62:fd:b5:a6:e5:1e:76:f5:54:22:9b:e3:c3:0d:9b:2a:46:47:
         34:08:8e:66:df:d4:48:50:75:9d:b3:30:4e:93:02:c5:73:18:
         0e:f0:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:35:38 2025 by rpki-client