Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          2wdrG1GtYi3SNjlbF5QZV+b7UJj8KAQND7VHtEidD2s=
Subject key identifier:   4C:67:B3:B6:7F:53:D7:05:76:9B:6F:21:E4:4F:B5:E9:70:D6:C5:FC
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       01974667525C5F3D9BFED7929FAE68FB480B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0B8A
Signing time:             Fri 06 Jun 2025 18:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 18:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 18:01:05 +0000
Files and hashes:         1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
                          2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
                          3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
                          4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
                          5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
                          6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
                          7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
                          8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
                          9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
                          10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
                          11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
                          12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
                          13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
                          14: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
                          15: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
                          16: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
                          17: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
                          18: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
                          19: WGlvtk8IWZ6ds_c_g4mOAVqrlN4.roa (hash: S/+B1U6aTb4hiIDRGdBxuiRRAF8hyixivQGp2pknvUs=)
                          20: Y9DTwbuKj1l3cwWXiwNXZoyOdh4.roa (hash: ubi9qYAB5WdX147XJ/LaFlHI6aLRjQtoaUmfqiUrpJ0=)
                          21: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
                          22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
                          23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
                          24: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: SMfCxU5ec/lCpmtXN5beDKMzIKknioJS+8qjcCy5h84=)
                          25: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
                          26: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
                          27: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
                          28: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
                          29: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
                          30: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
                          31: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
                          32: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
                          33: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
                          34: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
                          35: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
                          36: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
                          37: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:52:5c:5f:3d:9b:fe:d7:92:9f:ae:68:fb:48:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Jun  6 18:01:05 2025 GMT
            Not After : Jun  7 18:01:05 2025 GMT
        Subject: CN=4c67b3b67f53d705769b6f21e44fb5e970d6c5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:dd:c2:31:20:44:49:bc:77:bb:37:56:dd:
                    2b:22:be:59:c7:44:55:89:70:69:a3:23:5d:a5:bc:
                    18:c8:95:14:e9:91:64:2a:d0:00:09:0a:8e:bd:c4:
                    dd:f5:1d:f0:9f:2c:cd:5c:5c:e1:1e:c9:ef:5b:d8:
                    37:dc:89:34:d9:27:e4:ad:3b:bb:f0:28:80:34:a1:
                    05:9a:dc:ed:14:83:0a:0b:b9:70:33:b3:75:5a:34:
                    fb:0a:14:0b:1f:9c:63:db:8c:f9:00:b3:9e:4e:93:
                    8c:90:2c:43:ed:fd:20:1f:cb:49:6b:ad:b2:81:24:
                    2e:2f:a7:f7:ee:8e:b6:23:76:7b:86:54:91:1e:85:
                    1e:ed:de:87:9e:c1:b2:2f:5f:ac:7f:3f:87:85:ea:
                    88:b4:ff:5a:6e:9e:08:e0:44:47:75:9e:ad:1e:61:
                    eb:3c:3e:c3:1a:93:8d:68:2e:fd:2b:b5:f7:61:f7:
                    7a:59:70:b2:47:76:85:ff:78:12:d7:a5:47:d3:29:
                    48:a8:ca:5b:33:a3:ec:71:9b:fb:eb:a1:0d:f1:87:
                    71:ce:6b:10:9c:29:69:9e:02:43:01:28:8b:a0:b5:
                    e7:8d:62:8c:b3:b4:e6:42:43:87:88:83:33:c6:aa:
                    ca:f4:4d:46:37:b5:e6:f6:8f:9e:11:fc:e3:9d:72:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:67:B3:B6:7F:53:D7:05:76:9B:6F:21:E4:4F:B5:E9:70:D6:C5:FC
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:8d:4b:2e:8b:0c:70:0e:f3:61:b2:63:02:76:a6:f8:f6:
         0f:77:b1:cd:01:c7:3e:d5:a3:c7:47:ad:1b:b5:8c:e2:52:4d:
         47:dd:5e:76:74:15:db:19:fe:71:af:7f:02:02:30:69:c4:24:
         66:10:0c:70:10:5e:72:f3:f6:de:27:2d:7b:83:27:c0:9e:57:
         1f:d1:44:06:aa:42:ac:71:42:a9:8c:94:c7:9a:c2:09:e6:cf:
         04:26:5b:05:d4:e8:2f:c4:4c:a0:4a:c7:c5:1a:00:ab:3f:28:
         43:05:37:e8:f0:b2:27:d6:cb:f7:7c:d3:f1:fa:98:65:03:18:
         cf:c0:e1:1e:04:67:06:31:c4:2e:ba:85:45:30:3e:0a:3f:8c:
         3f:15:bd:0a:9c:c0:7d:5f:29:a9:91:ff:98:f1:2e:44:74:db:
         dc:2c:70:d6:40:c2:d1:87:5f:7c:7e:a4:b0:b3:d9:f3:33:ee:
         50:42:81:4d:0f:30:0b:68:b6:bb:af:0e:4a:83:06:77:ba:57:
         19:62:82:ad:16:c4:3c:00:9c:7d:87:2f:6c:e0:6c:ef:1d:c3:
         1e:d3:f5:40:60:02:4a:4c:a6:d2:cf:15:1b:60:8b:2d:88:87:
         1f:bc:b8:19:0c:1e:e9:1a:6d:fd:16:e7:62:0f:8e:97:45:24:
         1b:20:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:50 2025 by rpki-client