Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          6e8Craoq592m5h5VJWeFV2Y574xjYPAvdxNCm7hdyGk=
Subject key identifier:   F4:55:55:14:79:3B:77:24:F6:7A:B5:DA:F2:3C:A8:9F:38:71:FC:07
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       01960DFACE1E8DCEEDB613DD1B5D3A3307A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          157F
Signing time:             Mon 07 Apr 2025 02:01:02 +0000
Manifest this update:     Mon 07 Apr 2025 02:01:02 +0000
Manifest next update:     Tue 08 Apr 2025 02:01:02 +0000
Files and hashes:         1: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          2: 1nt7KKZ_kaA4th0sEgXg_btvGGw.roa (hash: P3hRQakGX2DJeRwO8m5JnZZQAfAIlClGhi09lkYemow=)
                          3: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          4: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          5: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          6: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          7: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          8: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: GwDFsvN+6Ihf9PJ+ls4J8MOjG0QDkkCwySUFKKvIVgM=)
                          9: AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa (hash: l484VXhb55rIiF/y4SkOcQOfu2WyfAjYkWmS1k5CH1c=)
                          10: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          11: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          12: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          13: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          14: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          15: GlJLYgf16agSfqwntlZ-9s0ycuE.roa (hash: H/pf+nizH//gW/qa/JKNB79H5K4HjIq/Ki214ycp+sk=)
                          16: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          17: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          18: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          19: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          20: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          21: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          22: NEfw7uDro6RqhjU8Fywg8cuqvzk.roa (hash: vdW+pYdyNoqoBJe2vsedZizZQj8kJ9GbuQcTyC/bcow=)
                          23: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          24: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          25: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          26: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          27: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          28: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          29: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          30: fgXOYlOn8katcS6MMyCw4pAx-po.roa (hash: AB1i+66TTW5eKzQUMm/K95jLLcwZ4U/B834LTt2ayNo=)
                          31: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          32: kLiTIZ2If919dVVhzojFnRKcjWY.roa (hash: gTGQxeqsPgxeOl1tDhUDDSBVF0nFKcDzKG4boIHSzpA=)
                          33: lWJ3hYOjry-sWXFIH3YDnApsrG4.roa (hash: fNKJ2GQjqn/XQtPMxjPfQVbHecGri3iHnvEs9SlHZhg=)
                          34: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          35: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          36: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          37: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          38: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          39: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          40: yZgl1zyLJKgQpTHOd8kSTVljdNM.roa (hash: f2YDZTloIVUPbF+TnGafTEX+6riOCFoEhWnQt6Ptf2I=)
                          41: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0d:fa:ce:1e:8d:ce:ed:b6:13:dd:1b:5d:3a:33:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Apr  7 02:01:02 2025 GMT
            Not After : Apr  8 02:01:02 2025 GMT
        Subject: CN=f4555514793b7724f67ab5daf23ca89f3871fc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:98:39:3b:d2:e9:f4:9e:33:6e:dc:e7:01:
                    aa:d9:7a:41:95:92:18:d8:53:34:af:4e:5d:bc:39:
                    26:2e:b3:5b:4e:a6:c9:33:ea:62:d1:f2:1a:ed:11:
                    53:d3:5b:d6:9b:82:f3:27:e1:9f:da:78:8f:33:3b:
                    58:9f:5c:7b:e0:9c:fb:7e:38:89:69:34:47:36:7a:
                    87:bd:7d:08:d8:b7:c4:a5:a8:52:4f:ad:67:eb:f5:
                    9e:06:dd:57:3b:cb:5e:ea:6c:24:f0:13:d3:dd:51:
                    14:a5:20:bf:ee:70:35:e3:be:80:27:bb:2c:e5:3b:
                    20:c3:68:4d:0a:3f:b7:53:15:b0:07:02:2a:b1:4b:
                    0b:09:22:00:20:30:61:3e:4c:90:33:e8:6d:df:b9:
                    fe:8b:f3:fa:74:e0:ea:d9:77:48:14:22:b5:54:2d:
                    a1:43:36:dd:1a:66:a3:28:7a:6a:00:e7:f3:0b:57:
                    e8:fe:c3:9c:30:cf:90:89:59:f1:5b:ef:73:31:4f:
                    ad:51:78:cb:fc:da:ad:70:a3:2a:40:c4:21:71:3e:
                    a3:bc:c4:f3:22:28:e4:27:d7:da:a6:82:43:96:ce:
                    c5:e0:6d:9a:7e:6e:12:64:fd:c0:57:e2:dc:1f:6f:
                    55:ef:26:8e:25:45:32:69:c7:cb:0b:2e:10:0b:a3:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:55:55:14:79:3B:77:24:F6:7A:B5:DA:F2:3C:A8:9F:38:71:FC:07
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:2a:04:73:d0:f2:74:64:c2:09:29:80:10:ac:a3:42:2d:
         40:4e:98:21:ab:85:80:4c:c4:7e:9d:7b:f3:e0:00:43:f1:bc:
         6d:30:63:02:dc:33:c4:26:d7:7a:a1:75:c4:b4:ac:3b:ce:20:
         c8:e5:b7:44:b4:66:0d:a4:7c:25:a4:80:5e:1a:71:aa:03:0d:
         6d:e9:52:94:b4:36:e5:15:83:ea:d8:b5:93:ca:2c:0c:7f:38:
         cc:c2:44:58:b5:d3:c4:11:26:f1:e5:5a:ba:48:94:0f:df:fc:
         e0:ca:7d:73:d9:d9:2e:ab:11:81:72:f5:6a:75:69:47:e0:17:
         0f:b6:2a:22:93:23:f7:e5:da:01:d9:6a:47:58:be:d0:b9:17:
         7f:1e:a9:a3:f3:65:e3:54:5b:e8:65:fa:51:2f:da:ac:4b:aa:
         e4:01:11:73:95:e4:af:b8:2a:57:0b:84:f2:42:d3:24:4d:94:
         29:81:3f:3d:55:f0:61:0b:a5:a9:c1:d4:79:de:dc:a2:7f:c4:
         f3:45:c4:84:46:3a:10:1e:34:8d:4f:8c:43:05:6f:5e:d9:7c:
         0a:d0:94:05:02:13:64:4d:97:54:4a:8b:3f:f5:62:95:42:15:
         6c:6d:f1:13:31:09:9b:0c:48:71:85:5a:ed:7b:ca:4e:89:cf:
         01:c7:dd:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYN+s4ejc7tthPdG106MwenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwNDA3MDIwMTAyWhcNMjUwNDA4MDIwMTAyWjAzMTEwLwYDVQQD
EyhmNDU1NTUxNDc5M2I3NzI0ZjY3YWI1ZGFmMjNjYTg5ZjM4NzFmYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6eYOTvS6fSeM27c5wGq2XpBlZIY
2FM0r05dvDkmLrNbTqbJM+pi0fIa7RFT01vWm4LzJ+Gf2niPMztYn1x74Jz7fjiJ
aTRHNnqHvX0I2LfEpahST61n6/WeBt1XO8te6mwk8BPT3VEUpSC/7nA1476AJ7ss
5Tsgw2hNCj+3UxWwBwIqsUsLCSIAIDBhPkyQM+ht37n+i/P6dODq2XdIFCK1VC2h
QzbdGmajKHpqAOfzC1fo/sOcMM+QiVnxW+9zMU+tUXjL/NqtcKMqQMQhcT6jvMTz
IijkJ9fapoJDls7F4G2afm4SZP3AV+LcH29V7yaOJUUyacfLCy4QC6PEAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRVVRR5O3ck9nq12vI8qJ84cfwHMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASucqBHPQ
8nRkwgkpgBCso0ItQE6YIauFgEzEfp178+AAQ/G8bTBjAtwzxCbXeqF1xLSsO84g
yOW3RLRmDaR8JaSAXhpxqgMNbelSlLQ25RWD6ti1k8osDH84zMJEWLXTxBEm8eVa
ukiUD9/84Mp9c9nZLqsRgXL1anVpR+AXD7YqIpMj9+XaAdlqR1i+0LkXfx6po/Nl
41Rb6GX6US/arEuq5AERc5Xkr7gqVwuE8kLTJE2UKYE/PVXwYQulqcHUed7con/E
80XEhEY6EB40jU+MQwVvXtl8CtCUBQITZE2XVEqLP/VilUIVbG3xEzEJmwxIcYVa
7XvKTonPAcfdBA==
-----END CERTIFICATE-----