Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
File:                     HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json)
Hash identifier:          d5csSTxffRgwhqkMK4Coz+sVKnzXe/bRjlp3xyEpU+4=
Subject key identifier:   E3:95:6C:D3:CA:5D:54:57:D0:D5:06:D5:E5:6C:70:78:5B:49:E0:0A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       01991B2B4587D79B5E56FE7F6B9D31DE711F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
Manifest number:          0652
Signing time:             Fri 05 Sep 2025 18:37:24 +0000
Manifest this update:     Fri 05 Sep 2025 18:37:24 +0000
Manifest next update:     Sat 06 Sep 2025 18:37:24 +0000
Files and hashes:         1: 0_0iGAJeXKMTNOw78eGEdet28gc.roa (hash: EJ1v2NPpX9RF4Rhr1GIhzMv9gvxWzHoHXqhEjZaqZBA=)
                          2: 0v94mnKmrgYtt5y2MQGuDazjxjA.roa (hash: 3Fy3bWz7jcZoEFMt18MGzYWf/tfMkeytNpRPKao8d4A=)
                          3: 1-iBeGc5GK4S2dN6uCF2HCrItiXo.roa (hash: +Atg18ZWrDmX8o1SUvdzlk15atSl/w2VLIu7oNt59yU=)
                          4: 19QMGvoiqCUYesJIaT9TniQ39JQ.roa (hash: 2NeiSYtbnk4i1iOmcdbK3JyfQ1u4yna+0l4g433qTxE=)
                          5: 2UdFjksIEw7c9E0Pvj4C3TiZgM0.roa (hash: SK2t3H3DV3SFHlOZkQJw+SMjnZg5haygykAYMk0yWSA=)
                          6: 81qXzPxUJRg1AvUUDZSL4d4YLSU.roa (hash: Od/Fj8uqEHkWQDXmekdbhDJNkfz9GE2COUgV+Rm+Hwk=)
                          7: 9UIWvr1OfNDaGDV1NFy_9NnoTYM.roa (hash: tixaefTMG5hslITfoqhr1S/+epdx4nSuGQbGRhnUPxs=)
                          8: 9tE0dhjecz_vEPgQYKZazxJZpXs.roa (hash: ybs354Sqw4G0DipKA3jVjo1yJgYq86p+0PfMWE0k7zg=)
                          9: ApJzodTu5HPJXI9NCI_fY83oyZQ.roa (hash: XzMD8v9s6QnEs+yOqEL+H1pIi1xDRqXl1ItG1fskxZA=)
                          10: DFllakhYeoutBATf4MzktTkzMHA.roa (hash: GuxDJWqtKXhEqBdraQY6S/n1UWX945Zxw/dwDjpnHZI=)
                          11: DJb6X3nSZJqpua_4sh2yv0msH3k.roa (hash: qyn9jd1jR0DGOI92U9JzJLQKB1svut0OBUPFhG4lxo8=)
                          12: E9wVhtIxaZaxe5i4Dz65V9mI8YE.roa (hash: JXV+8LqhwGrJp1sc2icXMtzcRDiN+ufICW/F3M8NBNg=)
                          13: G4C51JT3OmCVcaSkVzmku4EsPfQ.roa (hash: BmuIj2noq5vl5ugeRq2+5NB4DNlC7/C9uM2BT0aPa/I=)
                          14: GOKgtqyMgUNwbAoQRHm-wzPGJWM.roa (hash: VeQZDJm8WuBpv5q+XYi/Mjg5at1dHBdj/MJpQIJt3ek=)
                          15: H8zP5ADA1qpG3kwvpub1IkD7bYw.roa (hash: onCycwgRdWFveiibrpqjGo0TabyFwkvUWg2/yfU0uMA=)
                          16: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: 4V+ugxRADQ9k4yhdgiu4qHLti4hEsfwPLdsWgXhvczY=)
                          17: HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa (hash: FQAxLC3PSJc2T88Euwq7LFUYTEkvVvSw9fr3e7bH7tM=)
                          18: K2eEFp9iH9k7gLxEMfpK9KLE2JM.roa (hash: 0lQdeVhxJN9HNN3eM0TqRZebl98boqiebb+RTNPno3Y=)
                          19: KMMYTHWzO61QXhv91ffqv9vqcto.roa (hash: tTySNgCXVj/sPrnXWcWMwYNiIdJvJu1O6zs3jqbRqEs=)
                          20: KOI25PzdTkm-0xZVhCT_xtTg5-s.roa (hash: 1o0QY37vh42XXWTJhB6P/HZwmg8ud9LsKS5XYNkdPhE=)
                          21: LbmccNbCjcRfrfTXWS4pYp09Sh0.roa (hash: paLncYWFEPzmdTDShYEDCuFyaxEupMiMsuNgJmP75H0=)
                          22: PCrnzM27m_gargGZ9ylIhhzHvSE.roa (hash: 6s3SRX4vbA35QaqChMrHCzmBjK50KbRqLwu/jy5I+uw=)
                          23: QPoh6Em9cWn3WJvCzMAwRVwyMRQ.roa (hash: R3kXYr4qrKi5iYaGGlqxlmukCVpK0SqCZUi0YaoO8NY=)
                          24: R2R3dYwVExujkP_3YEzS5IWSFks.roa (hash: iCdIt4hjH3rsHPjbBwBDkiRUbawLUhZbiZd908W2whA=)
                          25: RHeWfeYF0DEk7KeGddK3e5LURac.roa (hash: v2n4Lvwnf6X2vqETdOtxp42iLHblFzY6Og2bmDg55IM=)
                          26: T_9uedx-DDCLwyL-0yVYoY8ZyQk.roa (hash: MIaIP+4vaA5/qIMV/fq117jQ2jxAOPFsl5mWS6lIxj8=)
                          27: TjIeNrcmRKVLIOGDgcjcXImdPiU.roa (hash: s5fTBtNwl1HnrbKa/leELUKQRb08rHVq9WcbWzHff2g=)
                          28: TxUte2UJ9SRYfI0Kkfto-EOhFA0.roa (hash: jgnG8ECsuht9mADq610Na72eHRyPpWoKaV58yYAI49E=)
                          29: TyejWy3JMbuHPbI-YINhRswkn6U.roa (hash: ddeTozCzeGdeH2UQO6NJHuZFd1z2I2vHOsvjsVc+KhU=)
                          30: VibhLOpGeI3keB5OfPl7So1Jn_4.roa (hash: DO7NV9hwoqZj0udY2bZvHJpMD1KP8LzDgt2whZjtJcA=)
                          31: Vif29W-3fcIPPVlWCYw3gqQgj0U.roa (hash: mBKo6kBp5aKtDQrGaY+LTFtjbW2WOx4wgeIf4JrxaMQ=)
                          32: Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa (hash: nOlX7buINhy7ODIRgajp3PMZ+ShNH0qVTw3tydvl1+c=)
                          33: _aNJFbSzgBbBwEdQVNoH-8orVIc.roa (hash: Gx3Ug56pkt0ImfnaxOgRmhF/HNlvVeK7QQcQbC39qBo=)
                          34: b_esdvwuL7HMMRsaUDaWOqTlMVY.roa (hash: pwo77eC9fZ605tPPzC8qd5eRG6DFX9632hHdiz08KNM=)
                          35: clGGL9s85YgTAJ-RMjz5lCzOP5g.roa (hash: xPkxg9x/lb7QNTjqVIebB4jEI4Q8WiVxGZsDwX+/iUM=)
                          36: eeNIld-CwPVcfEVGzgUCMqVFpyY.roa (hash: uxo9SuC4/NypmA3tJNrIjhVovnUTOlUmyteCbIDqups=)
                          37: g_iYqNRowTTxiEFM7KxyIodrdN8.roa (hash: QHUgb4Et5YotlsL3lcCNLa8bKqSQdvBj79Q4dPnBgRw=)
                          38: iWWPdSsgojFON9VQW6n9FgPpjoo.roa (hash: tqT/agNSGfwV0XfbQZHnnj0VViQnzKD0bRxxOqcy3E4=)
                          39: ln5d-4jCSiDI0h95KeJISMYXs4Y.roa (hash: qkll3Uymam7ZZfE32AVbjQCQD7ZwX7fQH2x+YZmVZVg=)
                          40: m1nXhaF-D_WcU0JXN1FLM9GEIUc.roa (hash: ybdzKUdVwWUYP9WPsrEmoZSSbzTWuphzg1xrntp1nbU=)
                          41: mtOyHCDFbEN52MPoQC2Q-k_KdmA.roa (hash: r3EoA0ly4TitVzLXwjhS8X5/zGogMJB24chyqpQhXH8=)
                          42: orZxC-53BDBk1U6uuSN8DRaau2c.roa (hash: HOGL1GzBKb2HP//0y1ozzX/F3kqSictn9tpzoAyDhSI=)
                          43: qnL93_BEE_Q6FG8c3TiPR0vDroE.roa (hash: 79gy+v8ayAvjqai82FxS96QNXEZJLLIxMaVOdq1LQv0=)
                          44: u7Y8BVVDUXl7fC12Cr-zsxDVt4M.roa (hash: ncAGExC4cqVthMuqux4bqGX1ssW+0MQXOa8b11b3Oe8=)
                          45: u_xpoEFdMS4XphSvfLjhMqrSVCA.roa (hash: F/zktMNsr2weptvJLM+lhhTnzjBLxkGzNeypTL4hxZk=)
                          46: urVdPzAr5hcmUa_BCZWJpXPsm3s.roa (hash: q/f+k2J6pg2/lVHaao8qrOCAoWMApYxChxvdtUZ21VY=)
                          47: vGZJfldkNrATgUrpUBlFJTLuRIo.roa (hash: VVEkX1eLx07pjWhz/7v17cdYwIxDpo8ZBnbHlK0lebk=)
                          48: v_SA1wrHRCciByX0ZcECxaGPNAk.roa (hash: 3gFFpRJ78piViA4BJwT/QXr9zjDvHB+7bl4Ri12KRO8=)
                          49: xEmKzDcyZreeHqTpSliLbWbvkdU.roa (hash: fRrHaVmCGcrV2SdJVORjK1vgZHA5NCcB9AsMSzAI/3s=)
                          50: xHRuB04WVelcGlor8QgRfxuqgaA.roa (hash: 6+003LoatefRRQL8EWqTRr2bABcnmrzl+azEagj1yIc=)
                          51: xlVhatP5PHgqxzeTQvY1OyRXO4s.roa (hash: VdBfWbqENqhIkgvMU9Mo+8ftnuylormZl3iSC4aUByg=)
                          52: xzpN5iZn4JxlC9_UY_wapkHuZNo.roa (hash: VS7irlhrNU3HQQ22getCt15ixIq0eXBz3WPpYIJtBDA=)
                          53: zAVxvux3Ij4Ln78b1yGsEJeiCfQ.roa (hash: 3NnVEWj3eRCtReW6v/aye01x2yi/QEBSea/+eiByuhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 17:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1b:2b:45:87:d7:9b:5e:56:fe:7f:6b:9d:31:de:71:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Sep  5 18:37:24 2025 GMT
            Not After : Sep  6 18:37:24 2025 GMT
        Subject: CN=e3956cd3ca5d5457d0d506d5e56c70785b49e00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ea:a3:55:db:9c:fa:a1:0b:d2:15:f5:de:0f:
                    80:ef:98:11:47:97:fa:da:55:d0:15:9f:08:cb:45:
                    9c:40:e1:21:d3:36:70:bb:a8:ad:dc:50:9a:91:e5:
                    46:b4:3c:b4:c8:05:8d:48:60:1b:85:8f:9a:39:33:
                    d6:6f:dd:56:49:c4:c8:52:64:87:d0:48:09:f0:95:
                    84:0e:1c:09:8f:2f:2f:6a:fc:f7:36:24:9c:63:e7:
                    a5:6b:81:e0:52:f7:46:ff:55:37:f0:a7:62:6c:e9:
                    c5:c9:e1:65:a8:ec:d2:e0:97:56:b3:2a:1d:36:db:
                    84:9f:f8:43:a5:a9:9d:b4:3a:24:79:62:9c:8e:c8:
                    2b:14:00:7d:80:61:e5:61:6e:16:9a:f9:e5:68:fe:
                    f5:33:ab:98:dd:d1:8c:bf:15:ef:03:1f:1d:eb:66:
                    62:81:fd:2f:17:20:25:ae:90:18:88:c2:b4:1d:28:
                    69:e0:2c:08:d6:41:66:1f:41:7a:4f:c1:6b:01:5e:
                    74:b9:85:35:ae:40:39:8c:71:5e:85:eb:30:f8:06:
                    3e:0c:29:c9:07:cf:ae:90:a9:b1:10:1b:36:0d:43:
                    ca:bf:a8:c7:c5:0e:19:00:f5:69:bb:cd:8d:f9:89:
                    85:c3:84:51:a5:db:c8:61:45:10:f8:dd:af:96:fc:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:6C:D3:CA:5D:54:57:D0:D5:06:D5:E5:6C:70:78:5B:49:E0:0A
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:9a:d2:a2:7b:6b:ef:e3:8b:7b:61:50:85:04:b9:f9:74:
         50:41:fc:c6:61:ab:34:27:03:64:8e:06:97:d7:5e:37:38:67:
         ef:52:ad:df:30:65:39:d7:75:d4:05:a1:fc:e7:e4:76:84:bb:
         33:bd:9b:00:96:be:4d:55:c5:5b:ce:2c:28:4d:bd:6a:de:86:
         a1:63:7b:83:c4:f1:1e:b6:09:f6:85:6f:58:bb:f7:7b:73:21:
         cc:09:92:e0:32:bc:0c:50:b6:0c:51:6e:9f:b3:0c:97:68:7f:
         4c:4c:a3:33:b1:8f:89:4e:d0:46:47:2a:57:d2:04:d9:1a:72:
         02:0c:e4:e3:fc:60:fc:12:8b:52:76:4a:85:5c:2d:f7:a9:fa:
         70:83:7d:86:3a:eb:b8:6d:d6:6a:81:95:37:c9:00:d7:01:55:
         9a:68:be:ad:94:80:6d:fd:65:21:22:0d:70:7f:1c:38:e9:4e:
         12:18:16:23:5a:e2:bf:04:04:fb:fc:90:1f:11:8e:dd:9e:5f:
         c0:3a:de:3d:db:f9:78:ae:a2:3c:44:f9:b0:c3:1d:7d:58:6e:
         48:c4:1e:07:21:30:60:3a:f0:13:5b:71:03:fd:fe:81:fa:22:
         79:7b:f1:e2:fd:c4:29:d2:5d:4f:57:41:f3:fc:ff:2c:15:91:
         ac:7f:43:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkbK0WH15teVv5/a50x3nEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwOTA1MTgzNzI0WhcNMjUwOTA2MTgzNzI0WjAzMTEwLwYDVQQD
EyhlMzk1NmNkM2NhNWQ1NDU3ZDBkNTA2ZDVlNTZjNzA3ODViNDllMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OqjVduc+qEL0hX13g+A75gRR5f6
2lXQFZ8Iy0WcQOEh0zZwu6it3FCakeVGtDy0yAWNSGAbhY+aOTPWb91WScTIUmSH
0EgJ8JWEDhwJjy8vavz3NiScY+ela4HgUvdG/1U38KdibOnFyeFlqOzS4JdWsyod
NtuEn/hDpamdtDokeWKcjsgrFAB9gGHlYW4WmvnlaP71M6uY3dGMvxXvAx8d62Zi
gf0vFyAlrpAYiMK0HShp4CwI1kFmH0F6T8FrAV50uYU1rkA5jHFehesw+AY+DCnJ
B8+ukKmxEBs2DUPKv6jHxQ4ZAPVpu82N+YmFw4RRpdvIYUUQ+N2vlvzA9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOVbNPKXVRX0NUG1eVscHhbSeAKMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyqa0qJ7
a+/ji3thUIUEufl0UEH8xmGrNCcDZI4Gl9deNzhn71Kt3zBlOdd11AWh/OfkdoS7
M72bAJa+TVXFW84sKE29at6GoWN7g8TxHrYJ9oVvWLv3e3MhzAmS4DK8DFC2DFFu
n7MMl2h/TEyjM7GPiU7QRkcqV9IE2RpyAgzk4/xg/BKLUnZKhVwt96n6cIN9hjrr
uG3WaoGVN8kA1wFVmmi+rZSAbf1lISINcH8cOOlOEhgWI1rivwQE+/yQHxGO3Z5f
wDrePdv5eK6iPET5sMMdfVhuSMQeByEwYDrwE1txA/3+gfoieXvx4v3EKdJdT1dB
8/z/LBWRrH9Dyw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:55:18 2025 by rpki-client