Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          st3jMcTQaDpXXMtL7gA2zg4Yp3mgbuJtZFAkWdsTTpU=
Subject key identifier:   65:06:63:E6:49:D0:F2:F7:C6:EA:ED:B0:30:0F:19:77:10:FF:00:85
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       01973C1A64FE00A7B8A85F8111769DFBD7B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0BB7
Signing time:             Wed 04 Jun 2025 18:00:52 +0000
Manifest this update:     Wed 04 Jun 2025 18:00:52 +0000
Manifest next update:     Thu 05 Jun 2025 18:00:52 +0000
Files and hashes:         1: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=)
                          2: 62FFRbLMZiAc_YdwN0J8zGIbHPQ.roa (hash: CNhEA8oMJlI+Kr9kCi3nuWGoLgttS1CSckkHhL7fMBY=)
                          3: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=)
                          4: E4_h1qYRN41D_VDuA1H5nUNKrr4.roa (hash: cIztELSHss6QRuEFFxw4N/UrkNKRSLWYj+DkUBUvoq4=)
                          5: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: 9CKChTE7PW8i9o2f81bn6qs2k9yDZ813kuW1H/QU7hQ=)
                          6: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=)
                          7: I_uguIxF_BMEoyGLoIURMKuvuX4.roa (hash: 8eCD2dZaEAtY0Dv9hMHZwLlo808FjJsySBHzoOCHK7Q=)
                          8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=)
                          9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=)
                          10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=)
                          11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=)
                          12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=)
                          13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=)
                          14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=)
                          15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=)
                          16: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=)
                          17: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=)
                          18: n7hwbldHUqHFpcKtEAhruQdbnjQ.roa (hash: L90qrrkLfiuxMR2N8pdC3OkH79/LYJzbW4o0QtjWOas=)
                          19: okhJ7BqkGhTPJacZKnyMF7FpvQ8.roa (hash: PP2SOa1PUXoaR6Tk5zpio+Z7uVcLQSgh5mFtZ+rtmMU=)
                          20: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=)
                          21: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=)
                          22: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=)
                          23: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3c:1a:64:fe:00:a7:b8:a8:5f:81:11:76:9d:fb:d7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Jun  4 18:00:52 2025 GMT
            Not After : Jun  5 18:00:52 2025 GMT
        Subject: CN=650663e649d0f2f7c6eaedb0300f197710ff0085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:39:64:f3:11:af:9f:1b:af:99:fd:8e:6c:
                    e1:30:cc:94:cd:64:14:01:f7:af:8f:e9:88:f8:ec:
                    5b:bc:21:a4:5e:ab:66:c0:57:92:1b:a8:d0:ca:7a:
                    88:8b:80:bd:77:d7:4d:d1:a9:cd:09:c7:f6:7e:60:
                    6b:dc:25:40:59:1a:60:62:cd:13:61:aa:f5:90:d1:
                    dd:ef:4f:d1:16:bf:5e:2c:b9:cd:0d:f6:cb:59:9f:
                    cd:10:79:5b:6d:ce:ad:bb:cf:af:a5:9a:6c:61:ea:
                    49:24:ad:cd:18:c0:90:06:64:86:38:33:79:14:9b:
                    e0:94:e6:2c:c6:20:c5:aa:90:a8:da:1f:ea:a1:45:
                    b9:62:83:65:8c:57:37:64:86:b8:4f:bc:9b:3d:62:
                    56:c6:b5:ce:93:56:e0:04:60:a4:75:72:d1:86:03:
                    e3:f6:0a:2f:54:cc:5b:c5:12:c1:12:fd:02:ca:2a:
                    e4:2f:4e:20:16:85:72:31:26:49:53:cf:31:bd:37:
                    b7:d7:1b:2d:b3:a9:e8:ad:73:b1:62:03:15:ef:6f:
                    53:cd:40:7b:0f:66:07:0d:68:b0:14:63:dd:f0:ea:
                    3b:ce:3d:01:e6:83:56:7a:8e:dc:ea:28:92:fd:87:
                    a7:e4:e9:0f:1b:ba:dd:6b:e7:f2:45:77:c0:3f:9a:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:06:63:E6:49:D0:F2:F7:C6:EA:ED:B0:30:0F:19:77:10:FF:00:85
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:75:87:c4:ec:1f:27:e4:51:f1:7f:97:c6:76:7e:c6:bb:1b:
         7e:c3:7d:5a:19:1c:68:01:86:21:77:10:72:ba:87:b4:01:a0:
         a5:ef:da:49:b8:33:6b:b0:41:9e:ff:b3:d4:4b:2a:bb:af:6f:
         f2:95:13:6a:1a:c7:2c:0d:74:ac:77:1d:10:b5:1f:b7:ea:20:
         7c:ad:32:5c:2e:41:4a:de:bc:5e:22:cf:6f:e7:44:c0:0c:99:
         94:c5:12:ec:80:89:1c:4b:ea:6f:d8:6a:dd:ea:e8:b1:3a:5a:
         30:e6:84:11:02:c4:82:70:c6:88:f4:e9:9b:d0:8f:d6:88:26:
         8e:ed:e3:7b:67:77:5d:3a:6c:da:a7:7b:d0:76:99:dc:9f:0b:
         21:4e:6a:f3:d5:04:bf:96:21:d3:29:1b:9b:35:87:39:7b:77:
         07:e7:f6:39:a5:77:df:21:e2:1a:d2:08:60:1d:3f:19:01:5d:
         72:31:f8:e6:55:11:84:65:bb:9d:5c:df:d7:d5:98:62:5d:ba:
         e0:f1:41:a5:36:de:22:d7:2f:d4:2c:6c:7b:f4:ce:55:8b:68:
         e4:97:21:b5:89:d3:7f:38:ce:aa:56:77:d9:45:72:a2:35:1f:
         8c:ee:9a:62:cb:69:d8:6c:ec:01:2b:57:a5:d8:13:14:2e:c1:
         b1:04:ed:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc8GmT+AKe4qF+BEXad+9e3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjUwNjA0MTgwMDUyWhcNMjUwNjA1MTgwMDUyWjAzMTEwLwYDVQQD
Eyg2NTA2NjNlNjQ5ZDBmMmY3YzZlYWVkYjAzMDBmMTk3NzEwZmYwMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3k5ZPMRr58br5n9jmzhMMyUzWQU
Afevj+mI+OxbvCGkXqtmwFeSG6jQynqIi4C9d9dN0anNCcf2fmBr3CVAWRpgYs0T
Yar1kNHd70/RFr9eLLnNDfbLWZ/NEHlbbc6tu8+vpZpsYepJJK3NGMCQBmSGODN5
FJvglOYsxiDFqpCo2h/qoUW5YoNljFc3ZIa4T7ybPWJWxrXOk1bgBGCkdXLRhgPj
9govVMxbxRLBEv0CyirkL04gFoVyMSZJU88xvTe31xsts6norXOxYgMV729TzUB7
D2YHDWiwFGPd8Oo7zj0B5oNWeo7c6iiS/Yen5OkPG7rda+fyRXfAP5ohMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUGY+ZJ0PL3xurtsDAPGXcQ/wCFMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXWHxOwf
J+RR8X+XxnZ+xrsbfsN9WhkcaAGGIXcQcrqHtAGgpe/aSbgza7BBnv+z1Esqu69v
8pUTahrHLA10rHcdELUft+ogfK0yXC5BSt68XiLPb+dEwAyZlMUS7ICJHEvqb9hq
3erosTpaMOaEEQLEgnDGiPTpm9CP1ogmju3je2d3XTps2qd70HaZ3J8LIU5q89UE
v5Yh0ykbmzWHOXt3B+f2OaV33yHiGtIIYB0/GQFdcjH45lURhGW7nVzf19WYYl26
4PFBpTbeItcv1Cxse/TOVYto5JchtYnTfzjOqlZ32UVyojUfjO6aYstp2GzsAStX
pdgTFC7BsQTtUg==
-----END CERTIFICATE-----
Generated at Wed Jun 4 22:49:09 2025 by rpki-client