Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
File:                     7hw0csJazTRzZLfWMSYYqjUwy2M.mft (raw, json)
Hash identifier:          lHj+5ZSTtv34ahk753fw4vnuI0ap/K75Adv5UsOHSpQ=
Subject key identifier:   D4:77:1E:4A:28:56:15:DB:BD:04:DB:9A:77:EE:24:EE:71:7E:94:3A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019603771A8C8AC3C3C7997006E2A9D5440D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
Manifest number:          0A94
Signing time:             Sat 05 Apr 2025 01:00:59 +0000
Manifest this update:     Sat 05 Apr 2025 01:00:59 +0000
Manifest next update:     Sun 06 Apr 2025 01:00:59 +0000
Files and hashes:         1: 1-oryDNIqRt4125OL6A9J0dp3eaE.roa (hash: TGkbGZQvG4uUvKAZgwSwWCQm6/QNgnnsrUWS1ihYnNs=)
                          2: 3MpMrZCGcubCz0yMDFLFBO52iIg.roa (hash: Vunqm6pvkp6Ov4n+/UQF3IUdJpcTVJn4fLJgh0ucvaE=)
                          3: 6G-kg_2lTCh46Iy1Yi2tHY52bm8.roa (hash: EieClQp5mGrr6o+ebxaF6kAOYN1IIy1af9E2XPGIXnc=)
                          4: 6LVRU_9vBqoJic2dRStCxZu68do.roa (hash: GiU2UIOR/48j2LNUSGKnPpI4WpTDccaRNOmx8pjavxo=)
                          5: 6div_0DYyB0bH5P_FwG2uxJ4YUM.roa (hash: EBrQRhRMS8fl4gE/6neY3DbJQhwBBnFR7R620dr2ZBs=)
                          6: 6xPzYTNaFkRPCBu-FlavC2B5ovI.roa (hash: J/k+QoAOkK2gYKQf3Ain49qV33xbuauQ9HI1CE3DOTM=)
                          7: 7VLHBLhi1H1-MAweL5kw_VIfl14.roa (hash: A4G+dUtnyLd8Ae0NidazYUC7YvAegdm34Cj4d0cX2/s=)
                          8: 7hw0csJazTRzZLfWMSYYqjUwy2M.crl (hash: A8tAKT+c0Q0WxJ1XBv7wnU7hdixf5zMTg0vxi4ETRdU=)
                          9: AilefJlvShXLkY-nKNI04kMzXu0.roa (hash: P/gw55cXoOfEcWl12zjpR5/RgHEgak+vAJQaqUi6SE0=)
                          10: BOrrQeHC532zyvWQVDjGg4wRFXY.roa (hash: hUpYcU+1hFi6a7KErTOAG8FXCJyZKoQa3BVMBJkoKck=)
                          11: C_euJ2yoykiXGLZReW_YWrARm0U.roa (hash: YsuTczdlWpBVZLUUH2osKZrHCcnXkGNQm3dFXB1h/o4=)
                          12: E8wf4fv2dab9Cy07uV9CMrfCXGA.roa (hash: NhAdBhVFSBlmq/Et5bxJ5DmR6Qq06ZQVNC/X7LzuWGM=)
                          13: GNgUKrYJtug0aq57pYO7WvdfSGk.roa (hash: gtpHAH+L+1EVMmcZlwjxrdzA5bDoxH2ON5vowDZp1XA=)
                          14: H7Vkw4tyBo9x3jCRAdkJJwOaRrs.roa (hash: L1jkz3Q4vGzhkRfGE1obTxW8KF/ZJAcbhIPRIU2ISAc=)
                          15: HcL7L-FYzprvgKENpSNFeeuIvGA.roa (hash: HRd3in3TvuyiT4+S8Tm/boxHkVFAKt2cXmklVUN3eXc=)
                          16: Hr_pZ6Hyf7qoH1Ts4LNa6sirZIY.roa (hash: fFzVn9ETTydem4OjclsDQMIuZkHnrdvIM1YsoI2NJp0=)
                          17: JsDKVc27APcXGjHH70ZeLeZbgug.roa (hash: 4ibgMqy6hS5kqxVwon6u7OACkheCrBUOAbpwL3IxaAI=)
                          18: K9OUKDBPjb8Fiti_cIuHp0DxVe8.roa (hash: nkK8Mf9Ow2AFwIfwtZMcGo68zQKzmvW4KDsftcxaK2g=)
                          19: PItQFXL63DxwLNX91Tfzs-4H7Go.roa (hash: Z83wa/dVVn8ROqucsRRkSbA6SLA1xtRxPBRzXnT47wI=)
                          20: R7plklNZbkVdwgnk5lol7iBrg5s.roa (hash: mPUS3PTRHBz7zH2dn7Vp8XCxZA/mkCKC+stlugPKGTc=)
                          21: WEVbTf-oiwm-VC4_i8mfKQRpIeg.roa (hash: pgh5kp1RH14w+13PzjOBHCDoUg9XJMStIwg8Mjhf0M4=)
                          22: WEtEuaIzwpcWe-6UWOCj2Nn1KpY.roa (hash: AWNNDWAElrw0fUx9fOB0BMzC1T2r20S7aXMs8eXqxxw=)
                          23: YlZhXbhxhW7DWd16qqwC1PGvWbA.roa (hash: a/kq2wVJ1FHgwt3r+887OM85lUj/O+wNaXUR1nOz1EM=)
                          24: _hygPhCIBHyui6MrbugHSJsRe_o.roa (hash: +mARUBcRWTmDEZB4nb1QXnMHZhp4l0Qtur6cnTx6sJ8=)
                          25: _m_yehh1vcYatH7nosDpZi7N2Qc.roa (hash: 4KdzA61b/zDrWNU8kk9S0eaqfd9DB3/WWwqRnDNrqZ0=)
                          26: _qokDXRfGxwIaNjjuwS_B9fRSxQ.roa (hash: qzG04NZv84Xd0Ess93Ia0gcMapmqZn3grwHL7jiaUYk=)
                          27: a9z6NqY_PV6Yf5A_6-QZdBOZBzg.roa (hash: oUwuELLG6Xv5NS0lVvBg3vnfEIXz/hZ7gHmsSyYNgvQ=)
                          28: dWixx8-qp9vADNW4S8WHXgXXhJU.roa (hash: eG/WEK+sUrCloYszXhP4VinWEKLXrHuNKqom8aqKdB8=)
                          29: dtupFzUPJJBuKBc0mjQ1_PZVkS0.roa (hash: 28XDVC1JWmec6cTmB9oQRPzpEjBmY049L2ieRj2siGQ=)
                          30: e_aGKHwtUDp2OKphS3CK9hJY9Vg.roa (hash: Wz27SP0RAbS85Qllg5w2rti2zZPlmD77B1BtuS9y4Xo=)
                          31: m89sQIyqStfFcC5-52Tb5AFWQ_A.roa (hash: 9ogMCnu2VDS4T107BtETAV+rX5cV5iJuPHQp23u17cc=)
                          32: menRc4CGi3ZMb5xQLdlX5QW0jA4.roa (hash: ptHd6yZITcR4RCj1LybEnX70W3+RFVlO2j6GG4q1was=)
                          33: nErHnmqz6NNzFquBWNrZ2obMbd0.roa (hash: 7n5XZJmqkrpscKPLC1yTIo/pBhZize/IFEYaL8e3HG8=)
                          34: n_G3q99_J87xXbyhHChLFkt5oiI.roa (hash: upEzI14/PmLIvtecdVIMJuBQOmGylGfDUM9jYQx3gTI=)
                          35: neYZOrxBE8QuDwtbnZaUQzKb-os.roa (hash: WOOphyfPbg9f7M9M2Sfl2LRl5WLoYny6XoWWlcbxaJQ=)
                          36: pOjKdr7tEcrosP8bgd6duGdhVVw.roa (hash: mNn31AZa868/ASYPlAG+mVy+QWFuE9IfAL4q1BVeK0o=)
                          37: q65scnkw3wkoDB3dGN1x5sPaxDI.roa (hash: 4Z7PSrrOky3N47pBaIQqWOWfRYoObutIVkhDUHZx9Lo=)
                          38: rVi9SIz1R0JJfHr2FEo1uVh6P3A.roa (hash: pGRZABzuIS50/0nFcfYOuEBV7/qC/HvANrAQi4xSIGw=)
                          39: rVyRZ5kcpjw9JuvkrbnDOr7nM8c.roa (hash: TVkuCpuVDfQOVy1pUN0wlRmfbl36nn3VFjWNxHpQ5gM=)
                          40: uKSMxqWFBai51Y0xb3ycexFXE4o.roa (hash: 0nfagPbfafluR8jQM3HUZJUgsdNIIplMw4jgV15i4W4=)
                          41: v0xOJH_sf4tg_sdG5y5yoMQKkSQ.roa (hash: BU+rWF36ztpGAVHWZEWs8B5Aoz3lnx986CxMeJznDIM=)
                          42: zPMuamLymSt_ejouSJ6sBxiRKP8.roa (hash: o6jDK5879aLW4h06FM6LZU6Jmqdy0Oh2nHgRykTC/uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:03:77:1a:8c:8a:c3:c3:c7:99:70:06:e2:a9:d5:44:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Apr  5 01:00:59 2025 GMT
            Not After : Apr  6 01:00:59 2025 GMT
        Subject: CN=d4771e4a285615dbbd04db9a77ee24ee717e943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:da:1a:ef:b7:74:3e:64:f0:c0:57:68:ff:
                    f3:ba:d7:ad:c6:1b:2a:3c:75:bc:0f:ff:7f:ce:7f:
                    e9:c2:88:27:b5:cd:07:30:8d:9e:21:a4:b8:16:df:
                    87:52:7c:b2:db:fb:6d:82:3c:fc:2f:80:35:89:83:
                    62:e6:c3:c5:0a:5f:2b:0c:33:ed:c6:e8:96:8b:f1:
                    c2:b5:5a:43:70:b5:4e:47:f5:db:88:86:ad:d0:ba:
                    91:80:88:86:20:59:71:89:96:e7:17:51:c6:8d:ca:
                    e0:ca:0b:9f:0d:a2:05:69:dc:05:ed:9b:69:40:85:
                    ae:04:44:18:43:75:5c:31:9b:5a:a8:24:10:c6:29:
                    e2:23:21:d4:77:a7:bf:1e:fa:c4:45:62:03:b2:78:
                    03:90:44:2f:8f:8f:12:b1:f1:5f:50:d2:b6:74:d0:
                    4d:d6:16:f1:9e:65:9e:05:1f:83:2b:44:e7:f5:3c:
                    89:47:8e:38:b5:b7:82:98:f4:c7:c8:6d:33:62:8f:
                    23:83:a2:89:f4:70:74:92:19:7c:d8:79:f0:bc:5c:
                    79:81:20:25:6b:3c:cd:2f:77:f9:45:06:86:15:72:
                    a8:c6:7a:f0:1a:09:c9:1d:f2:31:74:9f:6b:c9:43:
                    e1:7a:3a:dc:56:1b:26:5a:2b:23:70:2f:36:7c:fd:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:1E:4A:28:56:15:DB:BD:04:DB:9A:77:EE:24:EE:71:7E:94:3A
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:da:e2:c7:2f:92:2e:bb:b7:dd:25:ef:df:64:b7:ff:71:f2:
         e3:02:e6:bc:c8:ee:2c:f0:b3:b5:f5:2e:72:4c:fb:54:c5:6a:
         75:0a:56:78:b7:b0:72:29:51:a8:60:6c:ef:b1:45:4e:df:de:
         4e:b2:df:78:45:f7:27:73:19:a8:3a:6d:51:57:cd:1f:36:81:
         96:56:8d:2e:3e:53:ae:57:0e:b9:3f:f9:43:bb:24:cc:f8:cc:
         e1:dd:83:7e:0b:3f:96:ba:a9:ec:d9:80:44:40:79:36:76:99:
         2e:63:b2:7d:b4:32:01:2d:60:2d:27:ae:18:2e:44:e1:71:23:
         9b:7f:7f:17:f7:8c:48:18:39:20:2b:34:c7:56:02:0c:41:8c:
         0f:04:fc:4c:23:b6:4f:ac:83:16:41:dc:4f:5a:f1:3e:68:1d:
         ea:44:39:86:73:36:0d:c0:44:c1:f2:3b:06:5c:5c:86:7d:5f:
         ee:14:80:f4:8c:63:8c:71:eb:44:77:97:94:02:34:8f:d2:bc:
         64:9f:e3:64:aa:4f:70:7f:08:e3:42:4a:0d:16:9e:86:de:5e:
         21:64:2a:ae:a5:ee:dd:17:06:65:ed:0c:57:2c:99:1e:ee:35:
         49:b4:32:3b:e1:1e:70:cf:62:0a:31:ef:f6:3c:2d:40:6f:76:
         87:2b:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----