Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
File:                     Vo_jXMliYzonV68QoOboq20B9Mk.mft (raw, json)
Hash identifier:          7O/jIPdJiKw+7ILsOR/sZcwm11ttlvGOeLmPj9nesFs=
Subject key identifier:   88:99:99:0B:36:46:BF:81:29:CA:DF:85:3D:2D:9D:08:D2:10:DD:EC
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       019678688E86F4CEAC42D5FE49B2030E6202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
Manifest number:          1593
Signing time:             Sun 27 Apr 2025 18:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:40 +0000
Files and hashes:         1: 00NF96d-dOF2R-sgDmx7SF7E4DA.roa (hash: 2kpq15gaRBQ+O1CnsoIPK/y+/hQJxoJIQJu3v6gmr5I=)
                          2: 1nnAsF_X5LfrkXzPCD6govZ1YrY.roa (hash: EXCtrwxOha0FCmP698dUJ0iUjdlA32zelEheOOj8WrY=)
                          3: 7HQ_1EAe_1IX7rDF-TdfN822BVQ.roa (hash: vxC6quYdceeyESFYcI+ecz9PBbv66IlrZRnCAuS1UOg=)
                          4: 866qtzUw3r2JYGCZI8bcPe03RJE.roa (hash: 3l2oIi8PZ7WzWh0CnE9LWxq+OpYH212Z+BoOJAaryMQ=)
                          5: 8en3JrS9o4QRtuuuwzZdTyG5Vh0.roa (hash: UCP/0ZQutL9d2SrTL9jG3hX65oul+/tjNqqWKX/P8ok=)
                          6: A-NLOGTV2UkdDvVfzefoigOELXk.roa (hash: Ow7CHRQxwi9p0xLBhEOy8rv3MLYW56VAuyBIVj/0KZE=)
                          7: AaG8Def6w4BiK3J3qdnjmerS3cM.roa (hash: d8yyhZCQzv3iOvJzFFd2S/p8T4yCXrCyNRr96Ii/wuM=)
                          8: CTvzKYuavAXPQrA0BsbRPbX0CgI.roa (hash: 6AUy7OVDmglmaCZCA5TauI1Rw9HuOKH9yejf2rQneKs=)
                          9: DUD5tEp0B51Vf84fwyHGaG3r_bE.roa (hash: 8DCcwFCeSl+vO3g5PjAb1wLRUgeuuGIiQ0gwSYwHtWQ=)
                          10: DrnIGKszAW1ZbQNKSkEregTfhb4.roa (hash: Z/zgq/mvlLhjLNnsmm9yXyxlV8o9imFyGkPeSoTx6+s=)
                          11: Du7F2RJm5agz3daFo9PURGnmsX0.roa (hash: kCTzkj1FmMV2xudTVUUI5L4uvZ5KjanxMR579BAs7bE=)
                          12: E3UrBAInZkpcjAQ4fPb-zQzwEwg.roa (hash: 2EVUw1vx9q4Jgfbf89KhsWHm/Xwt/iLvHeTQOp1xQII=)
                          13: E3zOQgSE0CFiFbyTws_KFO4SVPY.roa (hash: TmlzicIbbCAyLdaBCNwSdoyOF8SiGxWXxk8+YSXd0EA=)
                          14: EPFyPd6mJXsltRLVDtXcpS2caWo.roa (hash: bc+DvNL0kvqZ/wN04b1Ytp+wKVgVxg+XlNL7sqxB8uQ=)
                          15: EqvJ7znghs9RHDW0PyHlazG165s.roa (hash: Jg9RQl0tB2+f/sgwkNuxN1g2oHizK5dZZ/6mKmAJi8E=)
                          16: Hjju8v2jEZmSCDJ-bNXrMk0-hXY.roa (hash: JjBdFSUA3yQy4g9d5+Y+B+xakNjF1Ee8c1zoYnDTEvA=)
                          17: I_VctA8CCHUYTMQz8Tr_vsRaXCc.roa (hash: e+w5CRwaj72Tbcm1Vi4aqzPrCMc7o16Q2Vm73EGSFbg=)
                          18: KBkPEKuHor0zBj6YpAJGkxud1Fo.roa (hash: aRB52wqhCKyk+lFn/X5ts6PNhQ/KcaoodBx+csqadVI=)
                          19: L-O86ZBSaMC4Hudef6Osmyl6Km8.roa (hash: te7/ETw69+h9QNpLO+l3JQ3GRKWx2IKyfKw/0+177Vg=)
                          20: Pl2xh-YYdlZIMQ7wxp-8IKLR1ZE.roa (hash: ibEQ4heo0C71eFOdW1NAGPqLGVzp8s2B+cf6d5jXn4c=)
                          21: QcaMdf8wN_oKrUKKjQDaDCG3nLU.roa (hash: eiv+LUkW2mCzBfv89ZxOhPY004Yp10lyTQAV2IGZ1m0=)
                          22: QsLvEx96RjvRlQJYm9855IcfN1s.roa (hash: hOgbB8MBxcebp+xpozXSPiL48SB/8JuLkNg0TGu94TU=)
                          23: QzkaU5PeUOyG7zE42GOEmTvgRqA.roa (hash: zZ4VgdYz8AUJnIf/QxJmzBX5ifr5x8OIk60FhVPxWdc=)
                          24: SAErMn910QcsjZhMZn2xF6Hedt8.roa (hash: m0heJy2RnMYv+s0k0IbcIoFZhmwcKXlBwC48PIe+ALA=)
                          25: UIPIzF0BiXqBLPZaAgstEuHyTTM.roa (hash: IR5uYctE85yBeIGELjOhGZexjXdNlPVx3vr/SuOJIN8=)
                          26: Vo_jXMliYzonV68QoOboq20B9Mk.crl (hash: gwmXQIYD01W5MOHEOheL3YuS/Ub/RrfNJttc5scL4IE=)
                          27: WZKwaTpn0ejLJdCb1MV-HYV83xA.roa (hash: VeowTPlZiSf+LwnuET/ince4iVSMAPnoleisv0QZXoQ=)
                          28: YBHwa8V11c5qzA0UPwfMfypHCcg.roa (hash: CuoK3u9YojcDSoTy/wRVt4JDPALAvwVfnZ3WWSE/eNo=)
                          29: YESZZ8z4_iDXCDClXUIKUbF3S7I.roa (hash: /591PoGTJq2Uys8opsPw9OBZqlJyvSm915TprmPu19U=)
                          30: _YoSAm3lcbi756fxblV3ZfZrhI0.roa (hash: ute7toKDg9faNDGXI79EvogsCjtOm93xLjXKKvEk2do=)
                          31: cOmvEG7PuYuwByoeSLbyieR7YHg.roa (hash: HEFOQWN0UDdmfd3xIciXkcTYL/AKVCBT6696axC+El8=)
                          32: eMH6m6XUK6vkYmGRwXg0yjvpN84.roa (hash: bW1HU8dnlDE8px80oIrQP6atTebTqY3gMIb4TSDVkT0=)
                          33: eU1vFBTpVnEsvVlr3LB4QXMLh38.roa (hash: vKIpytDNZhzJKHCY0MlPTl9ba7AnMVpi/nYWDnjvGpQ=)
                          34: f5Ho3akgKmzjlMiu9k3MEwxgpfE.roa (hash: w7wkP3SoIISV8wD3GVBDY5Bg3VOKaV91+ogwxeEjZVY=)
                          35: fohhFTzC1iM9QOPrvht9x9um1EQ.roa (hash: Dpxbw0i80dmo9QdceY9WEM8XM32oM2v3vYFAP5bAxrs=)
                          36: gRaT9gyPz04bs3PMnS3E4LzdXyM.roa (hash: ZxkeEwsW7AtjKrdxk0z9gsROT+cWQcduHfXmqHapaFo=)
                          37: iXlJ104KuqxV5REEAJHbWARC02c.roa (hash: rfE/ATgZ8g0z0CqiMjyHr9PZkrSgbAylH3f2j8r3KJQ=)
                          38: ibOmWmMkqZptyIuLMKX80ndnCrU.roa (hash: lK/5cBo1mj7Pjjk5vQIZJ9djzYGqcKAUUssU73joL2k=)
                          39: ieakcGoIiHFkmiV8wxWtgk3UGf4.roa (hash: eU0NDIB3a2rYpJJtub5haewQQHkz0eOOXtRaNtZWpKs=)
                          40: jLROnK8cMHatX0Ltfjcz2oxrTxw.roa (hash: GQKygxnQbwwMNSZLYXT9rUA9DxvpzQNszZcDuUSnn/4=)
                          41: jZC9EYSq9SyBUGX-5WVx9GvaLXw.roa (hash: Jseu/0PcA9oMIWHKxCIwHR9fu1mxnuvGK6PX9V3w88I=)
                          42: jiO9Mdn-HsWm7BVsZElm11YkZV0.roa (hash: APIn7pxRvbYuoSqnbdSM+pOhDIsDQNgLH1nEhUYtL2Y=)
                          43: mv7rc-hqsI2Lagrq0YUIl8s0aOc.roa (hash: UebGe6t5Su1GKezXT74P6nFKUm0pG4M/DYy4n3k7Ug8=)
                          44: o_vPKp-yya5cSSqO1lhAf5-yu5U.roa (hash: E6uA6lZ6vd1G5UfqzsNySuj5rqIPT/m1yd1RyvfXfrA=)
                          45: peZ9leIKvtzaEIB0WUANE3zMc_o.roa (hash: ihPt5ZcWXXJa1kFjUJyi/XxvoXO5SF+IotGDhTxVKIQ=)
                          46: rbCzMepC-MxIQV2lGwDQGFpMA_E.roa (hash: ntNK7wjYdip0X1iwgAD1yt0PHIqUmW2l27tBxfG1GMs=)
                          47: sgoYeQNtFnh12FV-ZwGviu0rJg4.roa (hash: 2Vn+m+ijRNITjJPoC4Uhp6Js9ds/J9KOP+oHIgtb3es=)
                          48: tBT7AhJxolPXiJzucm9LCU5J5kU.roa (hash: D2cQGAA5bQKmVKxq46YVwmET4+7g1UaAG+vOC8lSiKw=)
                          49: tyaYl5YiFR3mBp3dE0Z7qqSxJ-4.roa (hash: 1oOfsGz2G4JZrKzX/nD0zBodH4uCjpfY8iZX8tHeLNY=)
                          50: wLN3myAi5FHIgidXi2ZFfeK2zhA.roa (hash: Is7r3lXrGXrQ9R7HkhJRLTlHy8dhLBmgwx27pXJaQBQ=)
                          51: wQuk9uFJ0SkIQWVKCCsdmry_bdA.roa (hash: Ja4EOwo2UjKhTtN2qFrRg4e5sqYWU3VT1jaSt80MLRM=)
                          52: wTXNCobmVd94tU2BHf15dM_wmUs.roa (hash: XeXe1lrR7H1lmm283TcWTxGv41BCBjM9i+00xX3UQ7M=)
                          53: wv6zFblQLZj4fNsmUhW_NVbiHeo.roa (hash: 5nFGP9PJ1NNpQvR8+yESzQg+hj92aC7vu1K3PrOJpt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:8e:86:f4:ce:ac:42:d5:fe:49:b2:03:0e:62:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Apr 27 18:00:40 2025 GMT
            Not After : Apr 28 18:00:40 2025 GMT
        Subject: CN=8899990b3646bf8129cadf853d2d9d08d210ddec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:d6:ab:6d:ab:26:49:66:ff:4a:40:99:30:
                    84:19:d9:ff:c0:fb:02:18:d7:ee:e9:72:3d:2c:55:
                    b8:60:ea:70:fd:83:29:5f:ef:1e:db:64:b4:0c:78:
                    90:a2:18:0c:a5:fc:63:de:27:6c:ad:74:36:0e:2e:
                    36:c4:27:4a:70:6e:57:ad:68:42:f0:66:9a:4e:c7:
                    5b:c6:82:25:62:58:ca:05:31:8c:50:c9:20:97:62:
                    33:86:5d:ee:56:e3:66:9f:5d:73:ee:96:bd:bd:44:
                    99:2b:6b:90:f4:83:ae:d0:5a:82:ed:07:44:ca:fa:
                    23:6d:dd:e8:b3:c3:a4:c3:29:07:be:05:03:28:32:
                    c6:22:d6:59:66:c2:0d:22:83:e2:78:c3:b1:20:17:
                    3f:88:6f:6c:73:68:9c:0a:83:9a:5e:3b:25:a1:c8:
                    e2:cd:68:b5:56:77:36:be:7f:85:ea:47:47:41:35:
                    12:3b:ca:46:de:7d:9b:a5:3c:1a:9b:9a:3e:0d:8c:
                    2b:81:4f:4c:5a:3c:64:b7:c3:84:92:15:5f:39:3e:
                    7b:04:ea:13:d3:70:1b:95:7a:c8:1a:57:65:61:bf:
                    94:06:27:47:07:b9:eb:7a:ce:df:78:ad:05:ec:51:
                    c1:88:69:60:2c:64:49:59:0c:66:12:d7:2e:53:24:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:99:99:0B:36:46:BF:81:29:CA:DF:85:3D:2D:9D:08:D2:10:DD:EC
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:09:59:43:b2:a0:96:2c:35:0f:79:b2:7c:8d:d2:c7:4d:
         e8:25:b5:40:97:68:5c:75:ec:d4:25:3b:63:18:13:e0:0f:20:
         0f:14:53:c7:b9:e2:72:01:12:80:82:0c:2f:83:ca:1c:a9:22:
         be:37:05:4e:39:a0:65:75:22:4d:4a:0f:db:df:8c:a0:f8:fa:
         5f:f7:31:64:64:7e:0d:58:98:08:71:bf:53:00:af:52:17:cf:
         9f:b9:e8:fc:83:9b:6a:e8:d0:51:1f:7b:d8:f2:40:ae:cb:2c:
         e0:e3:c5:0f:d7:d2:37:98:a6:c0:ef:8c:9c:53:50:23:cc:c4:
         2a:13:b9:71:99:ff:3b:43:d5:da:ef:de:f4:3d:d3:ed:b4:5d:
         5e:b8:f1:d5:c8:7a:4a:6b:d1:ba:a1:06:08:c5:5f:3e:07:a7:
         53:a6:3c:75:0d:33:69:42:4c:5e:a8:f5:d9:af:f1:f5:54:57:
         c0:c3:25:bf:4a:99:3d:e8:98:30:d8:88:9e:9e:e0:a2:e5:18:
         0b:ff:20:d2:89:83:bb:20:43:2b:ed:e9:d0:91:f8:b5:3f:5f:
         b4:4a:a5:ad:cb:35:a4:cd:e5:ad:e5:cc:27:a5:a5:cc:ff:14:
         1b:a0:0a:2e:ff:37:81:0b:b5:17:52:fc:bb:45:c1:77:0b:0a:
         3c:bd:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----