Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File:                     bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier:          Dsricb4T7nUhjjQmbL5EX5jloyWS63qhL8Pa2bktUhA=
Subject key identifier:   A6:AE:89:1B:7A:AB:41:05:FE:69:0A:0A:A7:AE:A2:3B:32:72:56:8C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       019773ADDB0C08D7976E9269FC7EA014E359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number:          10EC
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
Manifest this update:     Sun 15 Jun 2025 13:01:02 +0000
Manifest next update:     Mon 16 Jun 2025 13:01:02 +0000
Files and hashes:         1: 0iVORbOC1yn1RU9MN-6NZSBLcv4.roa (hash: aAZ8Vbm4cCzopF3xvPSupzXl+Rmg+Qp1HP2+eIZg+u4=)
                          2: 22sayLqNyf5mmpCVeQfzZdU0M-g.roa (hash: e7Nt6HxM+ugqjVxazGJZ+P+EJnvj8/9HUK9NFvnb4H4=)
                          3: 27vDklW69EuEanWUTFWokMvWngM.roa (hash: JTo44FsFJ95zRcPH3bpI8cZXGr6nvq17sMlCIIfDD2o=)
                          4: 4N5uvrjuNShBNQqLwhxizj6hANA.roa (hash: BFvgUFid4pNJNh+Ye7fkewmppaTZod7uXDSv4LNR8OI=)
                          5: 5QpzdlSScd9Ew1fh6FTpwRhQZk0.roa (hash: QIlE6EzABgcROdum8ieSMA+//rTSsLyPOKTXcb66KOc=)
                          6: 67KS9uxohx5qywMfA7rxHH4YscU.roa (hash: lir9AF6THQKzGsNxxFLnf0F3SF63YVXFyWaZJXVDD+M=)
                          7: 8uredMj8h3YjqCz_3qhRUfcmpH8.roa (hash: 1sowdSGLgJiTPdLnVohTfhP5Vbailn5G+CpDuDGgJG8=)
                          8: 9INEJHy8ZUQsZkXJ3LToNxX8kZ4.roa (hash: KdS2sZMTtBI8DBanSx1tGmEyybopPJ/MA5ChS1PT+v0=)
                          9: 9bhpfQDLK302U3knqtNmpJUpoPA.roa (hash: bXmps9yNq4FnxJIrnc0Thg5iHt4hnwjCatzHO0SOKMA=)
                          10: AakZT8or1GzInGy_tZL_isQHHpA.roa (hash: rRCm9/MqXVvaZCgh1nfobAIEngUpqyrVoic6KsvUUnw=)
                          11: DXJwtRiRfrT-lHhN528NFgWXdIQ.roa (hash: j9+HHgQSi2EW+sVAKQIsjnaBthzI4UJaZdqhtFogKaE=)
                          12: E4X29T5PIFttxKq8EE38HPjpzXo.roa (hash: xJD9cI/sTuw6YTXkaJSB88L1OwC4kEF2x+8kBxXooCk=)
                          13: FkEOeGCG6FOuT4U--JFdO1PewE8.roa (hash: eIbVZKlSGWPsJMIug3qSSnFjSdzCZQjxpUdDU4xeYbs=)
                          14: G79ZiP6DiuUmY7VmAtFD-2XkciI.roa (hash: QDU7EzIuPmX+SWvEl9yqhqLoetJzobkYRy/XDVVVI0Q=)
                          15: GQRXBMJLMJNUUoma4HkgBT7BJxo.roa (hash: vKY8BuLe5EuiohNF61YwmiR0yQcH0fmBnvvbjEVqHls=)
                          16: H8pLB57z5fPmVJMGj4akuTzBZ6U.roa (hash: KmqtvAKbOi2oAuL7c2rlf27e4ou+eIO58ZJSGtiydqo=)
                          17: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=)
                          18: Kwv1yUwYtcWcaNBZ6KPO95MKyTE.roa (hash: 8EFmYGHa2Ca7QupSPS4pv/DIhNTQn0ESKQFXQFpdKM4=)
                          19: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=)
                          20: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=)
                          21: TPGabRFCyApRYylnzXDE-1EJs9A.roa (hash: EAdDiGEy3TYUqK1VO+A8Od9DJIftaQ1NGNwmoQi5V2s=)
                          22: WG6LyvBNGDffIpI-sro91f49_9w.roa (hash: b/qtnEn82SM9GjcD6krB3YfyzXk8Gafv29kH0MahfZE=)
                          23: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: F3nK4xklwszfAGQtvrR0JHZdFna7COJ2GO3Lj8eNPpU=)
                          24: eknd7AvZ78A2jpsWiLdD7r5PyWo.roa (hash: d0fU0qc8+0HlmnrsMQ3Ex2lp/A6PLPh3xmwGDWTtY/w=)
                          25: f5t7TFFLJ6eVzGO3VPTFIHdhhVo.roa (hash: hVo5HmKPNOyU1ejExC2VR32sZ7GoBIzBwGmWpLsdJ2o=)
                          26: hhE8yqqvIIlpuisRReuT9A6k1f4.roa (hash: J2rXjJaRvfkS0jCe1u8LbpFRxfez9lEpglQHrWMaJxc=)
                          27: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=)
                          28: l5wLjIjXWRZ_KLLADANlYyjPIv0.roa (hash: 1lqRp26N4T5cOIjlVSW2D9Cl4zwT2Ag93NKOMpX6XGg=)
                          29: luNvLtKD-DOQJpBUeL1aF_d3VP0.roa (hash: Q2ygPEhYS7ZGt1PTIM6raLUf+Ho8MzUsRUXw4zHyNlc=)
                          30: mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa (hash: ORm5qRABgNl1N4KGsHAqufuM1fGQIyB3FsBRWB7Oy2E=)
                          31: mu5vQENMQGT62T0XlilUIKP3ZMo.roa (hash: ovlRYMvdugoGVAXo7tSae+HYY/huAzodNxSfsvcMJW0=)
                          32: nENuRIXAPRwlljoVVbVN6tRNaOs.roa (hash: Zxh5bgJ2TquFeY/zYRUT5pMOM0/FFZZry3w70ve4WZ0=)
                          33: njV0BHQiQYQvZM8CvDTZl5TJsjY.roa (hash: 8CMg9ZsNR1wRS36isg5DG5jObGJbe2ocg6d/3kGoSXE=)
                          34: oFK59Q3C9TGh3OjadIioNiBOVT4.roa (hash: LP1kIHI3DX97h8zxZoYZWGIq//mTDS9bTjeGSRHWj7Q=)
                          35: pEq_9GNHyjlivZeD-baP0qm26qc.roa (hash: 9HW2pgKUS/HjiTOdvRQJWkPpcQXgVwsPhReH6Hvz2Ew=)
                          36: rItRPn2tLdB8J0VJiRArmvRDFps.roa (hash: meHFAyu6qCXc646PNr3KW0IVhpOYdjsRkvJ65NNK0Gw=)
                          37: s8S1W4cVAgNOzr7acXkokbSU8JY.roa (hash: /7uzkfFuCMpRspM3FdinCvV4M+jOL4OCx212IeV9ypg=)
                          38: vpLxf1q5-MVmiV39db_Ph6LQBPY.roa (hash: OaQZhrU/Tck25ToiF/+vtK3pQYkkYAQV8AUucgwKr8I=)
                          39: woaauVoxvp4_WNTTTdGC5wmdObI.roa (hash: aMIfD8Bm7z/lNAu1jZ39w8jXOc4ZFrKw8zsUVcyxRTc=)
                          40: xcjIZOA8jY7byP-flru-cibOYXI.roa (hash: Ba1Ow09BLM/CKdmUj9NdR6ItGuQtCUmUpwjnknl0o5c=)
                          41: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:ad:db:0c:08:d7:97:6e:92:69:fc:7e:a0:14:e3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Jun 16 13:01:02 2025 GMT
        Subject: CN=a6ae891b7aab4105fe690a0aa7aea23b3272568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:96:c6:bb:c0:d0:e3:33:b6:8b:a5:48:63:
                    6d:92:09:bb:d7:82:ce:70:00:38:b3:20:4f:b5:2c:
                    9a:f8:fc:38:bd:98:86:43:1e:d5:87:55:3e:7e:f1:
                    4b:6f:a3:01:13:ce:7a:38:d3:ad:5b:4a:db:6c:94:
                    92:fe:4b:ec:5a:9e:0b:d9:c4:82:07:ae:ca:39:94:
                    33:05:fc:85:51:af:9a:41:6a:2c:c2:c0:b2:60:8c:
                    28:a6:63:63:96:58:37:42:c2:e6:1f:7c:35:3f:bf:
                    02:39:61:6e:81:73:4c:6e:97:6b:37:71:35:43:3b:
                    02:9d:8c:17:14:ed:2e:b5:4d:e8:39:02:62:85:50:
                    55:36:b5:02:12:66:3b:12:70:92:dc:ef:df:ca:23:
                    64:21:cc:cb:b9:eb:88:8b:a1:39:e3:5b:5b:8c:f7:
                    64:4b:27:3d:47:64:de:ec:09:27:ed:08:0c:5d:2d:
                    88:91:6a:23:4d:44:2d:5d:9b:0a:ec:fa:0d:6f:e2:
                    41:7d:21:d1:ac:d9:5d:33:81:85:49:5d:ae:e5:2e:
                    6b:07:eb:6f:66:ed:c2:1c:c3:dd:9f:68:5a:9b:11:
                    b0:76:2c:d0:d6:56:0c:a9:3c:5d:b4:68:2d:54:f0:
                    4b:0e:bb:41:b5:ce:fe:5c:4b:da:34:44:f7:65:83:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:89:1B:7A:AB:41:05:FE:69:0A:0A:A7:AE:A2:3B:32:72:56:8C
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:23:80:7b:2a:be:53:26:13:60:95:f0:55:af:a4:7e:de:
         95:1a:b4:f8:4a:67:c3:ac:5c:37:32:d0:b4:1a:e3:9b:45:59:
         1f:e5:67:f4:b7:1b:e4:7c:01:25:83:98:af:f4:5a:4b:1d:5b:
         9b:a2:c7:ee:d7:65:99:0d:4c:46:a7:38:76:c0:e9:bc:e9:4f:
         ca:a9:11:5e:37:5b:e5:00:82:82:1f:f3:36:1b:28:ff:b4:27:
         3a:b0:c5:3e:31:29:97:45:1f:af:b4:59:7d:1f:35:4f:49:ea:
         35:6e:e7:49:71:d8:91:69:eb:49:f7:77:f1:e7:c8:85:4e:66:
         97:df:41:6f:2a:09:c5:72:98:26:b5:78:2a:cf:a0:87:1a:cf:
         0f:b3:7d:96:62:fa:65:52:d7:75:81:ce:47:22:c7:e0:74:96:
         11:44:5a:44:ef:fb:0b:ce:53:1c:c3:6b:dd:10:c3:b0:33:b1:
         54:46:6e:65:56:ee:b3:ba:1e:0b:41:8b:ae:85:a1:8e:05:4e:
         44:f6:cd:eb:70:a6:aa:5c:8b:97:18:a2:d3:ae:94:be:95:66:
         d3:80:5e:7f:bd:ef:8d:66:e9:d9:9d:e7:1d:5e:9d:44:ea:c9:
         4a:4f:ef:e5:4f:b2:63:29:63:87:03:35:c0:c6:44:c5:3c:27:
         12:85:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----