Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          rdPsiPOuVgj0BCDqL+2wPG3k5v1rMhFHOg4tNWz0/VY=
Subject key identifier:   19:45:F8:99:08:2C:8A:67:C4:45:3E:1B:0B:42:CE:AF:74:83:AE:F5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019672662080251BF1CE8CC799EE22BCF037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1598
Signing time:             Sat 26 Apr 2025 14:00:17 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:17 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:17 +0000
Files and hashes:         1: 190LxKM5s1ZchW-1QFPWBCXJIzw.roa (hash: i2UBTnCRLZfI59Lc+8ptifYqjvgfC+5cvDv+xCq8UE4=)
                          2: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          3: 38tGSJTH2yH52258Ye6YFzIMdgI.roa (hash: GABMb3Q8l+ABw8g0O4cQUivmVnqkwd4lJQ0kvagm4eM=)
                          4: 3LguPMqZSd4yhX8NUjzWdmBRih8.roa (hash: Eb00HvIk2TUv6r6+WiaEYLXtmilnavu3rDsG2CRMnkY=)
                          5: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          6: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          7: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          8: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          9: CBGdvmHeO_3COX6cplZCZhwngZs.roa (hash: O3OMFYB/8GvLwR3QPrNtR+z+RH+vF2NDnwWyjo3F710=)
                          10: DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa (hash: o+UtBmeKh8l5SKFt9b0HSR3AMNSQx+XcOJc2HrXv0/c=)
                          11: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          12: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          13: KwLSqwTIEXPWFbmRertloWb5w60.roa (hash: CbQ3FQr6Qv4yLQFYodnTBQfbOpk5H8Dsjmwdc3msqD0=)
                          14: NNhxTIfw-_5xFw2filMVpRX4ZXs.roa (hash: TbI9d8hLHsOc72eiDSZTew8iceUtSuEpvhPlyEVgPDA=)
                          15: Q8YAap5JaMtgGC9lgf6LQHDq2Ok.roa (hash: HuBCPUPNI4BFPOetznQYeD5cw+9ALmDFX0RulPMRYrs=)
                          16: Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa (hash: FMoM8vmAiJoQiCyS9ONch1ThZ7gMc02jSpD8vyuSSiM=)
                          17: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          18: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          19: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          20: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          21: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          22: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          23: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          24: cC9A2bHre93z2HHoiKaD3gbhMp8.roa (hash: upiubXGT+kD9pNkA2Lcjupud/SpGpaMLCWgqSaDAuSI=)
                          25: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          26: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          27: gMOpcDS-6D1urv95yBoSh6fps-8.roa (hash: VpLhKxWrQpWJozlsoXPLspaPhxOAcGZXnMRF3JTuudw=)
                          28: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          29: ls3R7on7JIepLbiaekfxdJdXd2U.roa (hash: Vn4/dA8gyRgDccPfceYEXiQgzMk0CB1sI1OXw6sj8Tw=)
                          30: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          31: maPCADcTD0j72xKETkOFhfCf_VM.roa (hash: 9uY37uZRkjCzq9ikmQn0wEUh2D8+w+AywsiqaUxRG64=)
                          32: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          33: nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa (hash: e4T081508o/3i9gpQHharO/sMRJPndiZMSpliNkCiZ4=)
                          34: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          35: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          36: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          37: qxB3G-DAT2TOHgf8cs1YnCiCmR8.roa (hash: ZFrfwVtd1AtEvQCLNybyNQRnl8i0goc5HC9uTWDb3Lk=)
                          38: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          39: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          40: vRKV9S2Nnzt5vOi86g2IyLbxJJg.roa (hash: FxxOKVYObUs5qx7plW8uqGq5eRqe/n59+oRNtsoCp/k=)
                          41: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          42: wOsf5_YOiqUMROpVbJEf3o7jfA4.roa (hash: QdADhbZNLmHZbqqBBd4uzw23qbhlhRtnteRcHUSgzTQ=)
                          43: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          44: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: mVkhCk9+V1TEh+4SKvTWZLUmbXQtHVDHPXMHtlxrpEU=)
                          45: z_vs-Pv50nyEYa20YdXyyny1jOQ.roa (hash: oyF5qZcw0v3lMBGZguWpAR05PeU1Oq34z6Y0XwFNaHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:20:80:25:1b:f1:ce:8c:c7:99:ee:22:bc:f0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Apr 26 14:00:17 2025 GMT
            Not After : Apr 27 14:00:17 2025 GMT
        Subject: CN=1945f899082c8a67c4453e1b0b42ceaf7483aef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:f5:01:9e:e7:51:55:aa:ea:ca:16:af:6d:
                    7b:cc:cf:01:5e:4f:41:f6:2c:82:ac:b6:fd:b7:3b:
                    f2:0e:21:c0:27:98:68:2c:60:6d:5a:66:b1:76:75:
                    8c:98:7e:a3:fb:da:38:65:b6:5b:5b:27:e9:65:a1:
                    df:46:43:ef:7d:2c:5e:3d:30:cf:82:ef:77:97:c9:
                    44:0c:f5:01:92:79:11:57:be:8b:66:e8:bd:96:f2:
                    2d:36:24:ba:88:62:56:a4:e1:25:dd:2c:40:9f:1b:
                    01:34:c3:a8:ae:f8:d2:17:da:46:91:51:6d:28:0d:
                    90:a2:87:f9:57:eb:1e:40:eb:b1:06:c0:c0:ab:d3:
                    5c:5e:f1:02:da:e2:6e:ad:ff:d1:2f:90:9b:90:1d:
                    fb:e8:cf:19:6d:90:86:51:6f:b6:ff:5c:50:a1:c0:
                    92:62:c1:9f:68:6f:2d:31:24:bf:3d:97:60:13:20:
                    3e:f0:b8:61:ee:57:d3:3f:ca:c7:4f:ea:11:58:71:
                    98:68:35:a3:1c:27:65:cc:4e:c5:94:c1:4b:e7:a6:
                    ca:72:62:6e:cc:8c:b9:91:b2:ce:f7:bc:c1:42:8e:
                    d6:6c:a2:da:cc:b7:b5:29:ba:b7:16:a1:1c:7a:d4:
                    0d:f6:e1:15:23:99:82:c4:ef:2d:73:3f:5e:7a:6e:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:F8:99:08:2C:8A:67:C4:45:3E:1B:0B:42:CE:AF:74:83:AE:F5
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:54:1f:a5:89:3c:64:3e:e2:9e:25:c0:10:56:ca:20:f9:4a:
         19:ee:fa:36:d1:5c:6d:99:bf:84:b8:1c:28:9d:26:6c:5e:79:
         67:91:03:3d:b3:af:bc:27:7e:8e:cb:87:b7:16:82:9f:db:85:
         50:ae:8d:1f:4b:f2:24:ab:b5:ad:fc:55:6a:dc:61:9a:b6:7e:
         48:b8:12:11:41:5d:5c:61:84:c9:b5:fc:e2:d5:19:49:b6:6d:
         5d:ab:0d:a4:f1:81:d9:a4:27:75:c6:e7:f3:fc:03:4e:3e:9f:
         70:2b:e9:6f:92:1b:db:83:c1:d4:5e:f6:03:ed:ed:ea:0d:5f:
         07:e6:78:fd:33:2a:88:f9:a2:ef:76:5c:c5:37:d6:fd:73:21:
         82:54:21:a3:c3:d4:c7:3e:21:a5:a0:a9:d0:0e:30:2e:9c:fe:
         8c:3a:07:63:ed:a2:e0:89:18:dd:ff:c7:93:a0:57:da:e8:5b:
         6a:7f:98:05:30:d4:f8:e8:89:ec:50:08:be:e1:e9:80:3f:84:
         c6:f1:b6:54:02:dc:8f:3a:35:96:fa:ab:c0:e2:be:96:00:25:
         74:11:c2:91:f0:35:0a:7b:51:46:62:c5:a5:97:f4:c5:0a:43:
         75:b1:e5:10:9a:d9:31:ae:c1:9b:11:71:27:81:3c:0c:07:27:
         12:93:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----