Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
File:                     8EpYBH83u8BXlEu_jK2HQoeVkto.mft (raw, json)
Hash identifier:          qBFonKN8QRxcycL/x8MIsq3s+YWZl7ke+XNQ4UqO6Wc=
Subject key identifier:   B9:BF:35:F3:D1:06:F6:0A:0C:CC:E5:DF:CF:4E:09:E0:C4:79:CE:74
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       0196748B7E299AEE63A07A042E98F77F59C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
Manifest number:          03F9
Signing time:             Sun 27 Apr 2025 00:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:20 +0000
Files and hashes:         1: 1-aQ0GnxVrEVlGjWCi3NaYsPkesg.roa (hash: +3mk2sWVkE+uaFZ5ZJrtNPPCIQ4hekmcEYuQDX27zMs=)
                          2: 1-hiM7eNJrrB4KxTl5odRANWPNSM.roa (hash: JZintPfYJlodCt3O40zYeOK96s2SUQ7yU+YQLIM3K3U=)
                          3: 3LVaNB3KvQ965s6UullJWswPfp0.roa (hash: NBkjOrmtXqy4cOSfRjbCEsV2ppZ0hs9sC51ZL54sXAY=)
                          4: 7M4uvN9sxhoPn3aqlvD3scYtJGk.roa (hash: OmufU6JcmL9dKo1LMsfdtAf23qPN90eSFInQhtTCwb0=)
                          5: 8EpYBH83u8BXlEu_jK2HQoeVkto.crl (hash: VOngLaDHNSd8p0aGw2mhHW3SmrD1l7cLtM73jQ5vvvU=)
                          6: 8fZjBEylQQ7G4Nfq9kl8eMsKPWc.roa (hash: ePHu4BkekyMRgboF78REdrHsv7fK/ffAGw8dzHK32Xs=)
                          7: BPnLchZ5eaff_Txl2HsyiCoZeD8.roa (hash: ea2YSPSOGF9z6JHafxJIW9lVHsadoP3mGOg/OZ8Dh7U=)
                          8: DyA1tFdYex1CDIuoIphpHH3D-NA.roa (hash: /CBkdq6Cl/6kWa0GXz6XPerkjcFWEwnxwHHFN4+nkf0=)
                          9: Elw5UXhx2UaEnLV2EuqtJ32OHnk.roa (hash: ja7+j+sQT6nOers6AAdzRunO2qy0Vf7hB6OxEdfVESI=)
                          10: Exmz-bkpR5hUSWGHLwLIMLc2Yq8.roa (hash: jcbl+HMqw20dWPkAT19tZYwQ/gZKFFWGJc2Eptz2PWk=)
                          11: FJa2Te4IdXZzDvWXox20MrY4wdU.roa (hash: gGBM5iRrWO+bwKCOQfVZA40SaoM6PTWRNW2N8HN/6as=)
                          12: G0UVoOQ8yVB9V1s57eJhr5aDEH4.roa (hash: qzVMfko1qrcYhU4koqEeXTwaQuZOFCHnfY01TTxgRAU=)
                          13: GMbSDfAevrOxJ5cPxDTION0X5XQ.roa (hash: YHM0CnCUyDsEfug4VKGtOO0gWnY2QxJdtLt6iKPesAE=)
                          14: IBcrQV3Tt8YSA-XQBHFBDTdB5eY.roa (hash: Xm8OwW8fqybxpg0qV+RfRWFgdtf/8+NPsHoKgHyUgjg=)
                          15: IfUSZ47cuzQulgLsruCHYRsa130.roa (hash: EUnu8q7eVqfHutdwfxzXbgFkgleKe14//20XLpaCuak=)
                          16: Jc387TmtDV_DzUPYNeoIg9E33A0.roa (hash: s24NtE5UXDc2WukE00Cp3sVkp7j43WWazSrbu1sWBwQ=)
                          17: LYMZh-8zmmJQALRoTJSiAy1xVXQ.roa (hash: G06Sl16Ng8eeY3gv7tMq+fX/m50tj1xA9Uh5PHKbHb8=)
                          18: M17OGFxMCHXGm0t10p_mE7wR6Tc.roa (hash: X4vr1PuBZ/dvhmklnpBOkIGPC5MMC2CVZZ3r2SgR0KA=)
                          19: MMY7e9orpXneAd1jpUcoqhrPNGs.roa (hash: xlAsoBQdjoIMWnYsFAQRaRtmSO+WE//QF5drnQ0y98I=)
                          20: N9lGBNANMfTIMRn8Jiq8tTAP9AU.roa (hash: /syDE6BHpSq20HIZj+8xFI8NVgoDC4MSqcrWeHN4emo=)
                          21: NxznN7EEkFFVkFtFHeOmJ1ken5k.roa (hash: ZvFpJ5XKjvP9AtZTF45VSfMaQiT6rARf7LLoFCJH+Rw=)
                          22: OHPK5224ms-GF1aJCPsDsb357QY.roa (hash: Zr3j7tjk6Qy3/rJEuO/M9v8x8pQYbNlF5/AmsRT9r0o=)
                          23: PXEdZVvSMb6Ea_s8w3c0j9-yyNE.roa (hash: YW1UjO31lL0Fn0BsRdsu06vc+hRyUlv9S9fdp5M6KFQ=)
                          24: RdK3FxnAhkYPX98yWfjo7DAeI08.roa (hash: rbc9T8wFnuY1eGGhGKpqFEjZU7Ty+f9Qb/UTCRgvkZM=)
                          25: RnHYZETtZEovf9Beb8Zw2Kq1VgU.roa (hash: MP+saCc08R902hMq8aAV6CgytaJDTwftQ8Pzfdx+aqM=)
                          26: URcS44h5p_ee9dsnwhclak6T8jU.roa (hash: PloYM4VGnKlDlq+Kl1UcDwczYmFtR6608rE1ZX7nGRk=)
                          27: UUkaqr9snPAYCuLUqRpebrsPS3w.roa (hash: GjZsudpn1zZ5LGPOhxlqRuUgcQfu+Do5rPRjHtQebAA=)
                          28: WnTdhYImrAblkURqwr0fOZCZkGY.roa (hash: fU08TnIoVMIfXoWGqkKUCjFy0riK446KfwVJ3HP2NHM=)
                          29: ao5kHB6uQR7dTkWrMfH1pOh3vT8.roa (hash: K6xsq9gjDkswE1JX6e2BmIRfZg9kSk6bV3B5UrlUmoE=)
                          30: baBxVxKYocLMp3OrjCBJnfA7nkw.roa (hash: aJ1ck3Zmvmz1tHfRZp4Iok52+Ye4C+na83RusZJqnq4=)
                          31: bn_tXcfAQ1KLYjUn5SJy9KXTinc.roa (hash: ZNPuYyvo5iyCfUlUv7/WHZcW68TZ6wk3S21c9BS8NS8=)
                          32: cRs9np0-Hb2Pp7Gy4xvjqlSG_08.roa (hash: 8YhJCGrKf2Y8cr/A27+l5ullMea9kiCVBRr6JpUlM+4=)
                          33: cpTY6qX2f47hxdeXGQo0SY-yxBw.roa (hash: be8pg/PeBaIU1DwD7XMfsPAPC9zrZ+0COMwYwae3S/8=)
                          34: dYiyMxBIxfsl6RVPznRWAdlaoqE.roa (hash: eLJsFKH9UdrJpV5I8lq1iv0Quc7VQlKQcS4onl0LwUw=)
                          35: dnI4qgcDjYpTj_JP6l78yLmJaS0.roa (hash: Tp69kzkTS+SZyymArhQ4utuzl0yT2YEEPPHPgNj3fK4=)
                          36: fLbQB6B27HpUALd41M7mwbhRKt0.roa (hash: ezTCMXSZaI4r9mL4Cuel+B5CuJvdzymWM1WlLbgkKyM=)
                          37: lMajzcJDPzB_F-VCGZzdwhSfpg0.roa (hash: buzJFfwDBVqbVE8oCgmcIkz9LpTiGy+dRrAKG1LrA7k=)
                          38: nXlLKOpXi-sJyTScZU0PCKJGkFE.roa (hash: hvgv4aTQjVlXz8nwn/MxuT2eA5jAqXBXVi/LOKhCeOE=)
                          39: oMzwmstp6zrD3At3avSoaBK3hAo.roa (hash: 8PnyI0kL8i6bYnpsnoYp4rBhTUwwbbvugRAvfcmzU5M=)
                          40: qQQgXgiPVbdWdT3mcmGp6Ku17nU.roa (hash: Yvi4m8LkE60ecW6yAqutacNNTGm3HVOt5K1ydh+dvtg=)
                          41: qmB76vyZqCg7p7QAzyJ2yMLxMCo.roa (hash: SUyqBROF7gyZH9RGeUTqKMx2Kc5Io2yfZMqSxecVy4c=)
                          42: r33t74LHVhVq1lcSkEpqonYkqrI.roa (hash: G3GCGgoCerWnPasu458PvTj/ddkHouF2fJkjHUCvISE=)
                          43: rzSYXMd4cZBCRD3TTumHD44RWxI.roa (hash: epTeUZEF9BYSY3NHSPNkCp4tHAAekmILWGBWAt+JPsA=)
                          44: wkRQLb3GIywGTBHgS-3jW6Vf-4M.roa (hash: g4wY9UsqS4lC+ooP/XiCVTIA8ZFynFyWVIR/Srx2dK0=)
                          45: x17WA3sSg4P38AbB39frPJDqAYE.roa (hash: 1O3Iaf1UeQKRgcFwqZv/5ixCUOlb4OICtJVg3TkBghY=)
                          46: xlz5cxlOP8wU1rRS7vQDBbyZbAI.roa (hash: TMgufs18Jyzo1gVxoROmRG+tYJ3b8XSa3gyzmDIKCUs=)
                          47: yeBEMK0WOgYdMFICJ8vZ_cWOme0.roa (hash: qiOINY/cn8YEDAmuQTaGlkCP5P8Lvc8wEzD+/y83uA4=)
                          48: zTeR0g5KBHiT06WLJWwrQn0fKP4.roa (hash: qD/Oro7lLiXcXWbUZHSIDXyhNOVhdsxWgG4/W0eZ46c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8b:7e:29:9a:ee:63:a0:7a:04:2e:98:f7:7f:59:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Apr 27 00:00:20 2025 GMT
            Not After : Apr 28 00:00:20 2025 GMT
        Subject: CN=b9bf35f3d106f60a0ccce5dfcf4e09e0c479ce74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:4d:1f:dd:6e:cc:23:e2:b1:d4:06:a3:be:
                    8e:21:02:62:ad:77:0b:ad:67:55:37:32:05:7f:d7:
                    be:6d:a4:43:95:c5:41:e6:f9:6b:34:c4:0f:f8:27:
                    34:90:5c:a7:6e:f0:29:f7:2a:ab:6d:33:1d:7b:6f:
                    39:19:e9:84:c9:5a:51:4a:26:c5:41:cb:72:d4:50:
                    72:72:f7:d4:fa:ac:8f:bb:40:e0:4a:c5:13:71:c9:
                    af:59:83:94:e2:3f:2a:c4:15:d3:0c:71:d3:b9:09:
                    38:cd:f0:14:f0:1d:19:b6:d2:93:46:51:96:63:db:
                    1d:e3:62:0c:68:fc:e8:7e:87:67:4f:a9:c1:ca:37:
                    96:6a:49:b3:38:f7:c3:42:94:2d:bc:e1:02:4e:fa:
                    68:e0:9b:d0:51:2b:35:3d:8e:12:5c:c2:c9:c4:85:
                    ed:5d:50:88:2e:f5:85:4e:12:ab:01:45:75:7e:5b:
                    51:2f:a7:93:a7:8a:14:58:bf:0a:ba:43:b2:f6:ab:
                    0c:bf:a0:b0:4d:8c:89:52:20:e9:41:1f:9e:bd:00:
                    64:b8:8f:f5:eb:15:6b:19:a3:c9:4f:7c:a4:44:bf:
                    59:88:ed:bb:38:d6:0d:70:44:6c:6d:1a:a1:70:2f:
                    13:9a:82:20:5d:ec:1d:07:5c:32:dc:2c:2f:f3:34:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BF:35:F3:D1:06:F6:0A:0C:CC:E5:DF:CF:4E:09:E0:C4:79:CE:74
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5f:3c:29:50:43:bb:bd:af:36:c5:af:e2:fc:e6:82:11:f4:
         ff:f3:23:ae:e2:e2:b8:4b:29:32:34:05:77:94:21:6d:69:86:
         4e:b7:00:5a:06:2e:97:6a:af:e1:74:ff:ae:01:57:be:fa:b3:
         fc:0f:93:32:fb:6a:a5:04:32:14:c1:aa:af:72:3f:3e:29:b5:
         1c:4f:5c:59:8a:db:ec:98:71:73:c6:d0:94:a9:0b:cc:8f:b5:
         e8:70:f7:ce:a1:88:3f:fe:b0:59:12:91:b4:c2:22:60:be:05:
         a8:72:84:c9:ab:ef:0b:84:0e:f7:c1:49:63:3d:ae:9c:fc:17:
         8f:b8:0c:5e:63:c5:ed:d0:36:5b:21:4e:36:de:dc:62:f7:a0:
         c5:84:62:ac:d3:69:bf:87:27:e4:1e:15:b9:67:33:53:fd:f4:
         56:d3:72:95:01:f6:d7:94:57:fc:2f:a0:27:4d:1d:64:95:43:
         ff:20:6c:c3:36:01:18:08:28:3e:15:cf:c5:44:77:d0:87:cd:
         80:c6:9f:de:98:87:2e:14:1b:00:12:9b:e2:8b:8a:b3:37:cb:
         4f:31:2c:39:57:e8:c3:7e:49:d6:11:a7:ac:d1:a9:df:98:c0:
         f7:51:f2:70:bd:b2:a7:a8:b1:85:62:9a:14:53:d9:23:dd:f7:
         63:22:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----