Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          heBzvsiQHPe6dL0f31I6sKwbKwO5U4WrQJ7cF9YdUBc=
Subject key identifier:   36:7E:5F:DF:BE:06:C7:51:16:62:B0:C6:AA:A6:F7:A8:17:07:1A:2D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       01967755E746189DDB3A1364BB3F685EDCA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          15B9
Signing time:             Sun 27 Apr 2025 13:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:40 +0000
Files and hashes:         1: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          2: 1nt7KKZ_kaA4th0sEgXg_btvGGw.roa (hash: P3hRQakGX2DJeRwO8m5JnZZQAfAIlClGhi09lkYemow=)
                          3: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          4: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          5: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          6: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          7: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          8: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: foW+KrsbGnV70gShaHAZptdMZNlAHcWAkcjQkLjbfPM=)
                          9: AiO1HRTfUe2vOiQrcn4eIpCAyeg.roa (hash: l484VXhb55rIiF/y4SkOcQOfu2WyfAjYkWmS1k5CH1c=)
                          10: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          11: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          12: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          13: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          14: FXYvz9E0JYqF8RzOei7ox1lSgbE.roa (hash: oUsJ92odAeW0Rii1JU/A8TMIgyDgz0YKa9dc9QUQIOI=)
                          15: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          16: GlJLYgf16agSfqwntlZ-9s0ycuE.roa (hash: H/pf+nizH//gW/qa/JKNB79H5K4HjIq/Ki214ycp+sk=)
                          17: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          18: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          19: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          20: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          21: JWUtJ2f_fqaelId9wo2GjVb6i3I.roa (hash: eOAzBZvj9W7ivZAmw2Ur7lTZT2YCVmDQnUXI070cbl8=)
                          22: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          23: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          24: NEfw7uDro6RqhjU8Fywg8cuqvzk.roa (hash: vdW+pYdyNoqoBJe2vsedZizZQj8kJ9GbuQcTyC/bcow=)
                          25: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          26: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          27: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          28: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          29: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          30: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          31: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          32: fgXOYlOn8katcS6MMyCw4pAx-po.roa (hash: AB1i+66TTW5eKzQUMm/K95jLLcwZ4U/B834LTt2ayNo=)
                          33: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          34: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          35: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          36: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          37: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          38: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          39: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          40: yZgl1zyLJKgQpTHOd8kSTVljdNM.roa (hash: f2YDZTloIVUPbF+TnGafTEX+6riOCFoEhWnQt6Ptf2I=)
                          41: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:e7:46:18:9d:db:3a:13:64:bb:3f:68:5e:dc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Apr 27 13:00:40 2025 GMT
            Not After : Apr 28 13:00:40 2025 GMT
        Subject: CN=367e5fdfbe06c7511662b0c6aaa6f7a817071a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:fe:ae:87:cd:a8:75:41:cf:48:98:62:70:
                    a6:8b:9e:19:11:2b:97:ff:44:fd:f5:7d:a8:bb:b6:
                    7f:b0:d3:e5:a0:fb:f6:86:1b:bd:e6:01:b3:d0:39:
                    fb:65:c4:6f:26:9e:e5:ac:5b:8e:4f:fa:36:92:86:
                    c2:33:0e:33:07:60:27:4a:3f:22:6c:fb:5e:e2:ce:
                    0f:e2:4f:15:a4:4a:01:70:67:16:c8:1d:d0:6f:c9:
                    89:a4:08:57:1b:88:51:30:63:27:f2:66:bf:43:d3:
                    4b:24:b7:c6:c4:ba:a4:3a:89:3b:e0:10:05:e3:78:
                    e5:8d:94:03:0f:c2:a7:22:22:63:01:1d:be:e2:e0:
                    3f:f3:9d:26:6c:d4:57:55:4c:f0:28:5f:16:b2:80:
                    cd:c5:a1:80:8c:ca:91:d5:76:91:77:c9:8c:91:95:
                    95:71:cb:3c:59:2e:49:65:b5:60:76:1e:20:0c:95:
                    9a:2d:4e:ff:99:99:6c:e1:77:3f:57:4b:e5:2f:af:
                    53:77:be:df:a0:22:7f:c6:a6:5f:37:8b:69:86:b7:
                    3b:55:8d:16:02:3c:13:f8:c9:51:8d:15:8d:9d:04:
                    00:5b:cf:db:f0:8a:6a:89:ad:ab:1f:bf:fe:19:ce:
                    e4:31:43:74:a0:f8:7c:de:cf:a8:f3:47:7a:95:02:
                    fe:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7E:5F:DF:BE:06:C7:51:16:62:B0:C6:AA:A6:F7:A8:17:07:1A:2D
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:48:81:c0:87:72:ab:74:45:de:08:e5:d9:9e:7b:6e:a9:92:
         77:0a:22:05:80:03:a1:69:2f:95:37:79:a4:be:4b:e1:2e:bf:
         3d:a7:06:49:6b:3a:ac:24:ad:e1:92:7f:77:9f:ad:5d:98:9c:
         f6:24:84:5e:42:51:a7:f8:79:9b:ac:ee:85:8a:44:a6:03:2c:
         22:83:2c:5b:8b:9b:a3:7e:00:01:d0:b6:47:b8:b8:6b:1e:e5:
         a6:21:8f:48:fb:c4:a0:4b:74:0d:51:3e:d6:f2:fd:25:6a:7f:
         78:ab:6d:36:b3:2c:26:34:1f:84:ed:4b:36:90:7c:de:49:dd:
         ea:9c:af:a9:34:58:81:78:2b:f5:55:53:bb:c2:96:5a:27:be:
         57:91:fe:d7:2b:e1:16:f6:2f:22:ee:0b:3f:2f:8e:dc:ad:5b:
         3d:48:7b:dd:97:e9:ac:2e:be:4a:92:6a:da:53:e3:14:99:7a:
         81:2a:52:74:04:2f:c3:b9:47:bf:30:34:0b:a9:a8:18:94:58:
         16:78:3c:aa:8c:54:ee:3d:14:12:88:6d:70:d7:f1:5e:a9:1f:
         b3:d7:b3:d5:9d:a0:3b:0a:17:e4:ba:be:da:c8:34:f0:a0:c3:
         8b:f1:c2:76:44:2d:b5:c6:00:3f:32:53:c9:82:da:2f:62:f4:
         dc:6f:3a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VedGGJ3bOhNkuz9oXtyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwNDI3MTMwMDQwWhcNMjUwNDI4MTMwMDQwWjAzMTEwLwYDVQQD
EygzNjdlNWZkZmJlMDZjNzUxMTY2MmIwYzZhYWE2ZjdhODE3MDcxYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSb+rofNqHVBz0iYYnCmi54ZESuX
/0T99X2ou7Z/sNPloPv2hhu95gGz0Dn7ZcRvJp7lrFuOT/o2kobCMw4zB2AnSj8i
bPte4s4P4k8VpEoBcGcWyB3Qb8mJpAhXG4hRMGMn8ma/Q9NLJLfGxLqkOok74BAF
43jljZQDD8KnIiJjAR2+4uA/850mbNRXVUzwKF8WsoDNxaGAjMqR1XaRd8mMkZWV
ccs8WS5JZbVgdh4gDJWaLU7/mZls4Xc/V0vlL69Td77foCJ/xqZfN4tphrc7VY0W
AjwT+MlRjRWNnQQAW8/b8Ipqia2rH7/+Gc7kMUN0oPh83s+o80d6lQL+HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ+X9++BsdRFmKwxqqm96gXBxotMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkiBwIdy
q3RF3gjl2Z57bqmSdwoiBYADoWkvlTd5pL5L4S6/PacGSWs6rCSt4ZJ/d5+tXZic
9iSEXkJRp/h5m6zuhYpEpgMsIoMsW4ubo34AAdC2R7i4ax7lpiGPSPvEoEt0DVE+
1vL9JWp/eKttNrMsJjQfhO1LNpB83knd6pyvqTRYgXgr9VVTu8KWWie+V5H+1yvh
FvYvIu4LPy+O3K1bPUh73ZfprC6+SpJq2lPjFJl6gSpSdAQvw7lHvzA0C6moGJRY
Fng8qoxU7j0UEohtcNfxXqkfs9ez1Z2gOwoX5Lq+2sg08KDDi/HCdkQttcYAPzJT
yYLaL2L03G86Sw==
-----END CERTIFICATE-----