Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          7aKoGq7bv5Sq+Jebv2KH6GZC0AhmuE8Ihx3VshJkzhc=
Subject key identifier:   D9:C1:0D:EC:5C:B1:C5:49:85:7D:1D:FA:F6:FA:8E:36:E6:C8:A4:C4
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       0197759C75FAB7590370066E3273DAC848C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          01DF
Signing time:             Sun 15 Jun 2025 22:01:17 +0000
Manifest this update:     Sun 15 Jun 2025 22:01:17 +0000
Manifest next update:     Mon 16 Jun 2025 22:01:17 +0000
Files and hashes:         1: 1-FLwx-Jy20x9TsKTgVra0VDGLCI.roa (hash: wYExt0oEgJsljCXxJYDrQQFL3A/9soRSgwhaFbNC2m0=)
                          2: 1Q0UXkJd-TfRbK7BKgSoSPbozUI.roa (hash: QAHfJOYxgI+kMM+oWSa3whwte9TS5mi9F2v/jezbaTs=)
                          3: 3hAgBvDGSMT_l9ox3L_p9jf-T9A.roa (hash: 0YI1GCFO83+XAPwsaYqpDxr2GgHzNz2wso9ALQPXTRA=)
                          4: 3r80YRRCMWUbRMdMpLfHbiOlbfY.roa (hash: H258573yULGCyQ//7b3dYX7AdntI0XJVVhAGkNnlimQ=)
                          5: 6ogVQUHBYYTz25iaBADgawv60yQ.roa (hash: 6hElMUOlfb8OLrcKTvUV6O0D4gV1WFXbakb6RG/fQjY=)
                          6: 6sKepJ27UpBLjSdqmn3KBLPniMI.roa (hash: WCLetK9JTDdG4/uZYX9DMnQXhs5gvrvw80YDnmEgPTI=)
                          7: 7ktGOCiuaxNVf6xdAfkeuisyla0.roa (hash: Cf1BWWAsGXAZCHjkjhZN3wO4tojImkJt3W6WEZhY+MU=)
                          8: 9PSapFMTPNk4IdNW9y6poBt9F-8.roa (hash: 8bpN1GnvHuxF0OMzhkYo8NajNlF4XsVoLSST5wsn0Zk=)
                          9: Bq_bmxbtCoj574nrr-P_sU_UnH8.roa (hash: ep0kklezsEsm6fyrAzHrNiZIZJ18JWgZ7crTbymB5hE=)
                          10: CX1FqPz_rB1rFYm-Mpz-D8387mU.roa (hash: wCnxW0V26P20vCB284mcfIA47doSr/9lS3o6lcuYrfI=)
                          11: EKGpGQHoAZjHd9Nvg2r3sp523lI.roa (hash: L5XLIobFq44kbAJ5nVhGWfhQCToybP4gMKFg8103kqQ=)
                          12: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: rMWSrM7Aj/tb6ndhD2xSAKbFa+q/KwaExMC1TsV9XtU=)
                          13: LJzc1LSPgx4QIfexUgZXlPyOsBM.roa (hash: mSfJR87+dxbiNgyu8fxRwqnptgr734BfWL94Ukn195o=)
                          14: M2pVezoeP1XqbhlA1W4rb2r9c8A.roa (hash: 9CvBeLUIHoaPRO/Zpyiw7pu6+iGMnqL1XIixDXxO25c=)
                          15: NInBjN9VmlWR0kM4IJbb35yXX4Q.roa (hash: Xo8oHJvXCsMZHqguc/mGbBAJsi6xT4kk+UYEDvmIVeA=)
                          16: OUUenB6cE4WLgcqCuJFd8IuWKI0.roa (hash: bYUqjF/gzi4PflmRwarPOZmoix/hwBusI2ITPO/AI+4=)
                          17: PHjk7HksQoreVKkNoHfGHx9i_5s.roa (hash: LsNFpMXLkk/tBemYYBeM13khUpwfZGn1bGo9IS0Am88=)
                          18: QrSOGH_LL13bmxtsbtKw1YQWiPI.roa (hash: BtD6o4b8L0Ir3CPJyunXO5nZp0ZvlZq4rP3EM7bOxXI=)
                          19: R3mRHKwy3JP67VvuFVM4yTcpo_E.roa (hash: 2ClDjZI/s2ADOp7sfR6YP3vc5C899tzn0f8a9Pmogfg=)
                          20: U52mVOk99igqhqPv8HFUemMxWjI.roa (hash: YUEj329L0D9eTRAFxzIGa/94YS4hgP0ffCPrOs2YH8E=)
                          21: VmM3dRQSyheIEs1bfX6FhbZgi4Y.roa (hash: CqVnaJfL1WyuZw1AEmEyn+1VnCcw8/hgNy0BSvot+34=)
                          22: WTNBF_DUhiABbLvBm0Q2E8ST0t4.roa (hash: vnL+M30OJkCVhlLMKx87A1VJIfeesUcrQ6F9e1Y6wIo=)
                          23: Xr9pef6wt6oZMj86bb13WyfgjzU.roa (hash: hxedRL6/r15pw12lUSQwQ/PVriArCwJCc90hVD0tU2Y=)
                          24: YuZ1gy3tlOodeJ0GnL8VDGo65Og.roa (hash: BC3v0Dl3cG1aikvL7OWlvbHbeypg204fJkwz+Gf4ia4=)
                          25: _CpNwsCs8u4x1l-Yk6-tFdixLuE.roa (hash: NucdduJg4PQVBxsaTVCZv2Ciqs6o3dV0eUALrJQNTYM=)
                          26: bwObaSjCJpxHqyn_J2Zc1UyaDpk.roa (hash: 5LCroiKS+KLVcq5iSNcFsFpFOJRUYv9Ix+9NXv0YNEQ=)
                          27: hIcithgnwkKFu-8UYMKlIgWUAXo.roa (hash: fxqLAgUgvuqWdhmMJOHuYbURP/VRyG9WmXRMDttj7LE=)
                          28: jpAqXna3C0BjwOBpSfF6soVZcO0.roa (hash: d+qMaS9a2yeSfULyHTLZ9m6sHcw2gyPQTuA5wZETi1Q=)
                          29: jpRHBZLf_q4Ab3-HF019A6C7iC0.roa (hash: XPIdJosbQpsOENbhceS7WOOyP4m8ucmeXHipAQ07T6I=)
                          30: lr4DFCAJKtFd-NxgSOwyNda4ukg.roa (hash: QO9i2PupmQrAXsHGKNVS9TO3V5iVOt7g36S98iPKAR8=)
                          31: mDlfzk4wNcANo3pVoYUMvhrU6g4.roa (hash: TrUq+GUBBSXz+fyCZ7h/cGjhjZW08YcEMQLvZ2IOsF4=)
                          32: nW2fx9NHAZYj2U_OZKxWIdlKWdw.roa (hash: Y6FF2n2W4tBg8uDZfppVIhjbKYSuBfjm1W1yzPBYgso=)
                          33: o5PX18oyMa6qVJCJKVS00mHQnqQ.roa (hash: /ctS4mvyxqWrxzGSYOkCadxtEZhp9YKWaqfprngBNaY=)
                          34: ppRNI4iSiOqT1CYaFUSvQhxAmxE.roa (hash: gOucl2Pwo2OrFoobsos5v7pq9g4A69RHIeq7N4KQNRg=)
                          35: qw7p6clS2YhsNdDV7OVEHG57THA.roa (hash: ln6YKQpvxhfRCoiu+0hB/cJGGn3tv26jLKFncu+e4tg=)
                          36: rA7j8bEErgP7AvTsNy_ett5NxTw.roa (hash: G4G3NJoQY5uMbj/h2+BpwuW+DfhWAn3O+FHfXMH3cHE=)
                          37: rLmkerNpNMKEEptaj-3sGSaO8Tc.roa (hash: UDaHZvqKpCq/QNJtMj3Fo135cadvlXNDPr0XNybIHmY=)
                          38: tZUvv68-yM-usja9DUYIDzAXY2I.roa (hash: Q0hNbY9f430OK9DvoeHPSnA7JLwYZhiJ1vkImwKJv4k=)
                          39: wQXPeq1MflXb2H-2oLhYyrHTfs0.roa (hash: j36QQBzZ5Pm2jknv1zLm2Q8L2z7JBHtOw5DR45sE6Pg=)
                          40: xL-4tERBYhvX8_aDnKV8HCKxXrQ.roa (hash: l0a54sZs7mvO5yVCnHO9BeY5JawFgum/aC2heZYPowk=)
                          41: xL2UhtkQsQl3DQnbY_Ka3_6XQTo.roa (hash: 5eAaxUjgmgkqu4BwWhkZKr/g62runERo/g7IiX+jYqg=)
                          42: zyXIQuVTwJxcJ2OHbgjeCLiF9QA.roa (hash: fJ4pbQi6AnVBGDfN/qt0T5SrZQEfXmFu9/ASjbvnGCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:9c:75:fa:b7:59:03:70:06:6e:32:73:da:c8:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Jun 15 22:01:17 2025 GMT
            Not After : Jun 16 22:01:17 2025 GMT
        Subject: CN=d9c10dec5cb1c549857d1dfaf6fa8e36e6c8a4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:66:07:3a:ea:4f:0e:1b:bb:94:3e:eb:ab:
                    21:24:fa:20:27:7c:47:95:88:2f:73:1a:70:14:ad:
                    23:68:71:bf:9a:15:ee:d3:95:6e:a3:e4:cd:7f:85:
                    25:dd:6c:25:19:84:1a:bb:a4:f3:90:4c:7d:41:06:
                    3c:c7:f7:b8:0b:88:9a:41:43:cd:ea:c1:f0:37:6e:
                    c8:a2:f0:b3:5b:16:5a:da:fb:e1:16:5b:3a:ac:24:
                    88:12:f2:74:cd:3b:46:95:52:ba:53:d3:db:d0:92:
                    b7:24:c5:85:e0:df:9a:85:5b:1d:4c:6d:22:fe:de:
                    20:ec:9b:41:40:2f:c6:57:80:ce:23:7e:c3:f4:91:
                    24:d3:4b:a4:d1:a4:a6:ed:c2:47:de:f8:ed:d5:2a:
                    f2:57:42:e7:25:a3:2e:d0:43:ba:92:82:18:05:ce:
                    fe:7d:04:88:eb:3a:9e:5c:23:e4:cc:82:04:b2:9d:
                    ba:a6:02:f1:59:b2:b5:cd:57:69:11:dd:5e:36:15:
                    bb:08:65:17:78:b6:bc:b9:b1:d5:69:5b:2b:78:ae:
                    24:79:30:0c:ae:26:ec:72:87:42:88:c7:73:d3:82:
                    e8:ea:48:eb:a5:8f:14:72:77:cb:74:1b:73:7a:2a:
                    1c:15:ba:c5:2d:25:9c:f1:3e:67:d4:d4:14:27:72:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C1:0D:EC:5C:B1:C5:49:85:7D:1D:FA:F6:FA:8E:36:E6:C8:A4:C4
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:5c:93:90:20:cf:e7:fa:d2:07:71:6c:89:37:c9:7b:fd:
         63:35:38:41:b3:0d:e0:9b:d2:2c:fa:d2:05:de:29:30:bf:1b:
         bc:f2:bb:6f:f1:b2:fa:9c:48:0e:34:ae:83:9b:0e:44:71:9b:
         52:2b:99:72:34:be:f5:a8:81:fa:77:06:45:ba:be:99:a2:6c:
         1f:17:9a:36:c4:80:76:bf:7b:81:bd:b6:47:79:e1:e5:0b:61:
         f5:ac:bf:af:2f:a9:25:54:f6:db:50:b6:9b:3e:ef:a7:b5:50:
         22:81:04:11:84:39:c2:52:c6:92:e1:ac:b1:aa:bb:c4:9f:d8:
         68:27:a5:56:48:2c:57:fe:e1:0c:cb:ad:37:91:9c:d2:b4:ae:
         11:65:3b:f7:8b:84:eb:07:46:83:32:fb:86:e4:40:2a:44:d4:
         ea:6a:8e:1b:db:8c:5e:62:57:f4:ee:93:30:14:ef:a5:6f:ee:
         ab:6f:39:e7:fa:79:6e:68:eb:e0:20:80:cc:1d:3c:31:cb:9b:
         7c:22:a8:b5:ad:31:61:38:d7:10:0c:9e:d7:7e:ef:f1:01:9f:
         9a:6c:22:cc:59:2d:3d:cd:4c:09:bd:b2:72:ee:a8:10:c8:13:
         89:f3:19:e6:8c:4f:ac:51:ba:57:f0:bc:7d:1a:b0:be:78:7a:
         39:ad:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:45:23 2025 by rpki-client