Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
File:                     HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json)
Hash identifier:          l9dC38qL0QGajOzBNPuZs1EOR7e8n+fzTTt4Fuo8rdM=
Subject key identifier:   B1:BC:B5:8B:B8:99:57:75:8E:76:58:9C:95:10:23:12:B1:C7:A3:4B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       01967341C44BFC010217240902FAAF53C728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
Manifest number:          049B
Signing time:             Sat 26 Apr 2025 18:00:11 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:11 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:11 +0000
Files and hashes:         1: 0v94mnKmrgYtt5y2MQGuDazjxjA.roa (hash: 3Fy3bWz7jcZoEFMt18MGzYWf/tfMkeytNpRPKao8d4A=)
                          2: 1-kb4hmxMAktf4yYaTtNVFR4VnGM.roa (hash: Is673hjFs+Vhwv7WU2gQiJKw7iusXjoS6iS4OthWLzs=)
                          3: 4hx7X-qAofbTlhwwVV-AQ6KXp_w.roa (hash: OBb8406LAIV4rFPWUu9hOe5P2joW2t0g3DbKGweRhoQ=)
                          4: 92fBnrq_mIGybZF5gsHPTbdH0y4.roa (hash: 3nqgv8gEoJk+mexG4q/tymckm8ICa7hlkNqJQ4qh8Tg=)
                          5: 9UIWvr1OfNDaGDV1NFy_9NnoTYM.roa (hash: tixaefTMG5hslITfoqhr1S/+epdx4nSuGQbGRhnUPxs=)
                          6: 9tE0dhjecz_vEPgQYKZazxJZpXs.roa (hash: ybs354Sqw4G0DipKA3jVjo1yJgYq86p+0PfMWE0k7zg=)
                          7: A8oZtym780vkooA0CDCTmVa_Uyg.roa (hash: JEJEnU4s8nB2zC1Zuwtfcc28Rv+NglRc6QVnMQ0CUAc=)
                          8: B3hYI-yFzUsfLaXXcmpVXDtm1FA.roa (hash: l103Ybv4lweW1usLLXjIO7Qt2UGlUxgwH75Nm0FO+Vs=)
                          9: CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa (hash: sD732gCP9DEw8s9H4wJkzWgViHWbKEY1xx697cAAzh8=)
                          10: DFllakhYeoutBATf4MzktTkzMHA.roa (hash: GuxDJWqtKXhEqBdraQY6S/n1UWX945Zxw/dwDjpnHZI=)
                          11: DRAzDA2vgEaiM5RUOX074m9AtAk.roa (hash: b17cUe8b1KGzAYHt+JmGZn90RCYEfEgnyjtke4m04uI=)
                          12: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: PAIUEqi61xXc2zsXcRJ0QWHwlaIG3lS8dfajEkrcuLE=)
                          13: HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa (hash: FQAxLC3PSJc2T88Euwq7LFUYTEkvVvSw9fr3e7bH7tM=)
                          14: KL_oocCv4khkyRa25dlbyITRdjc.roa (hash: 4wKDO2i1BeDNJh2oVpIy70ysxuQo2aRiUjHzNsE7zKM=)
                          15: KOI25PzdTkm-0xZVhCT_xtTg5-s.roa (hash: 1o0QY37vh42XXWTJhB6P/HZwmg8ud9LsKS5XYNkdPhE=)
                          16: NtsNx1ln9VTnlxvb3DnHe3HxX6M.roa (hash: 62MHE/ObSNCgKCi9O4CSEdldJK0WNMREIvL73UuyahQ=)
                          17: PCrnzM27m_gargGZ9ylIhhzHvSE.roa (hash: 6s3SRX4vbA35QaqChMrHCzmBjK50KbRqLwu/jy5I+uw=)
                          18: R2R3dYwVExujkP_3YEzS5IWSFks.roa (hash: iCdIt4hjH3rsHPjbBwBDkiRUbawLUhZbiZd908W2whA=)
                          19: TxUte2UJ9SRYfI0Kkfto-EOhFA0.roa (hash: jgnG8ECsuht9mADq610Na72eHRyPpWoKaV58yYAI49E=)
                          20: TyejWy3JMbuHPbI-YINhRswkn6U.roa (hash: ddeTozCzeGdeH2UQO6NJHuZFd1z2I2vHOsvjsVc+KhU=)
                          21: UexI4Z2MHoKJX7UArvShMTnFH1s.roa (hash: OG+DMZt/nQN7JQoIC3moczIdzt0YyA+sScQJwQ63uLM=)
                          22: Vif29W-3fcIPPVlWCYw3gqQgj0U.roa (hash: mBKo6kBp5aKtDQrGaY+LTFtjbW2WOx4wgeIf4JrxaMQ=)
                          23: WQKx-MTYDfZZTHcMAt8YcPyE9SE.roa (hash: 3kpv91GQxIMTt9nOuI9ap0dnqC2eP0deuZoMlfreTlc=)
                          24: Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa (hash: nOlX7buINhy7ODIRgajp3PMZ+ShNH0qVTw3tydvl1+c=)
                          25: b_esdvwuL7HMMRsaUDaWOqTlMVY.roa (hash: pwo77eC9fZ605tPPzC8qd5eRG6DFX9632hHdiz08KNM=)
                          26: cQGYII0oWa_it-a64CIhy86rZFM.roa (hash: K03Kz6lMXyDGjb7Z/vj8jbw4mEpgwq779RTg2IF0I6Q=)
                          27: clGGL9s85YgTAJ-RMjz5lCzOP5g.roa (hash: xPkxg9x/lb7QNTjqVIebB4jEI4Q8WiVxGZsDwX+/iUM=)
                          28: eeNIld-CwPVcfEVGzgUCMqVFpyY.roa (hash: uxo9SuC4/NypmA3tJNrIjhVovnUTOlUmyteCbIDqups=)
                          29: iDHKoOkn76ewvGMKtSvQ55oreVI.roa (hash: FdmrkxRsqXjJl6GApfB2yCowxyhEWG38nOt3Zk2IOgw=)
                          30: lbIP4JZWhRE79FoTj02hfBkdN9U.roa (hash: UmpTEyTvDDtacG8R6LJOmoidepJdCHnpTWfSmIAqUAA=)
                          31: oGkcRb2EyQxvMQoonDs87dYgmiM.roa (hash: MfyN2V9sqLw2lJ8rtokA4J8KvtUiIrXwL8p1zhVYSEw=)
                          32: orZxC-53BDBk1U6uuSN8DRaau2c.roa (hash: HOGL1GzBKb2HP//0y1ozzX/F3kqSictn9tpzoAyDhSI=)
                          33: pteX_F18pKfY_J9Cs8K_KhX8xe8.roa (hash: m/yi1TVeKvstEX7vhie8NfbFmnVlI4Htbwkazoc2nMQ=)
                          34: qSbpao8R6QXs1u2Yw2u4X2XHVFQ.roa (hash: ofXZB46TauILkzwCbP4KjVB58kze4OYw22LMId1lyJk=)
                          35: u_xpoEFdMS4XphSvfLjhMqrSVCA.roa (hash: F/zktMNsr2weptvJLM+lhhTnzjBLxkGzNeypTL4hxZk=)
                          36: uhmFxnEKd2nWDe4y3QSW_tBBf5k.roa (hash: 3Bs+fdH+UE5EdQY+qhv9fnBOPcXhnzSeBJNZNfIjD6w=)
                          37: urVdPzAr5hcmUa_BCZWJpXPsm3s.roa (hash: q/f+k2J6pg2/lVHaao8qrOCAoWMApYxChxvdtUZ21VY=)
                          38: xpnbOWgAfiIJZmpjmdv34zXX7iA.roa (hash: hxYTr7x86gGFLz4Uj6fKUzE6Fc/CR0rrmrlRUyOVlSA=)
                          39: xuJYMqlUYpz7SNGCM4K_jvqIs20.roa (hash: d0TAOSbcF1oLLc0bjHz9EWzJ8DaW0Vbfqehz4TLqfCE=)
                          40: zAVxvux3Ij4Ln78b1yGsEJeiCfQ.roa (hash: 3NnVEWj3eRCtReW6v/aye01x2yi/QEBSea/+eiByuhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:41:c4:4b:fc:01:02:17:24:09:02:fa:af:53:c7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Apr 26 18:00:11 2025 GMT
            Not After : Apr 27 18:00:11 2025 GMT
        Subject: CN=b1bcb58bb89957758e76589c95102312b1c7a34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:d3:2d:e9:1b:a3:53:69:34:94:ac:7a:4f:
                    fd:17:b6:11:18:7b:8b:76:d8:ed:98:f0:31:55:39:
                    12:5c:a3:09:ae:a7:42:8f:2c:71:d4:89:53:c0:f9:
                    c0:0a:4f:28:7b:46:40:c0:e3:74:35:cb:a6:ef:e2:
                    38:28:91:cc:f5:a8:81:2f:21:e4:53:fc:60:0e:c5:
                    15:9e:55:29:50:71:48:a2:de:eb:53:71:ff:8c:b7:
                    ea:0f:4b:14:8b:f8:90:72:4a:1f:65:d3:cf:4a:6e:
                    09:10:6f:50:07:3c:36:d6:41:c7:74:a7:a2:6a:10:
                    25:27:78:34:0b:29:a9:7f:9a:4b:96:ad:34:6e:22:
                    3d:85:f3:50:94:9b:24:ef:e6:6d:74:65:bb:c3:18:
                    0c:33:0a:ed:02:bf:b2:35:be:c0:eb:73:6b:95:d2:
                    70:71:f8:0b:2a:a0:4d:c0:36:e0:70:0b:35:3b:75:
                    34:10:60:b7:22:83:29:27:83:70:c5:02:0c:d3:16:
                    e6:7e:dc:dc:62:8b:d4:dc:7c:2a:c5:f5:f2:b5:53:
                    5c:26:8a:c0:31:d1:78:40:9e:ed:8d:9f:55:91:e0:
                    a2:6d:08:b4:d5:3a:51:f8:e2:48:60:93:d9:28:80:
                    08:8e:27:bf:be:bf:0f:c3:bf:93:48:8a:d3:ee:db:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:B5:8B:B8:99:57:75:8E:76:58:9C:95:10:23:12:B1:C7:A3:4B
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:07:aa:b4:c8:ea:5b:02:b3:d1:ed:bd:4e:a5:9f:0c:0a:
         88:63:95:4c:7b:1e:a8:53:46:61:db:41:8c:38:22:56:eb:96:
         70:e6:8b:4a:74:b1:88:46:25:9f:08:2c:55:3d:a1:6d:2b:03:
         2b:eb:19:b3:54:3d:31:78:33:b1:e1:aa:79:4c:7b:a0:2c:ef:
         54:e3:95:ef:05:5b:8c:c6:10:ed:61:32:ab:bf:0e:22:12:6c:
         09:cd:44:57:69:3b:d6:36:9b:fb:a7:77:26:b8:ab:35:d9:fa:
         f1:3e:85:8d:ca:57:a1:61:bd:84:f3:04:52:0f:46:c9:0f:24:
         86:32:a2:bd:7c:98:ef:57:67:e6:03:d2:5d:f2:17:69:31:87:
         8a:d5:60:56:a7:bc:0c:01:cb:b3:05:c1:e2:7f:f0:49:eb:cf:
         4e:31:cf:b1:76:bb:27:f0:10:1b:b3:47:54:27:b4:c9:cf:3a:
         1d:f0:6d:b8:fe:0c:a2:f3:c2:1c:78:89:15:85:c6:00:dc:f1:
         d4:a8:df:05:6a:e1:55:90:73:95:4e:af:a7:4d:7d:0f:d5:24:
         70:63:82:3a:f7:d5:a6:bd:27:db:1d:29:a8:8a:c6:f2:ce:9c:
         c5:9a:c7:f2:17:70:e8:1f:eb:ce:3a:6b:42:67:51:7a:f5:6b:
         33:2f:58:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzQcRL/AECFyQJAvqvU8coMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwNDI2MTgwMDExWhcNMjUwNDI3MTgwMDExWjAzMTEwLwYDVQQD
EyhiMWJjYjU4YmI4OTk1Nzc1OGU3NjU4OWM5NTEwMjMxMmIxYzdhMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l3TLekbo1NpNJSsek/9F7YRGHuL
dtjtmPAxVTkSXKMJrqdCjyxx1IlTwPnACk8oe0ZAwON0Ncum7+I4KJHM9aiBLyHk
U/xgDsUVnlUpUHFIot7rU3H/jLfqD0sUi/iQckofZdPPSm4JEG9QBzw21kHHdKei
ahAlJ3g0Cympf5pLlq00biI9hfNQlJsk7+ZtdGW7wxgMMwrtAr+yNb7A63NrldJw
cfgLKqBNwDbgcAs1O3U0EGC3IoMpJ4NwxQIM0xbmftzcYovU3HwqxfXytVNcJorA
MdF4QJ7tjZ9VkeCibQi01TpR+OJIYJPZKIAIjie/vr8Pw7+TSIrT7tuIswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG8tYu4mVd1jnZYnJUQIxKxx6NLMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9UHqrTI
6lsCs9HtvU6lnwwKiGOVTHseqFNGYdtBjDgiVuuWcOaLSnSxiEYlnwgsVT2hbSsD
K+sZs1Q9MXgzseGqeUx7oCzvVOOV7wVbjMYQ7WEyq78OIhJsCc1EV2k71jab+6d3
JrirNdn68T6FjcpXoWG9hPMEUg9GyQ8khjKivXyY71dn5gPSXfIXaTGHitVgVqe8
DAHLswXB4n/wSevPTjHPsXa7J/AQG7NHVCe0yc86HfBtuP4MovPCHHiJFYXGANzx
1KjfBWrhVZBzlU6vp019D9UkcGOCOvfVpr0n2x0pqIrG8s6cxZrH8hdw6B/rzjpr
QmdRevVrMy9Yuw==
-----END CERTIFICATE-----