Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          tojSERilIOdOxUTYqGXIHw5GNosjZhme9brVZv22g1k=
Subject key identifier:   35:8D:F2:6A:28:BE:20:AD:A8:DA:EF:65:54:38:07:F6:32:02:87:50
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019A4EBD478128931A4BB5A01E27769341D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          17ED
Signing time:             Tue 04 Nov 2025 12:00:18 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:18 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:18 +0000
Files and hashes:         1: 0ckvfg2XoUVrwydEPZi60_f4zOs.roa (hash: 4ae5pKLiyltE1bXTU95kL9BnWnNkVLpu6D4UBZJ9GQo=)
                          2: 0liUM7ua6GwS0d6LLHErgJ0DjuM.roa (hash: dBI2hjXrgKAOmVaqiJb8ZoH1Mnp+RK4dO5uccvqLQh0=)
                          3: 3B7NNbeKRnZEKDmHNY1KeC1srmc.roa (hash: b9ZXFcLIXXCFjVrGvvhUY9iQ4k5SaEKXRcy7m/BXZ+U=)
                          4: 3jJZVXR76aOFchH2XpnzbLR0IWo.roa (hash: zHKnHcHp/PL5mg9H6WCik0iUnC6NdfAFnCs/0dptCUQ=)
                          5: 5C4YA50fBN7vcdBY1HqNC2bmMjc.roa (hash: sc/YMsXU3PgkkGc1oSkpeF8aFtzCCD0ar7drCdMUnQA=)
                          6: 5s5qGQoGev1jAV5c8T8dWS5HMq8.roa (hash: Br7JXU0oIeq94AWaj70g/oHJ4lU7FSYUKqT+ZWnKc5Y=)
                          7: 7cfhXO7iqxL21iOmbt8SZdt03J8.roa (hash: XOP+pz5fLA1+H2S8AXgAlUSrubeeYzWHiX11wOVEGUE=)
                          8: 87aWylfn6PRWGbe1Aw58sldPcT0.roa (hash: e+HdCN198a7iMCrGSb/nzlbGmUzgY1BvJfo6vg/J6n0=)
                          9: 8IPQNKsJPkOpGC12sFlkQtMsYXw.roa (hash: Xs5ZWXQSLJ1Z58EHx7MQM3/jp/D+3KjEPCMs5TWn1es=)
                          10: AJXSyfymc0ZNXaBD4wQ_CXojrNU.roa (hash: IEKfVlGCNO0k9/PEwkKVpaVd+QI7iET2CIAUyaqWhoM=)
                          11: AKPHatFWzrR4GXOYZWJKjxWRQNc.roa (hash: e8yB+d8mWkKERLu1ArvMmqE0cs/prxD4PdsRcpmkUmI=)
                          12: CS3fkAwQa6jbpAuBFjvlkhT4QM4.roa (hash: B07gzww+qg1cGY1+Noy7EqGS0qu6LsylkSmHxbsB5UI=)
                          13: CihCYCcRfHmYDycxhVRrCslM7wU.roa (hash: 8EK8gvioDzV5jlwA4y5lAA/cSLy5nx2+QcBlr4T3sHc=)
                          14: D8Npx5yQG7Ze4tcNJRq2T-3oN70.roa (hash: oSyETx06tyNiiNec4JR5AXYmY/qLJxXp2+L6i3DOKho=)
                          15: DNBsRV7t2HVO8env59jVAjOxkhU.roa (hash: u04P8i3SwISYkJ0oEkWX35FdtSG4l2gXii7MGpdcKHE=)
                          16: EC8RWNFJCuwwTQncl5DfzFYSaJU.roa (hash: /nklMpYhc5zKONNBtCKuXizg/to5ABQr9axNt5+yLCw=)
                          17: ElR1tFIaY2PsVDpiTByrXvXqpxo.roa (hash: iq5gGlEdNdHsXyZVWv/MPVHohphUvsytP0Ty+022UbU=)
                          18: GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa (hash: /r6B9YtsSkz5HiiZQ3D0LND5TwPnz38Pp1G53PkZKrg=)
                          19: GMmKt-5baeZVQ82hbvBrxYFlQXM.roa (hash: s5iUX/ExHm3pVTZBNgXMVP9bcmV8hfTJwbyd8w5AgEI=)
                          20: I6fa7upvk-8lxJh8Xg3J12wgh5s.roa (hash: bov/2d/GEEG2qFtvTVuW6lrqmm4nh/Cfgdq8NX02hTc=)
                          21: IJwx36HHcMIAtSnGXPzoY3isCvs.roa (hash: 6z/6uyE8AMTuPf5yxFJzhR2yGdaN7pmlo56GY1r5eH0=)
                          22: KjwVt_YLNzCoRq-JnMel_rAEvjU.roa (hash: 98qGXLltQ5MTeDKv8jflvZAYDmG8m32VfqwtUkcatVU=)
                          23: OkxhKGO3hHLaH6qZ2vA9JlrGREw.roa (hash: ytFzHiABycaJCtimxiXolzufiSd4PWYGRqD/u4TM94w=)
                          24: PegLLGDkYvs3XF-Lv9hiNho74dc.roa (hash: Vpb3C6Es4ErLDrckTZZ10f34MzLAYRtZRdftTDQsoSA=)
                          25: RMWbYdHceZbtSP3kPPphiVqhjKU.roa (hash: ZmPZq83tjvYdJrT/qGKDeRtwLFHx3yIuGdy+p00AfUY=)
                          26: SYldxtHjA_JYSV3y9S2yHMZne8Q.roa (hash: CfGuIWkCu6mC05Ds3gqdYYewye99hhQ/GRJmjn/6PVo=)
                          27: TeTlCFhRmBWsP7NVZyOUSwULl_M.roa (hash: mg3r9BXAscolOOydLk1rXM5DK7srxmHtjMbydFKmjt8=)
                          28: Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa (hash: rWWNSNbf0TpPeCx9vIr9DCtT6kmAFEPWocJVPgJZlfk=)
                          29: bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa (hash: CYGIK7KvoAnIIXqAQFMxwpkIsLNOXXwRLcfsIwViZMg=)
                          30: cfR-hVEEWkEUwMw2M1V8-p4d8xk.roa (hash: wz/4Xbt1g81a52SFupsdpkNdqPVC6kO1L1AiSoDnAFg=)
                          31: dukXrNFcAur9DNJHTrHF2dvZIns.roa (hash: +gvckuM3WrJ0ZC8yAiyvfLpgNPBfeWipzFo2tWbrTk8=)
                          32: eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa (hash: 7jK6GTgtOsW5ejSEUTMjmjF5N1YX94yuMyrHsebyc8U=)
                          33: fjv84iNlQrNIDl434ECeTTwr0W4.roa (hash: szzjxRTRI27CfDncELIdzVynm65szTrVvcBwbAR/+k0=)
                          34: hJ_BTbBrrE1DP__8DDhe52SVKU4.roa (hash: vQOjBEpXapD1L5OKTFCIZsaTYTd3BkhoB3Yz7me/w6A=)
                          35: j4X9hBaVyPVDHygvq-fZETVve70.roa (hash: z5G+VRr3oGmuSXVR1HckqXgI/DsnIY/XOw0j8sDgvBc=)
                          36: jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa (hash: /ylqB7KyfpIhWFWFpFGMmmVvMNfolX67eNrbZDEUJW4=)
                          37: mYW0ZahOVTcrAzTqNxYilfPfhxE.roa (hash: BwKgVg49yd12fGRJhBfLrcNhvxj8bT+foLtZZc8PITk=)
                          38: okLiPnx_37wLDBmkCPiMjbS6_g8.roa (hash: ASj3E5a6QDi3UoVchGVURUpzI7Z729JGPp26Uv4mP4w=)
                          39: q7b7nVWpkVbr40N_Opdu9wphH-A.roa (hash: qMPucfrLKsdpwIUrrq74FwUiMd/2EJmaJ5bJL+xDKak=)
                          40: r9hxqmD0gUNcwPfjCYlZEBGSxBo.roa (hash: zBiX/c+pjyBrWwwCxlUmFq5xFdn6htcFMAiTP/ZMW2c=)
                          41: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: OC30pcoUuAmhthABbanY7k76Io3m7TamYPaN7toengU=)
                          42: vZ4v2lo2-sXeStle6vqKr87Cnyw.roa (hash: iuW5h9zDLSCcSeiWR+xV0dE4RiZoDLZqiq7ZP9qa/2g=)
                          43: xLGDaC118LcfUDYtMnB3DY44_sc.roa (hash: 4ZP2Bk0aJ3rot/Ut/uex6Y+e07pNyyqnsZS0TCsrmZk=)
                          44: y1icSL4eOecpB1PSQGhZ_TcRn0c.roa (hash: MGvZBcFzA0Qyn5vQTI1TrTj6Nd9QWD4NnOO0EKwn5Zo=)
                          45: zbIR0kzSnqsQppAEnVlytUjNxzs.roa (hash: A5R4DtRsqGNnQjc0WtD6M5DgyLoDVTlkGrAxxgOsLFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:47:81:28:93:1a:4b:b5:a0:1e:27:76:93:41:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Nov  4 12:00:18 2025 GMT
            Not After : Nov  5 12:00:18 2025 GMT
        Subject: CN=358df26a28be20ada8daef65543807f632028750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:20:92:26:1a:8e:52:2a:fe:e3:ca:2f:10:
                    9d:a6:24:bf:4a:86:91:99:eb:68:2b:16:d2:bb:03:
                    34:05:a8:cc:d1:dd:54:13:6a:c5:6f:c3:4d:77:0b:
                    9a:c6:ad:0d:c3:d7:cc:42:6a:76:37:f6:dc:9c:e4:
                    e5:24:3c:f3:e7:c7:5e:8c:db:3b:2f:a2:9b:7b:85:
                    53:47:ea:cf:b9:14:1e:b5:47:6a:39:34:73:b6:a8:
                    cc:d6:bf:08:37:88:4d:f1:49:8a:73:ae:8e:ee:b6:
                    6d:ad:14:62:89:55:5a:78:25:cb:56:97:30:4a:00:
                    cf:3f:1b:e9:75:8e:da:f3:9c:21:af:ea:67:b1:9d:
                    d5:00:46:78:0a:e3:49:52:93:e8:04:3e:66:c0:35:
                    14:ab:4e:99:73:99:c7:45:02:c7:4f:fe:68:c4:79:
                    43:4d:1c:0f:51:42:0f:9f:6a:41:70:0d:82:c4:cd:
                    d1:0a:d7:1f:39:58:96:31:32:13:75:78:7e:12:44:
                    5a:3f:49:21:72:e0:06:3b:b9:61:c3:88:ac:ff:3b:
                    49:52:0f:f4:0f:bb:fc:9b:3e:c2:4b:15:81:06:50:
                    e4:cd:8d:2a:31:01:a1:64:50:a4:d6:82:b2:98:de:
                    76:51:96:f5:62:ab:a4:cb:a9:0d:35:c3:54:2a:26:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:F2:6A:28:BE:20:AD:A8:DA:EF:65:54:38:07:F6:32:02:87:50
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a3:f4:43:e6:28:07:2c:ee:84:74:c3:9c:e8:ef:a7:10:92:
         5f:79:35:30:1f:69:11:57:2f:d5:31:e4:f7:43:ca:96:5a:a6:
         c3:c3:72:94:4c:92:f7:87:70:ae:1f:cd:bd:fd:46:47:5a:04:
         f6:1e:da:64:bf:dd:b4:84:25:c6:05:c8:5b:83:d1:88:f0:3e:
         df:d5:fc:a6:4f:70:eb:0f:73:46:a3:38:f2:f6:89:dc:ae:ee:
         71:29:d9:ef:d3:a6:e8:ae:65:2a:49:ac:fc:41:ae:7a:e4:64:
         e4:bd:ed:6c:5b:a9:2e:cd:6d:02:41:f0:ff:9e:8d:71:ae:e3:
         0b:f8:d6:1c:01:c4:05:1b:87:6d:4b:99:c6:3f:09:a1:b2:98:
         62:b8:06:45:c9:0e:c3:8a:21:3e:fe:76:11:91:f1:28:91:1b:
         1f:f1:42:9d:1d:f8:33:09:c7:bb:76:13:16:22:09:e3:7d:83:
         8b:54:a9:bb:10:66:a8:ec:02:f2:b9:84:84:23:c6:ad:82:36:
         eb:37:0d:cd:c9:59:a4:43:9d:96:54:3b:2d:23:97:e9:af:f0:
         bc:99:35:0d:64:f3:8b:37:ab:28:57:ec:3f:9d:5e:6f:ce:85:
         aa:d7:33:64:2b:81:bc:d7:20:4f:bd:27:a1:6e:41:a0:29:a1:
         fd:a1:de:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvUeBKJMaS7WgHid2k0HRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUxMTA0MTIwMDE4WhcNMjUxMTA1MTIwMDE4WjAzMTEwLwYDVQQD
EygzNThkZjI2YTI4YmUyMGFkYThkYWVmNjU1NDM4MDdmNjMyMDI4NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FkgkiYajlIq/uPKLxCdpiS/SoaR
metoKxbSuwM0BajM0d1UE2rFb8NNdwuaxq0Nw9fMQmp2N/bcnOTlJDzz58dejNs7
L6Kbe4VTR+rPuRQetUdqOTRztqjM1r8IN4hN8UmKc66O7rZtrRRiiVVaeCXLVpcw
SgDPPxvpdY7a85whr+pnsZ3VAEZ4CuNJUpPoBD5mwDUUq06Zc5nHRQLHT/5oxHlD
TRwPUUIPn2pBcA2CxM3RCtcfOViWMTITdXh+EkRaP0khcuAGO7lhw4is/ztJUg/0
D7v8mz7CSxWBBlDkzY0qMQGhZFCk1oKymN52UZb1Yquky6kNNcNUKib1EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWN8mooviCtqNrvZVQ4B/YyAodQMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6P0Q+Yo
ByzuhHTDnOjvpxCSX3k1MB9pEVcv1THk90PKllqmw8NylEyS94dwrh/Nvf1GR1oE
9h7aZL/dtIQlxgXIW4PRiPA+39X8pk9w6w9zRqM48vaJ3K7ucSnZ79Om6K5lKkms
/EGueuRk5L3tbFupLs1tAkHw/56Nca7jC/jWHAHEBRuHbUuZxj8JobKYYrgGRckO
w4ohPv52EZHxKJEbH/FCnR34MwnHu3YTFiIJ432Di1SpuxBmqOwC8rmEhCPGrYI2
6zcNzclZpEOdllQ7LSOX6a/wvJk1DWTzizerKFfsP51eb86FqtczZCuBvNcgT70n
oW5BoCmh/aHeiQ==
-----END CERTIFICATE-----