Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          g3zlG/++GHE/ykaJCAvvs7J51ao2ZkecEOd2rKbXkEA=
Subject key identifier:   EF:31:05:9C:B0:F3:B8:65:91:A5:ED:FE:C3:14:C2:73:B4:56:A1:64
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019A4CCEB3117ECCCEF7B069168239791DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          1877
Signing time:             Tue 04 Nov 2025 03:00:05 +0000
Manifest this update:     Tue 04 Nov 2025 03:00:05 +0000
Manifest next update:     Wed 05 Nov 2025 03:00:05 +0000
Files and hashes:         1: 1-E20ktVNe16F6Hofgkcmxt-X6i4.roa (hash: 9zvZSZs/gijVXWu6Efh7Tsajx6AsqwE8rVB55ifWAPo=)
                          2: 2-cHxc1zMtCcD-GzEWoOdBTTabs.roa (hash: 52l6FusBa/jk0I0sBfVHrE4CEvIY/yW7vGg69O8iKSQ=)
                          3: 2QQsJJ6tXNfySMKhFuk0X4eceCs.roa (hash: ThLO2KhLuPTXapRFxGR4popYmJIUwR3wQqbgs/aqfNw=)
                          4: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (hash: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=)
                          5: 5Ek9QNbv_cv0O_ddXr3gRWMjn-I.roa (hash: wO7omic88taABey0y1upo9MP8HlwzR5IIuq7mJeQAsQ=)
                          6: 6oSuHeeQ_sWorxh6r0_5wvvFQgM.roa (hash: 5gk4fc1M3LnlB31mm0S5J9v36W8hpfovoTd5KvJf5f8=)
                          7: 7S2BaJTJW6yeaPDCucj1SZAJFG4.roa (hash: Wf9aBK34qXhZzbB9/pJCSiZRspnt8u9OBO9lGpUw7VA=)
                          8: 879TATYCt2E6O0sblCBPHs0QbAc.roa (hash: Wl+6BUQGsGDFzGO790CnvPFUOP8uhB6H4LZN/Gb1K8I=)
                          9: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (hash: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=)
                          10: 9yMcvRznuoAbn4JxNxCj1bZNKXQ.roa (hash: GFx7BMc5F417eQeOjL8eTlruWh0XG3Xtwv3pPD5H5cY=)
                          11: D1LkEB76VO4TLiVLSutG1j50Ggs.roa (hash: wwoXITC/7x+4MXqvSXJJWdJx8U8mmbANamql/OwPaLA=)
                          12: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (hash: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=)
                          13: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (hash: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=)
                          14: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (hash: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=)
                          15: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (hash: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=)
                          16: HKmCldk2JvctbCf-Lf1HKb1B2ao.roa (hash: r4Utp2/KefC9nB/6PktJWRnuca95ABpQ1Alu/XpMThk=)
                          17: IjN0z6o4Hh1zKgeKfEv903njBYw.roa (hash: /xwNDbRn9zF9j2h4NPclH3V6ydcf7U7D3FiI38kT+Oo=)
                          18: U1WVDtRybfuA27Bw0OWg-bI_dzM.roa (hash: LsK7DiDulGpwVEDHiQ40BKAJ5fAZoyYV9dOv8KAEGzA=)
                          19: Xh_nIIhlIVq5rKHv1IjCncovJ4o.roa (hash: mtjAhRm8JR66Itk63UwTKx7Mn6caonQ7wqNPv8b3naM=)
                          20: Y2YILDsbdCLlP8-r1KNzKLAbNYo.roa (hash: i1clgB9jbW2qji3o2GMb+nasxKoNVYdhbKHCWdPQ0Z8=)
                          21: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (hash: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=)
                          22: a7fsy-8Q0mbgh2GVQepddVw01lY.roa (hash: 3AFQjFOMueXPrJywJH2euTkr7pZ2Ox6nWvG8bTMuBlY=)
                          23: a_nBKLslRvv4M8QIPm2hzSDLcJM.roa (hash: vQDXksPaR9+a69ugKR7RShK2Q3Fxi4bQeRQ1Af1Jo8E=)
                          24: bpudnBe4MRPMXUGN1kkE9BWmWXk.roa (hash: e7Zr1oaLphI8Z92ngEeaEhFJ7Q6Dc3Pf3ruPNFbQjyg=)
                          25: c9v2s32MadGt9Rs9B7wyF-btNpU.roa (hash: 9SRzQ3jf35UTFm4MUwgZY9tBkIZ6WIK99Wc+8gSxPgc=)
                          26: cxz-2E55vUnhXaRtAbhK3OL2nAU.roa (hash: IbELDbTdi+MNIqP5SlIoOe+zI9Hcbbnqhg2nm6KYKeY=)
                          27: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (hash: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=)
                          28: ezMnjcrZrp_Arm-POXFDlG_w5UY.roa (hash: YnGArrkYUSVZyAdWl1OFzF5LcDZHSJMqy5MHIVZXy28=)
                          29: i29Dnh2kXGiv2yqK76-7vmxUqHk.roa (hash: vCaTmwFWC8Tk0O4g86hzSYP6Qj1wQnNBboWlzkJop3s=)
                          30: iFmiq63DpNDN4v2AMY1a-Fu_CP8.roa (hash: UdHd1vnfza4zALuCMm6OPNt72FMsCuyAC6PdzT1+mlQ=)
                          31: igifqygwTOksZwnom44nnHV_xfk.roa (hash: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=)
                          32: jIloPrfxJcgyny1NM07pKeFVbWQ.roa (hash: XTmwDeeL/aTTb7wzUaHctoEAhoAugHb8j8uKdagGibQ=)
                          33: qJKw_jSexo5Xo6INlMAHsDyzZX8.roa (hash: tbzwBt4XZg2shK+8u+voUIn5C0bTx0zl07xdDoYjTzU=)
                          34: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (hash: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=)
                          35: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (hash: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=)
                          36: sFdyS1bi1kemFkcxeMjXf0LBCAw.roa (hash: cN6Apu7mP0IoUWBpLM0zoLwxlQm/BceMlQYohd1ovJY=)
                          37: sjfgbj_1SBcR6CaxATNHQ8rovMw.roa (hash: qOIvjJPAdYNY8sLCE1EoZf+/bFtlmjlT1dgvpstpmT0=)
                          38: v9aN8eUHGc2cFY92JIet8EBdxvQ.roa (hash: ASnHZNq0YfQo/Dbs5rOcZaP8TTutwFdbeAepCV67R0g=)
                          39: vxkaE8HcRmctvzsbnfwU1QZslMg.roa (hash: T9eJSoy6nMWNYhwlXC0AyroCOIMJaYxhMB2BLD6Lg40=)
                          40: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: J5UhWC6hrPBRjoBJSJcT4K7+YtJZo8AF57jpgL3ZWP8=)
                          41: wF8FIDPGJ7tPDC93JVsz45qMgTg.roa (hash: n2UHfP/KhNZ+ztEQHVgA4uYFqjEfJjs05GQWErjnkeE=)
                          42: xB3tLzZcAH5nHqyXJclj-Vxekh4.roa (hash: vRWKn360bNd0jnKWSrgfNY6zDbfJUTKsgibAzr4SQxk=)
                          43: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (hash: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=)
                          44: z6SnouOaRLjhmS8F9234dh95UfE.roa (hash: TC9ldUQzkPUF+EKC5lrbMpMqw3etd0iQCwmLDSl2bj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 03:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:ce:b3:11:7e:cc:ce:f7:b0:69:16:82:39:79:1d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Nov  4 03:00:05 2025 GMT
            Not After : Nov  5 03:00:05 2025 GMT
        Subject: CN=ef31059cb0f3b86591a5edfec314c273b456a164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:bd:30:0a:9c:ce:af:90:79:90:a7:b4:19:
                    79:6d:42:a1:b2:96:55:3e:43:95:db:63:ae:d2:55:
                    03:ce:e4:74:10:f1:4a:01:d0:9f:96:e3:a1:a4:4a:
                    58:06:19:40:db:55:12:f1:15:e5:36:35:0c:1c:b4:
                    d8:53:9f:c4:53:f3:33:30:ec:a8:95:5e:8b:b6:dc:
                    32:c0:6e:e6:ed:33:72:be:7c:1d:80:4e:bd:47:42:
                    d8:48:b3:b9:95:7f:e6:77:1c:33:65:3d:47:c5:f3:
                    3f:cc:62:f3:2b:5f:9c:79:f3:a7:44:8e:23:fa:30:
                    78:e2:05:ae:76:99:3b:89:fe:ba:6a:5e:c0:e0:f6:
                    45:7b:97:6f:1b:6e:3a:d4:34:58:6a:b3:ad:c0:3e:
                    69:38:d4:2a:aa:36:7a:ed:78:ac:1d:9d:c3:51:e9:
                    2e:38:33:67:e5:de:22:b3:cc:cd:e6:f9:91:e0:05:
                    7e:7a:0d:b0:e7:bc:86:e8:05:13:60:5a:32:2e:aa:
                    80:b5:75:05:3a:ed:38:7c:69:34:f6:14:f1:ea:ee:
                    cc:18:8c:47:11:fa:99:16:23:6d:56:60:62:35:cd:
                    7a:57:e6:f4:9b:87:7c:6b:d2:f4:66:46:b5:9e:81:
                    e9:11:3b:e5:af:b7:87:c6:4d:44:d0:be:18:ec:7a:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:31:05:9C:B0:F3:B8:65:91:A5:ED:FE:C3:14:C2:73:B4:56:A1:64
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:7b:a0:2a:37:bc:8e:1c:7f:81:48:eb:c8:2e:45:e3:94:
         65:5d:7e:ac:c6:3b:25:37:53:71:67:bc:c4:ab:4e:2f:b7:fa:
         38:12:82:35:40:f5:34:45:7e:c9:75:c0:fe:77:f3:d0:66:37:
         88:fd:0d:81:ff:92:10:d7:74:eb:c5:c0:0a:72:52:56:d4:e9:
         c4:67:23:38:27:44:a6:b8:44:0c:46:47:99:eb:7f:b4:c8:93:
         3d:c4:3a:a0:c1:4b:6d:87:06:96:8a:a0:7f:9c:b2:7c:18:ec:
         2a:76:2c:93:87:91:c7:00:5a:be:48:3f:94:5e:05:be:0d:a0:
         09:c7:e1:64:81:42:c0:e6:ce:99:c2:3f:be:8b:9d:72:e1:f9:
         a4:64:e2:10:c3:35:df:84:c7:8a:31:64:04:b5:89:0e:e0:c7:
         a8:77:c5:e5:2d:6d:f5:5a:74:8a:65:5f:0a:3b:e9:72:da:27:
         4c:88:6f:5d:18:92:57:c1:fc:53:fc:d2:77:69:d6:58:7f:b5:
         f6:62:80:4c:e1:8e:86:3f:0c:f9:19:33:6b:3d:c0:3a:71:04:
         a9:88:cf:a5:1c:a8:3f:4b:b1:d5:1a:c2:53:cb:1e:a6:44:bc:
         d6:5f:d1:f0:8a:80:13:ad:c0:d3:56:d4:3a:49:cf:0d:2d:02:
         b8:9d:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----