Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          Er1UMfeyJ70qJts0/HsPehq4SfqrD1GHv9wTWxjINbw=
Subject key identifier:   9F:F5:54:AD:87:04:D2:24:98:3E:E5:BF:20:98:8C:D6:E9:92:10:6C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019A4DE22D07E0C5BD77356DF21724FD39A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1750
Signing time:             Tue 04 Nov 2025 08:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:59 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: H/1mO8kZkA5ZViFwgSZ474LdfbOGHBt+rfjZB7YJ4zc=)
                          2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=)
                          3: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=)
                          4: ARYdkedt9hArm1X7hp83_Cg5tpQ.roa (hash: JuBJSBaOkvov17EXCYN32IfgGgf0k5Tgl6lj874nn5w=)
                          5: EnUCXK5toVH53tlZOLLeV6oPWBg.roa (hash: 5dFEexl7EsTZCh+F8XMO8WuHOD0gqtHWJ30CQfuEpV4=)
                          6: EuZ_nscCVKNB7eQCPJwNYlOhXDM.roa (hash: hnzY4VMRehTTwNfylfpkImvqTNTdqwkFEtSVzjLiRsA=)
                          7: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=)
                          8: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=)
                          9: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=)
                          10: KeM1ORJvG57zJzj1K2DwpMPSMZU.roa (hash: XHsHlY/bthSxdaTkdBh4Cmp1Xjdn7NaEjSx+3/K5zJQ=)
                          11: NDTb5wEV6mi4gNG-Fu6rF-wbgiA.roa (hash: NEy4PeHLS5dO/ZjNCa+Z5peBIXcrVaqt3QmALKubiB0=)
                          12: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=)
                          13: Nv12FFJAhm76vmtQvLtk0-qb9uU.roa (hash: GWYX+UV7jTRToJvscvGnDmcfi+hdjE9fs/PSDIO/qXI=)
                          14: P6DmMh6gJbdEiU32OPNgOyp7mCY.roa (hash: 88yaz4q97O5d7cXTtRqRjBiGFSE36MGooJOUALTPCRA=)
                          15: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=)
                          16: PjMzQwKUrF-VvmoyR5v8Mv9UDo0.roa (hash: djWTkmrlBUFs68uxALTdJmeXHsgVGm4cPvwKlvS+poM=)
                          17: REFW6rSHBTfRsUnwOYyR16B8o0I.roa (hash: XB70ye/c1KysdH/4/hccAGTbjaBXhCjgy7hTvmJtugk=)
                          18: RchhUq--77MGlYxNBSaODwJIwKM.roa (hash: sr2MOGN6k36I/3FkeO3PjW+1iVoi3mf8hYsQtvAbkCg=)
                          19: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=)
                          20: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=)
                          21: Xdb2GonGqu9DkyPtW1xL_ewg_Bo.roa (hash: GVGr4S1zTr+dNdiuuONrJJ2q6Nn0ihVO0n5qN0zw/pQ=)
                          22: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=)
                          23: _Vf3TO7lMmdtkCjp92trzTwldE4.roa (hash: ThjCJsCygSwWOPGFIhdZvUVgS1n+5uy4UgbfkgRne8M=)
                          24: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=)
                          25: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=)
                          26: cm0LnEhivdiG8YPAYwDpDqid4TY.roa (hash: vvmdzQrIc6DH27Jx2ppbWfOfWIe4OW78TOQB1QE//Zs=)
                          27: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=)
                          28: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=)
                          29: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=)
                          30: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=)
                          31: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=)
                          32: lDebapMVKq7c3cdLNAzBSuTVL9I.roa (hash: JLLBlWGQZm0pTsOl8c3P+gghkK2T0TR/9bgigt6vPnw=)
                          33: oTJV7UQNW4Frhbnp-iOPDIxOi0c.roa (hash: 7xRtMaqLg3Ad/2cU30eSFfbxnUqbSU5++XxDs5sKABI=)
                          34: pz7TiJpGgwqEWnzhPaDm3WXeM3o.roa (hash: 00OySg28z5kHvMGh/RlyvK5Ek2msUh1Kz15HmFEqenQ=)
                          35: skoFlpQBI8LF51NmTT39lnjZrMk.roa (hash: l+MFPkSAFr/Bu/aMzD3WDDtaslazJr/lXcJRueoJtKQ=)
                          36: tiTDdv-4V1Gm4AmIPvtlq7Nzux8.roa (hash: KNMxdjZJpJveHFk1A0BldLnm3kHO3YSepJ9J0DkOI1U=)
                          37: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=)
                          38: vVo5jg2GQAZIqK4h2tPzZS3ji70.roa (hash: VyY0O3FHC/dgFA8HrUMfqDla8B1EBlXwEVoR6qUh5T0=)
                          39: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (hash: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=)
                          40: yxG7yWv__YoAWY_L9hRp3vU2XYs.roa (hash: CSF3TOKK7qqalDdJcfVVvwt3T7McADmGuQ+vP8UJZjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:2d:07:e0:c5:bd:77:35:6d:f2:17:24:fd:39:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Nov  4 08:00:59 2025 GMT
            Not After : Nov  5 08:00:59 2025 GMT
        Subject: CN=9ff554ad8704d224983ee5bf20988cd6e992106c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:cb:b0:5e:5e:42:dd:d8:15:b1:f7:75:02:
                    a3:2a:81:cc:53:55:f7:1c:9d:95:80:78:00:a3:d0:
                    4a:a9:ca:9f:16:c0:77:07:7f:83:7e:7d:1d:a7:51:
                    5e:20:8e:e9:5b:65:62:df:5f:df:9c:47:0f:09:ce:
                    aa:d2:ed:5b:90:f6:35:db:7f:06:78:f1:52:1a:c0:
                    dc:63:97:0d:ac:11:5a:40:a9:23:96:6d:3b:66:21:
                    7f:f1:e3:99:a4:88:ff:6d:12:c0:49:e8:46:39:07:
                    ec:68:4f:91:f4:73:aa:22:6a:61:59:aa:b6:6c:71:
                    d3:a9:3f:26:58:8c:ba:2d:8e:76:a8:9f:8f:a2:0b:
                    24:49:ca:d7:f8:7b:c2:f6:da:9a:40:c3:b6:5e:62:
                    dc:60:13:d7:2d:09:e8:09:06:67:0e:d3:84:47:6d:
                    f1:27:e3:a6:3a:28:0e:b7:d7:ec:4d:8d:ec:a3:22:
                    8d:11:38:60:b0:e3:08:ab:6e:97:43:92:bc:8e:8d:
                    93:78:a1:9b:25:39:bd:bb:8f:2a:2e:28:ab:40:30:
                    99:1e:88:d2:37:39:f1:3f:b8:81:85:8d:53:df:9b:
                    dc:a5:1f:ea:31:9a:bc:36:64:9e:d7:f6:da:89:c7:
                    0d:ae:22:b9:c2:aa:fb:47:f9:7d:8e:d9:ae:98:65:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F5:54:AD:87:04:D2:24:98:3E:E5:BF:20:98:8C:D6:E9:92:10:6C
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:d8:62:93:74:ca:88:e0:c5:9d:e3:57:8b:90:bd:76:a8:
         e8:ca:2f:4b:f0:49:c5:6a:0b:9f:27:ce:38:06:aa:b8:1b:de:
         e3:8f:ed:43:30:09:9d:a1:1c:52:8a:05:56:08:52:05:42:37:
         b0:6c:49:e9:0f:5b:a8:7c:d9:e6:9c:18:c2:c9:27:09:48:e0:
         04:17:b9:6e:96:d0:27:5d:4e:4f:4a:4c:ea:eb:78:1c:7a:93:
         ea:a8:3e:84:8d:d6:5d:71:de:22:16:aa:38:bf:e9:01:35:1e:
         54:af:c6:ae:ee:59:e8:42:a2:4f:f4:02:89:fa:88:ed:72:e9:
         5b:ea:6a:18:f5:a0:01:79:a3:54:2e:9f:43:ad:32:47:8d:02:
         e2:b7:ee:0d:87:1c:d8:19:7d:5b:12:6a:be:f3:55:be:b2:60:
         7e:74:0b:92:a8:31:b6:35:1d:f6:d0:ef:b9:eb:5b:1c:a7:51:
         16:7f:cb:b2:c2:bd:90:0d:8e:4f:f5:31:03:9a:27:5d:fb:bf:
         c6:b2:74:e7:49:66:1d:fd:3a:e0:9a:29:66:a8:8f:19:1c:20:
         e4:ec:40:37:b2:e2:a5:62:91:cf:c2:74:5a:3b:67:f5:cf:3b:
         24:0b:d4:9d:ba:81:68:2d:96:58:63:ef:70:2b:6f:4b:5f:98:
         76:b0:9f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:37 2025 by rpki-client