Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
File:                     L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft (raw, json)
Hash identifier:          l4of/yF0spLenJW5V3kx2DL6gcIVmJsl+90nZndIRhY=
Subject key identifier:   12:B3:AB:E8:17:95:CD:82:0C:EF:9F:5E:A0:0E:E5:9D:E3:C9:CA:29
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       019A4F6279DDDE6ED7194A95A76CE9274E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
Manifest number:          140E
Signing time:             Tue 04 Nov 2025 15:00:44 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:44 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:44 +0000
Files and hashes:         1: 1-6TUZdeaWuUfZoHz4FAGkpYPc4I.roa (hash: 0J2OSGJwBb5kAz+zyMm7vxWi9lhbUdLxvf6hoAONtig=)
                          2: 1L_vRC22IqYIH-VtViOIg4_tymc.roa (hash: EvSKqGAubmErHbQtHBeRFHADCc+76FT9AdKU1Tq406k=)
                          3: 1baR2TH2bkZJjYvndMUokyAPqQA.roa (hash: E0FwqtUkTcGf61m3Plhzzdm2PvOTZwBlWw4O6jp45Sw=)
                          4: 46TJpMAMKtKtiPKhzv5N3feHRq8.roa (hash: dujtOMCU+2WZqLSqMypgTKImwrRcaOi7kuB75rD2Cb8=)
                          5: 7EKI8p6PMJObDFV0trfc180wlJk.roa (hash: PnKiqGQTgx/WF0ITX+g4HnQ7tRuvb0lmVC/xx2F+YKg=)
                          6: 7apJOyp0LATwvU2j5dIsjEWpC7g.roa (hash: PD+79uf5qzQQkUCfuXokELiusnktAp9x8YalY9Zh2Qo=)
                          7: 81k5uhijaAEhyRnitikdKr6KoLk.roa (hash: NBT01wcy3n0Il1fMZOXpBHOVuMqtyZ/F0o2qr5d3nvk=)
                          8: AK-GXP22Mq6LrqTXeQb829qG3Ns.roa (hash: I9tR8b4bJ3xHN4Fn13ueJzF93f0zIpN/pK+/JDHI3XI=)
                          9: B6Itk7Uf7eBUE8vqL-Uyrcy9RGQ.roa (hash: 13h2MUXXvKWvbHRapuNi0DhkSEUd3tM8HWLBR3PYcOE=)
                          10: BoW2by1lN0g2YBGtk82GxuU6N7A.roa (hash: yruHTpQJiVTW71spIvzrVqpCkH7Qc9ckx2fSF4NvFOQ=)
                          11: CYA45jvCbEO2l0W0K4Yvuhonu7I.roa (hash: Z5HUS2DoouZlFaN9FRCtoYgwYCuLzEGUPo5jQZ0EKqc=)
                          12: DF9yRFAWYaxLwT3ruOrYKO1I2Ik.roa (hash: kTs4UQdxYwKyY0uupJ+G2/gOGPpzBvQfEDYM3ZB2yso=)
                          13: Eu3IYJJEEDfEARAjq0xcRGwEiac.roa (hash: hQP52oJBN+nDKWnkaeLIX6phrdLiLJI3Ha4/1ywF1zw=)
                          14: HLSexlRS7cRMXGxrZKl2JJ0EIzY.roa (hash: oQQNe7K5/IbchAEMzcOhto4Vsr2KGH4LuGs1SxEGQIo=)
                          15: HbsyO5Ut_ka88PCOgvDpSMFZyq8.roa (hash: jCtFWPN5pcUn2iLSUbvpLI7JdhumMbRU/0oC6bbWKPU=)
                          16: L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl (hash: UTJeArzUTgOkBPwqacF9n9k1Q877ZCLUpGP+yAFmFuc=)
                          17: NYnTizXFf9F5HjKEvVAjXL7QL6I.roa (hash: fL33AJ4Ztl+pJzTGhHEI4tsqu3omS4AmMkxrxDRIKDo=)
                          18: NqXCTZLTQXiSirfU-JwehZTKoUo.roa (hash: Kn4cS2F4vXs96yjsH3h7V2HudZgt+xsxLImjfAfogvQ=)
                          19: P9dvaW4EkKSVZb2FveAQL-8IImQ.roa (hash: mCubAo7PBHsiExzA932k4zRW9GHjS2iufM9Mpu7uOpM=)
                          20: PwHJZqekQGT1s20w37UBZbNwAug.roa (hash: ub/DAIcc6aVmEp+1ENRdQAlH9vQln9luF2+xviDdJZc=)
                          21: R93z7OB-7WREdE4V4BJbcBZ0VZE.roa (hash: R7MzzBh1v5Zg/xA+W0OHL25SLo/YagNekZBwX4TbWjQ=)
                          22: TCbobbp8FEBN_ibPMGgdPkoernw.roa (hash: Fk4KxvR5D2CmdrIDDLm/YTIgqnE8NkNgsK01+BVHxc0=)
                          23: TRb8pyi7Cuvhki1ZqhqyxguwWG4.roa (hash: kaRufk49tf+Opw8NLMJMjIb6AtSq5hMvYNyNYVlrtM8=)
                          24: UDbRypNOgOcwvK8XFvXDSmDZHmU.roa (hash: jhU1h7QJBrJh+xhr5fqliwF2zzB+GqGDZaPJlZO5TFc=)
                          25: VxB5wyEPMMHGsIgrTMnn0ta0TXg.roa (hash: dF01qJOvlqCUQfX3+m/1EpYD4bi83TnY1UObrlr43Qg=)
                          26: X62IC3DFH05KyHmdzIC5ZeS7uVY.roa (hash: oEKXfbiimVzIZVWp+Y85Pe11G1e46yPqO2i9gP4jxro=)
                          27: _Jt2cq-dgcIR8JCb6TIGQHCstiI.roa (hash: HheoHhkZF998Fh2qrnQYSKa5rHl2Nsopnd2pzxjannE=)
                          28: af4ObNKlTAQY3WJ6Z9MSMi9goec.roa (hash: 5yMEUCv4NX9QrdRcocOQ4y/BXPnbWhjlvU3aM23dUo8=)
                          29: agpfIzMH4Xp6DihM1ocjIcz1sAE.roa (hash: bZWY0+Wnaub75TqMLscGHpR1//+odcKr6qFclgBDckw=)
                          30: d24hcpvufBaQCH0AT3eyB2irC5Q.roa (hash: M+PAmsh5lroGoGNELrG+cFrgaEUIFZBuxcJ32Xq2rnQ=)
                          31: eb9wjOmz5kPPmuCQtsN1cn-klyE.roa (hash: erOQcOZWKsgViqrNUApVtSuFJsW2DxTD2hQnRRc4um0=)
                          32: hOVs8GGNWnmAIq2SoQvUfF5WJDo.roa (hash: U+uMEedSAfXbzbJQ3timT2D+Xt35jjJYcQm0n0kPf30=)
                          33: lKw9zMYJbw1aFVyxh2TJBecIToI.roa (hash: QdluCit2eJj/iJd3HDjL77n7Lj2Q/y5/+4w3mWdv2WY=)
                          34: lV-JGGATot_O-owJIANA-p9iKog.roa (hash: b76ypLh8buKG/VNlGwh1rjnzYlLOOyxjF0ggOL+WBrE=)
                          35: mM9fzXSoteGdEr_hlrJMHt7_TmM.roa (hash: vll9Nqv9p3NjvwxMsl22PpBH1pWGOfJIFQPscqf1TFY=)
                          36: q_A8SW_SmjBDzHI_LjhYX-_4wHE.roa (hash: SEL+UiOhXiSWfO5V8bPYfvzRrJrPu7DrmYvZMWDlcf4=)
                          37: qnV5Hej_TUgtUkVr50QeYituGsM.roa (hash: /uHwrUUizwAaJwUeauRQidUpOz8OR3evFbNnOMHVoFM=)
                          38: rkB6ZT4GVIEcFUggvDsLXXKKsP4.roa (hash: 1cWx6TTKEhhXNoJyxGva8yTvgB9y6I2MuAM6qLMtCZA=)
                          39: sFOCi_en07HfzmbiIWb04QiO-xU.roa (hash: rntI6vDplHfMbFLXqncHJ3hWl/CcnP07w3jHzsTuv2s=)
                          40: shuB_C4LkSlqcOa9sbrz-kg4IL8.roa (hash: 7PhaGPimF68NWyA4IO29W8QrZVKFS7qmrUs2JEilRqs=)
                          41: xJNMjhcs2CKF4gs7s3cSjihbPHE.roa (hash: WtXCqqQ+mN0THoRsM/EjcP4ikErJu04+eSqVNsrQ9BE=)
                          42: xbOTFEcYpBS54HTwxLkkwCMgw2w.roa (hash: deqlV11P7iIGL6/OPj5/QL/dXfo5BX5+SsvEYgpxEj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:79:dd:de:6e:d7:19:4a:95:a7:6c:e9:27:4e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Nov  4 15:00:44 2025 GMT
            Not After : Nov  5 15:00:44 2025 GMT
        Subject: CN=12b3abe81795cd820cef9f5ea00ee59de3c9ca29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:58:9e:e6:c6:b3:fc:f4:80:a7:c0:55:73:
                    ce:66:b9:32:e3:ec:4d:75:dc:9c:d1:27:05:6b:79:
                    0b:db:17:1e:b5:33:ce:6a:c8:7d:b0:97:5c:ce:bf:
                    89:d3:e5:bd:88:c2:5d:0c:a3:57:97:0b:35:cb:cc:
                    a3:90:82:12:af:39:e9:17:fd:1c:2c:fb:89:f6:05:
                    9d:64:b6:fe:59:1b:6c:0c:42:c9:07:ab:6d:75:d2:
                    a6:06:3f:05:35:0b:66:e2:92:36:ca:ee:37:39:ae:
                    fd:99:6c:be:30:e2:bf:6e:96:2c:97:69:f7:9a:8b:
                    21:f2:f5:db:81:56:5a:13:e9:bb:33:00:14:0a:ff:
                    00:4a:d5:2e:37:7e:38:32:f8:9b:9a:74:2c:ba:c9:
                    01:9f:f0:fb:91:9a:b2:fb:c0:cd:c8:f4:6f:fc:4d:
                    6b:7c:4b:78:ba:72:e6:fd:f1:08:ba:d3:3a:da:e8:
                    ad:f2:11:1c:ba:b3:82:2a:67:3d:0a:07:1b:43:2b:
                    e7:d1:34:73:1f:c5:ab:f6:84:b8:1c:1d:3e:f0:be:
                    b4:b4:35:8c:c6:3e:bf:28:58:d0:dc:19:99:c6:ef:
                    90:20:42:8d:4a:bf:cf:cd:f7:02:a3:aa:2d:0d:d6:
                    a8:da:33:2b:f7:f6:ce:36:81:28:6f:cf:b3:a3:00:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:AB:E8:17:95:CD:82:0C:EF:9F:5E:A0:0E:E5:9D:E3:C9:CA:29
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:07:99:89:01:2b:a2:d5:fd:44:d0:d1:35:42:36:3a:83:12:
         10:74:58:44:68:6e:d9:22:72:05:56:9d:de:5a:a6:60:25:1c:
         6f:d1:b1:c3:a2:12:db:1d:46:66:3c:21:ba:db:82:7e:f8:6e:
         80:a7:4e:8e:58:25:26:06:fd:44:28:d1:1c:a5:04:62:54:e9:
         c6:fe:ae:99:be:82:83:11:ba:ea:41:d6:29:8e:23:6b:2b:71:
         44:5e:28:f6:01:6b:34:ae:4a:61:84:a8:1d:d3:33:c6:a7:43:
         7b:08:94:c8:3b:1f:1c:57:fe:d4:ce:16:d9:b2:96:01:90:3f:
         70:0a:f6:42:da:f6:19:1a:79:1b:11:78:c8:a2:2c:98:4a:54:
         ac:02:7d:43:31:dd:8f:ed:87:9a:40:86:0a:59:30:47:2a:67:
         5b:4a:2a:e6:ac:51:11:8e:9f:45:39:a2:20:e5:d1:f3:57:cb:
         97:54:f3:5d:df:60:be:ee:27:cc:69:27:d4:ff:87:86:b0:18:
         01:66:0b:c0:10:50:30:6e:87:a3:56:7e:09:2f:e8:56:ad:4c:
         06:4d:ba:39:76:ca:50:a3:4a:ac:46:eb:78:db:0c:4e:59:ee:
         26:5e:e6:3e:27:d7:95:d6:82:09:52:49:71:eb:eb:06:7a:a8:
         43:20:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----