Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          fUna7RM3rdj+NpbGPTu3AMdRpWAMfQdRK4bJ/LyogAQ=
Subject key identifier:   57:9A:53:F0:26:B7:77:34:D8:51:B8:A6:05:13:61:A5:D4:80:C9:B6
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019A4E4F6F052E299BE15A5886CDF3805E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          17AF
Signing time:             Tue 04 Nov 2025 10:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:19 +0000
Files and hashes:         1: 0KWI-KG0WB4DWCuGh1gn99tn_N4.roa (hash: h8Vr2MAflmUzVAGtVkIeSE/MSkV47xAfz3GIoaJRtC4=)
                          2: 1-Gozw0B9Es8Qh2XZ6-i72p9hfXs.roa (hash: xTLReM400TQ2Y4MTK4NUap/tADa+H9TQIAaol/LpbHs=)
                          3: 1-c2GPlGgYlbEIZJF6cbTGByqiko.roa (hash: Olvi4llScu/0a4L4oL7XrHFcqesIOSSnG3bFQCyxUcQ=)
                          4: 2NzOCD2bM5a530UIGl2ZsDRbmUU.roa (hash: /+WGidIvg/u0vrSl2pcgEtQoS0FUZmi1tEkbrWlSxL4=)
                          5: 36nSo4IIIhWGblHml9ipRZ22_wQ.roa (hash: GNtMzAbDBSLg8JfQ+kSp8JSTe4JbTsAOb7fb1iMmRSU=)
                          6: 3GfV3-LELKfnUeTQu576_MbUd9E.roa (hash: BFBAfHBwGYmTouYuYf2GmULoSMGxaogtjP30rWRQKUI=)
                          7: 4-EsjAVdf144tiP1S6W0cZWLEr0.roa (hash: aAjI6dZi6XfNi5J1N/GfpcAZ6m9XLEd8XE04/FjSVu4=)
                          8: 4Ji8DRavs3meQw5qrkJFZHXPeDw.roa (hash: rtTItDBA55d0Kg0FoHNSV2Z7809Glolr/J3tN0PwSW0=)
                          9: 4a-oSYp3aib3yKMPfla0gmzArXQ.roa (hash: rpjplvXodVM2Oz/zMSiwY0kn/WwkyWdvI5KreKpNjp4=)
                          10: 8l4FtnLwwdEp2oibbUvL_uIxS9E.roa (hash: LQ2IaIcHgt4i0WPp/lDm2yxGoBa1VH4Xl9eLNEo1qbo=)
                          11: CIKNjNwK3NGRl3ArzYvs4ILD02E.roa (hash: /fyz2s8YlatsW57ohk/cTOzvQyvmUbLBezk4JFIo9Yg=)
                          12: E_vNeWHi7no6xEOD4-IFUETrmhw.roa (hash: XXuZ/UPoimaJVHIFLTndlenANUDBTB2Jl0fZ7dp7Ri0=)
                          13: FNBtDziAIANjYCRYc4CVRy1nJyc.roa (hash: NocSr/8xiJz7zrZGhIxvMcAwGrGm7wl9mzw5JTfj4Y0=)
                          14: GALRsHt2BP3_hLeCyF5X8veO3VQ.roa (hash: MtSdNE65GoL9VWO2nC4FrJOXk2JbT39DC+CAtCVmfaA=)
                          15: Itb9F8_-lcZ_KdRc5siOEO4H89E.roa (hash: XLIfgStgZc44GKy7d8yA6H23MBSze3hjDW/70wwI9b8=)
                          16: KP0a7UICooQ-3jHfqjEjBoGx1Qo.roa (hash: uHH3yzbwsF8Yb5Wkc4gIQ80iaj+70XNOz0k++igvr0U=)
                          17: M3_GZcVdFB-kUlBz3CbzHEwugOo.roa (hash: RVTdHVmgLYKRoXRwHS2aSD1uxSSdaXu0WilfMzCHLdQ=)
                          18: MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa (hash: mMR8wNV9W/fVKlAylzczxRufMEEM5D1dkFEiXzkFtBw=)
                          19: N_FJ7OIWFvIW9taFHsA2wT2zVwk.roa (hash: bVU4MMFAW33uimGtPgAQzKj41nvECCYfDukXv4e4p0w=)
                          20: PwrQGIiQo2oQLGMofsy9NAulZOw.roa (hash: hq8SRr3d4IpSTQOcetxXA4f2f+wVNAp0cl14XJ4GrEw=)
                          21: RAQgzMiCS065NlU1iBXwPiswe10.roa (hash: aXxah/bsFSxVRDhTMQldv6sv0nChjGHbx3sNdnqgxzI=)
                          22: RvXRvVyvlekCab9ullONcGuemgo.roa (hash: kILuzxt9RHYWDgEffsiWLl3jeXDJ/TZBIJWTp1FRvsM=)
                          23: TZlH8xzCt20zCEyeG6MLCYd2IPQ.roa (hash: EdbpzRHzj/EHNn1J0iAQt2Be6cT/lRMvLGGcvMYB4Rk=)
                          24: XpvAs6Tt45TMxISWhloT9Wt5rFA.roa (hash: 3RG2rD9Iheegzvp1N+vn8OKiQ4faJt1Nqt7c2kVsNCo=)
                          25: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: CyZ/2LKIwrBmerrk/Ybm9B8B0Erj+b2grh2t2zRtIlk=)
                          26: b1p3AKdwPLqrkJYci2kZqlTlQrg.roa (hash: ddzqjQY74zacp/tvyaEpj0INLXIxWWFY2MJGSJry+3Y=)
                          27: db3HfgukjmmWQWomG5hjPb2RuPo.roa (hash: HuerYo1+VOoP0CsA2iW7ovnuNivvJL249xI7Vse7fcY=)
                          28: dsp7kqVP0MzNdwTliVhJeAMNQ1g.roa (hash: OcOQ2uKsSo0YuxZEB31opI6ZblHX6qOV3I408glZcv0=)
                          29: eQB96jPbUk4GF5utM4p2RAbUupI.roa (hash: mrcM7wbVQPyfVbYQ1q9LKvRJ5zQq39HLLMHBFupETtI=)
                          30: fpZVpVos_kxzIDGYSqNyyRQDttQ.roa (hash: uV1KfcwolyVJ1mOs8l65+H0qhjLwiOsobMQn9rorxTU=)
                          31: gpgP_YmTtsmxlSANAlEYmQOs-r4.roa (hash: MsN3w01I4GAkWG1L2v4xb1q5dQkczXCJIOeH3N8wUHE=)
                          32: hBiwlhhFE44QPsrcqkKUVksncA4.roa (hash: FZdbsMJbgwt6b8G6npHC7QxSGH9CGwXi3IsmuLcEigQ=)
                          33: iB6k_fYdYo7gbGoo0mtTO7NIouU.roa (hash: 03KLmGETIfNfisF1R/bYKtbWRJAlYHgQkoLD/xFy5DE=)
                          34: jPYMTQLhOkUyChhuk3LT0pzGuKw.roa (hash: WZkVzoTHH8bTxovKv17GI4cgaifA5bg30GZLk+9UE6A=)
                          35: jjhX0aIZcT544KCIQyZSn1ZrMgI.roa (hash: KgbdxCj+Lc31A78ghx4EPIuyhJon/0ov16MKkHX+ajU=)
                          36: loWyCWKKamVhmZmBTQdvK46h7f8.roa (hash: UbW/jlTh1hoDZzjjp/qkeCrkupzELJrGa1S8PB5NoNI=)
                          37: oZM32iF_dXj13arj49Wk-8MpltE.roa (hash: 5tf4bR4lHe0bW1GmHBLlcRANn/eBaErboF4s852Z1mo=)
                          38: qDlh24RbeDVjcAyrQ_STBRImmxI.roa (hash: rXKS63u3mI4gIR/Pn3sZ2MevhW2+Svuk4c2ta1D48BU=)
                          39: qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa (hash: lEoaWY7+8lB8BQWRyHVB/to+pSqQXA3i+f8TwfiT22c=)
                          40: t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa (hash: ak0F1/bwerUUr/wy5VcyV9l0Exrsc+fsCFd6F1NVmME=)
                          41: unY0Pu97DEbw_gaGseuduchpyf8.roa (hash: e/KptEgbgebcoV3ZlHJMNabC0RiZYgba0JXcQXlmWNc=)
                          42: wYj2XX93l48Ok6W1DgazAx4cOqs.roa (hash: h91MsK6joT6C6e1hB/GdrWn534afG+LSY8h0F/FyZ+4=)
                          43: x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa (hash: E2BXuJB6M/883mL2LF+woF4zVIsSXvo4L6HofVg5TPk=)
                          44: y_yX2r4gvHvuIbUi0DowIYSNfBg.roa (hash: x14xDtrLZ17AWPiddZKwyfSzNk6zOk9dOft74ZuaztU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:6f:05:2e:29:9b:e1:5a:58:86:cd:f3:80:5e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Nov  4 10:00:19 2025 GMT
            Not After : Nov  5 10:00:19 2025 GMT
        Subject: CN=579a53f026b77734d851b8a6051361a5d480c9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:e6:50:10:d5:02:7f:55:a3:d5:ae:35:5b:
                    aa:a6:98:ec:f0:8b:28:89:0b:ff:12:eb:d9:e0:61:
                    1e:6b:49:10:96:cb:ea:65:5f:bb:38:08:80:1b:44:
                    6a:2c:91:73:ce:a5:89:65:31:a9:a2:ee:35:b7:cb:
                    6d:f6:cc:36:9e:82:ae:2d:a1:c5:c0:32:49:c7:a6:
                    ff:b6:b1:88:e0:42:79:4e:a4:5c:85:f4:43:31:8d:
                    ee:e2:6f:01:5b:ad:ed:97:35:f7:e5:15:19:7f:17:
                    36:e5:89:9a:58:02:12:51:49:8c:19:ad:dc:9f:66:
                    27:e8:f8:00:6d:ba:d1:66:46:f5:34:ab:05:c5:fb:
                    a9:07:64:85:f8:57:c6:95:e0:e7:20:b5:1e:89:58:
                    d8:bf:48:de:3c:7e:69:c5:4a:d5:d5:9d:f1:b4:7e:
                    8b:25:e6:1d:2d:53:08:f3:c4:fe:28:56:6e:10:ad:
                    a2:66:c9:f0:78:11:47:1b:b1:56:23:41:0e:9c:1c:
                    28:c2:3f:f3:3e:62:bd:ae:ff:ac:5f:20:41:0e:cc:
                    d2:c8:db:b3:ac:4e:ee:4b:d7:e7:99:e4:c7:c9:aa:
                    a1:09:12:be:bd:f1:9d:29:b5:8b:03:84:c0:2f:26:
                    60:a5:0f:2c:8b:8b:d5:28:52:aa:60:78:22:7d:24:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:53:F0:26:B7:77:34:D8:51:B8:A6:05:13:61:A5:D4:80:C9:B6
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:92:27:0f:db:4c:d4:44:9b:78:0c:b2:bb:53:96:14:f8:
         28:bb:0e:68:62:46:2a:bb:17:23:74:58:1e:8b:e0:2d:f7:6a:
         04:62:d6:69:b8:b0:d5:a3:8e:bb:b4:89:7f:48:eb:32:83:f6:
         b5:6f:78:67:39:14:8b:e3:36:f9:63:b5:98:26:a5:9a:3b:bf:
         8f:03:a1:82:a6:b0:72:be:f1:43:7b:54:ad:80:3f:cf:9e:d9:
         2a:49:07:2d:0a:89:ab:00:31:bf:dd:61:38:28:43:b2:dc:50:
         4b:42:11:54:97:c5:3b:21:7e:2c:1f:07:67:2c:06:e7:34:45:
         dc:20:72:4e:25:6d:9f:9d:6b:64:58:66:b3:91:7d:29:f3:c2:
         5c:77:18:81:bb:26:60:a9:03:88:cf:ac:d2:d4:40:15:93:9e:
         13:75:0f:d0:25:ae:1e:ea:03:42:b1:33:cf:90:08:e9:99:9e:
         7f:b6:de:b4:d5:e5:6f:f9:29:ea:f6:c5:81:1f:f6:0a:d3:8d:
         ba:34:c3:e1:a1:cd:ff:ab:33:06:ae:c2:27:ae:c0:b3:d7:7e:
         b1:d2:fb:72:54:45:1b:46:1a:2d:51:0e:1a:05:7a:7a:bd:6e:
         a0:bc:45:a4:a0:83:ea:d9:76:98:5b:4e:d9:3a:27:58:0e:bb:
         91:30:75:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT28FLimb4VpYhs3zgF4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUxMTA0MTAwMDE5WhcNMjUxMTA1MTAwMDE5WjAzMTEwLwYDVQQD
Eyg1NzlhNTNmMDI2Yjc3NzM0ZDg1MWI4YTYwNTEzNjFhNWQ0ODBjOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3rmUBDVAn9Vo9WuNVuqppjs8Iso
iQv/EuvZ4GEea0kQlsvqZV+7OAiAG0RqLJFzzqWJZTGpou41t8tt9sw2noKuLaHF
wDJJx6b/trGI4EJ5TqRchfRDMY3u4m8BW63tlzX35RUZfxc25YmaWAISUUmMGa3c
n2Yn6PgAbbrRZkb1NKsFxfupB2SF+FfGleDnILUeiVjYv0jePH5pxUrV1Z3xtH6L
JeYdLVMI88T+KFZuEK2iZsnweBFHG7FWI0EOnBwowj/zPmK9rv+sXyBBDszSyNuz
rE7uS9fnmeTHyaqhCRK+vfGdKbWLA4TALyZgpQ8si4vVKFKqYHgifSQh6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeaU/Amt3c02FG4pgUTYaXUgMm2MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq2SJw/b
TNREm3gMsrtTlhT4KLsOaGJGKrsXI3RYHovgLfdqBGLWabiw1aOOu7SJf0jrMoP2
tW94ZzkUi+M2+WO1mCalmju/jwOhgqawcr7xQ3tUrYA/z57ZKkkHLQqJqwAxv91h
OChDstxQS0IRVJfFOyF+LB8HZywG5zRF3CByTiVtn51rZFhms5F9KfPCXHcYgbsm
YKkDiM+s0tRAFZOeE3UP0CWuHuoDQrEzz5AI6Zmef7betNXlb/kp6vbFgR/2CtON
ujTD4aHN/6szBq7CJ67As9d+sdL7clRFG0YaLVEOGgV6er1uoLxFpKCD6tl2mFtO
2TonWA67kTB16A==
-----END CERTIFICATE-----