Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
File:                     F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft (raw, json)
Hash identifier:          C46ekD5OEv3nCyt7C9dxLdoC72PkXLH6TrSJNJEO04A=
Subject key identifier:   02:E6:98:BC:89:FF:95:31:67:6B:D5:53:EE:6B:97:1A:44:B8:F6:64
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019A4E4FD4F089AF5BBDBE6570EBDB1BD3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
Manifest number:          17FC
Signing time:             Tue 04 Nov 2025 10:00:45 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:45 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:45 +0000
Files and hashes:         1: 0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa (hash: kji0fDrg1UCCF1e89e3x4DtqXEf9lBqkRhHoCvYmuiw=)
                          2: 1-1lRKLu371HDTHk8c8EivyJBtuU.roa (hash: JU9c2IXBDe8sTydlUA5qMPVW4/hxpmRR4ICEo97INqw=)
                          3: 1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa (hash: CH2FU6z+GEc8HtvIaf7B+I0OFI1CGjk8f53ju01Zw1U=)
                          4: 3eACAQy46sHpLdk_clPryggqLqA.roa (hash: EofnSqwwa7Mab+n1I2t3VR5ifr+qtLtBnN0yP00uuQ4=)
                          5: 4oyZa4gdDUkTyvig9B5MyEBxtgY.roa (hash: 65mItYo2Zy5ZDdSzQQF5aR64hGTdR3bqRDrtgJvvNZI=)
                          6: 502f50d1NmQlr_QgXEe6FmpQuXs.roa (hash: /FaifmzpLcs3/LqoeHJo9JuiLbqNAC7mFVWjJRhMRO0=)
                          7: 8V1ryzk7LfNRSiFKp_7toQJ8huM.roa (hash: joPe9uWB9UCnoIbEth1HHghcYtVJJ07pHsyNYeVnqPw=)
                          8: 8drSNO4c28JBTvdRZ2V_eb-ECc8.roa (hash: gR2B7vbwxu/2iESNk/phikf31ZfQzoZkgpf8LTcbqJc=)
                          9: AqkuMwOWpcjFIQUNACx397i9qMI.roa (hash: ha/OMr66LwgOd9K7o9DEGPQxt1hmy9/aNOLXxw8wx6w=)
                          10: BgvMLxSeSe60azRb1NkUA0ot22s.roa (hash: C7aDDYI0X+QRoHMtx0ezoJw1C8mWVSKIdotzc0BXCH4=)
                          11: DR6SICtYwwm1HogED7BDIhfpeoI.roa (hash: GHQceK37rrfaAB/D7Oaacj1eUTWMgMM/nsbZCEXmHkg=)
                          12: Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa (hash: rW8mc8/vAfi5HR0gCnT0PC1Da6a+T1zVjRQOt1IWh/0=)
                          13: F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl (hash: MQiCBYNbPXxpXnA5GN0xxWzGKMajgXgaDrDFACcDVTk=)
                          14: GcchgiajCXxa9KVue-wbvF3k3Rs.roa (hash: m7M+iG8ePoyQdRj+JQNsjxYIZN0DVm5ibaTqXMTle0Q=)
                          15: H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa (hash: rv//nIfVZsrdzhdfXCHCp7/ysXvAYIb8HuuMGaQi3tw=)
                          16: HdJxPdso7JVrZYx9UQ0nvOnNryo.roa (hash: zqP1nETzTGVCqbMo3I/K5MwH+sEDXTpAb5N+eSbyenQ=)
                          17: Hgor3XOJG_33qkL94qd2eia1vzY.roa (hash: yQpTujKyRlMiL/Y1O2gPBdFC/8SSAUfzxqd1Meo2vUg=)
                          18: IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa (hash: yyew7EQmZw1cR5FC5jaEonANxJjuYsh1ytGgvuE1p98=)
                          19: IG5mSmtKzkJj8RTljMdMBjniTjs.roa (hash: gvOzCSa8vDbFgYDTYfRkyPudCfEKxmfVO6kLEZWirf4=)
                          20: KmC6wS-Bry5klAycE2tBc7Q2hVk.roa (hash: ZcqNpLLMacfOeosAYfPte8ziOUeM115N30agsD9prWg=)
                          21: LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa (hash: IXlBtSHgll3EWlIRCHI/7XXmqvwCKUDds5SRDvZb09g=)
                          22: NmWTLDpy2yZqa32LE2bz27-5gz8.roa (hash: qmzFDt328zkb8dn9LXMEg8+Thy3R0TfIILvJm7WduiE=)
                          23: O59qU3GlbCPOunuU26RSWdQm6Ys.roa (hash: cUEfityQpCrIrR/hweLcH6F77z41nX/RM/hfo/Kr52s=)
                          24: Plhp8kozsjJjr5xutG_5OmCKOzc.roa (hash: jHhve6x91eRg7+8bDu5j5Ify1fEYSDj5qu2zoKgYUY0=)
                          25: PvnYj70vWIEtSZ4-TLAUROqH-mQ.roa (hash: C32arwbPmPblT8QjzIktSbeBph+9mftQGk8FxNUGy80=)
                          26: QikrQfPZcEuLXxNM9QRFuZqmwX8.roa (hash: GTgZFx+2E4BxRZ/cmNVpT3kb9A3tv7hfyB2pD3LWoag=)
                          27: SiQZbt7Y66GtmJ_f96kwaY-G998.roa (hash: dgNLChdS6cQ5M1MIq+zgZcYxmgFmlTXUHjgAF6gyPTw=)
                          28: SvD0YrflKZtrg8ajsXRYlZShlIQ.roa (hash: BCIwz2vY2jLgYS7z7fY4QU/HwErNwcVpkosUz//VdPM=)
                          29: TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa (hash: T0MoII0bHUQVy4/EIU0McUWW03OrtpRdQcw2oGJ90xw=)
                          30: UEYPaIJk57iANe2fXLEYrDHuBW8.roa (hash: vVCdcBaBVIiJ2UFubFblYlCEyga/mYmujS2FPpjWlf8=)
                          31: YFWVotFPF4rkids3QA341Z9fyK4.roa (hash: YvO+2nszTC3s3sqVEtLJ1xWwZVIVv6VgaQF2qtreTRU=)
                          32: Zc0fVpIzsz1W6a-QmZHBJJqJJnQ.roa (hash: Q3pSXhF3hBwJGb/V5w/lVnpT0wURqnu+NuHtZ4Q12Jo=)
                          33: _1gr71TtxKrGYfishpOTTlC-Yf0.roa (hash: LXqUscGa5O5l0ANuPWlp7ZJ5IGrnqrBbr0WR9gp+Xlg=)
                          34: _4lvYeV-ayqEuNBULPPOUTjxshM.roa (hash: NdQ48sOIXtMVgyfAT4cDSjJrP8NrGiMF8pPwF4Fl/SU=)
                          35: _NP7KLLqMrN1MnGQmRzYwY7srro.roa (hash: yxeClpkT7+DTzIpMnMbwVDLNUo4DerckRO6AAThHbTE=)
                          36: evYLEFvdvSvmkbuLm6rh3tZsvKw.roa (hash: 52BX1RaGCebJiVa5KK5DyLHFtzsT7REGB3uiL5jegrk=)
                          37: fNzqJvsbqb0H74heu_eSek8VtgI.roa (hash: o4Nod9JSdaU0RMBqsV3JfhPtjNeHWMXe4pMD3qdsnU8=)
                          38: fiZS1QoC13O9LGwSQ4heL3EDJHg.roa (hash: cQaKdfdjwvkVki02Gk6rg/cphkwoTFB2MpHuxaFIw5A=)
                          39: gRpxZ9tPgRBVp8qdYzJqgIxd2nc.roa (hash: 83UGnHR1vvpOBiG28c0LTC7t5cOOarvTlEqPeJagnUo=)
                          40: itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa (hash: bTfyy1SxJCeaK5coWhOr/Q8NlmQaYiJZYALhNcfWwOg=)
                          41: jDRBJTXqU-l0mlBW0i631wxPZt0.roa (hash: iDEkyKeMVMFwrMXDKR4bsKp+geBFSFoieBkCq1waIkE=)
                          42: n0JluA_q73XjEpq04uEzn-RmsXg.roa (hash: T7rTE9/E8va60SJXGuKikAJZCiAgEmhE8Vpka/OYUOA=)
                          43: nlWr11m2o9h4NC-tzohScSJdOxg.roa (hash: A3Wa8TFObznb1XsDpDHOQf+qyyepDtcekiYNrboghKo=)
                          44: nyh3L1_fO9-0gtPACanLqE-8L6A.roa (hash: 3ZfslFeCGwiSaXAFPs++rXWZnjwclEp0fgAs/mguHtQ=)
                          45: o3jnOci1LEZmio5eVK_R1X59Bc8.roa (hash: ksK9oLd/45fgUjzdDyp1g1OluUQE8WOO6qYAiQZLnSM=)
                          46: qZFf8xBKOBqZq28f1CYsPIryFfY.roa (hash: c2azlwgqsewfRUN5oiHErUO6fO6RA6AsE7ib1fWtYcI=)
                          47: r7mPdu3mcXlmiFWy88dMv4tMIwE.roa (hash: Tev3vha+XFV/k1WflgN7brJaSUjSziylhI0zOJ7XJU0=)
                          48: rxVm1BUHBkaau-7W_r_kxy-XrHo.roa (hash: rLOdOXbVl3h3am2CiNQtp6HBEUOsXCq9yn33g8ZOc4Y=)
                          49: xdzMl2dBjCTNBQybuXYBgSxzduo.roa (hash: JEkwDfKXDwIr/2rXwBPBdk3uqDoMAYK5dQs47lFmsqg=)
                          50: yWlbkrEj2-GR1WBLh_nb3kwtTP4.roa (hash: M9mG3BDKpakDn8xVlL2w2ltK4fDQEQSGSLniQRr2b/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:d4:f0:89:af:5b:bd:be:65:70:eb:db:1b:d3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Nov  4 10:00:45 2025 GMT
            Not After : Nov  5 10:00:45 2025 GMT
        Subject: CN=02e698bc89ff9531676bd553ee6b971a44b8f664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:ed:88:29:43:af:48:71:88:ab:1c:3b:59:
                    6e:09:8a:e5:dc:54:8c:6c:09:e7:98:30:3e:e5:9a:
                    af:9c:71:c4:bd:bf:72:95:34:67:95:5e:26:aa:21:
                    dc:ff:a7:bc:c3:ee:af:0d:9c:86:b3:0a:a0:45:bf:
                    cd:b6:4e:23:95:ba:e2:25:a0:7d:4b:40:42:00:48:
                    b2:a0:e2:27:d9:33:90:18:c6:78:ae:10:f0:41:66:
                    2f:02:10:db:51:7a:2a:1d:26:fc:d1:35:39:2a:4d:
                    c4:b4:91:8b:1d:10:24:73:f5:9f:3b:5f:f4:a8:b6:
                    a4:70:a5:42:d2:da:c0:75:3d:ad:2d:c4:8d:df:a8:
                    3d:b7:50:3c:df:5e:8f:dd:80:a0:a9:57:32:ef:c5:
                    3d:41:9c:9c:bb:d1:f8:93:56:d3:39:c9:4a:4d:59:
                    c3:f0:ac:38:71:8f:8f:cf:f5:a7:3d:81:a1:13:49:
                    33:f0:3a:bb:45:ed:b6:98:18:55:24:39:97:e5:49:
                    79:44:a8:40:e6:0c:2c:2b:1a:54:06:53:be:36:f6:
                    14:fb:59:37:31:39:d1:bb:e8:b3:a9:ce:e5:b1:2e:
                    6e:ca:ad:b7:27:aa:50:fd:9f:8c:09:0f:52:d1:6d:
                    08:ce:4d:08:9d:9d:a4:f0:f3:92:be:47:c9:17:2f:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:98:BC:89:FF:95:31:67:6B:D5:53:EE:6B:97:1A:44:B8:F6:64
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:a0:da:b7:de:94:b4:c4:ea:b2:92:f9:f0:c0:82:5e:4b:
         34:cd:3c:6c:dc:15:6a:0b:95:7a:d3:d3:08:14:8a:e0:6a:5f:
         3f:b5:4f:f3:20:fe:5c:72:d3:ee:60:7b:82:7a:40:bb:3b:1d:
         d2:a5:c5:26:48:cf:af:a6:d1:87:4c:f2:94:b4:8e:14:2b:f5:
         78:78:cc:b5:1a:b5:d3:ca:bf:a9:df:68:2d:7a:e7:25:a0:42:
         45:6e:27:85:ab:ae:6f:64:c5:2f:78:d1:56:a0:6d:d5:08:22:
         76:ed:2b:e1:41:c2:d1:f9:5c:94:39:66:b9:99:ff:14:b7:0d:
         57:42:ea:ab:f4:d5:34:05:b3:1f:40:b8:b4:55:2b:0a:80:5d:
         33:12:1a:8b:30:45:52:76:f1:41:57:a2:3e:07:53:49:02:8b:
         95:41:4c:b5:a8:c4:1b:7e:1c:79:58:23:75:a1:dc:30:f4:c9:
         a3:1c:e4:a3:a9:e2:c1:b3:d6:21:99:7e:c8:78:8d:1b:8e:c8:
         bb:ce:04:37:26:99:68:30:c2:9e:0d:48:86:5b:eb:c0:d4:64:
         21:1e:a3:8d:0f:f8:95:08:25:df:f7:ca:82:ce:76:c5:21:a3:
         43:a6:a3:64:ab:24:83:2f:f3:a6:27:d8:fd:8a:83:6e:72:0c:
         36:7d:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----