Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          PmVXoRNPk37pbSZwHcqXi0acKji6FPc4MYCru44M0w0=
Subject key identifier:   C9:70:22:57:C3:23:13:0B:16:F1:7B:D7:AB:6F:10:ED:D0:22:FD:79
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019A4E4FF847F1D624A78DDF35E6771C436B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          17D3
Signing time:             Tue 04 Nov 2025 10:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:54 +0000
Files and hashes:         1: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          2: 2qlsylzgqXhlEayXE9wkcK5qmug.roa (hash: uhfOGYd80G0548JpMljPb9TBOvg2gxGmo4JHGRdJP94=)
                          3: 45tL-NSBHodaksRDpK2BnTL6Pg0.roa (hash: 9aD/cGsEDm3tuWSuuFsHXgYn2a7J4uwCri2o7lDx6TU=)
                          4: 4G_hLtAbDUZ70PLgQlRhmGd1eNc.roa (hash: wmpDbVETxoLeblIgd50u7tjYlbJnrcIWiWDK1Lpalb4=)
                          5: 7RcKhCp3ZOcWzuIPXusJuOQTO8U.roa (hash: RaJe3hA5OyN5iW1nleE1Fb+gKu8+b263II/AmqXmNsQ=)
                          6: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          7: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          8: 9xAImfJODTs2zsrACx9eeEsMp4M.roa (hash: gSkZqCfSwfOJL0b2bYeZUGWxUdiYjnYulJENp5XdAs8=)
                          9: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          10: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          11: C2GrQzBO3vl5T105EzYHvBqFqSY.roa (hash: JsqpwBb8513EA82J6T2Eh579nv6JIkErIIaCpTYKtxo=)
                          12: C5neA90kjVHnDPfO-djUn4i2zAA.roa (hash: 6roTXs09K6iOJG+sNAF1RcACFRNOxhrWD6dzp7AoLnY=)
                          13: E5lP18ybHMTHTnPo0M0LIgPaYUo.roa (hash: YCZh/ekLx0cpTY4qWcdCoc57O+gA2agdNfcO7UjD4OY=)
                          14: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          15: Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa (hash: rGTu/eBvREBIS2YrmRECHoO4Fq6M0d9n2xt5c5qKdlE=)
                          16: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          17: LNoNmGDFQklAar5TnT_a2DeUWek.roa (hash: wgI395g0pDizwgkf8Jbw1xgOK75FIU6UUEcPX6ofaYk=)
                          18: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (hash: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=)
                          19: OkV10ej4i1aWkWynfHxAfefl68k.roa (hash: 5dmrYmVBIjHF14pmICYPZDuHTrGireyhaa0Od9fQBWk=)
                          20: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          21: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          22: SWTFevIVm81w2OQq6YZBNGb2Gp0.roa (hash: p3VVwOAlJx0S8FEZMWFz7YoIoDDyQAnmuZS/iMTXpvQ=)
                          23: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          24: UNPMxUTpN6F_pgC91vCmD1HFspw.roa (hash: jTsyj9nrkYHMCYAdHXNg5BbHNZmwI4fUMjG/ubMSE0Y=)
                          25: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          26: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          27: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          28: _0v8B3PHRVD7yYQcASHCL5uWyOY.roa (hash: pu+m41bbVsvu3wkqU3+YbKOTAB8KfYUq9S8Plxm7sds=)
                          29: _6fk9u3GMpi14RhY0Vpqi7RoUuY.roa (hash: 8J+04Jyy5QLdgaXHvTT5XyET/UweE7ZvDXWvk66tOH0=)
                          30: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          31: dY03HFRy1RllCenKPrieGUzQXmc.roa (hash: Whvf/7UBVmwJMgZJVFUghC//K+ikEuNaWx2rK86SYdI=)
                          32: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          33: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          34: iv5EUzjVpBdmpaJ1z2SFs7v4hLo.roa (hash: NFn/bpexHXEnSGSFgUN3g3qDK6GmqqQ7RS4OsbF+ySY=)
                          35: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          36: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          37: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          38: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          39: p0ymz64pZpqpaW2w8PkuD4iPjNg.roa (hash: k9HVkjLLh7zprpobfFEV4sU8wkNYHVDJHaECefych14=)
                          40: pD9YdY0kZIyV4tT8Grm6rpRjhMg.roa (hash: iWFl3KeSrkOlRwk9579ovrOA2IUp/1Q3ethXhdT5Cjw=)
                          41: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          42: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          43: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          44: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          45: vkMtx0iH2ditYOsc7bVpRJWZ70Q.roa (hash: 7KAQHgMSezL1YcfEWojGi9XjUX3sRvjuf26EdqtBLpU=)
                          46: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          47: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          48: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: d0H3uQa4kbWVFKNOXyymuDxEfTe4p6H5So1aTAt93zk=)
                          49: zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa (hash: /TspGM70/yRXNVHKhWj5smL/PZUzQoqRLk1Lpb2lDmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:f8:47:f1:d6:24:a7:8d:df:35:e6:77:1c:43:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Nov  4 10:00:54 2025 GMT
            Not After : Nov  5 10:00:54 2025 GMT
        Subject: CN=c9702257c323130b16f17bd7ab6f10edd022fd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:2e:a8:3b:2c:cb:ce:c9:e3:d7:ca:99:c5:
                    11:35:02:cb:f8:90:5b:ab:5a:80:43:12:13:cb:b9:
                    ab:93:7c:cd:c9:18:33:2e:6a:88:99:da:bd:96:19:
                    a6:5b:b6:63:74:50:30:75:41:54:27:52:5f:e8:93:
                    37:19:77:70:c3:7b:43:88:51:26:73:f8:d5:df:49:
                    3f:09:74:f6:c6:7e:2a:1c:0b:35:50:fe:1c:20:b5:
                    cd:1f:e8:7e:87:22:04:b1:19:b9:a4:ea:c7:2c:d5:
                    86:f1:5e:4c:05:40:e3:21:29:af:71:7f:1f:68:72:
                    14:07:5e:27:e0:51:aa:90:ed:57:34:c2:ac:32:c6:
                    20:ae:45:bb:bd:39:2b:8c:3e:3f:f1:4f:8d:46:d3:
                    94:b7:63:32:5b:51:1a:66:ee:28:93:c0:e5:bc:e4:
                    bf:a7:cb:5a:91:7b:91:fe:ef:29:3a:87:f5:f3:5a:
                    82:0b:41:d1:51:67:25:35:49:9f:03:29:5a:89:9c:
                    2d:bd:5f:7c:c1:67:ab:59:0c:d5:b6:18:af:d9:ef:
                    c2:a0:31:4f:62:5e:95:c4:7c:ce:35:b3:fe:16:65:
                    b0:34:81:89:2f:f2:f4:98:b9:e4:a5:71:39:43:6c:
                    6d:8d:4d:9a:61:62:d9:6b:3e:fd:b8:2f:f3:6c:6e:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:70:22:57:C3:23:13:0B:16:F1:7B:D7:AB:6F:10:ED:D0:22:FD:79
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:de:fe:1f:ff:79:50:1c:c2:fd:fe:7b:70:f6:76:4f:61:
         97:58:bc:30:df:ca:d5:2f:a5:38:ca:38:82:85:1f:bc:fb:0d:
         44:71:f9:33:59:20:98:45:d7:0a:f3:c2:44:f4:d0:ef:63:7d:
         a2:44:59:00:5a:08:0e:97:98:53:b4:49:0d:f3:8c:31:a0:64:
         2e:9b:6a:16:83:8f:9b:e4:90:28:07:8d:31:bb:fc:30:9e:6d:
         61:a0:bb:9d:6c:31:af:9a:b4:61:f2:4e:fc:d3:35:97:dd:0e:
         68:a1:c2:2b:71:7b:10:3f:b3:81:8e:99:71:a0:6e:79:7e:d8:
         35:b8:0b:b7:f9:e2:5c:31:13:ad:bd:4f:d8:a6:22:21:ec:aa:
         3b:62:85:35:83:24:c6:5e:fc:8d:dc:30:8f:d8:e4:c3:70:46:
         98:da:77:c8:57:7f:98:9d:71:78:20:8f:5f:7a:1c:39:df:07:
         ab:08:d9:a0:94:ec:80:f6:ea:64:3a:ea:13:76:b2:10:9c:c5:
         c4:66:69:d1:5b:4d:58:c0:15:32:2f:d9:85:59:e9:eb:ff:e9:
         99:49:43:31:16:42:bb:f7:e7:fe:40:42:cb:37:f3:e0:3b:ee:
         e2:27:bc:c3:30:2d:5c:52:20:dc:0e:12:74:f7:63:ed:e2:36:
         9a:36:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----