Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          tSQ8N8hel78Sp03lgYzk3k0joB5YhPAnx2fsqN91u00=
Subject key identifier:   94:0E:74:97:02:A8:39:F4:28:F6:BB:71:F1:3E:93:83:3A:0A:0E:7E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       01987ED3C3A45CAF46D671D32E600C4BA0CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          1642
Signing time:             Wed 06 Aug 2025 10:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 10:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 10:01:03 +0000
Files and hashes:         1: 1--cUq91Mit5QH2cwWSOxBevK3nA.roa (hash: AeVg1wzE8EyDayqX6dUPTOAPPGnggkU3AZQPwR7KISU=)
                          2: 1-wSj_jNbSFZNPKzrs0H7fMlUYPs.roa (hash: QwucWuCpsfVGmeIL4+WbPwDASjNtyxA0uvqhnVE0kXk=)
                          3: 1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa (hash: 1mq5wz/1iFM0nRuaGbWeQP9cbSRi6hrmjA/870kNVwc=)
                          4: 1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa (hash: G0Gifm987y56WK0jOJQu1XmPLu2HpPxSaSdoMhrNoMs=)
                          5: 43W-eGhoB0OzAzZeV-7lIQQDIOo.roa (hash: Fa6j80QC7xY8XwzuoZlxIB/I65MycNffdEY3vuz4Q0w=)
                          6: 4cQzXFxUGlGjBPSq0EGUuwlerqM.roa (hash: RUnB3qpCxRiKVWfppqkGkTOE3BYzOLpwyJhoqNuHmnM=)
                          7: 7y1PMFZ77TvwERIOq36v9qt_I0g.roa (hash: XyYA5RSKyGwMjTqBAMbzkSTfG/qYbYS13qe9sSm88Pg=)
                          8: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: 0h7v4SIwdcxF+VEFLQS09Jg85jtQt1q8hCDy5/+FK1M=)
                          9: 9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa (hash: E45sd3llDs2pTTLi6LJkzrRBxW0QqdLu4AwwGiPWU8o=)
                          10: Bi6ckjMzIjswtGZpm48D-Wo_OB4.roa (hash: an659zUeBPl2S8rcFc9akGr14egOC85nfKG/rUkJZjU=)
                          11: F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa (hash: 7lkthzwPyq0Nlj6C7w8YmFjCDc9WUOXo1l3objgvoAw=)
                          12: GBjsCsDFhAmCrDosbrIyM2oi_k8.roa (hash: QxxcHsFFWLY2BHIJuYq1eLGTUZDCy2Zq1QP773WJCgc=)
                          13: GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa (hash: bhQ1Ond9uTsWLPhHEPCKrqbxdo9J0XGoFGPdOwUnfm0=)
                          14: GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa (hash: UkvxRNX70aIvJXPzKAnXBIMmTpv2f/Y+Dlu3mnma0Ac=)
                          15: HJd9P_PlKCAbara3DxGKUKKnE7c.roa (hash: eUsrGFzXfQW/Dn1ODD605ExEOtBlWFeJQugMdp5/EgU=)
                          16: K64ZDclpadQbVzMQRV2i46uDmJo.roa (hash: tpnZn4EYuI03Em/aELkelIAivjX/DuvgaCfyeISarg8=)
                          17: OOj6UEfy7tJhVvIZwv67cVkbCsw.roa (hash: bFAFslFKUorfRmuJkRc7/SiL4ZsIaQRH0zH9zHF2pgI=)
                          18: OqF2eyJ9Nah0S4xGSjJYn_h3cTU.roa (hash: UaxiQV187imUDaob7M2RSZknrvaHjuJ3BY11Fvhjz2E=)
                          19: P0SW_klNDbhNIIK8YKXaPuabqTU.roa (hash: 5FirmEmGhJEAP0DJn1h14sCEI/dbN7Gdq6ZuKutBsJU=)
                          20: R2zForXg41Xz6ZiOvoYxYCONTtc.roa (hash: w6iKooFVAmcB+szcwr+F/c/HtbTWkbLs+qqPbY5EcAA=)
                          21: Uy3DNd8cAhKYVPioxN7PoymKedw.roa (hash: L7X4DMP3u2TfIijoOqDl6Vi5RU6BP6p/8G5SNNVhw+I=)
                          22: WWSW__MVqK6dx_k6tsS9bRZ--CI.roa (hash: 0n+w/A4d8z6b0u844BV3PGZBGD8lEvEB6AFFqVVHQn8=)
                          23: WeCt8pup8wDWF42xeyTZdR7k2GQ.roa (hash: EDkq8tNxM3yn5LOawEnrqC45Ne8Yoo76GfpxJFb6xWI=)
                          24: WiON6CdHeAs54FIwJq22Q-CMJYQ.roa (hash: 4t1adRl+qe2aNtYrRhoxvc66aXOa5Y+iHAm8U5xH9j8=)
                          25: Wkh7uioWgBi7hYTbHKGwmYv2b2o.roa (hash: y1Qn0vF6vc29BjpVGN0maHU654epEzVd2ncJ5AsSc8s=)
                          26: WkmV1C3n1xckvk24Dg23f_uuw-Y.roa (hash: 4b9CQ+UDGsSD1Yt4Z/0/FrLqdoM9ExyMXp455k6OTOo=)
                          27: XnRkLPnNKKkSG1UWNWWBdV7n3rI.roa (hash: BSh/QG5V0PdqCQRHLmCsYPsMOLFQjX1Hat7fPJRL1hA=)
                          28: YTrCa9l5vP3dQlEy3g4e738RGCc.roa (hash: 7QjYk31Rz2LLsB0LYuegGouh51+CsDDyqSFe7Sy9+c8=)
                          29: _F7ev2MBBxNUWA2zbKywRx1epIs.roa (hash: ab/PBGhlf8KsdKFVWCStEJO1EAqxAF8tNS/JPsSqUvk=)
                          30: bApeGU9pDTxTCcxiN5J5ipRkqMI.roa (hash: NZoPIqG6nJxYq38KIr9pSvoBY19L9DXRzBM19WHpf7I=)
                          31: bo414DK33mQjPnsi2XO_OhuOXVU.roa (hash: DFhqXQ1ALcgUKGfkab9Ecq2SNxSXtHhgzid0rw+LjqA=)
                          32: cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa (hash: Tm+oi/lD++p4PhyCp4bPhVckvck4FHBGPjkqfjDYDXk=)
                          33: ec458CzjY63_tDvq0835iuvNeqM.roa (hash: G8uWZDny6okXGyK8fXhTSuZAQxB4Or51R+hkoXknGf0=)
                          34: ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa (hash: po9RSn1vnUJn8LraWDgTGQkIzqjsRElh5uulYlg6a2I=)
                          35: f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa (hash: 2GF/hcmuZptIjGpBhlhl/n2eM7lvmTB8GpajvQTfO1o=)
                          36: gS472YuNqbJechBg2iBckT3KoLM.roa (hash: FBUuQCDwaticAhPspr/z6ZENec/pu4iMj4JBkdQRnVA=)
                          37: mWetSYOn1BkhZCQeBuy0aNAtp2k.roa (hash: 7QsWLfC1FbX4IQpj2Fc+FdTBylJTVc8Q6Q3mzopMiwY=)
                          38: oMsbWqKig1Jz9KhQZB1o-hLbsjQ.roa (hash: OocXoaK/KzmHtgXJpn4l6UhsAXqtzLQU0zedQi9+930=)
                          39: pSNhVcz4ozKQCN-LCUrqu4lNRzQ.roa (hash: J/f/1amfAJOlGnKb0ytkwZwxYnhSDPmLNiJU63xKnhY=)
                          40: pW41aiqhh4TGOa0SfOJoWwzIC9A.roa (hash: NOVcfPSERPAJVKGKnsOL5db9Ocxsd5SZKJKLS2fsK1w=)
                          41: qPU2_LO_IOLwIw_5UdC9HILGfrU.roa (hash: zovHlBAPS+CTTK/Pgho2T3I/C6ghppduwnAgw0j/qyQ=)
                          42: sIfXnkT6_MznqZrO1Lae926CR50.roa (hash: NCRNDrTiw+6us5+S0PADTvnopFARdQ2lLkezVhE/00s=)
                          43: s_gtffJAdOdCOTF8JrwlspZV70Q.roa (hash: EE3zvO+17D2lS+ma9Jbmozdr5I2JwhR0u6QEkn1ojIA=)
                          44: t1xRr6zeiMtxYaGtbe-W72-oQS0.roa (hash: OyceZDHizIoFdT4fRa8zkuIKpKmh7T2n1xLe+VKJ1cQ=)
                          45: tP6196eoGxZ8sJXtGB2BxyyaQkc.roa (hash: Yg1BpZOhleklDTz62pqYALAo96J1wsRiT1axu+WPIZ0=)
                          46: udEkF_6Cl582j3MhipXtkqh60QA.roa (hash: KGfzfkRSS/8LMCpAd+TJJyVg600JQWb1fQuNDHspP4k=)
                          47: vIJrj75gZXSeJTed1CGI6o-Z5nA.roa (hash: T+o0LnzwgxW5JkSyu3hg3ocAmMnSSVFEWIqTX+78bsI=)
                          48: wuHCt2BHh06Bfff_BuCtG5z_hxY.roa (hash: /M0WlOuHwpu23wrIhCr+n8JWrn1Ijygmq8J4TbPhLBs=)
                          49: yc-gqrsX0Dlayvck585FUtBbJrE.roa (hash: Ks7WQxTUjzq6wrRJQNHa/tYNzP+1BfHd4p2Dur1U0Q0=)
                          50: yugfCm59zW-OCysnWXdRGYmiLPI.roa (hash: dyiopA0j5b5DW/jiTg8DD9JZwVemiDlrthtnV32cs90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:c3:a4:5c:af:46:d6:71:d3:2e:60:0c:4b:a0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Aug  6 10:01:03 2025 GMT
            Not After : Aug  7 10:01:03 2025 GMT
        Subject: CN=940e749702a839f428f6bb71f13e93833a0a0e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:30:55:b0:46:68:69:c5:e2:6f:70:e7:48:
                    d1:e3:a4:f6:50:ee:da:20:4b:82:25:e2:72:df:89:
                    ff:1e:1b:cf:67:8b:07:4a:0a:66:6c:a9:2d:6e:ef:
                    55:da:04:ed:c5:36:42:1d:1c:ae:bb:2e:ff:b7:3f:
                    e0:4d:5b:b8:72:b8:ee:69:1b:f7:b0:e4:ce:34:5f:
                    b5:ce:63:dd:91:3e:9e:c1:28:c6:a1:ba:28:64:52:
                    2e:88:f6:69:52:23:0d:ae:c6:ab:cf:89:cd:01:54:
                    c7:88:b3:97:4d:2f:2a:65:39:cf:7a:75:ff:cf:d1:
                    04:42:3f:e4:71:bf:7e:10:9f:d2:c9:3c:03:58:52:
                    2d:b1:8a:95:4d:d5:1d:8c:ec:25:7d:a9:ba:58:26:
                    62:a3:77:5c:62:e2:1b:5a:37:38:5d:5d:41:ab:e1:
                    9b:5c:98:df:66:90:da:ad:be:0f:1d:62:70:01:fd:
                    e3:76:47:94:79:bf:f8:76:dc:59:96:e6:fe:39:a0:
                    ae:0b:0f:da:be:4e:56:9a:71:40:d8:4f:6e:18:fc:
                    ec:6a:83:a2:19:e0:1d:69:10:37:1b:4d:84:18:4a:
                    9d:53:14:da:7a:a0:62:ef:2e:dc:18:5b:7c:41:fb:
                    70:e1:6e:06:c3:ed:c1:4e:f4:b9:78:7b:92:f0:41:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0E:74:97:02:A8:39:F4:28:F6:BB:71:F1:3E:93:83:3A:0A:0E:7E
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:22:0b:b1:dd:60:7d:26:50:fb:6c:88:ce:33:61:5b:07:a2:
         f6:ee:4f:13:bb:39:e8:88:8e:07:53:61:0e:80:02:43:0e:64:
         e1:dd:b9:30:f0:77:0f:73:dc:1d:cf:f2:de:7a:c6:ab:c9:88:
         fa:5c:1d:fa:36:1f:a4:a4:ba:f5:d7:59:bc:71:fa:66:59:5e:
         22:cc:b8:90:fd:d6:d3:20:c5:f7:1f:f6:14:8f:25:5a:71:82:
         76:af:58:07:0a:a5:a8:6d:6d:30:47:50:fb:d8:60:0a:3f:2c:
         24:aa:44:e2:7c:97:26:9f:66:e4:23:21:ba:95:33:dd:2a:9d:
         1c:8c:a4:2f:fb:8b:c1:d5:38:a9:67:8a:d3:59:68:43:7a:de:
         d9:3b:4e:c4:42:60:76:98:46:d3:df:32:8c:06:d6:16:09:53:
         48:cf:f1:8d:cb:06:8e:3a:5c:01:e3:d7:77:6d:53:b4:d7:c9:
         f4:57:ff:8b:cf:92:30:1b:50:06:dc:7b:d4:72:6f:13:37:6d:
         0c:9c:1c:94:96:30:f2:2d:ae:03:55:34:9f:77:92:89:29:82:
         e6:96:a9:df:f2:8e:dd:88:82:5b:68:8f:0d:9e:9a:10:85:66:
         c9:c7:e4:a0:e6:ba:be:7a:5a:a1:cf:41:40:e7:bd:c5:52:8f:
         bd:db:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----