Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          usMUpPpE3b/lORJCLOqooBJRWWFq9PmL2bVr5fusENo=
Subject key identifier:   8F:98:B7:A6:18:6C:07:23:B4:F3:C0:66:1F:B5:71:8D:14:A1:22:5D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019A503DE8AADFB63103CA6DBA27F2DC3E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          17BE
Signing time:             Tue 04 Nov 2025 19:00:25 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:25 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:25 +0000
Files and hashes:         1: 0RiNeaxfc3ixxqgMq3kjExRDa_8.roa (hash: xbaiXGjy7fJ+ZwX/PzT0jaVewoPns9Qve+McDOCbcPs=)
                          2: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          3: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          4: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          5: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          6: 7fPxL-uHp2NClvaUSSes1QZFjgY.roa (hash: 10Jo3zGeUKwhoqlKRLe84C64rFl5TQbdrOY/xZjeKog=)
                          7: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          8: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          9: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: cpyPUXNLFaTFho/RExQ4INpK+XmrdBn8Gtpkn4/QmTQ=)
                          10: AkNXn7rEbn5U1zHOEyojmLfn9HA.roa (hash: eUfyWJR3emLshCuN0LH6dI3kQNXA3mfEJ88STDsNOVA=)
                          11: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          12: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          13: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          14: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          15: FOVVjhHE6lD5ldaF3iw0l2c9ERg.roa (hash: I442iPSVo2MZ/j5N7A+HUBY7gJD9hTNx176dhJ5NB8g=)
                          16: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          17: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          18: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          19: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          20: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          21: LaajQT8UwBWFNaRi-jIojBq0WyA.roa (hash: ZkZjakVN6aPN1d4jYMrA0iD1EVTfF2LyjXQ1E06pZwI=)
                          22: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          23: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          24: PGVYIzwHf6UcdybJmIRuEKbJaI4.roa (hash: B6cWExLpRhYUY+7dvKifsqY+kTpw4Z9WuxqoFZGkCSk=)
                          25: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          26: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          27: S-LyAPTyjR_trxSWtQRZeOWC_3g.roa (hash: mdb3EARrdNQMQqJtEZ6Yv2aaf9muu1ZlrouX6RhltB0=)
                          28: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          29: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          30: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          31: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          32: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          33: ffSTkNPIiZpEtpWWodnp-E62PR0.roa (hash: zfi9z9vv9i6kZpAB79iGBR0mg0wwIS76zddY9IyYsTk=)
                          34: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          35: jzZPQyTPxHmOrfm_zSEP30f3jkY.roa (hash: tZU3gCj8FKHIIHdBn9jyrUtj2ivWD71dmLJ5zAo81Ls=)
                          36: lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa (hash: o+KPskkXXJU6m9owbhikJKpLSsQPEnvEdVWpnWT3wq0=)
                          37: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          38: n_ERAGslTk3vQyjUYN5Y-K_UqXk.roa (hash: 8P793j/53ZScruOSOWiU0UBEL/rR3GoLLeExoTt6Gqk=)
                          39: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          40: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          41: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          42: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          43: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          44: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3d:e8:aa:df:b6:31:03:ca:6d:ba:27:f2:dc:3e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Nov  4 19:00:25 2025 GMT
            Not After : Nov  5 19:00:25 2025 GMT
        Subject: CN=8f98b7a6186c0723b4f3c0661fb5718d14a1225d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:53:91:ad:16:88:14:99:2b:20:86:13:0a:
                    f9:ee:25:57:70:cb:46:b3:c1:30:41:f5:35:3d:09:
                    ce:d3:73:d4:b8:7f:aa:15:fc:4d:f8:e2:77:8a:c3:
                    ac:0d:8c:6c:b1:e8:d3:48:0c:e8:55:7e:97:f4:55:
                    38:67:02:d8:8d:5b:6d:c6:ca:aa:72:f7:3e:33:6a:
                    d9:e8:93:3e:66:c9:83:dc:7b:f7:38:a2:af:f2:11:
                    93:13:f5:38:9e:7c:ee:b5:1e:35:d4:95:34:96:5c:
                    af:5d:fb:5c:f8:d4:72:e5:a7:89:01:44:92:da:a6:
                    3b:8e:e2:5e:2b:5f:70:fc:32:f9:5e:70:17:f3:48:
                    9c:89:3a:3f:2a:7a:d9:9c:80:f3:dc:98:9c:1e:a1:
                    c3:db:d4:d2:85:eb:ab:7e:c3:f2:52:07:89:ed:81:
                    6e:28:80:5a:b8:45:93:ab:88:2c:17:de:23:a4:81:
                    cd:d9:23:2b:c1:27:92:da:4e:91:27:bb:27:ca:bd:
                    e4:e9:ed:43:3c:38:b7:c3:82:45:e6:92:ed:5d:9f:
                    ce:41:ec:f1:08:7a:35:ba:56:71:34:ef:e3:44:75:
                    a9:0b:7f:df:ba:9c:dd:75:35:6c:99:64:e3:b6:22:
                    dd:01:b5:10:16:f8:2f:e9:c2:c8:52:cc:48:98:e2:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:B7:A6:18:6C:07:23:B4:F3:C0:66:1F:B5:71:8D:14:A1:22:5D
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8b:30:38:04:26:2d:b3:29:64:15:41:5e:16:e3:53:07:db:
         e5:a6:08:76:7e:0d:56:a8:dd:2f:a7:05:b5:5e:fc:2f:db:83:
         9b:c6:02:ae:14:d5:b3:0f:15:c8:93:13:84:05:6e:b8:e6:b7:
         97:f9:31:1b:4d:98:c2:af:77:f7:ca:8a:b1:3e:7c:be:db:75:
         f2:0f:01:7f:5e:7f:5e:7a:28:24:64:ef:4d:1e:08:55:e1:c1:
         2b:81:2c:fb:70:2d:c4:94:6b:53:26:a7:19:a1:41:eb:f7:4a:
         3d:53:b8:bb:70:3f:8b:d6:19:f4:c0:64:5f:62:7e:6b:29:89:
         7c:69:cd:05:7a:e7:23:1a:16:81:4d:7e:6e:f7:1c:04:d1:94:
         57:b4:b4:55:bb:7c:1b:44:36:ed:e2:be:e0:5b:0e:3e:4f:78:
         84:39:ed:dc:b9:83:05:39:93:8b:84:de:74:96:3e:17:b7:d9:
         86:d0:7c:1d:f7:4d:e7:44:c1:3c:0b:e2:89:86:12:97:ac:a2:
         a4:aa:59:1c:5c:a5:34:0a:30:8b:9c:61:b0:bf:9b:47:5b:c5:
         dc:7d:b4:32:c0:8f:a4:f8:73:41:87:a3:9e:d4:a5:60:93:4c:
         b5:a7:58:1d:27:e3:bd:35:85:7a:d9:3a:af:84:f8:f6:da:18:
         e3:23:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----