Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
File:                     MH9f4nQKK23kw3CdKWQRWzyWfaE.mft (raw, json)
Hash identifier:          H362UJ9oGnBr08k9m+TC7kIxeDhHxFAYcMDWZef3u9A=
Subject key identifier:   A7:AA:8B:BD:60:32:F2:23:4A:FC:C7:D4:1C:EE:33:29:56:9B:6A:E2
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       019A4EBD4C80A1E1AE6725A75A431FABF421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
Manifest number:          17DA
Signing time:             Tue 04 Nov 2025 12:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:19 +0000
Files and hashes:         1: 00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa (hash: /nCoLNktQTRkwf19+RkLZm6+K8Um4Om/CE/FhAF+NuE=)
                          2: 1-COYrNmS4Yj9DuD0Iitd9unCCQQ.roa (hash: JYNBrYFYnRoWLArFqkMLwPLI1r5eBOC15oN7aK1rASQ=)
                          3: 1-lpBuKXXx8g9yxpi6iuVgN2ZkaU.roa (hash: RgZnA77LWWsGNIxky5OwYiVUFovIqwLxtj+NYBSAZ9M=)
                          4: 1dc_AoVDsergaSgV7R-3yql_9KE.roa (hash: a9qa0YzuaGBz3jd/Pf5UATBtpu300fCkvirZYtsQepA=)
                          5: 3WNl-m7gCvquDzEDrkwIQEg6pro.roa (hash: FxKNwejyJuuX0RG0vdRP0TUvJlDOzXxsIbbdxEYJvWM=)
                          6: 6EnYKRUPOG0Bajz58Rzdix-x9Hs.roa (hash: hj5dsY/14wcoPQMYFN+FDqGIoYmYmbl7lzQUbFpSl9g=)
                          7: 6FhDGvyiE15m5in3JxEtWm2LQvU.roa (hash: Qb2nBgiw2wjL0NKInr8G6lRKGlTQkFAoRZAC/5y/JJ8=)
                          8: 7uyz50yy6Hw96HGzOKfD1adh_ck.roa (hash: n4kWCxw/NHUiGeVP5x0IvmrVoASb0wzvbCgftEjfsB8=)
                          9: 95jWS9jKpRrroELAnGEuEqeiVuk.roa (hash: 9oQPUKrBIIejm5soFm9BOrvY+R8e49uut81KixCREME=)
                          10: C9rTZ6_iu1FXRg451e341Atg3Z0.roa (hash: XcWEYMD9cUcIh2EC0BBKyyITu1rFp8td9cXo80ANEyQ=)
                          11: Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa (hash: +iIyFBA3ZhKNuVhyNzUqDLxWmuz7/LHtk6wG8bzNLCw=)
                          12: Dcl4o4Mo7N0s3M3iAQoKIPl9m2g.roa (hash: SVwXdwnjQoGTLQZCk0CvIrT8UoqR6f7tYRnOAGH0NIA=)
                          13: EdlEeGF0p-ph_-EZ90A8Cv8g-lo.roa (hash: bxOL6/VDd4hVc81yHqPsVHT8CDLp/qHPAVWZhIxPWDQ=)
                          14: F4z4cRp1o2-2fDGziBvSnYHbVpM.roa (hash: 2wAWhkLWWqS0rO2Q1Az6KgQGqplVuffj57lG+uTxooM=)
                          15: H4YuarFLRv2DKAM6083yrFzz9JY.roa (hash: fMRUn4uvKnHkcfGAlHBm1byeQeTo8bCHBsHlwHjMTDA=)
                          16: JI0eb8S1GNh05B8yRPp4g-MmznE.roa (hash: vofbBr6agtDCq9C2DcAavwwJSfex0/8B3Z91wfqPM6M=)
                          17: KF8itGoY1xLI5AYmY-m8xyJCd-M.roa (hash: 3x8CCjFbHcFE+DJK2zQRD0PbpgAm7tcfoBUcCbuoWVU=)
                          18: KSKxvPfPoQ3-9nZ5IaAyZyw0eVA.roa (hash: Ldllwbeq3sVnl6+zDKpnVxt8zPewHEjiNMebEvP4PkM=)
                          19: MH9f4nQKK23kw3CdKWQRWzyWfaE.crl (hash: qToBZ3H3xHoS4N0Yzft+oA2jQb4n4JuuWZfDsJDSeW4=)
                          20: Na5QZvVlGuZQeLfXORY_9aEEYSo.roa (hash: 7zaWEKU6Pa667pchWMlNtONL4EFj3rNY7MR9JwlAuWs=)
                          21: NfrImU14VyPFoYoWbQqSwcjt0NE.roa (hash: MQdzlW7R+JzkpiS+Sg0oeOl5PeyecnB8iAb1AGvWxuA=)
                          22: OoYqylkHzmwaVAMQUI6VbW19fUY.roa (hash: GTuWmeM87GVOh1bcDtRCfkyFY8mWiN9eSfyMgGPB+zE=)
                          23: RYzhujVp6gIBgIh6wj1hAB_7rVc.roa (hash: dxOdcde2n2siUlRnNLCGHKOg3YoidL7qLRsEX5nlICY=)
                          24: StSv8ki3Hfy1kt0rrrfueNG7XQE.roa (hash: n5KuwRYffa0Ye2MfTHYi4Ou9cVdpBRC7za9HK1Mdc+U=)
                          25: UpgKqZKDk6DocsIHKTjtNdmcKOA.roa (hash: ks27GBa0bjdMoWqX1B0YBEH3qIWHeKCvjtYKHznBta4=)
                          26: W1J1-YCCiOxiAdhCBpIGiI6-ens.roa (hash: qQljpaYP6KShT3JCLBM16HPQvI04wWe99FsoBr17EDc=)
                          27: XZVtjWmGJy5TJN5gkclvuaDTx08.roa (hash: +A3dF//QsJfJLVvgoQOwQfNBd3HuH3X5Enj0ICpyoDU=)
                          28: Z9ftDVnLuDarY233BHukY7esuz0.roa (hash: 8IP/yjkR/p4P5xW7keZ1mbS3Olm9wSVSpmHnR8UNIxY=)
                          29: a5vhXTFxFnmVktk1fpfvlo_HM2M.roa (hash: jBANqiVsO0TchdCr8Pw27uhxGmAd9aIES2vzyb+GsNU=)
                          30: aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa (hash: K2mPF2eHRJwmWDINxTS4kipEwWDutquLs7wNrJd3zo4=)
                          31: afF1dxl_LmNwCvwOu-CxTaBAPsE.roa (hash: 2PsecFqYTcXE3Me2mMpOXpuvsS4y86LFqJBD0VQl4Yk=)
                          32: hIqJAfSnn9KNywKp0QfHCh8jdEs.roa (hash: SVYSpB2PXKZBd+1YFg4Zcu+R5qUNSr3ksyKlguLNrhk=)
                          33: k4dE6GVK9WXXHG3YD6YqaU59DBE.roa (hash: gfljlL3cqgD/q79IzT5OLmzpfKZUJCewNF1J+kEHTmM=)
                          34: kTAZ1eq_4NqZeUF8WiyBjLmzzOM.roa (hash: FbN3ktB3aIhk7lj6tCA82i2iYB31YzcLrswYNQRr2fk=)
                          35: m3-MxjwFGNnDf8jTTqX1e91a7rg.roa (hash: 9iAPPIgHqVmIrbnk1/uNszzl+9R/1IZgQLeSx78jY20=)
                          36: nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa (hash: Kkbt3awiC7wXEdfElBvXbg7tTE4YJO5Q0eMabJjQuQ0=)
                          37: o033YbxU_4pqzhTYeW8KgBTyJFQ.roa (hash: dhvpupNA3tAu+C5YNjmZoQsdlwc5TGF6rdYGFnIKpdI=)
                          38: ogWtRj9AJ-3VS3wVOcqhrepWr84.roa (hash: z7l4qX9iNc6t/itsLZx/1qV94NBFb0s6x69mJ0YgY6g=)
                          39: qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa (hash: x3hukl87lsHfId1sEhc10WEbYF6R3yTOTAtjx/H0dM4=)
                          40: rXpni-4ALcocOhcZ1QqAO1mIJGA.roa (hash: FRAHJFSzOsHBC4a0opWl+1Gehcqt2UuiLhry14uVIHQ=)
                          41: wSL45AIT5EJXXFGp5vg6M2DPNCk.roa (hash: 1wb4FcpLDXgZHELKVN0aczuYaHIxl0jPkQS+LI1QUhs=)
                          42: yMSRSUOaD_I9-_w6JSkVSof-73c.roa (hash: IIoX68dv6Vr/WkUd893+l+Jc8xvnAeBmWPaJowHnKOE=)
                          43: zfjWVaBt_BelAB4wLgicMa-3gUk.roa (hash: mUXFCeRc2Y4QqbwjvPvmqd3yvXigvxAWleegmSOAAXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:4c:80:a1:e1:ae:67:25:a7:5a:43:1f:ab:f4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Nov  4 12:00:19 2025 GMT
            Not After : Nov  5 12:00:19 2025 GMT
        Subject: CN=a7aa8bbd6032f2234afcc7d41cee3329569b6ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:13:87:6e:d6:81:80:7e:82:d0:d0:92:09:
                    59:8a:59:76:6d:6e:5f:97:2d:f7:a5:25:f9:96:a2:
                    67:57:e4:e5:85:05:64:8c:2e:ca:b3:71:42:62:0c:
                    a1:ea:fa:b0:22:44:27:ac:2f:e7:4f:7c:7d:cb:6b:
                    79:15:31:64:df:47:0a:ec:97:bd:93:3a:0a:5a:0f:
                    9c:2f:c3:f1:70:8f:8b:b8:b2:b6:15:cf:9a:83:a8:
                    df:a7:4a:bd:bd:13:a6:43:44:59:1a:e7:f5:88:a4:
                    fe:fb:43:a0:cc:de:81:01:2b:6f:6a:14:a3:31:54:
                    0d:69:05:e7:76:45:bc:18:b4:4c:ef:84:13:91:11:
                    88:50:33:1b:76:6b:f1:8c:4c:f8:9e:a7:1c:1e:d0:
                    96:20:21:60:d3:4c:c9:ed:71:87:70:79:49:71:98:
                    93:02:bc:ad:12:a4:31:9d:d6:4e:59:2a:d1:c2:15:
                    41:36:ed:57:46:b0:9e:02:df:e7:08:ac:78:10:5c:
                    75:14:09:41:07:0d:58:3a:50:43:ea:07:59:9a:b5:
                    8f:94:be:99:3b:6d:09:cf:84:57:b2:e8:01:dc:57:
                    db:8d:07:4e:34:83:9d:30:5f:19:9b:f2:50:6d:7e:
                    b5:15:02:48:af:1e:a5:48:63:94:7e:9b:8e:55:51:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AA:8B:BD:60:32:F2:23:4A:FC:C7:D4:1C:EE:33:29:56:9B:6A:E2
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:96:5d:db:4d:67:96:11:e4:67:a2:b1:8f:8f:76:6d:34:
         72:70:96:a0:4d:be:b5:36:af:af:f1:e3:c5:2a:97:34:53:dd:
         25:fc:8a:c8:3c:24:13:5f:c8:71:0e:41:52:a7:b8:27:8b:19:
         0d:e3:e1:cf:62:ba:a2:40:90:2f:fa:d6:0c:41:b6:16:95:37:
         1d:12:09:3e:0e:4a:17:fe:6a:c3:56:51:b7:84:d0:fd:9d:b0:
         3c:78:51:12:3c:4f:c7:1a:b3:c3:74:a5:57:52:38:6e:48:7d:
         de:7a:0f:58:dc:de:fd:aa:aa:3f:13:04:ae:00:2a:36:98:56:
         8e:56:b3:50:90:07:9a:8f:09:02:c8:4e:85:6a:0c:f5:02:ad:
         51:4d:fb:fb:e9:a6:a8:78:18:a6:00:67:d8:a1:75:9c:92:83:
         04:3b:9e:81:03:12:6e:b0:99:34:1a:f7:d3:c7:a1:5a:e1:64:
         83:ca:f3:eb:8e:01:4a:8d:05:ed:d3:6c:25:c2:5a:e8:c8:08:
         12:28:f1:d2:cd:33:73:71:b9:fd:58:90:a5:87:58:f9:65:77:
         9b:20:13:59:c8:35:a8:0c:0f:41:af:98:5e:f3:ae:b2:3d:8c:
         2e:7e:62:9d:2f:d0:90:b3:40:b3:fc:18:d7:5b:85:50:50:03:
         42:15:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----