Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          Xc8i8MP1YMAkgx/c7qJM3uzfgOX8X4xIaC7412Clpb0=
Subject key identifier:   FA:8E:87:7C:08:FA:83:A6:C8:DA:FF:42:2C:AF:45:8F:B8:22:4E:BC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0198824308B5E1620131C6FF7BFAE1799B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          134F
Signing time:             Thu 07 Aug 2025 02:01:27 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:27 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:27 +0000
Files and hashes:         1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
                          2: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
                          3: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
                          4: 7Vg026GilsAdwwmReGqAOt7uEBk.roa (hash: o2eCEEPEnYtuReTatMEMg5W6/8oDYNB6JVy+I8yx6Gk=)
                          5: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
                          6: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
                          7: 9Z_lpNxBBi3Erx6I82XDcNdm7S4.roa (hash: kZ6rI3O/rdJeGyOZgRtCRO8ytZ9Gz21QOGN+HOTBtQI=)
                          8: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
                          9: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
                          10: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
                          11: DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa (hash: 5tBAqqFCun3qMuyt3hnlLRBwJNJimso2u+1bTRY1BKk=)
                          12: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
                          13: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
                          14: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
                          15: Ff6PjCKYxksSpT1f0K8hi0k7er8.roa (hash: VflQNvUfdCGYwmZ2tB2YKnhTx72Pgu7vVHPUvzvijoU=)
                          16: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
                          17: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
                          18: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
                          19: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
                          20: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
                          21: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
                          22: MFaoBuMp_n8GYQy16F9yYPCDvlw.roa (hash: pzLjXNVOb/tu8XBFljfZTE6/DnQ8ZMtfBy9pSDaK+d0=)
                          23: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
                          24: NEBTrVrG2aOIqVsZMSsFHhwJFnw.roa (hash: f/aYHn25//7r/Dz9hT4MyKOdlYCxECJdfwrHVdjUJdo=)
                          25: NqEDSyCU-4MS42jFZzpvAT-HI8I.roa (hash: 9FbUsU13J/GmaYBC86KZ74ejALBebmKkz0F4iRu7cz4=)
                          26: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
                          27: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
                          28: QIUxG2d20ewp6Ag4VHhOjKX3390.roa (hash: gd3ad7uP/4lRdgZeJ5043KvMhVaae9ozbtJI6vLh94w=)
                          29: Rhqu0Hhn4jlUWaqBlQkcgoWXjMI.roa (hash: JisZbeQ0AocuRS7stDTFoBU3g27nQeSIpJz1KNUOxPE=)
                          30: TQoyMTaufag9Fh3qmegQelA2zNg.roa (hash: 95d7zIS7vKuMg1Mj7+fOLFO0LcohD9ziLzOdj+cFHi4=)
                          31: Ta-Jng8bCeWcapI-4Br5-Z9YPK4.roa (hash: ZXEMtyYZ68+dYUKGgJwGRiHDozsTZWFiUEvbDn+U6vU=)
                          32: UFM7V0QaEQk5iMcLePQNtrCnBuU.roa (hash: 1KCm2LnslOt1Go2n1GlY4KXw/ywbLjggHVGzM3KYrZI=)
                          33: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
                          34: Ya5-h2ETMjyWDhCB2tvxKRLAqsQ.roa (hash: coLWeAGOhf5VNkz6Fd+O+ZH/zyRAc6w/wTvM49zi9Dc=)
                          35: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
                          36: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (hash: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=)
                          37: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
                          38: a2c7U5RqEuvoRR43jWzCy7CopsM.roa (hash: 3nWXCwf43YLWRV04mKr1sMjB7lKWY2rRGgaUKYp4+Xs=)
                          39: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
                          40: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
                          41: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
                          42: fWAfX3KpvP6KHVwuJR6oEj4CXnQ.roa (hash: 7Asl2MelB+M4yfnzUpkkQrmPhCU/0GL0ifTu9RCxXRU=)
                          43: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
                          44: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
                          45: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
                          46: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
                          47: n8KrkCOeu372DfA7gb7CXyt4MkA.roa (hash: m6YplWM+G0Bt8JF0DAD2p3UhAQO9YK+EkRMI1CUMIoE=)
                          48: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
                          49: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
                          50: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (hash: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=)
                          51: uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa (hash: +A1T+WhnOHYIEIZ7mEVu1afaFwmjRRKYqLMFQ3ckAmE=)
                          52: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
                          53: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
                          54: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
                          55: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: AJubnv+AaINq05kKzsNWOMPDZTLRMhiI/PxCjQ0d3TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:43:08:b5:e1:62:01:31:c6:ff:7b:fa:e1:79:9b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Aug  7 02:01:27 2025 GMT
            Not After : Aug  8 02:01:27 2025 GMT
        Subject: CN=fa8e877c08fa83a6c8daff422caf458fb8224ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0a:6a:02:8e:41:b8:8c:2e:87:e2:70:90:e4:
                    f3:0d:18:66:97:aa:32:09:3e:73:53:58:1d:c6:eb:
                    f5:6f:c5:0f:75:28:4c:09:38:12:9a:9a:19:97:18:
                    c6:06:e9:0f:8d:13:7e:c7:42:8e:3a:45:7a:d0:5d:
                    7a:bd:31:fd:97:b0:95:8d:01:d3:77:e5:82:08:12:
                    9d:21:e1:23:f8:14:80:e7:d5:81:96:7f:b9:70:60:
                    59:b9:da:30:bd:b0:16:74:91:80:0a:89:56:0d:da:
                    10:92:07:09:54:85:25:67:d6:fd:0b:2d:fd:34:bb:
                    db:e5:43:96:b4:d7:6e:60:a6:26:c3:43:74:ed:e8:
                    c7:40:37:c7:6d:2c:1a:bd:c0:ca:8b:2e:23:7e:d5:
                    7f:89:1a:2c:70:22:00:39:d0:a8:1d:b2:e6:bd:74:
                    9a:f9:e1:08:df:7f:fe:39:a2:e4:6e:cb:f8:46:a6:
                    3f:8f:71:17:b1:ea:68:a3:7e:02:5d:73:a1:ce:a3:
                    27:49:bc:84:b0:29:0a:88:19:62:2c:eb:9f:1d:25:
                    f6:3e:d4:d9:85:45:e1:bf:5b:00:86:b3:84:fd:12:
                    45:f7:42:36:23:1e:37:87:b5:19:1f:00:92:70:30:
                    91:16:02:c2:98:cf:b1:4e:73:49:a0:fc:09:f5:09:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8E:87:7C:08:FA:83:A6:C8:DA:FF:42:2C:AF:45:8F:B8:22:4E:BC
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:d9:77:96:5b:37:7f:40:d0:a0:36:e6:66:16:5d:cb:aa:
         63:68:a3:6f:af:9e:d0:32:a6:74:1f:af:62:e3:b8:2d:74:12:
         19:7e:23:6f:97:d2:6a:11:7d:6a:77:16:e9:24:07:58:69:12:
         90:99:0e:93:16:e0:20:35:f6:a4:47:3f:41:81:89:75:a5:c8:
         d8:17:ca:bd:d4:06:6a:32:7e:a2:3d:b4:0a:52:55:4f:95:c7:
         24:ce:88:e7:7c:4c:51:ab:58:6f:d7:f8:da:85:d7:41:f2:60:
         e1:c9:a7:d8:b0:af:73:85:5e:ad:5f:32:04:c2:bc:53:7b:55:
         e5:39:b2:d6:8f:c9:cc:eb:34:33:27:c5:2a:a0:5b:64:2a:d8:
         13:fe:d5:21:57:df:dd:02:91:fe:88:31:90:af:7f:20:21:59:
         22:63:0f:82:49:f8:27:72:84:52:98:5f:b4:d9:10:5c:a1:44:
         8a:80:bc:84:91:6a:59:77:b9:a5:e6:bb:37:70:67:54:dc:e3:
         91:4c:4d:f5:96:23:95:9b:09:0d:21:50:4c:1a:7d:69:32:1b:
         74:ee:69:df:da:54:aa:54:47:d4:65:87:3e:6c:12:25:50:3b:
         97:30:90:b6:b4:2b:81:8b:64:95:ce:49:a5:ba:40:1b:56:88:
         36:3c:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:43 2025 by rpki-client