Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
File:                     aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft (raw, json)
Hash identifier:          bFEbdhqWrzlqSDre72T3Lb3guVmPT514BO9tSpm02I4=
Subject key identifier:   98:1C:3D:96:3F:FA:76:22:B5:30:9D:55:28:DA:B1:CB:F5:CB:C3:8A
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       019A209B9B960A45F33E314F0AA0662D313B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
Manifest number:          170A
Signing time:             Sun 26 Oct 2025 13:00:59 +0000
Manifest this update:     Sun 26 Oct 2025 13:00:59 +0000
Manifest next update:     Mon 27 Oct 2025 13:00:59 +0000
Files and hashes:         1: 1-8RBH9_tnlklqBBmz5_-icsaMpc.roa (hash: FKJ+h2K7CI08LvxPUFTvSg4EnAnN5YMIv8nzp9YkZ/0=)
                          2: 1-WrHf_R-iB8hqlH7RnPTmxLbBKM.roa (hash: OgV5ZNTNXmh8HIuwU4ZP5e1PvzdWo2UKnOjc8+xGdZg=)
                          3: 47A9Z8NoeQ6ltTDpCFJ2wWSO198.roa (hash: EuV+plS2GxgGOzE9OGxu3Q+/TvJ4VHM++LfTm4PAWPI=)
                          4: 4ubPY0ZxLfnaTpYsRuJAD6t_P3o.roa (hash: Y1TV4QcMx5c9Jse9Mu8UgoGd0FD270rAfwz/EQcMmzg=)
                          5: 6dlgGhMO4HaNIO71jk09HsnD_U8.roa (hash: rj9RQKo3m78HA0PAnuFA+kkz49Hjm0QW9NbvdyFvUnM=)
                          6: 77NlXUAP6aqO-5kRD3v5m76ehoU.roa (hash: 7e2XIzgYVXyl88LnkyoFKtRfje9MjZPrEc0MwbIMad0=)
                          7: 7lhL-CjhVfYGUdKFoWx8XYf7ZHA.roa (hash: nh5pX/PNQkcUEZRaY/5xbQr4BLmvHwm2NJlQBQhR+gA=)
                          8: 9z07Ep8X99T8A7LpSlZHJcRnI2I.roa (hash: 7LBUT0v/DK8eTfhuPoECCdcdeNcWHCd2c1LGsoO43SE=)
                          9: Dfp2Ts5TY4FATus3sgQ5VxgffS0.roa (hash: Mushjd6NNJKaPAGRHr/KYTSX4LsX1cCpnhG69JPinyA=)
                          10: GeCDPctDMr8_oxBfY1DLpT-20DY.roa (hash: j6bnRGc6X+NPwJ7gB1IhU9+ls4qLRAE/TfyaEuu2IDQ=)
                          11: HQ3yZskbutSTJWROGTuEMeM34RI.roa (hash: MTg4/dDmjzU3m207Y7TsV6esHh4FAjCT6hXPpaJPchM=)
                          12: IG5xDKVSBF6_ftu0zt-Q2A8e45I.roa (hash: 6H+abuzVCnAQquoCObCbTAtCV9qqM6bi3Fx7YQZ6gQI=)
                          13: JIHSg2rIYtolbr0BfVRa6peC6rI.roa (hash: 1LDaVwBhY3rwcmuhoyNcE9S+E6qd+Ia97x3mihlzNDs=)
                          14: JPynZOHFD9eCFLg8Hgy15cX9znA.roa (hash: 5JLQYisAx7T3MaJ4KQMnMa0XYOU0246nFgiD7GulqmE=)
                          15: JtE0Hj13gt0TMOxX-BTDWKThkWA.roa (hash: O7Tp8re7hsKthJ4hzt7OWSmQAXr1RZmuLFa297a/1v8=)
                          16: L3japBVNpBh3MS3O6cGKRK0Np9I.roa (hash: TTq0YoL58wEAWKm8Mf/3aldn22xGhOKXxygyNCaKTWE=)
                          17: LJH72TSXfbOv5GvjVBdYrRrSSsE.roa (hash: flzonhWS5nSMaYCUDxFDGxGxZvCDGuyNEg5gV3+WBFs=)
                          18: LW6AiSBnffZ7z2LIcdZ7_BG3WTI.roa (hash: Je2SbF0RuUxatfIqT2CP/1rfgX1hQngyDlJMJI6j86k=)
                          19: LeBlOXmm0nV0jlhI7_98RXX9GXg.roa (hash: DNM+m9kCaDbfLivZ8mI/bnfTHSU3kgdhzpW1dtB8X94=)
                          20: LoUzoDR6zvXn6BBNsYhr15p268Q.roa (hash: zENAXa04B/BY1tuLkhKvGvfur8Ml55yCjNP3Pn0ExJM=)
                          21: MaF_qGgSsndFqGF1rW0eNsHoIrA.roa (hash: ZAMP0DTLU4aIH+2cZcipTYXMEZpVIzafvY6PRTO3Es8=)
                          22: Mm3qACzHvHra68ZyXMFoFn0n-bY.roa (hash: 2rWmxjojx2Jl5ARyoSNvPBcDTa/acXYa85wGh+VMkUY=)
                          23: ObSdlipmAk1iKYNkZ9YITqbsels.roa (hash: tPQFjJrY+wen1/5SD/k4Zg54R2Lo8i/vJsy2VPUGnxQ=)
                          24: PFP2_Ey5DGmkdKifFos2noWGR3c.roa (hash: NHvMdxlhbRJ+AiCsPrNcH+zHMrgK0xKEh1LELFeePxE=)
                          25: QPMf1PbtycnQ-6Flxp28u02prGY.roa (hash: X0FioJAAkYPsmgwJ5U5XxG9kCc30prhre7taL3l6mfo=)
                          26: QxMpcDyLvvUaIRk273lZjyhUDHo.roa (hash: hXrMIYIVX+kTC2FMtNybwME280Sx5YECPUhkF008wBQ=)
                          27: SFRC2IRGZ29H4O4kOJ2GgaaNnFg.roa (hash: 3XnOV7EtpxeKk3apLLbYyf+x5gLbBzKgMJfnZFiJofA=)
                          28: Uodpw6qU_qFxcg_52Hv2jDO0p7E.roa (hash: 6vOS92DIx2bZApg7RN81XNB6jrEREumsQY3iqtM8zGI=)
                          29: WSOdSOYvm6saAH25MRzt_HJ4S3k.roa (hash: TJxgEsEuOY9iF8bVQ+aKArmMfYxB5sJS4Q7nszP7Vdw=)
                          30: XBaLBgo5USmdlF-l0aEKQxl9py0.roa (hash: hEaUXhlfbKByTyvw8lFuKxSyS5YkuHXmWhmYOu4395Q=)
                          31: Zwow0ssTWoLHcQQwX4JlNSY2oKE.roa (hash: g9R5xbePLorUrV0h+F/IlBGdIVc1gSPIKLRgdm0mnmM=)
                          32: _j5kcGNmP9KapmqZVVh0mF3rhqI.roa (hash: n8e7s8mvXdB+EkuKj7xnP+2vtJoqxIXNO1h35rpuxXI=)
                          33: aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl (hash: MkKcgYgUI+ztiqX9gBm29+iu6ETkNdE9Gg1r1CCBGJ0=)
                          34: cWRtcKNGFjDj6BRQd2K5mYwzuYM.roa (hash: VbIhqKWa93JMXZ/SzPfHD2p848yLCCLFxjcn0WevubY=)
                          35: esC-giyunM_K9enSCaUCnZKeL4M.roa (hash: Qr0/3waQdHhwdUVkbvUIUPX/T8bHxpRBEJMkf5A/L34=)
                          36: hU1wod77MfEC350xRthoMBa5DB4.roa (hash: EKwRQ6dRPfAhWc09wxekuhlQAWyc+vBh11nX7qZiNHo=)
                          37: ih4Xi9U8eHvhfA_BVqOMjQqdgFw.roa (hash: eEUTwk1w/9e8mftqE64A5S57ko7hGXNfTskpiKPmWM8=)
                          38: koBi-CJAIxWhIMFMpfebFwVo3gU.roa (hash: PjWwCrZ6ZlH9khjFVR+zAZKP9G4VwxL4lwgDTo2/pJY=)
                          39: l6T3jSpnaD_sg8aDTSBjTmwS5_0.roa (hash: gcjyjJ01qMvea87vh5hpUowX2Ip9Q4rirlX8Sn6KHgo=)
                          40: lY-AE8OTKO6pP2qywPf3kiTUj4k.roa (hash: gSnKTDpzHlhTg1qR58+PX8u8xxOm4mdPyoZs5A87WV4=)
                          41: ljJz9wYEHMVOjse0IjyDBl8945o.roa (hash: 6JCqS4PahNUGBES62YC6kksBISgf6juLml+95B1UnHs=)
                          42: nX-1M9vJJ0J1mAUD-rX36Qu9K60.roa (hash: klp9yw7u9N76sRQccMqeoad1J0nUx9AuVizHKM5xOJk=)
                          43: o_0FvKZy2sCl-lW0YYSWjBR8xw4.roa (hash: tubkXy6y714ZDaavV7HFDqe83b8kWltVaHWqaVPG5o0=)
                          44: qbaRnHpcfItOd1i6AM6OJtPcgps.roa (hash: Gsq+pylbf689IAXMKrAZMcgBHE/7Rn1FBRIzqd5eheU=)
                          45: r8FWTieBPHLRiTwj03lk8c1KhBo.roa (hash: 53lOJElfSgVxyz3zX49GYG+l3DnwqA5qNEQibjWXdV4=)
                          46: s8h8m-rLu97VHYuOpsgtGe5QTvc.roa (hash: fgM9BUUhxhrJEB6G+RVcGhRkjOsuMr8x8IriDf+tUFM=)
                          47: u5f5QyZ_Hle9Xkfy8kX5VEnQTyI.roa (hash: vQV+T16tVw7KRa+bYRI6ePipU0cafdNCWjHD9q8y4x4=)
                          48: vC6oqajOZxfWGK4VfzMV2PMa_EU.roa (hash: t9z6TRwbNnBf3Xj8qkpVMgLqFluIFTjPBjTDnTgqI+0=)
                          49: ww9SVnBXN3gAqWv1lx5pzl2Q-hs.roa (hash: ENVjWZd6nIAfbszn8x6YGoQDqmsPfRZq+nXdnQbXOgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:20:9b:9b:96:0a:45:f3:3e:31:4f:0a:a0:66:2d:31:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Oct 26 13:00:59 2025 GMT
            Not After : Oct 27 13:00:59 2025 GMT
        Subject: CN=981c3d963ffa7622b5309d5528dab1cbf5cbc38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:cf:89:c2:be:8b:49:0c:ec:57:3d:21:21:
                    9f:df:fa:6a:e3:dc:29:32:cd:f3:55:3c:92:b5:10:
                    ca:3f:77:7b:fd:9c:0b:af:df:db:93:a2:b6:e3:d3:
                    e9:7c:f1:cc:97:1b:66:71:7d:b1:cd:af:0f:54:1e:
                    a7:1b:36:22:a6:18:99:0f:59:ce:9a:9f:c4:38:18:
                    7e:04:12:c4:4c:50:60:67:d0:18:89:97:6b:86:27:
                    08:b2:bd:35:b1:f2:68:ec:4f:e8:2f:44:b1:53:6d:
                    ed:26:f3:70:c4:82:95:cd:97:6e:11:e1:36:19:5f:
                    ab:a2:a6:99:81:3f:89:1e:72:b8:6a:38:7c:de:e6:
                    af:7d:6f:0e:f6:a0:f8:ab:5d:13:61:df:fe:c3:d9:
                    40:18:8e:48:ed:27:2e:20:41:ae:4c:5d:e1:04:35:
                    d4:82:8e:a2:bf:df:32:a2:46:ba:46:d3:b0:08:a1:
                    1b:dd:8a:37:ef:c3:89:29:c3:78:86:8a:9c:e6:60:
                    c4:f0:17:04:14:e7:9f:d2:da:6a:1a:92:ed:b7:0d:
                    94:44:ab:6c:e0:9e:a6:e3:a4:a7:e5:5b:50:38:63:
                    b9:4e:27:06:9d:1c:72:89:f1:a9:dd:55:c7:bc:ca:
                    2f:69:3a:e4:8e:0a:f3:0d:10:93:a3:fa:3e:13:b6:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1C:3D:96:3F:FA:76:22:B5:30:9D:55:28:DA:B1:CB:F5:CB:C3:8A
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9e:8d:45:60:94:f6:44:78:9b:4e:f3:4f:e4:8e:86:e8:f9:
         98:e7:ad:43:a7:c8:eb:b2:74:c9:31:63:0a:b9:26:9a:f9:91:
         9c:c8:a5:a8:ad:83:b1:f7:4b:13:57:3a:b6:50:f9:08:46:b0:
         12:b5:91:f6:bf:4c:ff:d0:e8:59:df:af:83:d6:8c:68:c9:5f:
         d6:14:05:75:09:de:6c:a2:e3:ee:98:23:2a:8a:65:a4:0c:34:
         c4:5b:cb:1c:fd:8a:5c:dd:5d:e2:c0:ce:52:8c:c6:d4:59:d3:
         0d:6d:67:2b:20:00:6f:22:72:77:be:e6:e4:b2:27:de:ff:c0:
         00:47:bd:af:55:fb:81:70:2f:20:28:ec:99:5d:5b:17:c0:0f:
         22:ce:90:e7:14:47:37:5e:23:e1:e5:b7:0d:85:f0:30:6b:2f:
         c3:82:f3:38:67:2d:b8:14:7c:b0:ac:84:ae:d3:52:2a:50:d6:
         f0:e2:22:1d:91:02:e6:83:9f:24:76:25:b5:47:ac:17:51:bb:
         3c:a5:2b:f2:c2:df:c6:ca:ef:16:a8:12:15:bc:f0:40:91:53:
         55:57:c2:ca:18:2a:50:43:da:93:39:35:3c:78:33:8f:a5:09:
         39:00:e1:00:27:3a:85:f6:02:b3:e9:46:dc:55:fe:f1:82:87:
         d3:1c:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----