Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          aOb1Tkv1oxvw8CKmFamYPSbnf+VgjaO7SNIzqwRDLrk=
Subject key identifier:   F2:36:AE:31:A4:83:8B:30:95:8F:2E:9C:B2:8A:1A:09:42:46:30:0E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019833823C0DF7CF0BC0AD5DC6CB495ABA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1694
Signing time:             Tue 22 Jul 2025 19:00:29 +0000
Manifest this update:     Tue 22 Jul 2025 19:00:29 +0000
Manifest next update:     Wed 23 Jul 2025 19:00:29 +0000
Files and hashes:         1: 190LxKM5s1ZchW-1QFPWBCXJIzw.roa (hash: i2UBTnCRLZfI59Lc+8ptifYqjvgfC+5cvDv+xCq8UE4=)
                          2: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          3: 2qlsylzgqXhlEayXE9wkcK5qmug.roa (hash: uhfOGYd80G0548JpMljPb9TBOvg2gxGmo4JHGRdJP94=)
                          4: 2ye1nEG00z6xc6qFR23vVFqqhbE.roa (hash: 5i8bdwLHCSUW/WKDF4taP2OB33HmQb50deK5bo+0rqU=)
                          5: 3LguPMqZSd4yhX8NUjzWdmBRih8.roa (hash: Eb00HvIk2TUv6r6+WiaEYLXtmilnavu3rDsG2CRMnkY=)
                          6: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          7: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          8: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          9: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          10: CBGdvmHeO_3COX6cplZCZhwngZs.roa (hash: O3OMFYB/8GvLwR3QPrNtR+z+RH+vF2NDnwWyjo3F710=)
                          11: DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa (hash: o+UtBmeKh8l5SKFt9b0HSR3AMNSQx+XcOJc2HrXv0/c=)
                          12: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          13: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          14: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (hash: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=)
                          15: OqwJALcrvdGuqMuiUcU6zqsW4N4.roa (hash: WRR6mJj3kerHokaDGtvMoRIWOA703MHG8etcq24MW+g=)
                          16: Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa (hash: FMoM8vmAiJoQiCyS9ONch1ThZ7gMc02jSpD8vyuSSiM=)
                          17: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          18: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          19: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          20: TVg5Jq4DNfr68Im8n8Q8n3u044c.roa (hash: Cm8QPhyPTWsiiho20vUMeRkvKIdkDLrtp0LFxyHTphE=)
                          21: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          22: UtqUPWUlOC9y-HXt36lTb06KtcY.roa (hash: uhM4F6abSAnJyS3h08hW4Lm0fNY+5+iX/polZ3equ5E=)
                          23: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          24: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          25: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          26: cC9A2bHre93z2HHoiKaD3gbhMp8.roa (hash: upiubXGT+kD9pNkA2Lcjupud/SpGpaMLCWgqSaDAuSI=)
                          27: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          28: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          29: hBq6DPEIeY8Yhu3iLZgYcqX86wc.roa (hash: G+wF6iZXun53udNk6xg5sIb/Bo1cfj+jezlEcYlaiX8=)
                          30: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          31: ls3R7on7JIepLbiaekfxdJdXd2U.roa (hash: Vn4/dA8gyRgDccPfceYEXiQgzMk0CB1sI1OXw6sj8Tw=)
                          32: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          33: maPCADcTD0j72xKETkOFhfCf_VM.roa (hash: 9uY37uZRkjCzq9ikmQn0wEUh2D8+w+AywsiqaUxRG64=)
                          34: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          35: nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa (hash: e4T081508o/3i9gpQHharO/sMRJPndiZMSpliNkCiZ4=)
                          36: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          37: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          38: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          39: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          40: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          41: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          42: wOsf5_YOiqUMROpVbJEf3o7jfA4.roa (hash: QdADhbZNLmHZbqqBBd4uzw23qbhlhRtnteRcHUSgzTQ=)
                          43: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          44: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: Fjb16SdU1I4j52i28fha719Vmbr3tAz8I8ZZW/5hVxo=)
                          45: xrpOvCGfC12GMAtnnGHJXhkwR7Y.roa (hash: aEEfiRXz4HGa7UJO9eyM2i0rPqbuYD7dAcy2y2OVnYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:82:3c:0d:f7:cf:0b:c0:ad:5d:c6:cb:49:5a:ba:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jul 22 19:00:29 2025 GMT
            Not After : Jul 23 19:00:29 2025 GMT
        Subject: CN=f236ae31a4838b30958f2e9cb28a1a094246300e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:b9:24:69:26:eb:44:d2:2a:00:4c:c7:3b:
                    97:5c:45:bb:58:5f:a2:f5:87:46:36:f1:6a:7a:52:
                    32:55:35:88:0c:7e:44:48:83:83:e2:64:c0:11:7a:
                    fd:90:14:b0:47:a7:db:bc:d8:89:b6:92:34:ae:40:
                    d4:bd:13:de:03:23:6d:8e:0a:85:99:31:c5:84:89:
                    a3:bf:6b:ef:cc:10:99:ca:07:97:cd:02:20:62:33:
                    0f:ef:60:35:1e:06:ad:80:0d:e2:51:f3:57:e2:b9:
                    0c:ed:40:c7:08:c5:56:be:24:dc:71:0c:c2:86:34:
                    a9:c7:9b:93:0d:3d:da:37:d6:18:31:0b:38:76:a1:
                    f2:56:af:9c:27:d8:af:95:88:02:8d:45:9e:6d:df:
                    e6:9d:ac:76:0d:63:07:58:2b:06:fa:ad:68:15:d6:
                    b6:34:76:76:f5:1c:c4:32:83:ed:47:52:a8:0d:52:
                    0b:84:c4:1f:db:ff:b0:8c:90:2a:d5:34:e7:ad:b6:
                    0f:b6:29:1d:09:57:83:b6:2b:31:64:44:7a:ea:e7:
                    f5:6b:ba:06:76:c1:fb:b4:34:19:5d:f8:be:59:6b:
                    22:93:b4:fe:86:ee:ef:2b:65:47:da:4a:64:b3:0b:
                    da:e1:87:d4:16:fa:b3:ae:bc:c7:a7:38:f4:ce:57:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:36:AE:31:A4:83:8B:30:95:8F:2E:9C:B2:8A:1A:09:42:46:30:0E
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:72:2e:35:3a:d9:5a:30:67:87:c8:44:3c:e0:b0:e9:54:
         7d:8c:d4:92:80:bc:f0:47:b1:6c:49:00:59:41:ee:22:d7:4e:
         1a:21:60:d3:a1:6c:a4:eb:2a:12:8d:37:21:39:29:f6:0f:59:
         11:41:1e:d8:11:c0:dd:cf:9a:70:a9:6b:78:42:89:fc:5c:9a:
         bc:a4:c0:1b:f0:6b:d2:d5:e7:2f:5f:06:af:24:92:a4:4a:33:
         a6:9e:45:3b:0d:63:05:47:09:10:40:86:cb:05:16:e6:e8:f8:
         de:07:b0:f3:ab:79:3d:76:66:1f:92:95:60:ce:f7:7c:7d:65:
         1e:77:3c:74:ea:1e:c2:79:6a:a6:ff:f3:d3:97:b7:ef:dc:a4:
         91:a7:10:3a:bb:66:fc:59:ee:19:b4:a1:fd:f7:e7:57:0b:5d:
         cf:ce:46:8f:4a:0a:68:0a:1e:6b:e1:83:5f:09:8a:a0:04:46:
         8b:5e:a7:3c:a3:85:2a:e3:fd:96:71:e9:12:06:ef:c5:68:1c:
         ce:33:28:c6:0e:e3:6b:a8:91:95:9b:4e:7d:31:3f:a2:8e:2b:
         8c:72:99:3f:9e:68:cf:fe:1c:05:35:a8:58:74:f0:a8:83:dc:
         98:95:1e:9f:4c:ea:e8:ae:89:53:3f:57:ca:b9:cf:1c:58:3c:
         f3:0b:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----