Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          nkHlZp+VHWpzWah2NGK3Tyy1348/lzbZZx6XBro4LLI=
Subject key identifier:   6A:0E:55:89:54:B5:8E:AF:6A:89:AD:01:95:F1:39:E9:85:F1:1B:E2
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       01983FBD3309E7EB48ABC6A3754D84F01A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          09A6
Signing time:             Fri 25 Jul 2025 04:00:20 +0000
Manifest this update:     Fri 25 Jul 2025 04:00:20 +0000
Manifest next update:     Sat 26 Jul 2025 04:00:20 +0000
Files and hashes:         1: 0HSSdKGUJ1V74tRivg_DBTfUJug.roa (hash: 0GuMJkfhc9at/c8JLxWNa9SV+TQcnIp/5frD3uM5gT8=)
                          2: 0cnj558EOjikahEp8WX4VbLOubg.roa (hash: f158xPAAdd0ZG1iUt85VbS08KHTjeF2/q33G/RBnAZM=)
                          3: 1d5tIKFWKjHBDKkGnBRvTBWCJAk.roa (hash: fRtqk0iZm2CdbdhKX93X5/SECEfnUXkhKcE8ZqaJIDU=)
                          4: 4EZAXXjg-wdq7F5nmE22LQpMjC0.roa (hash: kcJ5zcoJ0uYbLEoOLz0za2EfJtjkENsqcX3HW2ukm9E=)
                          5: 8eOXfqAkJqXP3wXDUaIxraOki3I.roa (hash: R7bxKwNtqC/oTBwL83XqaIAv5I/52rZnoW3WSovbBso=)
                          6: AXHQCfctIE8qm3CfgJv5m741MvA.roa (hash: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=)
                          7: AqZiwYxbJJKU6sbeWYL6QjFjjCI.roa (hash: Rp1l+EARGnu+3ML8br5NRV2qxEwQsfw/DKCrRjQMQbQ=)
                          8: D39tyqkHzUar743HSOtaz_PbEVw.roa (hash: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=)
                          9: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (hash: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=)
                          10: HJxJ2GZiFuqjR8HWNpRugSy_a_s.roa (hash: a72+7u9UjrbbugH23m2wS6cJe4aft6U1gF2Wvpqdh0E=)
                          11: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (hash: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=)
                          12: PBJjwWm3FNYmKDKlr11pHLlOrGk.roa (hash: /EDjQB/ySBsTi6pfh4zRjgsPbhtNFWDlr8va/X/KOwc=)
                          13: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (hash: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=)
                          14: TwzZQrIn09c-90CtvFLCLT3vcWs.roa (hash: uBt9dC+yxyfdnRMBiRH64GG0vCjQQ3KJBUaUSBKn8oI=)
                          15: Uam3fdY-U_8FUcIs9C1Cu9j0kXU.roa (hash: lAwNykQezUevV1G5+PHKNJlIk5Yd8h58FItNjQ6jmrw=)
                          16: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (hash: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=)
                          17: XJQW6cjujhEORDl3asfzceRsQq8.roa (hash: YLe1WKPBAxaQWWhGaDY3bNQMSMuaVm8vzXhx0IIMUzM=)
                          18: XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa (hash: 6fvlVJZbvpl7K75DLt8sGvC1abVm/uU97W3kp9Hv4hM=)
                          19: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: ApCe9Ek5gGGbnZN/jpDeFLAiYIZq5KjcsP9f9uzv03Q=)
                          20: koKSsh0-VJlmkHnyY2l_458AY1Y.roa (hash: wTDfdV34gD9aFGM5sgCKWF1UFQUQvF6lhIIkmPFqzYk=)
                          21: lXFx9ALxZQorihL48BvDF3NJkOc.roa (hash: XO0/325FUJcPPA5WPlVW2WrXVo9UePYr9iPMeGFfH+o=)
                          22: mYlveqhAa04nv4cUvO9CIMDxKTU.roa (hash: wOaLgCiZMkxV/uSkkzETO+e72n7uVYHt9KIoh0cqs14=)
                          23: oASSpW3DbHAVm3j51eaZaxJHZhI.roa (hash: yrEWLwCdNgFCB4MeKY8zqq0fw2GLTP+HZekfTPCwc/g=)
                          24: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (hash: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=)
                          25: q9Fght0eWnwg9L4cOjC-8MWuD_0.roa (hash: DogNwIUzNPICLsbvaitegQlMAv0jPMlhURxKnx1oUnY=)
                          26: roxXwaFrf3KkjRm0sygAv7oGPuc.roa (hash: +XL9L+dok2bHXelVksLQxh9+U/cP9zrebc0SlrcIfKY=)
                          27: s36NnV4BEmNAGVVpW4Q6tZ1SdBs.roa (hash: +o3+HumRoGhYfsOubY4wwqGbFSgOLOFq9cUXdWeku6E=)
                          28: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (hash: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:bd:33:09:e7:eb:48:ab:c6:a3:75:4d:84:f0:1a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Jul 25 04:00:20 2025 GMT
            Not After : Jul 26 04:00:20 2025 GMT
        Subject: CN=6a0e558954b58eaf6a89ad0195f139e985f11be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ee:48:8e:24:82:e7:41:81:4a:8c:4b:a5:f0:
                    5b:f5:db:20:38:83:c0:ff:a7:06:92:75:c1:20:12:
                    7b:f3:a3:1a:0d:90:9c:77:d2:3c:67:12:e4:82:b1:
                    e5:93:14:c2:ce:3d:78:0b:79:cb:56:81:75:33:f3:
                    8a:93:49:53:a1:32:b4:63:7a:77:6f:7a:d3:8b:6a:
                    6b:4a:09:06:ab:32:05:c1:27:2b:a4:b8:03:79:ef:
                    28:81:48:74:0a:60:e9:16:89:bd:75:67:10:bb:2b:
                    47:9a:16:50:d3:d2:66:dc:a0:84:31:e1:22:ca:cd:
                    c4:e3:10:af:28:e6:0d:6e:7a:1f:22:ae:f6:58:cd:
                    5f:e0:51:47:b7:d7:cf:92:7c:13:59:29:28:90:74:
                    a4:69:08:2d:33:19:06:a7:57:a3:38:9a:28:e2:30:
                    bd:e2:43:cb:f0:5e:c3:a0:d7:93:9a:f0:f4:e6:d0:
                    7b:14:ca:02:f3:f4:d1:ed:7c:1a:f3:81:de:30:36:
                    c6:ef:95:e9:68:08:49:43:01:7e:16:ec:4b:1b:0b:
                    47:76:4f:d9:9e:74:57:7f:49:73:b5:02:6a:2a:17:
                    64:d8:8b:a0:a5:17:72:a3:df:86:36:9e:ef:73:2b:
                    ac:04:5d:f8:37:03:7b:8f:95:03:65:50:41:8e:3e:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0E:55:89:54:B5:8E:AF:6A:89:AD:01:95:F1:39:E9:85:F1:1B:E2
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:f4:fc:4f:e6:01:13:3c:d1:2d:85:be:f3:80:35:e4:27:
         db:32:7c:74:b9:4a:94:04:56:5f:e2:85:6b:2b:77:4c:7d:37:
         5f:7a:9c:c9:e8:79:8a:cc:b8:d0:62:32:5d:ae:4b:3b:fd:5a:
         86:68:d0:36:27:f5:d8:4f:ac:d6:a3:d5:b4:54:ea:93:ff:ff:
         6a:3b:ac:f1:0b:94:96:c3:c1:a7:0d:20:dc:1d:ff:a9:f7:7b:
         69:ad:2b:98:51:4c:d6:1d:d6:c5:37:ee:e2:37:fc:44:20:e2:
         47:50:98:97:51:76:6c:5b:ff:73:08:2b:1d:9f:e9:f5:39:43:
         24:d7:5b:5a:b3:07:c8:ca:50:51:54:6a:ea:46:62:eb:6a:d7:
         bb:23:13:d2:52:56:e5:81:bb:40:09:28:e9:74:02:21:a4:e9:
         91:7b:71:88:ee:b7:f7:7f:99:d2:bf:36:51:57:10:f0:42:ef:
         64:a1:1b:4f:78:78:fd:a1:28:47:fa:d0:fb:4a:f2:8f:46:8c:
         8c:59:02:9c:30:49:60:d4:4b:28:75:95:14:e6:8e:cf:f5:ee:
         02:41:7e:df:6c:43:67:41:16:6d:2a:82:47:6d:80:af:64:55:
         49:a1:2b:a6:58:29:34:f5:d5:9f:8c:b6:3f:d9:0e:8a:c5:ea:
         d6:e3:38:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/vTMJ5+tIq8ajdU2E8BoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwNzI1MDQwMDIwWhcNMjUwNzI2MDQwMDIwWjAzMTEwLwYDVQQD
Eyg2YTBlNTU4OTU0YjU4ZWFmNmE4OWFkMDE5NWYxMzllOTg1ZjExYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e5IjiSC50GBSoxLpfBb9dsgOIPA
/6cGknXBIBJ786MaDZCcd9I8ZxLkgrHlkxTCzj14C3nLVoF1M/OKk0lToTK0Y3p3
b3rTi2prSgkGqzIFwScrpLgDee8ogUh0CmDpFom9dWcQuytHmhZQ09Jm3KCEMeEi
ys3E4xCvKOYNbnofIq72WM1f4FFHt9fPknwTWSkokHSkaQgtMxkGp1ejOJoo4jC9
4kPL8F7DoNeTmvD05tB7FMoC8/TR7Xwa84HeMDbG75XpaAhJQwF+FuxLGwtHdk/Z
nnRXf0lztQJqKhdk2IugpRdyo9+GNp7vcyusBF34NwN7j5UDZVBBjj4B/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoOVYlUtY6vaomtAZXxOemF8RviMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApW30/E/m
ARM80S2FvvOANeQn2zJ8dLlKlARWX+KFayt3TH03X3qcyeh5isy40GIyXa5LO/1a
hmjQNif12E+s1qPVtFTqk///ajus8QuUlsPBpw0g3B3/qfd7aa0rmFFM1h3WxTfu
4jf8RCDiR1CYl1F2bFv/cwgrHZ/p9TlDJNdbWrMHyMpQUVRq6kZi62rXuyMT0lJW
5YG7QAko6XQCIaTpkXtxiO6393+Z0r82UVcQ8ELvZKEbT3h4/aEoR/rQ+0ryj0aM
jFkCnDBJYNRLKHWVFOaOz/XuAkF+32xDZ0EWbSqCR22Ar2RVSaErplgpNPXVn4y2
P9kOisXq1uM4mA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 13:09:30 2025 by rpki-client