Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
File:                     mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft (raw, json)
Hash identifier:          I2osrjWwYw4fTrN4iqWpOtKDStP1CnFqGQAeWA/ClPI=
Subject key identifier:   38:36:AA:7B:04:DF:C9:9C:41:F1:08:50:8D:C8:53:5E:04:01:E7:26
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       01982CA4CE39110F1881960668F96CF4189E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
Manifest number:          14DF
Signing time:             Mon 21 Jul 2025 11:00:54 +0000
Manifest this update:     Mon 21 Jul 2025 11:00:54 +0000
Manifest next update:     Tue 22 Jul 2025 11:00:54 +0000
Files and hashes:         1: 1x1LdBJHgR3nZ-BgjfUwB7fuBOg.roa (hash: javRYznih2o3aqrBSrIj+d4qz5z2JMqx0uFRrEUJa1s=)
                          2: 6DiPHYmXhjx8dlm5fEGv1KFnYxo.roa (hash: AZBYul/WYrAc9HAfNCdaLFVE9sGftC+yaREw1QQ3tuA=)
                          3: 90rSHfnt7HiWRoKGGqHBlUnJsTQ.roa (hash: 09nPRePzH9i5Sl1fuFjxUY9xVig05yvTgM0A3Qoz8S4=)
                          4: 9OBeYetI89tN5bzHC0We7nAe0c8.roa (hash: JQiGQF8hr3Jc860TYChxUw28nKs7bCAae+7SdCc2ojI=)
                          5: BDdGh1HAKaPwVV1exuSfoiuaxX4.roa (hash: qb+7Rwi7E1y6pe36P5HsREOCOT62uFVpv6KxfmCI4os=)
                          6: EUfATmkq1EdILfqvyPSZpu5gYIY.roa (hash: EymBkyrzbsAzI6nGiRxDgokuIHCyxUG6foppebGgSuY=)
                          7: HJ_wo5Jbuxp4qnrZBQUIi65JhWY.roa (hash: DSNEOkNbVTMJpehcwCD5uUrnbWY2S5duj9hYg12RRR8=)
                          8: HjuXXXUSfXncfn8MXn1opXEusBA.roa (hash: de3QC+08N81qaw/xj5AtjMnXwbIYVfRII0xnXRjd9Y0=)
                          9: Ky_o2gJmcuRwCykA12haZzX257w.roa (hash: 2SLVXpJ4g5619E7GOfQUMXqFNCcVwKAQTwJMwj4QH2Q=)
                          10: L_PCaE35IO-qmsZFzareoXO-OdE.roa (hash: /SoOqUd4jD4ofPzvuIzFnRTejbY+t7TCz8ejddC5DkI=)
                          11: M4-LdIp_MqHF6qgOq3JN4pLRykA.roa (hash: zv5zfgWQAHHHUjh71ZARM/6yiSaQ31Ra+x9XeFztt3g=)
                          12: MNamUZCYqQdFWw9w_it4xBJQr64.roa (hash: TpVreUAYeyR1Peo8xeqq7r0L/O5Z6PIyehd9gPqsYhs=)
                          13: Pfx3IJh8SuElodyre5q4vdzq78M.roa (hash: pUe6+x949j+TBdOr3Idd7yIOOOdJWyWlO510vjWutko=)
                          14: QYFyLiA_3R6huFbxIua2tfyfZxw.roa (hash: mx0YJqmSn+IbdyskP4BBrOaMK8O15GO8GpWVAXfey/k=)
                          15: RiXc0w7t5xX26ELQVBzhzQ5s3W8.roa (hash: 1Vxr9lUuAjIlr6KEnNoJwv1Uhv0dUKXRd0yNKLuxU4U=)
                          16: VZHW6rjyqFUw5PpJCfG7Llm9K04.roa (hash: p7+PhrcC7nR208puZ46Q39WDPHfZNGz6H7XAAAtxhuw=)
                          17: YfrssvNZwD5AZRP5wjIDlwhUYus.roa (hash: tPXQTvoaXcl4YYnl0ID2xIvC18Gr1STlvJkQBWEziQ0=)
                          18: _NnvVvLlvqtdHHcZRyUsiHUEkKs.roa (hash: es5WKgZ/L1Jato5AQPBVJDwpXDUM030k+h+RNYgLMtA=)
                          19: bAre1OnQ-S06l58QEUg6UYK05F8.roa (hash: QR2q/y1snnMAQcqEMi3pVb5/K1OVjUGZNbsfyA0UMuY=)
                          20: cED4rrKmSCvGfS67cpWVFvr3cHQ.roa (hash: y22hsDEN/Sto2EwHMHl8+2qE8moFlDYks2CyeDAa8Eo=)
                          21: dpUSEqq2Td5Ojfpc-JREefZXxPs.roa (hash: msHaxVjZ5CD8wRvnjTeIWRsAk+xkoIdkahWOUGnkktQ=)
                          22: fybdIHA9DF4GQd_5SQpCxD5YkQk.roa (hash: 9fHnp+Z1hwDJgNt3MhcZu/wBTpgkVY1rH7qzO8dKEB8=)
                          23: h8TFx7LySk9G9awVrMrjFHblEYQ.roa (hash: jkpS9ke0q9EXP5S35iE/9oGgCF2PK+eX0C8XKuqgRNM=)
                          24: hV-qNyT8ttunpu_f6R8IO_bNvNw.roa (hash: VGRn/MmvlR8cKE/rXsWSxATXTgYDFISD7K7nqqWj5gA=)
                          25: h_ISqfLip0HBjZrqefrLbw1u9Qo.roa (hash: C++Jh843tmFk3SPjLWZKi19wFJNEgD8xbR+oyUwhKMk=)
                          26: hhy_H3R0WF-dr485QZRdqYkj6Sk.roa (hash: ILkgpOgTRFsVyKk6aD2w0cSKSsWTAQh6L+29UxCjaY4=)
                          27: jt1Zmt4DT_Y7sXSl35beVxp19QA.roa (hash: DdgpSXcI3OxSMNfJJ9ZhlWPoGPhoA4vkTZiBlBg5a+8=)
                          28: mKGOkm5u0T9IdH0S04-7xgUuAno.roa (hash: We4iFFujIIuPiWeh69F9/uOh2Wx/iRl5rE6U5/MBWsA=)
                          29: mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl (hash: /Kgi5qfKd50lxSGg7UQsEPie+Z5zqFdwPMISeKn9iE8=)
                          30: qSptZY9DA7TTOw01rjMccBEg63M.roa (hash: 1Ge8t7ARNpBeDac8VWbtlsdj9yB2OCW7N5eD5ZuctIE=)
                          31: qxdWVUWi_796FeERbGwX53IBTsA.roa (hash: ZLCkWXDfFCrHd3zvBgNV0bD9126xAMdTedsTZMd75vw=)
                          32: ySGsvh67MYvKSZ672BqCPtHzLsU.roa (hash: pDVKIz1QJl+kifgxZjG1oOAyqzen5YR3gsjSQ4AiIqI=)
                          33: yzzFmTHK2NMZuZ2AAk8SnQ-1m5w.roa (hash: E0pDySpIPcBOXgMkb9NUkzPB+ZNaFjuo0W7UzF4MzNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2c:a4:ce:39:11:0f:18:81:96:06:68:f9:6c:f4:18:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Jul 21 11:00:54 2025 GMT
            Not After : Jul 22 11:00:54 2025 GMT
        Subject: CN=3836aa7b04dfc99c41f108508dc8535e0401e726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:80:6f:54:69:31:fc:88:a0:73:ea:bc:f6:
                    aa:e0:6f:43:60:84:a1:b8:0b:78:99:de:67:12:50:
                    4f:f2:eb:6d:6c:30:78:a0:06:86:cf:fd:0f:0c:52:
                    4c:bf:9d:33:ba:4e:df:c2:63:90:5e:49:35:a7:3d:
                    65:51:87:7e:3e:b7:c2:45:82:df:a9:a2:9c:d2:c1:
                    f5:96:28:25:ab:d9:b3:30:4d:73:dc:2d:e3:ee:31:
                    3f:31:78:4c:1b:c0:7b:5f:fe:d2:a1:db:96:b1:6c:
                    af:76:af:2b:49:c4:e0:7a:e6:f8:a8:b5:40:0d:7c:
                    00:46:2d:32:a7:e7:76:ee:20:df:25:5f:47:9f:03:
                    07:00:ae:72:f8:a9:3d:12:0c:5b:fb:1d:45:fd:7a:
                    48:a6:58:fb:08:f7:6c:8a:e2:86:6f:f6:e4:48:1f:
                    41:03:fc:f9:5f:b4:f0:61:d4:64:8e:9a:f4:cb:9b:
                    e5:2d:ac:75:a1:4a:82:db:a7:30:4d:58:fe:86:ef:
                    c7:a8:46:20:73:4c:8d:af:ef:98:ab:b7:73:89:99:
                    52:2c:95:76:bd:3a:92:56:5b:3d:9a:ad:13:ff:12:
                    1a:c7:3c:7e:e8:b1:35:a6:d7:e1:bd:87:f2:ec:0d:
                    a6:05:08:0f:72:f6:2a:fb:f6:10:d4:f0:50:97:84:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:AA:7B:04:DF:C9:9C:41:F1:08:50:8D:C8:53:5E:04:01:E7:26
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:e6:c9:53:a3:94:f8:3b:55:49:a1:12:b8:29:a0:ce:3f:
         78:cb:29:ba:2c:d9:87:7a:b5:95:21:0e:ac:20:45:da:b3:3d:
         be:94:c2:10:40:d1:e5:a7:30:0c:ae:6f:2b:04:72:35:0a:1a:
         36:cd:18:5b:05:ce:b1:4e:5b:c2:39:b0:fb:10:b6:db:3b:75:
         10:63:d5:9d:ec:fa:58:cf:0b:0d:d7:85:78:1b:6c:4b:f0:a3:
         c0:e4:fb:59:79:aa:ac:99:6a:16:46:7a:af:91:d3:83:b6:6e:
         a8:9e:5d:f0:bf:0c:b3:c4:71:9f:95:14:cf:bf:a2:1e:78:37:
         9b:59:20:ac:80:e2:62:4c:f4:94:ac:7f:35:69:5c:17:68:35:
         0a:9a:96:24:c6:7a:6a:28:eb:c3:cd:19:88:4a:e7:2b:a1:e4:
         3b:dd:80:df:ba:71:45:16:2f:cb:29:89:ae:d1:11:74:a4:6c:
         f5:85:c4:b3:50:ca:61:2c:ed:6b:14:d3:f8:47:97:b0:ef:34:
         c3:ca:6a:dc:a0:ca:47:dd:dd:b4:96:20:49:bb:86:10:89:b9:
         30:98:5c:ff:70:ba:4d:1d:25:fd:8f:78:ee:8d:fd:6f:54:e8:
         6e:69:57:b8:11:32:79:c0:e3:30:9b:a2:b5:69:de:18:0d:ba:
         96:14:2e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgspM45EQ8YgZYGaPls9BieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjUwNzIxMTEwMDU0WhcNMjUwNzIyMTEwMDU0WjAzMTEwLwYDVQQD
EygzODM2YWE3YjA0ZGZjOTljNDFmMTA4NTA4ZGM4NTM1ZTA0MDFlNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xKAb1RpMfyIoHPqvPaq4G9DYISh
uAt4md5nElBP8uttbDB4oAaGz/0PDFJMv50zuk7fwmOQXkk1pz1lUYd+PrfCRYLf
qaKc0sH1liglq9mzME1z3C3j7jE/MXhMG8B7X/7SoduWsWyvdq8rScTgeub4qLVA
DXwARi0yp+d27iDfJV9HnwMHAK5y+Kk9Egxb+x1F/XpIplj7CPdsiuKGb/bkSB9B
A/z5X7TwYdRkjpr0y5vlLax1oUqC26cwTVj+hu/HqEYgc0yNr++Yq7dziZlSLJV2
vTqSVls9mq0T/xIaxzx+6LE1ptfhvYfy7A2mBQgPcvYq+/YQ1PBQl4QTUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg2qnsE38mcQfEIUI3IU14EAecmMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANF/myVOj
lPg7VUmhErgpoM4/eMspuizZh3q1lSEOrCBF2rM9vpTCEEDR5acwDK5vKwRyNQoa
Ns0YWwXOsU5bwjmw+xC22zt1EGPVnez6WM8LDdeFeBtsS/CjwOT7WXmqrJlqFkZ6
r5HTg7ZuqJ5d8L8Ms8Rxn5UUz7+iHng3m1kgrIDiYkz0lKx/NWlcF2g1CpqWJMZ6
aijrw80ZiErnK6HkO92A37pxRRYvyymJrtERdKRs9YXEs1DKYSztaxTT+EeXsO80
w8pq3KDKR93dtJYgSbuGEIm5MJhc/3C6TR0l/Y947o39b1TobmlXuBEyecDjMJui
tWneGA26lhQuLw==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:07 2025 by rpki-client