Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          EoKaO9/z+2NP9jFPXLtoFX9a00n/W8oMNLAHigG+jbQ=
Subject key identifier:   C5:87:4F:F7:13:F2:63:76:8A:F4:6B:59:9D:A5:A5:F3:1E:1C:60:F6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       0198402B60B52ADA7E1BC7F83072F3E88B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          16AB
Signing time:             Fri 25 Jul 2025 06:00:41 +0000
Manifest this update:     Fri 25 Jul 2025 06:00:41 +0000
Manifest next update:     Sat 26 Jul 2025 06:00:41 +0000
Files and hashes:         1: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          2: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          3: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          4: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          5: 6mAjaUbGCbkM8iCo-C2tquoZsiY.roa (hash: HiQrH3r4qc9InJ7GnT9HiOdxmAD3SaE5z9M1Of1Oe1Q=)
                          6: 7fPxL-uHp2NClvaUSSes1QZFjgY.roa (hash: 10Jo3zGeUKwhoqlKRLe84C64rFl5TQbdrOY/xZjeKog=)
                          7: 8b8XZgUbZkWVFARpp7m9ZlqzKIQ.roa (hash: 06IYEhQv7ltXVIjI7b9mEeuvOzSH0qVlwKSUK1Gp94c=)
                          8: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          9: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          10: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: Ya3EmT153ehvYVfds5KTEoGq0fNx2lDs0hodhGuXMR4=)
                          11: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          12: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          13: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          14: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          15: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          16: GlJLYgf16agSfqwntlZ-9s0ycuE.roa (hash: H/pf+nizH//gW/qa/JKNB79H5K4HjIq/Ki214ycp+sk=)
                          17: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          18: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          19: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          20: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          21: LaajQT8UwBWFNaRi-jIojBq0WyA.roa (hash: ZkZjakVN6aPN1d4jYMrA0iD1EVTfF2LyjXQ1E06pZwI=)
                          22: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          23: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          24: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          25: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          26: S-LyAPTyjR_trxSWtQRZeOWC_3g.roa (hash: mdb3EARrdNQMQqJtEZ6Yv2aaf9muu1ZlrouX6RhltB0=)
                          27: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          28: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          29: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          30: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          31: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          32: ffSTkNPIiZpEtpWWodnp-E62PR0.roa (hash: zfi9z9vv9i6kZpAB79iGBR0mg0wwIS76zddY9IyYsTk=)
                          33: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          34: jzZPQyTPxHmOrfm_zSEP30f3jkY.roa (hash: tZU3gCj8FKHIIHdBn9jyrUtj2ivWD71dmLJ5zAo81Ls=)
                          35: lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa (hash: o+KPskkXXJU6m9owbhikJKpLSsQPEnvEdVWpnWT3wq0=)
                          36: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          37: n_ERAGslTk3vQyjUYN5Y-K_UqXk.roa (hash: 8P793j/53ZScruOSOWiU0UBEL/rR3GoLLeExoTt6Gqk=)
                          38: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          39: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          40: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          41: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          42: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          43: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:2b:60:b5:2a:da:7e:1b:c7:f8:30:72:f3:e8:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jul 25 06:00:41 2025 GMT
            Not After : Jul 26 06:00:41 2025 GMT
        Subject: CN=c5874ff713f263768af46b599da5a5f31e1c60f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:d1:44:16:2f:a6:a1:d1:ec:2e:05:b8:ec:
                    75:57:16:94:59:c3:33:1c:ac:55:42:fe:42:ed:65:
                    b9:b8:35:44:1a:c1:64:92:46:7e:d7:a7:e2:cf:a7:
                    de:3e:52:87:43:0f:f7:a2:f0:be:11:46:8c:13:3a:
                    61:9a:68:6b:88:a0:b3:ab:59:d4:71:44:ec:03:4e:
                    e9:2b:af:62:19:2a:cf:b7:c8:f3:13:df:5e:fe:a5:
                    f2:03:19:b9:3e:b4:64:45:e2:f1:21:13:ee:b3:35:
                    f5:74:c1:09:99:61:87:4f:98:84:b2:65:97:00:7c:
                    4a:3d:80:19:f0:8a:e7:81:07:86:5c:38:04:e3:25:
                    28:c0:13:9c:41:5e:b5:b4:f8:2e:e4:0b:29:a8:5d:
                    0b:b8:fc:57:78:04:b9:2f:3b:fc:64:8d:bb:c1:85:
                    88:c9:d6:58:a4:89:40:92:f0:e3:ac:d1:83:c5:5f:
                    ab:ab:74:5b:c6:18:9e:8a:69:75:c4:73:97:57:82:
                    55:17:4e:61:c2:78:68:bd:c1:8b:aa:4c:d1:a9:7f:
                    12:32:7e:21:03:42:2a:a1:9c:14:d4:0d:55:ea:62:
                    11:e0:e3:43:4d:7a:ef:0a:e4:03:0b:57:23:32:f8:
                    b1:e2:35:68:63:e7:86:26:51:bd:61:54:c0:06:1b:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:87:4F:F7:13:F2:63:76:8A:F4:6B:59:9D:A5:A5:F3:1E:1C:60:F6
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d0:61:5d:a3:c9:9e:33:6c:58:f7:39:90:34:a7:a8:79:65:
         5a:fe:6e:75:b8:32:7a:03:e7:99:a9:a6:50:14:77:1d:58:e0:
         a8:7b:df:05:f6:74:b8:a6:47:ef:3d:14:d3:cf:95:86:86:be:
         6c:b2:a3:aa:44:f1:d1:67:ff:3e:d8:70:f1:2a:e4:3a:c7:40:
         c8:98:35:27:99:28:35:e6:ef:2c:b9:9c:2d:59:c4:1b:f6:7b:
         66:bb:b5:87:e7:0a:5e:d6:a8:93:54:35:e4:27:87:ec:83:8d:
         16:5e:ac:0c:77:60:f5:36:92:20:95:40:18:14:b6:74:b8:51:
         28:b9:8a:3e:eb:c9:46:37:21:7e:7e:89:1e:81:7f:d4:34:19:
         07:ee:5b:40:82:d9:93:6f:bb:e9:c9:b9:6a:9a:35:8a:96:10:
         bb:b9:1b:cb:38:0d:27:08:62:34:f1:35:f2:06:80:35:28:48:
         e9:db:a7:74:53:2a:e4:1a:dc:62:e8:e0:12:5d:8d:3c:e7:c1:
         73:78:ce:40:dc:64:d8:9c:0f:9e:73:a0:d7:a0:21:c1:5b:82:
         37:5c:b3:a1:56:a4:79:cc:c3:61:7d:dc:99:e8:7a:a0:b9:6e:
         e7:59:1d:86:ce:f5:94:53:e5:b0:77:d7:d5:8e:78:8a:26:bd:
         ba:da:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:39:55 2025 by rpki-client