Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
File:                     _6PlUUHBofny4ogR7X53-tN4pXk.mft (raw, json)
Hash identifier:          GI9g+xIYnEbaYMKZymlLRKrD5y3SwtFOEXA9pR2qwpo=
Subject key identifier:   CF:C7:F4:13:0D:C0:6D:29:BE:F2:C1:86:F2:2A:1C:17:09:33:44:F0
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Certificate issuer:       /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial:       0198C72477E5F7DDA5843E6512D5D38FCC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
Manifest number:          D4
Signing time:             Wed 20 Aug 2025 11:01:52 +0000
Manifest this update:     Wed 20 Aug 2025 11:01:52 +0000
Manifest next update:     Thu 21 Aug 2025 11:01:52 +0000
Files and hashes:         1: 1ktZ__QBZQJhr6td-j2y1lPsH0Y.roa (hash: ZeBdAex32fIBibWxzRAB32+Xc+t5aMNsAPI15028GD0=)
                          2: 2BvTXjgUGBdVazBl9R0rI8aVXH8.roa (hash: LwQNYNCiZ0elUuLsbCnZidi2QzQA6CyvxS0RU9ud07I=)
                          3: 4-vYxyhnMFg8g2GoAICz0gIA5cU.roa (hash: 1IOZIZukZ0mqYKU73DEbR5zJSh5rbtwU8m/B+Gd4qfg=)
                          4: 4DkoIbhRs7RG_RskDtCAPh40HCo.roa (hash: z4aVVawhmrJyh75Zpc2/LXH4fln4YqcLnq1NTg95G6I=)
                          5: 54rdq1RzB_GEfYfnhrY8auLzI-8.roa (hash: A5ig+GhFLhDvR/IVx14Ak59xO+tpID+lMnxki02sJ7c=)
                          6: Bh3p9PN7bX04MpOdCZhqiYpBGpM.roa (hash: OEsd+BIuux/Amz7SUuNcWCDDcAkpS5Z2bjzH6KdhO94=)
                          7: Jz85AN7DsUiRNmIqgF03io7PReI.roa (hash: O81WTEhtajm/bUP+G1F7OmyUOswqSuX+9lhe3hsR77A=)
                          8: McVjfCOWfpHaaVECbZO-SUISLIE.roa (hash: mXVtd1TlBbxdfZd74Ue3xhKpBK/9c9rl7jvJAmPY+yc=)
                          9: OStASbykJW00B09ik-YszmXQIrs.roa (hash: WtLfbQMK5RomnIWBiuwJyhnhCZPxJP0f2NJT5b5t7b0=)
                          10: PwVGcN7-AG25Z_EVB5mSMrRZw_U.roa (hash: n+BI0dcWDz0/rfHuwVL/W0fA3VHX5rbe3Re+nTfH5+g=)
                          11: R41rs6s-Tc1cDDxqdBI9fOM5Kl0.roa (hash: F2a3feWkqTKCmrLKvj4Yvt9DlfYEN9Xj78gy7DRuoA4=)
                          12: SFjeqOASRO7UaTji1Zm6-RBu61g.roa (hash: Yx5TV1nxZdFx90sQHJN42KeWhaWZPKKBhbXLKBfzOb0=)
                          13: TvdThVHETAyg6a2OM-U_f_4auDo.roa (hash: 5xDjGf81jyMBiPusI2d8aGtiwHkGJjAbolH/HA/FtHQ=)
                          14: X6xPCrsCRLv8UOVS5VxXAE6UASo.roa (hash: 5O8R+cyaD02PpvW0wsU6knZYGeeWEYH6jAmBJ7+mB2w=)
                          15: _6PlUUHBofny4ogR7X53-tN4pXk.crl (hash: s6WQIzV3BVdCWLouZJhQRkvKRw7RUp/jYDci+tqxaKI=)
                          16: aCwz_Mu0x6nfpsF7RhRXtJ8Yky0.roa (hash: NKN9PGBXhzRHeFaPt4vHcboc41Tk44R7pRG+Z5IpT20=)
                          17: c1QEBkwZJTZgFKUcbn3xIA8pdjo.roa (hash: 8kaxbWHuGnNv7ua7OOOvONsEfTPpavIlvOAV4+e3Mqw=)
                          18: eKppd7a_Kfev3h8hlRBbQ2NtYUs.roa (hash: NmXfAvGyB/7+zxwc09ppRHJqfRj2oQfoRY71HPHH6p4=)
                          19: eipG1cFfCbtcmyeYg-afk6QQXCc.roa (hash: wzLWtbuK9fwc8okwovVPLb0fDJAOFKSCTS0vnEi6LYU=)
                          20: erIPsMcrnn-1qtvunBUFAtuT9FQ.roa (hash: zJP4bliAEtdtdUwrPaS/xb72iPe/QbyyZr862b55WCY=)
                          21: iILCLHyI0DMBB7xsRlgsIJuwTYg.roa (hash: tYGOsYLGRmqm/N/3bZJ/U+PnUaKH+8pajHWj/xnPci8=)
                          22: iN8iGmO4CUNsbBhQHu3VPVJZ8Os.roa (hash: Y3/Eyl4m4tujfRwZvVCkNud1HcodiucVo0kO5nOkMj0=)
                          23: lJr0eEFal3w90uR7K16PpdGtVeA.roa (hash: bXds5HYnzryvezFx31bM2CqWbCYx96m/VpImkS9zFgg=)
                          24: mieo6q4kqXbAv4lgdAxAjMoeO04.roa (hash: 2kXDAOiUQLlDnQTkZK1Zhl9acYl5RWVv+sp+9UyvzhE=)
                          25: tW5_MsXD8Z4eNdzGvaYrrYbe0cU.roa (hash: WKSd60p8hM1W1T4D9foAZg6Eq4OfyzlxAtqhj0VcOJI=)
                          26: vAOPrMQ4DvCkIl8pRCOHXClQmmA.roa (hash: 0aROE+eJRjt32yMRTPG1pw5b6bdh86At5DwLSKErW9s=)
                          27: ywHGgOkBuIFuQ-37IUa_7YfSrIQ.roa (hash: 85YMqA7kEUYc+L9EjtFiT9Np9E2n/omhe60VgHOcdbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c7:24:77:e5:f7:dd:a5:84:3e:65:12:d5:d3:8f:cc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
        Validity
            Not Before: Aug 20 11:01:52 2025 GMT
            Not After : Aug 21 11:01:52 2025 GMT
        Subject: CN=cfc7f4130dc06d29bef2c186f22a1c17093344f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:29:5b:bf:79:49:1e:ad:60:a3:eb:b9:6c:
                    65:89:53:2f:ef:36:20:2b:3e:29:39:aa:54:34:5a:
                    ea:a8:15:c2:b8:0b:38:4e:78:43:2f:80:29:18:28:
                    e9:10:4c:31:0b:55:5c:97:72:4b:c5:16:a2:7f:4d:
                    a4:be:cf:89:ae:ce:12:4c:45:9e:17:f2:ef:7c:72:
                    a6:02:73:b1:13:4d:49:d1:a1:81:7b:db:74:8f:dd:
                    2e:4f:c4:28:eb:3e:26:a1:ae:a0:96:6c:b0:f6:4e:
                    5c:53:b6:81:fa:c4:30:2b:37:bd:64:e9:9f:ca:e7:
                    8f:7f:8a:59:08:92:eb:0c:b6:04:00:fa:0a:23:8c:
                    57:0e:71:53:65:7c:70:4b:6b:f8:6a:8c:a5:18:19:
                    19:56:3b:cd:90:60:31:ef:01:44:a1:71:51:00:f1:
                    47:90:88:c0:f7:78:d8:80:8d:f7:3d:b9:2a:b8:9d:
                    ba:61:3b:dc:71:fa:3f:c7:7e:cd:4e:4f:b6:e3:cd:
                    51:76:b4:99:c8:57:6c:58:eb:84:b3:67:ae:94:b9:
                    ff:32:ad:d9:95:6b:55:8d:4b:47:67:51:8b:a6:2c:
                    ec:fe:ff:bf:5d:bc:74:ea:50:aa:14:56:32:1e:e2:
                    50:20:9b:ee:41:ec:3c:44:b6:91:65:d4:38:71:9f:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:F4:13:0D:C0:6D:29:BE:F2:C1:86:F2:2A:1C:17:09:33:44:F0
            X509v3 Authority Key Identifier:
                keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:99:26:7b:85:94:f0:c4:da:17:bc:4b:3c:13:cf:8b:9f:
         9b:be:be:51:07:0d:ab:28:40:30:4d:8c:66:fa:04:c4:0e:4c:
         02:e5:99:49:8f:79:e4:0b:7d:eb:a6:b1:23:d2:1c:26:ae:f2:
         66:32:22:81:2b:4d:87:a5:10:b7:eb:92:0c:5f:e1:38:94:a2:
         5b:59:81:8a:4a:3a:2b:c3:ac:7f:88:bd:52:09:ca:26:ab:4e:
         9b:c9:47:bf:c2:b8:d2:d7:4c:36:77:ed:02:b9:2d:fa:93:22:
         34:88:7c:4e:50:61:51:44:1e:1d:ef:34:cf:d9:bd:09:b8:4b:
         94:a7:69:5f:b6:4f:dd:7f:14:c5:ec:12:6c:e3:7c:2f:3a:01:
         32:80:9b:11:74:99:61:88:f4:6b:31:d2:d0:da:2a:64:1c:81:
         a5:39:ef:14:03:a5:70:f3:02:cd:43:82:13:cc:91:be:78:71:
         e7:0c:4b:5b:7f:39:00:8a:e2:bc:82:47:ad:e2:6f:6c:0c:48:
         25:e6:9c:28:3e:11:93:13:a7:6e:67:44:16:a0:4f:16:3b:fd:
         1c:b6:de:c3:9a:ff:d6:02:9a:c4:15:70:92:4d:97:17:83:d0:
         e9:36:c6:68:8f:b1:1d:0e:71:62:11:7a:5c:ea:0b:ac:fe:85:
         33:0d:13:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHJHfl992lhD5lEtXTj8xbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjUwODIwMTEwMTUyWhcNMjUwODIxMTEwMTUyWjAzMTEwLwYDVQQD
EyhjZmM3ZjQxMzBkYzA2ZDI5YmVmMmMxODZmMjJhMWMxNzA5MzM0NGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEwpW795SR6tYKPruWxliVMv7zYg
Kz4pOapUNFrqqBXCuAs4TnhDL4ApGCjpEEwxC1Vcl3JLxRaif02kvs+Jrs4STEWe
F/LvfHKmAnOxE01J0aGBe9t0j90uT8Qo6z4moa6glmyw9k5cU7aB+sQwKze9ZOmf
yuePf4pZCJLrDLYEAPoKI4xXDnFTZXxwS2v4aoylGBkZVjvNkGAx7wFEoXFRAPFH
kIjA93jYgI33PbkquJ26YTvccfo/x37NTk+2481RdrSZyFdsWOuEs2eulLn/Mq3Z
lWtVjUtHZ1GLpizs/v+/Xbx06lCqFFYyHuJQIJvuQew8RLaRZdQ4cZ94IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/H9BMNwG0pvvLBhvIqHBcJM0TwMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprWZJnuF
lPDE2he8SzwTz4ufm76+UQcNqyhAME2MZvoExA5MAuWZSY955At966axI9IcJq7y
ZjIigStNh6UQt+uSDF/hOJSiW1mBiko6K8Osf4i9UgnKJqtOm8lHv8K40tdMNnft
Arkt+pMiNIh8TlBhUUQeHe80z9m9CbhLlKdpX7ZP3X8UxewSbON8LzoBMoCbEXSZ
YYj0azHS0NoqZByBpTnvFAOlcPMCzUOCE8yRvnhx5wxLW385AIrivIJHreJvbAxI
JeacKD4RkxOnbmdEFqBPFjv9HLbew5r/1gKaxBVwkk2XF4PQ6TbGaI+xHQ5xYhF6
XOoLrP6FMw0TlQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 12:59:25 2025 by rpki-client