Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          3Sso2VzVjb3Ftju6Y4rb+Af2aKxgug3Qubzgn2GlO5w=
Subject key identifier:   12:2C:0C:30:5B:6E:A9:01:96:61:C7:D7:10:DE:21:77:61:BD:93:AD
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019A04B6431DFB9ECF0921ADF59B67C3E736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          1785
Signing time:             Tue 21 Oct 2025 03:00:44 +0000
Manifest this update:     Tue 21 Oct 2025 03:00:44 +0000
Manifest next update:     Wed 22 Oct 2025 03:00:44 +0000
Files and hashes:         1: 0KWI-KG0WB4DWCuGh1gn99tn_N4.roa (hash: h8Vr2MAflmUzVAGtVkIeSE/MSkV47xAfz3GIoaJRtC4=)
                          2: 1-Gozw0B9Es8Qh2XZ6-i72p9hfXs.roa (hash: xTLReM400TQ2Y4MTK4NUap/tADa+H9TQIAaol/LpbHs=)
                          3: 1-c2GPlGgYlbEIZJF6cbTGByqiko.roa (hash: Olvi4llScu/0a4L4oL7XrHFcqesIOSSnG3bFQCyxUcQ=)
                          4: 2NzOCD2bM5a530UIGl2ZsDRbmUU.roa (hash: /+WGidIvg/u0vrSl2pcgEtQoS0FUZmi1tEkbrWlSxL4=)
                          5: 36nSo4IIIhWGblHml9ipRZ22_wQ.roa (hash: GNtMzAbDBSLg8JfQ+kSp8JSTe4JbTsAOb7fb1iMmRSU=)
                          6: 3GfV3-LELKfnUeTQu576_MbUd9E.roa (hash: BFBAfHBwGYmTouYuYf2GmULoSMGxaogtjP30rWRQKUI=)
                          7: 4-EsjAVdf144tiP1S6W0cZWLEr0.roa (hash: aAjI6dZi6XfNi5J1N/GfpcAZ6m9XLEd8XE04/FjSVu4=)
                          8: 4Ji8DRavs3meQw5qrkJFZHXPeDw.roa (hash: rtTItDBA55d0Kg0FoHNSV2Z7809Glolr/J3tN0PwSW0=)
                          9: 4a-oSYp3aib3yKMPfla0gmzArXQ.roa (hash: rpjplvXodVM2Oz/zMSiwY0kn/WwkyWdvI5KreKpNjp4=)
                          10: 8l4FtnLwwdEp2oibbUvL_uIxS9E.roa (hash: LQ2IaIcHgt4i0WPp/lDm2yxGoBa1VH4Xl9eLNEo1qbo=)
                          11: CIKNjNwK3NGRl3ArzYvs4ILD02E.roa (hash: /fyz2s8YlatsW57ohk/cTOzvQyvmUbLBezk4JFIo9Yg=)
                          12: E_vNeWHi7no6xEOD4-IFUETrmhw.roa (hash: XXuZ/UPoimaJVHIFLTndlenANUDBTB2Jl0fZ7dp7Ri0=)
                          13: FNBtDziAIANjYCRYc4CVRy1nJyc.roa (hash: NocSr/8xiJz7zrZGhIxvMcAwGrGm7wl9mzw5JTfj4Y0=)
                          14: Itb9F8_-lcZ_KdRc5siOEO4H89E.roa (hash: XLIfgStgZc44GKy7d8yA6H23MBSze3hjDW/70wwI9b8=)
                          15: KP0a7UICooQ-3jHfqjEjBoGx1Qo.roa (hash: uHH3yzbwsF8Yb5Wkc4gIQ80iaj+70XNOz0k++igvr0U=)
                          16: M3_GZcVdFB-kUlBz3CbzHEwugOo.roa (hash: RVTdHVmgLYKRoXRwHS2aSD1uxSSdaXu0WilfMzCHLdQ=)
                          17: MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa (hash: mMR8wNV9W/fVKlAylzczxRufMEEM5D1dkFEiXzkFtBw=)
                          18: N_FJ7OIWFvIW9taFHsA2wT2zVwk.roa (hash: bVU4MMFAW33uimGtPgAQzKj41nvECCYfDukXv4e4p0w=)
                          19: PwrQGIiQo2oQLGMofsy9NAulZOw.roa (hash: hq8SRr3d4IpSTQOcetxXA4f2f+wVNAp0cl14XJ4GrEw=)
                          20: RAQgzMiCS065NlU1iBXwPiswe10.roa (hash: aXxah/bsFSxVRDhTMQldv6sv0nChjGHbx3sNdnqgxzI=)
                          21: RvXRvVyvlekCab9ullONcGuemgo.roa (hash: kILuzxt9RHYWDgEffsiWLl3jeXDJ/TZBIJWTp1FRvsM=)
                          22: TJJ2U91WlKqGeZt7nkWsm3Qiqbw.roa (hash: mdQvHtkTOzsjnfxeJ0oy7NE/x0tTyj79BbRzG/ybGaQ=)
                          23: TZlH8xzCt20zCEyeG6MLCYd2IPQ.roa (hash: EdbpzRHzj/EHNn1J0iAQt2Be6cT/lRMvLGGcvMYB4Rk=)
                          24: XpvAs6Tt45TMxISWhloT9Wt5rFA.roa (hash: 3RG2rD9Iheegzvp1N+vn8OKiQ4faJt1Nqt7c2kVsNCo=)
                          25: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: G0oGWdNZXYRb7ZpbcjpQBUncrj+OazbmgkDTezgJ+WE=)
                          26: b1p3AKdwPLqrkJYci2kZqlTlQrg.roa (hash: ddzqjQY74zacp/tvyaEpj0INLXIxWWFY2MJGSJry+3Y=)
                          27: db3HfgukjmmWQWomG5hjPb2RuPo.roa (hash: HuerYo1+VOoP0CsA2iW7ovnuNivvJL249xI7Vse7fcY=)
                          28: dsp7kqVP0MzNdwTliVhJeAMNQ1g.roa (hash: OcOQ2uKsSo0YuxZEB31opI6ZblHX6qOV3I408glZcv0=)
                          29: eQB96jPbUk4GF5utM4p2RAbUupI.roa (hash: mrcM7wbVQPyfVbYQ1q9LKvRJ5zQq39HLLMHBFupETtI=)
                          30: fpZVpVos_kxzIDGYSqNyyRQDttQ.roa (hash: uV1KfcwolyVJ1mOs8l65+H0qhjLwiOsobMQn9rorxTU=)
                          31: gpgP_YmTtsmxlSANAlEYmQOs-r4.roa (hash: MsN3w01I4GAkWG1L2v4xb1q5dQkczXCJIOeH3N8wUHE=)
                          32: hBiwlhhFE44QPsrcqkKUVksncA4.roa (hash: FZdbsMJbgwt6b8G6npHC7QxSGH9CGwXi3IsmuLcEigQ=)
                          33: jPYMTQLhOkUyChhuk3LT0pzGuKw.roa (hash: WZkVzoTHH8bTxovKv17GI4cgaifA5bg30GZLk+9UE6A=)
                          34: jjhX0aIZcT544KCIQyZSn1ZrMgI.roa (hash: KgbdxCj+Lc31A78ghx4EPIuyhJon/0ov16MKkHX+ajU=)
                          35: oZM32iF_dXj13arj49Wk-8MpltE.roa (hash: 5tf4bR4lHe0bW1GmHBLlcRANn/eBaErboF4s852Z1mo=)
                          36: qDlh24RbeDVjcAyrQ_STBRImmxI.roa (hash: rXKS63u3mI4gIR/Pn3sZ2MevhW2+Svuk4c2ta1D48BU=)
                          37: qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa (hash: lEoaWY7+8lB8BQWRyHVB/to+pSqQXA3i+f8TwfiT22c=)
                          38: t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa (hash: ak0F1/bwerUUr/wy5VcyV9l0Exrsc+fsCFd6F1NVmME=)
                          39: unY0Pu97DEbw_gaGseuduchpyf8.roa (hash: e/KptEgbgebcoV3ZlHJMNabC0RiZYgba0JXcQXlmWNc=)
                          40: wYj2XX93l48Ok6W1DgazAx4cOqs.roa (hash: h91MsK6joT6C6e1hB/GdrWn534afG+LSY8h0F/FyZ+4=)
                          41: x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa (hash: E2BXuJB6M/883mL2LF+woF4zVIsSXvo4L6HofVg5TPk=)
                          42: y_yX2r4gvHvuIbUi0DowIYSNfBg.roa (hash: x14xDtrLZ17AWPiddZKwyfSzNk6zOk9dOft74ZuaztU=)
                          43: z4B_0NPBULYz3CrNWEAyG6UVZvw.roa (hash: o8ZEbQtboKRylpC73PGr77tEXJxG1oMYVP6sQuq/5kI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:b6:43:1d:fb:9e:cf:09:21:ad:f5:9b:67:c3:e7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Oct 21 03:00:44 2025 GMT
            Not After : Oct 22 03:00:44 2025 GMT
        Subject: CN=122c0c305b6ea9019661c7d710de217761bd93ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:8a:87:70:0c:6d:08:5a:22:6f:46:a0:93:
                    69:b9:f2:98:a6:6a:14:30:fa:f4:45:ee:d2:17:c3:
                    c6:b7:6a:da:c0:f2:1c:e6:ab:06:cd:62:c9:4b:22:
                    54:c8:4b:3b:56:39:b6:f5:1b:06:d0:00:97:f8:26:
                    46:1e:17:4d:97:b4:c8:12:77:5b:d5:35:91:18:9f:
                    e7:dd:bf:c1:80:87:e2:4b:d0:f0:f3:77:e3:4f:7f:
                    15:82:c5:94:b8:7f:d2:87:75:00:27:c0:15:ce:3c:
                    a8:cb:c1:7f:79:73:6e:d3:f5:4b:c9:3f:0a:95:5a:
                    df:09:e9:c5:df:67:c5:62:17:06:55:ae:6d:73:4b:
                    5e:24:d7:0e:86:e1:32:81:35:93:42:29:e8:63:88:
                    8c:e4:05:5c:33:b9:0d:e6:38:cb:0a:ca:d3:c2:0d:
                    9e:6a:1e:76:50:4c:69:e5:bf:8a:e4:79:16:35:83:
                    de:5f:d7:26:80:67:1b:34:55:f4:65:ca:23:17:78:
                    e8:cd:3e:37:15:0b:c2:2c:21:a5:f9:5d:49:c2:ca:
                    5f:b7:fd:99:43:f8:00:7e:1a:52:cd:ff:b6:d5:10:
                    10:d8:11:ea:95:18:6c:90:e2:15:ad:ed:0a:5d:e1:
                    12:dd:79:01:a9:97:ee:70:38:8d:32:f3:f8:5e:03:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2C:0C:30:5B:6E:A9:01:96:61:C7:D7:10:DE:21:77:61:BD:93:AD
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:79:b2:a6:19:10:30:93:96:b8:1b:81:da:25:08:cc:a7:99:
         7d:3d:a5:67:0d:98:00:c1:f1:d8:b1:dd:a5:c7:c0:eb:d1:4a:
         f5:fe:c7:c6:a1:5b:b9:cb:04:ae:9f:ae:43:32:36:b5:32:d1:
         0f:99:28:af:d8:07:bc:66:f0:6f:e5:4a:fd:b8:fb:43:48:14:
         ad:8e:9b:ec:f2:36:91:c3:d9:4c:5b:d0:3c:6d:16:45:cb:3d:
         6a:73:3a:32:6e:0e:02:10:2d:07:47:2a:d5:c7:5b:02:e6:41:
         fd:86:ff:35:d6:3e:c1:fb:47:4a:a4:c9:ca:3b:34:53:45:5f:
         f4:be:06:3e:da:e5:24:61:69:7b:20:54:c8:06:46:01:a1:7e:
         bd:ec:3e:e1:fb:22:fd:eb:f2:48:f1:1b:6e:ab:a3:3e:44:11:
         e7:d8:71:bc:94:aa:3c:37:c3:f8:5c:a2:ea:b2:c4:b6:76:64:
         6e:2b:8e:88:6a:d8:0b:5b:73:b9:82:c8:13:df:bc:99:31:a0:
         44:14:14:5a:58:3f:06:ff:d6:f2:92:fb:a9:ad:b6:b4:df:86:
         dc:16:50:c5:65:2b:39:a3:b5:7f:e9:6d:46:b6:23:39:57:9e:
         09:8e:a1:a5:88:b3:05:b2:f2:2e:ee:3b:bc:d4:3c:f8:07:15:
         84:85:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:11 2025 by rpki-client