Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          x/2d4W6XFgIS6G/CTVtQKjYSXjamSFR4QJ35oAdTlks=
Subject key identifier:   4C:FD:35:6B:58:DB:78:0D:A1:29:C8:D4:44:DB:33:7B:3F:9A:D0:1D
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       01992C3438ED557476906C76BD59035AF8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          16D0
Signing time:             Tue 09 Sep 2025 02:00:43 +0000
Manifest this update:     Tue 09 Sep 2025 02:00:43 +0000
Manifest next update:     Wed 10 Sep 2025 02:00:43 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: Bysh8w0P8y5uvV7VBFRQubYoHGJsEt3ksUCZcZ8UsKM=)
                          3: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          4: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          5: 5RKzYYqhL3oKCJRewL9NQlha8YY.roa (hash: G5InDowN/2/xf7/t/A+otG1kRZ2u5R+12fwWnuC2D7w=)
                          6: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          7: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          8: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          9: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          10: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          11: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          12: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          13: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          14: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          15: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          16: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          17: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          18: ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa (hash: ybXh4v0CDSKBBEJI/ZcZGuGpcfyqFJev7VApGdh0SHo=)
                          19: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          20: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          21: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          22: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          23: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          24: Q-310DIQNAGVsZg9LFbEhwIiy8o.roa (hash: a6l4LKf0dI/ZRrmdCqfaYVxbgcVx0SkVuJ3o98UvLPg=)
                          25: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          26: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          27: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          28: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          29: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          30: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          31: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          32: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          33: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          34: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          35: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          36: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          37: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          38: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          39: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (hash: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=)
                          40: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          41: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          42: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          43: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          44: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          45: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          46: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          47: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          48: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          49: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          50: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          51: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          52: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          53: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          54: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          55: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          56: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
                          57: zZ3LXASmvnU-tG5IFxAXhcytpeY.roa (hash: vauvWlngvw9B9FLlnT3JWLQjDLxvQzC3J5a7IlzCo4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:34:38:ed:55:74:76:90:6c:76:bd:59:03:5a:f8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Sep  9 02:00:43 2025 GMT
            Not After : Sep 10 02:00:43 2025 GMT
        Subject: CN=4cfd356b58db780da129c8d444db337b3f9ad01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:60:92:e6:72:f1:c0:31:76:44:97:98:fb:
                    7d:03:67:89:67:8c:dd:60:86:8a:51:50:3b:78:26:
                    61:fd:a6:a3:10:ec:85:a5:18:c0:29:1d:17:09:42:
                    65:19:6c:d5:71:83:82:b9:66:bb:75:1d:03:bd:08:
                    72:5e:cd:36:e8:fa:63:30:78:89:bf:73:7a:d4:e7:
                    78:33:42:27:65:4c:2b:93:f5:51:1e:c5:83:04:80:
                    22:ba:33:f6:1d:69:54:67:35:d3:d8:b5:13:84:8d:
                    21:10:4f:26:b6:7d:8f:38:fc:da:17:ea:99:53:81:
                    7b:85:d3:e1:46:5c:17:cd:32:e7:19:d2:96:26:82:
                    50:b5:c7:14:0c:a3:80:6f:fb:8a:22:59:84:27:70:
                    52:91:e3:cf:1d:da:c1:1e:7a:a9:d7:6f:37:ef:cc:
                    22:ef:b9:c2:36:76:33:c2:1c:66:16:59:ba:f2:15:
                    06:79:70:94:de:55:e4:7e:f4:93:67:51:17:4d:3e:
                    00:8e:6a:68:af:dd:31:40:be:b2:41:20:04:b1:31:
                    c8:4c:3f:31:52:c8:aa:db:ac:b9:7d:8a:5f:43:1a:
                    aa:4d:93:fd:12:50:5b:fe:fd:03:c7:c2:0b:2f:de:
                    4f:4e:18:4a:31:ac:2f:b5:c5:42:c3:6e:11:02:09:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FD:35:6B:58:DB:78:0D:A1:29:C8:D4:44:DB:33:7B:3F:9A:D0:1D
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:b3:36:70:f1:a9:7f:08:7f:dc:eb:ff:fc:16:79:05:b6:
         26:9b:3c:e5:1b:36:f9:5a:3b:3f:40:a3:d8:f0:0e:d9:32:2c:
         b0:01:9c:13:7e:41:db:cf:fb:c2:f1:0c:39:d8:93:8e:bc:e5:
         85:40:d4:42:2f:91:d4:31:a2:ef:3d:20:f0:5a:3a:64:d8:0d:
         eb:da:f9:88:b1:99:df:da:ac:c7:85:cf:df:bd:29:79:43:d5:
         15:8a:aa:d0:04:96:48:2b:e8:4e:a3:d0:c1:e1:a5:47:2d:3e:
         0d:14:d5:9a:13:e0:df:77:c1:0a:e3:13:25:74:47:00:eb:16:
         f9:bb:f7:a6:03:03:cd:ce:d5:7c:fc:37:5f:25:3b:ab:77:84:
         d8:a9:72:60:98:da:57:10:e2:b7:11:84:ee:34:36:3c:96:38:
         fb:24:18:41:29:7e:6a:74:c4:f5:d9:ea:ff:68:6f:2e:f9:70:
         c1:12:7a:93:b6:5c:4c:c8:a3:6b:15:1f:d1:77:51:86:d7:74:
         57:5f:5c:8e:76:07:df:4e:ae:ae:53:65:63:ad:c8:eb:f9:e3:
         d8:b6:82:05:51:8e:e2:3e:fb:a0:13:82:22:bd:d9:91:e3:49:
         55:5e:83:f2:b7:37:20:d5:6c:97:33:c2:fb:42:0d:f3:ee:c0:
         b4:ed:14:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksNDjtVXR2kGx2vVkDWvjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwOTA5MDIwMDQzWhcNMjUwOTEwMDIwMDQzWjAzMTEwLwYDVQQD
Eyg0Y2ZkMzU2YjU4ZGI3ODBkYTEyOWM4ZDQ0NGRiMzM3YjNmOWFkMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMdgkuZy8cAxdkSXmPt9A2eJZ4zd
YIaKUVA7eCZh/aajEOyFpRjAKR0XCUJlGWzVcYOCuWa7dR0DvQhyXs026PpjMHiJ
v3N61Od4M0InZUwrk/VRHsWDBIAiujP2HWlUZzXT2LUThI0hEE8mtn2POPzaF+qZ
U4F7hdPhRlwXzTLnGdKWJoJQtccUDKOAb/uKIlmEJ3BSkePPHdrBHnqp128378wi
77nCNnYzwhxmFlm68hUGeXCU3lXkfvSTZ1EXTT4Ajmpor90xQL6yQSAEsTHITD8x
Usiq26y5fYpfQxqqTZP9ElBb/v0Dx8ILL95PThhKMawvtcVCw24RAgmgywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz9NWtY23gNoSnI1ETbM3s/mtAdMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsqzNnDx
qX8If9zr//wWeQW2Jps85Rs2+Vo7P0Cj2PAO2TIssAGcE35B28/7wvEMOdiTjrzl
hUDUQi+R1DGi7z0g8Fo6ZNgN69r5iLGZ39qsx4XP370peUPVFYqq0ASWSCvoTqPQ
weGlRy0+DRTVmhPg33fBCuMTJXRHAOsW+bv3pgMDzc7VfPw3XyU7q3eE2KlyYJja
VxDitxGE7jQ2PJY4+yQYQSl+anTE9dnq/2hvLvlwwRJ6k7ZcTMijaxUf0XdRhtd0
V19cjnYH306urlNlY63I6/nj2LaCBVGO4j77oBOCIr3ZkeNJVV6D8rc3INVslzPC
+0IN8+7AtO0UTg==
-----END CERTIFICATE-----