Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          +A68RKnIlNBPEpmta7LL0P+Ip7Ww9wyBJW8mpmNE5VU=
Subject key identifier:   E0:6B:29:AE:3B:EF:78:75:7A:89:4F:B1:3D:5B:FE:C1:E8:8E:82:B4
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       019A1D9A7F4C4B3BE45B68930871EAC55FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          1753
Signing time:             Sat 25 Oct 2025 23:00:55 +0000
Manifest this update:     Sat 25 Oct 2025 23:00:55 +0000
Manifest next update:     Sun 26 Oct 2025 23:00:55 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: q7VWlyBQKnDpd9bqx8fC7cDoGs6aIxHYMan5TuerLxM=)
                          3: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          4: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          5: 5RKzYYqhL3oKCJRewL9NQlha8YY.roa (hash: G5InDowN/2/xf7/t/A+otG1kRZ2u5R+12fwWnuC2D7w=)
                          6: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          7: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          8: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          9: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          10: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          11: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          12: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          13: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          14: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          15: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          16: H06BbJyNlAXeT08Nn4bdJB41xCo.roa (hash: Wq9Dn1EkBtDctGuDuDoxtK4x2zafJvfVPsDyoqHd97U=)
                          17: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          18: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          19: ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa (hash: ybXh4v0CDSKBBEJI/ZcZGuGpcfyqFJev7VApGdh0SHo=)
                          20: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          21: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          22: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          23: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          24: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          25: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          26: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          27: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          28: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          29: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          30: Tk5FVyyG3Ot1X3u6aXw2Bhnw9tA.roa (hash: u50CkzZ73g67Lxgry6JDrMhUj3lKi4QNNH7Eh+oX3A4=)
                          31: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          32: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          33: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          34: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          35: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          36: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          37: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          38: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          39: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          40: f64HEsfjUTGHiPx41MWM2cHiM2U.roa (hash: SKqWEKDgMxXFaDkpMUBUvNz346Wmbv49+UVUYcVNV0E=)
                          41: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (hash: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=)
                          42: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          43: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          44: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          45: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          46: mirfhsEMgxLkBpGjM6LCFu61DPk.roa (hash: ZMcyVx2Yzz5Qf2mtLctC18EZ7tAmZupFEziUjtP/C98=)
                          47: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          48: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          49: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          50: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          51: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          52: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          53: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          54: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          55: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          56: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          57: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          58: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          59: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:9a:7f:4c:4b:3b:e4:5b:68:93:08:71:ea:c5:5f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Oct 25 23:00:55 2025 GMT
            Not After : Oct 26 23:00:55 2025 GMT
        Subject: CN=e06b29ae3bef78757a894fb13d5bfec1e88e82b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:71:79:9b:12:0c:cc:65:c8:3e:03:2a:48:
                    e7:8d:8b:3d:9c:13:50:34:e1:a1:38:79:41:79:f2:
                    82:81:06:56:30:6c:1a:ce:d0:d8:d2:42:2a:44:a9:
                    2d:48:cc:70:f2:ed:b3:94:19:58:eb:1b:9c:a3:83:
                    a4:d3:b2:7f:fc:0a:20:29:4a:4a:3f:88:16:6f:1b:
                    7b:2c:ef:06:71:60:e3:24:ff:2a:74:39:5a:27:34:
                    cf:bf:47:99:cf:e5:eb:c0:48:36:b9:a2:a6:be:9e:
                    5b:4a:a1:62:26:a3:f8:f6:2a:c5:1a:2e:0e:dc:82:
                    06:78:4a:5e:9f:b9:ab:29:cc:57:0f:61:45:7b:30:
                    18:f7:f4:a2:42:d9:84:e3:d3:3a:61:d4:8b:6f:89:
                    c3:d3:6a:5e:dd:14:2c:0d:89:e9:d1:9b:66:9f:1b:
                    bd:d7:b0:3a:7e:87:56:c5:18:00:c6:81:87:a5:17:
                    03:80:57:9f:2f:63:8f:ea:73:1f:0c:ff:35:b8:f8:
                    62:28:6a:3a:9b:cb:97:d3:09:b9:e1:82:56:e4:5c:
                    3a:b8:1f:df:a5:91:d6:a4:d3:34:2b:b8:9a:e5:41:
                    20:1d:46:0b:43:3f:37:3e:30:4c:d4:84:5f:56:7b:
                    ea:dd:1c:e3:af:d6:4d:f1:56:9c:22:bc:f8:41:3a:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6B:29:AE:3B:EF:78:75:7A:89:4F:B1:3D:5B:FE:C1:E8:8E:82:B4
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:66:79:73:e1:31:d3:36:43:09:76:de:b0:4c:e1:b0:ce:b6:
         5c:cf:bb:ce:a8:5d:26:6f:7b:1b:e1:6e:86:50:d0:6b:0d:69:
         fb:1f:1f:d0:42:32:80:ae:d4:ad:53:16:e9:9a:be:cf:10:8f:
         8a:e9:6f:e3:fe:4a:37:8f:df:6d:5f:e6:2a:e6:95:2b:31:9c:
         2b:36:95:69:94:32:a0:6f:75:7f:a3:ed:9e:c9:c9:98:7e:72:
         e8:61:d7:3c:83:59:80:53:ec:28:37:fd:17:ef:e4:b1:ee:04:
         e0:fa:16:ef:67:11:20:9c:3b:af:0e:08:ca:1a:8a:4c:e2:db:
         4e:6e:23:ed:9a:f0:70:c8:44:6c:6d:55:53:99:30:a8:c7:d6:
         e3:1d:25:6d:65:e0:2d:dd:c2:63:8d:c7:a5:5f:e7:fe:62:f0:
         38:ed:6e:24:fc:1f:96:78:1a:58:59:44:e7:f7:20:a8:dd:bf:
         ce:18:17:6d:3b:b3:31:02:09:f5:5d:d8:09:e2:14:30:f5:42:
         1e:6d:42:0e:7b:9a:3f:0f:86:1e:75:e1:70:f2:70:a6:d1:c5:
         bd:2c:93:03:a9:41:76:95:7d:9a:67:9a:e2:4a:b2:37:28:e4:
         00:5b:eb:7d:a8:98:e1:f4:41:f4:f7:10:f0:a0:8e:7d:4b:99:
         c3:b2:9e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----