Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          jpFfkz2cjhtwALyQ6ExUFcWiDCDLkesXw5o2BWEPKjM=
Subject key identifier:   04:86:54:AA:8D:E7:A2:32:1E:89:BA:22:0C:EA:E0:FE:C0:A2:CC:86
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019A06A476F2804652A5FF63162A3DE24877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          17A8
Signing time:             Tue 21 Oct 2025 12:00:32 +0000
Manifest this update:     Tue 21 Oct 2025 12:00:32 +0000
Manifest next update:     Wed 22 Oct 2025 12:00:32 +0000
Files and hashes:         1: 190LxKM5s1ZchW-1QFPWBCXJIzw.roa (hash: i2UBTnCRLZfI59Lc+8ptifYqjvgfC+5cvDv+xCq8UE4=)
                          2: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          3: 2qlsylzgqXhlEayXE9wkcK5qmug.roa (hash: uhfOGYd80G0548JpMljPb9TBOvg2gxGmo4JHGRdJP94=)
                          4: 45tL-NSBHodaksRDpK2BnTL6Pg0.roa (hash: 9aD/cGsEDm3tuWSuuFsHXgYn2a7J4uwCri2o7lDx6TU=)
                          5: 4G_hLtAbDUZ70PLgQlRhmGd1eNc.roa (hash: wmpDbVETxoLeblIgd50u7tjYlbJnrcIWiWDK1Lpalb4=)
                          6: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          7: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          8: 9xAImfJODTs2zsrACx9eeEsMp4M.roa (hash: gSkZqCfSwfOJL0b2bYeZUGWxUdiYjnYulJENp5XdAs8=)
                          9: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          10: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          11: BRc1wLBXX2wQNzWXVlrbs7NYzz4.roa (hash: boDsQDSUU/u5nFgGrYRYmA2sSdeyKeVOtKcDLDgtg6w=)
                          12: C2GrQzBO3vl5T105EzYHvBqFqSY.roa (hash: JsqpwBb8513EA82J6T2Eh579nv6JIkErIIaCpTYKtxo=)
                          13: C5neA90kjVHnDPfO-djUn4i2zAA.roa (hash: 6roTXs09K6iOJG+sNAF1RcACFRNOxhrWD6dzp7AoLnY=)
                          14: E5lP18ybHMTHTnPo0M0LIgPaYUo.roa (hash: YCZh/ekLx0cpTY4qWcdCoc57O+gA2agdNfcO7UjD4OY=)
                          15: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          16: Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa (hash: rGTu/eBvREBIS2YrmRECHoO4Fq6M0d9n2xt5c5qKdlE=)
                          17: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          18: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (hash: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=)
                          19: OkV10ej4i1aWkWynfHxAfefl68k.roa (hash: 5dmrYmVBIjHF14pmICYPZDuHTrGireyhaa0Od9fQBWk=)
                          20: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          21: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          22: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          23: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          24: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          25: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          26: _0v8B3PHRVD7yYQcASHCL5uWyOY.roa (hash: pu+m41bbVsvu3wkqU3+YbKOTAB8KfYUq9S8Plxm7sds=)
                          27: _6fk9u3GMpi14RhY0Vpqi7RoUuY.roa (hash: 8J+04Jyy5QLdgaXHvTT5XyET/UweE7ZvDXWvk66tOH0=)
                          28: aICCzElnzJknym2DSGk7d2QgTsw.roa (hash: yaKmTcO06l/sp1/gt2jOhWZ8bbVOixF2S4MAOqEgIOQ=)
                          29: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          30: dY03HFRy1RllCenKPrieGUzQXmc.roa (hash: Whvf/7UBVmwJMgZJVFUghC//K+ikEuNaWx2rK86SYdI=)
                          31: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          32: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          33: gs8xSDnEf5s-t6tRm1MXSkj8uJo.roa (hash: 04Lr7IgwBqz8hk2OcpuxvWUwYYvADfjHLZqerwnsaPQ=)
                          34: hBq6DPEIeY8Yhu3iLZgYcqX86wc.roa (hash: G+wF6iZXun53udNk6xg5sIb/Bo1cfj+jezlEcYlaiX8=)
                          35: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          36: mMuNhDHUSaN-3W7qaO6Hm8u40DA.roa (hash: RFI70cIBANA/kk+2ZsSGD/UPxHmrw25D/iyiJJMSmG8=)
                          37: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          38: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          39: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          40: pD9YdY0kZIyV4tT8Grm6rpRjhMg.roa (hash: iWFl3KeSrkOlRwk9579ovrOA2IUp/1Q3ethXhdT5Cjw=)
                          41: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          42: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          43: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          44: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          45: vkMtx0iH2ditYOsc7bVpRJWZ70Q.roa (hash: 7KAQHgMSezL1YcfEWojGi9XjUX3sRvjuf26EdqtBLpU=)
                          46: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          47: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          48: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: OytEqxwH/mLb4vWFD7Hlu7a0ZARmGu9UD12YkvMuIUE=)
                          49: zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa (hash: /TspGM70/yRXNVHKhWj5smL/PZUzQoqRLk1Lpb2lDmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:a4:76:f2:80:46:52:a5:ff:63:16:2a:3d:e2:48:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Oct 21 12:00:32 2025 GMT
            Not After : Oct 22 12:00:32 2025 GMT
        Subject: CN=048654aa8de7a2321e89ba220ceae0fec0a2cc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:a8:66:0c:75:01:73:f8:e3:da:8c:5e:ea:
                    c4:d5:be:82:df:0f:70:4b:e5:08:59:a9:af:3f:13:
                    c9:60:f3:a4:2e:ee:be:a9:31:2b:77:a4:42:e5:1e:
                    b1:6c:01:12:fd:a1:38:77:38:36:98:bf:49:3b:c1:
                    36:2c:c9:0a:67:1c:fe:a4:a1:9c:f8:06:8f:3f:2d:
                    de:10:bd:62:08:30:39:b9:b3:6b:90:79:7b:53:1e:
                    40:8e:8f:b8:6f:51:10:11:c5:04:23:b0:76:fb:df:
                    a1:7a:25:57:d5:59:ab:91:0b:db:1c:9d:10:b8:12:
                    f4:82:58:0a:a9:32:00:dc:64:27:ee:04:7a:15:eb:
                    a8:fb:e6:a9:5d:da:49:cd:d5:23:fc:64:76:77:2a:
                    e1:2d:da:32:0e:18:48:4a:f0:b6:2a:93:ce:7b:d4:
                    ba:52:96:aa:16:bb:da:eb:9d:29:fc:ea:8f:ec:8c:
                    b3:56:9d:ae:c7:62:95:96:90:db:3a:0b:37:09:61:
                    ec:2d:3e:c1:98:79:1a:81:86:d3:c7:21:2b:9e:a1:
                    c8:93:9e:8d:1f:2c:15:08:22:04:b4:26:28:27:2f:
                    82:b0:4c:b2:a6:19:17:06:6a:5e:e3:54:e5:5a:bd:
                    5d:02:ee:8c:a8:a1:0c:50:22:65:3e:5c:94:72:43:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:86:54:AA:8D:E7:A2:32:1E:89:BA:22:0C:EA:E0:FE:C0:A2:CC:86
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:9a:14:af:f7:ba:7b:e4:de:09:42:b9:0e:a1:e6:de:0a:
         71:2e:16:bf:75:7e:83:ec:09:09:bb:99:7d:ed:19:b5:5c:1e:
         05:c5:d1:c0:1e:e5:02:6b:5f:ac:59:fc:ad:f4:30:bb:68:23:
         94:b6:15:4f:99:32:76:3a:21:0e:8d:09:c6:22:f9:c9:43:12:
         03:5b:6e:eb:a2:45:49:9e:b1:2d:94:17:8e:a1:50:1a:65:e5:
         58:11:15:c1:87:ec:07:95:10:bd:22:f0:f4:5d:13:2a:72:2d:
         19:3d:93:01:4e:05:4c:b3:51:3f:82:5c:7b:a3:14:65:07:4f:
         62:12:cd:b2:34:0a:78:0f:92:5a:9f:58:75:10:f8:32:bb:7c:
         76:5d:74:51:56:b2:83:fb:49:c6:e5:0f:d9:9a:03:38:71:50:
         6c:7e:2b:14:a0:d0:e0:a2:9e:eb:02:89:43:c3:e3:69:bc:4d:
         cc:5d:c1:3e:9c:85:e2:99:f9:45:88:11:ca:d1:21:2c:44:50:
         40:04:25:ec:f5:34:2c:ae:67:6f:e5:f9:2c:32:be:80:9f:a5:
         6d:9d:ae:c3:08:65:25:5f:14:f9:36:76:10:19:8a:a6:5c:a3:
         79:69:c6:f7:e0:74:1a:a2:b9:cc:25:9e:89:8a:c5:9c:fa:5c:
         30:4e:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----