Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
File:                     k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft (raw, json)
Hash identifier:          5g2jwPX6ugFfE1DfgsoKaGeEfe7ng7LUuMJElphh8t8=
Subject key identifier:   21:32:85:6E:01:BD:CD:60:03:03:33:66:4C:79:4F:A5:AC:D6:0E:8A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019962479AFAD523E78813EA97B461829E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
Manifest number:          1711
Signing time:             Fri 19 Sep 2025 14:01:23 +0000
Manifest this update:     Fri 19 Sep 2025 14:01:23 +0000
Manifest next update:     Sat 20 Sep 2025 14:01:23 +0000
Files and hashes:         1: 1-8pDmMDEEfzKpgrhdzsNLY7lSWY.roa (hash: OPxozI7mVi2nDc4IC7ZWtXvLS8c16Xv6I+p3sYV5clo=)
                          2: 1-I6iaHoKkQRui-maOvyaf903-pY.roa (hash: DGjM+DdDY1m1wnJ52Hf6vozqF6JWG92yg1rZUVU5NCo=)
                          3: 5uVuvju1BqfCC9TlwKIrEaaUVXk.roa (hash: 7KIg0ieMJiNuV46pTrLRYuuK/hkTM0/9/2Qw5cXqUlo=)
                          4: 983YbIKiLKsA79Q4v-0HCtRz4PI.roa (hash: sYCCGQ1q22415RC+XALwNZ+DuN/Sxp4fgBXPbA8X8PA=)
                          5: AGH_4XKMoJQXMUQcmRNvaim4IeY.roa (hash: u19XXYRrm4hyR4kTBNQvGZ68bk7v1EjkrEyikPrEGqo=)
                          6: Ar5poSRAQujxaX6q2fXk5PIUu20.roa (hash: sxd1T0MJCAS9pg0Vdic73URNqUZ3CxlTpLu0FNLKBNw=)
                          7: BuAmcDIPoJ5Lp44p8HB8tAyWhmA.roa (hash: yrjTAdHqCaVQiRX6XOva0nJjmmyQUQwT4uCD2MwcGTo=)
                          8: D7FjlWMe6-PwuPG3BMpV_LKIyz8.roa (hash: bII3KO9txgZTag71uUVlyzOnHGrD7kmSU4//JJbzkZo=)
                          9: EAuxtZuYlulou3dCmKaHYscKS7A.roa (hash: L6f1AWFUl4+e3ZQ+Wk1/7XbAK0YgJh5zvVC5kFi+B7Q=)
                          10: IpIgVrIRJ2mIFDTx0RlJWWdnvgc.roa (hash: 5+F4EaLafEmu3xl8kNyHR/EAaMVkKy04zk/GGcz3iw8=)
                          11: JToXLwiaabPWVn7k7SmF-YWU5ro.roa (hash: hpuL90O+mIKhj3+Wy1oe3zyrYzzVPJTbG5oDK4Ya1es=)
                          12: O0zn8FlsZtfpPdEnqXoXxmVpgl8.roa (hash: KyGWwEJdCipct259hyA9F4mxLo276WcHsUgpLEqtT38=)
                          13: RRlCeM4gB4HHCT3InAd_yIrqoLg.roa (hash: +PW3rQN6p2A7EiMnylJWDZGQy0A0iFzGedDPlpAMYD4=)
                          14: UuK3HXxMCh37g6d3LBH8pLQfhkw.roa (hash: gwRDu4mIj3MzGWkeYSwx8sHHZwsCX42WxQrLPWRXccM=)
                          15: WzestyUDFw3_zE-phzGTcWpT1Sg.roa (hash: DSamNSiDrxmlGqCDwSDzzV/Y2+AHe0Azx3vk8W9QJvI=)
                          16: fmLn40rK7e-kwLrOR1_MivV_lTs.roa (hash: f1jZexHT1rx7FJNMv/8AMpXH6m8ggfq4EEnoab0o9fs=)
                          17: h-L32JDD-cDXLSKS5D8kizQ6BZk.roa (hash: SrQk7B5niRWj3WywMNW4nPtpBFdZAbZhiHLCQKotkS4=)
                          18: ht8VbyTSw0nsNawK_niRHh_9H4M.roa (hash: fWa0dv6CvhTyrQldYgDU4gxwIE6Oirwkitn87EACZwA=)
                          19: jIfoMhT2Fw5KN5QTxKy_59TapUA.roa (hash: 3+G/bBr8L/0IOjg8ZDZTC94WXpGJBSDkyWYGC/U0/hg=)
                          20: k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl (hash: bLvV62b/uxcwm4EqtdhrDzGF1rXmYN+v4CLNNPvv4AY=)
                          21: lRtWiEUGI08QkTj-JAgK-bKDZAM.roa (hash: ewOxoxwYLcFsIAFisXEFAEvCf5KlmrBM7jLNVcTuzwc=)
                          22: mQ_S9SBKYsiofCy4l7CtIv3oDL4.roa (hash: KXEpTonEsssW69BBWkMEAOHuLnS4yHulPcrEUU+4eao=)
                          23: nG7UPwWdNXA11rjoEPxSlN9hF2Y.roa (hash: 6tjWe0Ebxfi7VT+Yr7pRrZaTJDirGyHuAodi17lOXl8=)
                          24: sD_dX7pupy2DcLlmE7QFIJ2MGkQ.roa (hash: N/4cy3GtLTvRW9uw8BRyRspOVsX90+cI/TGL47ddSl0=)
                          25: tqmZd2LvNRZuj9JvLfgMPuwsnQ4.roa (hash: FxaO/1VMY0bHSvADqDCXMdZI7+dsMEPHunesOi47d/I=)
                          26: u5grIZWsM8V-tAHbtKtyMrwToNU.roa (hash: SgJL7BS0zkWOubaOtU4rG+reX7W6MqOgE4ywVhYViQs=)
                          27: uKaPMlMyKCekDRE578BC9or9uiw.roa (hash: vbq4uMxmQgOFSiPWnwk+wQIBuzYMbzW7auwqaeVtUaw=)
                          28: w4kmP7B_Fxki60Rm8oVTnhcxqxA.roa (hash: FYmhQk/RB/mbvwG20mFIyTdb7vP2YfXGbmhSYFbiUzc=)
                          29: xefNt18UaTn08mlaaX374HLD6eU.roa (hash: VmW7eolrvRkHLYGBCyc5PcXaK7AxpSci/XgN/FNZx0c=)
                          30: yqdAdTF_TXkyufp-NOMjPwUoi8s.roa (hash: 7Lyt3L7IBUZHdgVsAOUp4Bmxqp1Jy4t64OfZT44d3NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:62:47:9a:fa:d5:23:e7:88:13:ea:97:b4:61:82:9e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Sep 19 14:01:23 2025 GMT
            Not After : Sep 20 14:01:23 2025 GMT
        Subject: CN=2132856e01bdcd60030333664c794fa5acd60e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:cc:d1:a0:b3:45:fd:6f:fa:00:96:5c:9c:
                    3c:6a:d2:b4:2e:73:4c:52:7a:96:b0:23:ea:67:ad:
                    31:01:e0:41:e2:fe:4f:9d:a0:2b:dd:b1:d9:54:3d:
                    b0:02:28:a5:15:12:65:ff:15:f2:dc:7e:c3:15:30:
                    31:68:d1:e8:9b:5c:49:5e:d9:d7:7a:33:66:5d:27:
                    69:6a:0f:9c:40:93:7e:73:a5:5b:55:d0:cd:4d:53:
                    54:5c:1a:f8:33:14:bf:9a:8a:e2:98:72:b1:c1:ad:
                    57:a6:a1:5f:69:54:1a:cb:c2:4f:f3:0f:17:13:61:
                    42:cf:6a:fc:39:2a:0d:1d:ce:66:1f:61:74:ba:e8:
                    60:97:69:38:17:7e:b9:0d:31:0e:c8:0d:6a:7e:e3:
                    4d:5e:91:c0:c2:be:35:d4:ae:6f:2f:cf:21:67:b2:
                    2a:b0:ce:7a:c2:9b:b6:86:7f:97:39:3b:c7:c7:0c:
                    7a:38:9c:20:c7:36:b0:34:ed:1a:3b:44:3f:e1:85:
                    12:07:f6:2f:55:ac:a9:3e:ac:e4:16:75:0b:2a:65:
                    39:d2:9e:f0:ba:7c:37:18:13:43:33:41:50:a5:cd:
                    67:74:37:0f:5c:b3:6c:53:ec:69:a9:64:61:c3:dd:
                    e7:32:b5:4d:ed:f0:7e:52:3e:fa:9a:ed:84:10:ef:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:32:85:6E:01:BD:CD:60:03:03:33:66:4C:79:4F:A5:AC:D6:0E:8A
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:94:24:fe:78:10:ac:65:d5:05:6b:e0:5d:f8:27:fe:16:f6:
         3c:95:f2:65:61:71:2d:43:6e:7e:59:26:e0:15:3c:66:71:53:
         2b:40:4a:d3:ea:8e:a1:6e:0d:52:55:04:e5:22:f4:4e:ba:da:
         ba:bb:12:b3:15:df:f8:c9:41:22:6f:1e:01:14:35:73:0b:06:
         aa:fa:0c:6e:89:07:8a:64:8d:58:37:d6:05:31:b0:11:0e:0d:
         b3:62:4e:ed:1d:0b:cf:44:38:1e:b2:6a:bc:3c:95:dc:ca:88:
         e0:5c:7a:27:25:a1:c3:89:65:2b:96:32:37:58:e0:d0:1e:86:
         0b:0e:fb:19:7c:ab:06:b9:79:dd:45:61:87:36:71:ca:93:1b:
         06:cf:51:6f:f5:76:ed:4c:19:2c:9e:5e:e3:a7:84:3c:cc:92:
         94:a7:e4:0e:04:2d:8d:78:69:3d:7d:af:e3:63:39:b5:6c:23:
         87:05:fd:4c:c6:45:56:bb:a1:2c:81:ca:49:d1:5f:d5:99:1d:
         ac:5c:00:5f:82:3a:1c:f5:31:a2:06:0e:d3:75:ed:11:c3:fd:
         35:71:02:2d:20:31:e8:a7:40:ac:9a:3d:65:c8:8e:5f:c6:b9:
         4e:b2:e0:b2:b1:66:5d:d4:3c:e8:52:7f:df:07:17:f9:58:a9:
         60:db:be:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZliR5r61SPniBPql7Rhgp49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjUwOTE5MTQwMTIzWhcNMjUwOTIwMTQwMTIzWjAzMTEwLwYDVQQD
EygyMTMyODU2ZTAxYmRjZDYwMDMwMzMzNjY0Yzc5NGZhNWFjZDYwZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfPM0aCzRf1v+gCWXJw8atK0LnNM
UnqWsCPqZ60xAeBB4v5PnaAr3bHZVD2wAiilFRJl/xXy3H7DFTAxaNHom1xJXtnX
ejNmXSdpag+cQJN+c6VbVdDNTVNUXBr4MxS/morimHKxwa1XpqFfaVQay8JP8w8X
E2FCz2r8OSoNHc5mH2F0uuhgl2k4F365DTEOyA1qfuNNXpHAwr411K5vL88hZ7Iq
sM56wpu2hn+XOTvHxwx6OJwgxzawNO0aO0Q/4YUSB/YvVaypPqzkFnULKmU50p7w
unw3GBNDM0FQpc1ndDcPXLNsU+xpqWRhw93nMrVN7fB+Uj76mu2EEO/shwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEyhW4Bvc1gAwMzZkx5T6Ws1g6KMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpQk/ngQ
rGXVBWvgXfgn/hb2PJXyZWFxLUNuflkm4BU8ZnFTK0BK0+qOoW4NUlUE5SL0Trra
ursSsxXf+MlBIm8eARQ1cwsGqvoMbokHimSNWDfWBTGwEQ4Ns2JO7R0Lz0Q4HrJq
vDyV3MqI4Fx6JyWhw4llK5YyN1jg0B6GCw77GXyrBrl53UVhhzZxypMbBs9Rb/V2
7UwZLJ5e46eEPMySlKfkDgQtjXhpPX2v42M5tWwjhwX9TMZFVruhLIHKSdFf1Zkd
rFwAX4I6HPUxogYO03XtEcP9NXECLSAx6KdArJo9ZciOX8a5TrLgsrFmXdQ86FJ/
3wcX+VipYNu+Yw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:38:52 2025 by rpki-client