Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          MUDaUKtYN3VG4WLBv2TujO6u/foyJq3rdRlx1H6swVI=
Subject key identifier:   93:3C:9F:CD:5D:BB:79:6E:9D:34:F2:70:E4:3B:9C:98:85:A2:E2:C9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0198C6B681624979E215F7DD5E0E41BE42C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          1246
Signing time:             Wed 20 Aug 2025 09:01:46 +0000
Manifest this update:     Wed 20 Aug 2025 09:01:46 +0000
Manifest next update:     Thu 21 Aug 2025 09:01:46 +0000
Files and hashes:         1: 1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa (hash: yVOsoV3yJ2B3NS6xPJkpc/bYU0gh14t4/0w2H7T8rs8=)
                          2: 1im9hEU1Zy9gvDtniuhopIsSAfI.roa (hash: KW9osimLZTsfRmjZlDNM2cTfJYEvT/L6ZQhgwqfwXrg=)
                          3: 2srkxS73h-4v9aRkWalUGPvLyjs.roa (hash: EI7l3gXPaRFMaWNVF840VfKAOeEz4HogCxejSxfT79I=)
                          4: 4iA6JSRt9iOXLjSJo4FPcvo5850.roa (hash: Y6iNsmOmNRn1t0IzHy7GGa6of/n7DvPOfcUdK5WYltI=)
                          5: 5T-uWj9twPgW88xOoqQzKkjJJ24.roa (hash: sqAIwpwqapzYO2+lY5/AGADk25rfARYCO45gc5xFmSQ=)
                          6: 5ViRj5UOP26C2K_cQDvWpvsGWtY.roa (hash: FTaUWpoFHfHOaNS+eZLYDwPpxcO9OpNzf+cUKjmhjJg=)
                          7: 5sP9AUGchNWq9z-ewhSavIILNHs.roa (hash: AuCjYL0TN0EWfTEbYCBZhYsII9mCs+B7At3SazH6Kpg=)
                          8: 8DJ685XS7FFhXpTi96HwIs1c-E8.roa (hash: P3RV7SHn5Nd362yPOhJ1roOU2udG/g0q/278EWXSOPo=)
                          9: 8b5XsU_ykhlua86XBDQUS1Mo7FI.roa (hash: WWCuXlQD4j8DR63+O4KA60gHpfsjP5jXzLpDX6ZJvWA=)
                          10: AECbsIhKbWJ_Ff0F92F1-4KSX08.roa (hash: XeOu6WbkVXZWORsNFez3zH3cLGNSOvG9l/JIT9zyGeY=)
                          11: Bl0wGf2nfbk3_FzzJCJiRTk30rI.roa (hash: cqF9FVPRw/zp/ZBxnDa9lzSEDKqwtS/cUZXnDyXojTA=)
                          12: CCs7s7qtTwTA4v_cUzv1kNWH5cs.roa (hash: n9IEvGnZo2t/xTYkauWQNpybghOPxemj5Hqf6XCpTTU=)
                          13: CvYPnO9n9wAN8861pn_AlstUSmc.roa (hash: AhTYD+mPr3Q/UsUfGKJ2zJxIpB92wOFsAXppP+mD++w=)
                          14: E8a1_PGMprGsOEhvFqqS6i5Tdz4.roa (hash: df9z/ZIg8AUrgWm4WPTjfTwd5PEvval7nDbnweaPaGU=)
                          15: EHANXORuuFW-bF-qP_Ewlxhr-nY.roa (hash: zrxGCCVowaTZG19wQV3mSr3hCcJg9eM34gCGRKeKgvw=)
                          16: EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa (hash: Zh9Sz85xAOxdRH/TSTK08WUiIZwDMKmp8n0eSS6ma5U=)
                          17: FLcQphCG1CzxMrGkGVuuZvg4Ml8.roa (hash: Jft2895ystt5N3d6M8PgAjbERZm238iqI/WLflPart8=)
                          18: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: DhoAVgpiSJCxqdqhrj7k3en62PBe4TCF3gI+z7UWXKA=)
                          19: FhVVLOSaxxu76faY814MnjaKzto.roa (hash: 9AmDzH895DDiPDx+GJM625gim3dI0bqS449682uf9QU=)
                          20: IBQePbUiBM5g94FVwIacCAEuPao.roa (hash: KLM5pCcoF2f0RYayCLzM4NVj30QUjygkx0XcB71JnNA=)
                          21: IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa (hash: x1bR2iw79o2n2CiabiJSxb3FYLKksGeSqDdvgl7oOyQ=)
                          22: J8B9b5nFvg0BXqbPVc8DoON7oaI.roa (hash: ZBKlCuKxq+Fhxp6ngyIeTvrnOGmVjLjKODM2yKkJTGk=)
                          23: MOIMwcNcxT_iZoG_VAkf6Z_NOFc.roa (hash: dTx/n0Jnjz3M3yYXJQNtx4LFFnmqtS8DL6yPCW6hud0=)
                          24: MR1g3BBi_xl1gx5Y0lGmfE-MYoU.roa (hash: H1hmCwZT9JBFGwEqv/yJBQon6hUn8vTsaw2M6wo0nSY=)
                          25: NySPVsdxhZ8CG1ciPcyrg5Y00Jg.roa (hash: eLBB/ryFtyh0U5kDNzJU01/rb6XqOa1SNpNvfukI4VM=)
                          26: OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa (hash: x7yqlpuzOUYTjhI9koKYGYix8ZFmxFeUptiD8PTHtzo=)
                          27: P0zP1jJVbq5izuOS18FYTI1YHxs.roa (hash: s6fzct44ef1GEvO9VXyOMf9H83k5wEPaumVmsRJC6ns=)
                          28: RKiPm9TAvbuh_hM-_lIBxDZv6rg.roa (hash: wmQF1xmI2xLjnYrkheVh+QF2nwc1FwtPu4Q6cucZc/A=)
                          29: RmvjYmPdLVqVlOqPp9vcdtr2DQg.roa (hash: 9F2rOTF3/Hee/eF7UEBylfjaac2UbkroovpmpmD2Kmg=)
                          30: TKLwlj_hhD4ChnDkZIEH511OIGQ.roa (hash: d5LelJw+wBPleYzumiiB1DR6XbgaSt39j02f16QfxpA=)
                          31: Uh0hQO0kRo4YQ_XIZEqqoOZrCSI.roa (hash: Gj6q+1p4cewBEZ9AUhWEQWip81Rwt2rylYZ/cgBxu1o=)
                          32: UssQ3uaWIBR-jRSPRfVK4dqtyZw.roa (hash: jSCB75UJBI6CVBgbXnymkTQet8MviTNNi1b+iGWhqX8=)
                          33: Xx1JKCEzK5ylWAERePTUNaG4vxA.roa (hash: VN34GB6PTJHGyOzcLDW/ID6l88H+88oQhvJCocFCDm8=)
                          34: ZE5HXP4DhKEPM6Gv1wOErPS1cz0.roa (hash: O/2TK/NX3+tm+RkMY/59BD1XnfP0CTYDGNxOF5SY9hE=)
                          35: _-euoJHZXd2jUITWsTfEZCzyL4c.roa (hash: na0JIfOfXC+SuSWeeEWsOPZm2teGL3E0t86FqqYqfNQ=)
                          36: _rbgiNGO-S27H5VBRvlSaosM5pA.roa (hash: F4Wzd0keTC9/E8Yr8BBEUoGpX4zOhFgL+3EUdrKLPwg=)
                          37: b9747bu6F3orHJcVTx2KhvjyqKA.roa (hash: H3wknujwm2p7sLOwETgecFsrpjupwjmW1r2yHz878yc=)
                          38: dhvrao9cqDtu4cNL7P7VwKji0UM.roa (hash: DXIuFC1u6zXUhH/posDaRLzzQjM/I3jLYYQrFJ8rMq0=)
                          39: ed1jORhWSi7ng65aRGJvId8bpXw.roa (hash: V1NGOKlYDvJUTPipPut4jDpgPnuzNxC4hJ0tFfqQYgM=)
                          40: g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa (hash: n9yM7dyLNiBrfDvEbmkvhz7bFD53KNqtuiSWk/NDtDw=)
                          41: grkpzxJson0VO7xVFrMikGMv36c.roa (hash: YMm6A4zlYtaXgWVdkGysieoloVta9ggqSz989h7KXRQ=)
                          42: hRkfWek6x-vExSIgkwy_44n-0R8.roa (hash: Jw1jYBu4t1JSgiHUdnnTnbxfd7dT4zMqdCScHCXuMGo=)
                          43: iDsVGhUzM9wIiGAdd7UL3QbsAlU.roa (hash: CSbthrtDlT3wO3U8KcYsreaOD2U29zr8MXYvaDSeDTs=)
                          44: ilkQ7l85HQmR_JVmkd_hGC8Di00.roa (hash: TFb4vPDvFn3NHoDA2wS5sAtOgJMIPvQ/3QpJDKqOZjg=)
                          45: jHRs2CdaoDudTKV1UxeprvvPaJs.roa (hash: 1WGZ/i/Wlhh6+utA+tb7JAVK7IH3dTYaxIkabtzpM/w=)
                          46: ka9Kg1mP_UGoOXD67l2s092h9eY.roa (hash: gHOj1YrfYiq5kNzFwLUGBr3drQZHXZ/djO0mPNqlklo=)
                          47: lOXttIBfThT0VgY7ljjG4tEpJ7Y.roa (hash: fiZK9BjaPjO7qpd4ZBMfJGJpGVtukLbE3FtVCjB2QWI=)
                          48: oSktbEz0CouLjJ7YPnkmyrcQfcw.roa (hash: V6P4xLHRE/6CaQ7pxwLQqH6zR4WlFEsCjnepA34qqx0=)
                          49: sVO_hwOUMLHjYiUFYzC6ZlJnNjg.roa (hash: A+S9gnFkAJ3wbXU2lCWRPwZRzZuYDwzqjjLfNzaAhnw=)
                          50: vpZ9pBlUZn9RHhWYszmcUSXh8xU.roa (hash: +lZGQ6hqM+WWBVf6jKaZ0gprTcSn3A0Dos8SvpePtso=)
                          51: wLoUUdSvg4mybpd990iExJeHUJs.roa (hash: eK4QhV/Upj6LcnsWEPnxaYJD29t58deZI0lM+T3uQOg=)
                          52: wRHBU_tIlHPadsLQLwBGJFuQGqc.roa (hash: HGZ2hfZbOO64qRGA+DNha/b0kQHhKQIKwFw+uvw3jek=)
                          53: yLcbHMgRfnm3GP6mvQgxG6m7W4E.roa (hash: Ezieh4C0OjR9hVJWQfbuNJn+pjhzzmPKBbae2Gg46+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 09:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c6:b6:81:62:49:79:e2:15:f7:dd:5e:0e:41:be:42:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Aug 20 09:01:46 2025 GMT
            Not After : Aug 21 09:01:46 2025 GMT
        Subject: CN=933c9fcd5dbb796e9d34f270e43b9c9885a2e2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:49:4e:74:11:0a:f2:a3:72:6a:c7:9a:7b:
                    aa:88:e5:89:b6:16:fc:15:16:2c:ec:07:b3:34:ad:
                    4e:9e:c5:29:32:a2:c8:0b:02:fd:d2:25:9b:bb:1c:
                    ce:64:26:81:c0:20:62:cb:91:21:b6:e9:c3:d2:9d:
                    7d:4b:99:4a:f9:f0:3c:de:bc:f2:f3:77:de:ef:69:
                    0f:8b:bb:20:86:23:c3:b5:7e:d6:58:89:a7:cd:03:
                    b6:92:7c:8d:4c:35:04:fe:a8:3e:f4:fc:f7:70:6d:
                    02:76:e6:23:bc:fb:3f:1f:20:67:47:af:34:d8:45:
                    4c:03:74:67:27:fd:87:02:10:1f:11:8e:c5:58:49:
                    19:51:45:6e:18:74:5d:f1:b3:35:50:90:6c:20:49:
                    7e:59:47:d5:f3:52:a2:2c:8a:44:44:e4:0a:37:5d:
                    41:c9:08:d4:46:9b:f3:92:53:3c:0e:a3:57:47:0e:
                    b5:b7:92:01:8d:97:bf:cc:88:85:5c:0a:d7:55:5e:
                    3c:39:d6:b1:3d:88:2f:39:58:e6:c9:ca:2c:23:e3:
                    81:4e:85:ac:8d:9b:40:e0:2b:c0:c3:d1:af:47:80:
                    a4:ff:db:13:e4:f3:fe:b5:9e:ea:4d:43:af:a8:83:
                    71:55:03:7f:19:ea:f3:85:9a:a8:48:4c:77:19:7c:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:9F:CD:5D:BB:79:6E:9D:34:F2:70:E4:3B:9C:98:85:A2:E2:C9
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:ba:88:2c:25:05:26:d9:5f:1a:d4:69:f0:72:9e:8e:88:
         54:94:bf:62:2a:67:53:b4:02:55:0d:17:75:f0:27:18:16:e3:
         8d:8a:e6:61:69:1a:da:68:df:e5:c0:ce:ec:92:4c:99:fa:1e:
         e9:1a:04:88:d3:22:2f:2f:6a:06:8f:e9:16:5e:7b:22:f5:ad:
         5e:80:42:19:7b:ad:d2:78:9d:fc:2d:97:fd:75:f1:2a:46:cc:
         35:68:0d:b1:e6:14:16:93:db:b4:fb:bc:a2:9b:68:54:3c:1a:
         eb:df:ae:d4:d9:98:51:c2:c2:f7:a2:58:36:0b:42:33:ad:9c:
         11:79:a2:92:84:1e:18:d8:9d:df:7e:f4:40:42:2e:2b:2b:ee:
         1d:46:61:b2:d3:dd:c3:35:c9:fa:8c:f1:1a:ea:48:8e:22:42:
         01:8b:9a:f7:48:57:df:46:ad:fe:16:82:7d:03:6f:c6:5e:d9:
         72:b4:d3:9d:3d:bf:a8:e8:8a:22:44:2b:aa:2d:fa:91:96:84:
         fb:d8:2b:23:f1:c8:9c:36:50:76:85:80:af:cc:56:fb:00:09:
         89:1e:f4:a9:e8:8a:75:7d:7d:be:dc:65:9f:79:7b:bb:a8:2e:
         95:71:68:e3:96:77:42:9f:70:72:f6:a7:b4:b1:fc:32:6d:07:
         33:43:55:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:33:07 2025 by rpki-client