Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          q0JwZSu3S7ItBMPuycV4RAwtvRWf5pNnnr78EKO7Ikc=
Subject key identifier:   8D:20:D3:6A:2E:5D:C1:4A:8C:2F:9F:8F:9A:72:CB:2D:70:47:3E:E0
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019A42EFF12B74FBA144D82610ED3964B5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          0F7E
Signing time:             Sun 02 Nov 2025 05:00:12 +0000
Manifest this update:     Sun 02 Nov 2025 05:00:12 +0000
Manifest next update:     Mon 03 Nov 2025 05:00:12 +0000
Files and hashes:         1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=)
                          2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=)
                          3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=)
                          4: 5Gpugl9qvXvWFS1DpStrfULxE_U.roa (hash: KZiaRVIOQGiZVW3R13UM2WDkj8fWfnSB18hjkaWIqbs=)
                          5: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=)
                          6: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=)
                          7: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=)
                          8: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=)
                          9: 8wGardeeEmTMhzRkH2QgILTu5wc.roa (hash: Cdy17idpQ91vblcr1bF/c0NNDsf4K72mGLO3I6JxJgc=)
                          10: 9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa (hash: Nh8bc26byCkv5gvckcokp5euxtQrzclKwBg68owpgwo=)
                          11: AH9IWPeSjn4zPMXrJdOOZZAn9Aw.roa (hash: NZOres5BfCUJDRAZEdwJLZ3pKyCM0qr94CohvGLshJM=)
                          12: EqQMeL6zx5KJ7G-6yvg5oeaml80.roa (hash: +hIYVqIF3npRwqzc+KC9S17raCPIuUeac2Niy0EAaaQ=)
                          13: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=)
                          14: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=)
                          15: HncOpC0cPLkDLV136oAS4qAtbEk.roa (hash: id6UMdtXryGkMPWSsEKiWYxcEmbnr02iMMrsqZnYQy8=)
                          16: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=)
                          17: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=)
                          18: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=)
                          19: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=)
                          20: P1Oafitv1-CeGpiS3295bk_jc2k.roa (hash: zdC8sgbH1GuCJi8ZjmFdq/tJ5mm7D49KA4AN5K55yRY=)
                          21: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=)
                          22: SqKkKM173VSrB36qGmxTUJHKCo0.roa (hash: 48hEcJJ8yoYkRJhZ40G+F37LnKZ8jLN3UCGXFfcuN8I=)
                          23: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=)
                          24: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=)
                          25: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=)
                          26: aq6KlZysbDLQ4D4CtmviBNX9mxE.roa (hash: 0VRSVc6dFAyx9rP2hf9m+j4g6HQK7GBOvG2B/JoJUo0=)
                          27: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=)
                          28: eRDw7dF55P7wHv9vfdNgciZiits.roa (hash: MdrDuZVh60KAJjt7uD5dLHrckgAME9PGiYJbxXCoOHg=)
                          29: eb1JGLGjHk8dUCm22Z9YVbWJfI4.roa (hash: 4dk6LdqYI6h3lwSIwoSI/6KhGYHQ7oiRewrKPkKoR8Q=)
                          30: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: 28Zgo0kmcSN+xYWXSZG1lxO/DwCsmqZY/sQPk4lQYUw=)
                          31: jVzLhR_-fZDDxOR849cM8vp6pzo.roa (hash: j+TN92lkP2jjoQ1DpZsUrV4hygUYX+rjfYRIwGn+Dyc=)
                          32: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=)
                          33: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=)
                          34: kMtd6Q6faSofDN0lp3zD9l3Gdzs.roa (hash: QTK8SH5Xb+6Bx10XX5dvQEh39Vc9s2UGKcmxtby4cBs=)
                          35: moTDq53FtqLZAk0AGJnD6LpxpL4.roa (hash: yDXZvfMOXGpBwTjMd4JFoseeDN5zwWwTjLyIqfnezgg=)
                          36: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=)
                          37: nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa (hash: N7pYS0DZbvPX9AJ7+c9P/Fy4kdTMZIvg/FrKj/0hE8k=)
                          38: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=)
                          39: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=)
                          40: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=)
                          41: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=)
                          42: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=)
                          43: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=)
                          44: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Nov 2025 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:42:ef:f1:2b:74:fb:a1:44:d8:26:10:ed:39:64:b5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Nov  2 05:00:12 2025 GMT
            Not After : Nov  3 05:00:12 2025 GMT
        Subject: CN=8d20d36a2e5dc14a8c2f9f8f9a72cb2d70473ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:98:33:fc:3c:23:b4:a8:f0:7e:9c:5d:12:
                    ed:bc:b2:31:6f:f7:6a:d0:52:38:88:58:87:ff:a1:
                    ae:78:ee:1a:1c:a9:aa:7f:dd:54:ec:6f:12:7e:2c:
                    09:b6:48:bd:6f:b6:28:58:d6:37:c1:4b:db:d7:b7:
                    30:f5:ff:d3:1c:64:05:a4:3d:27:94:f0:1f:a1:ee:
                    fc:fe:36:25:b8:a9:85:3a:67:3b:3d:00:56:69:fe:
                    b3:a9:68:36:7e:8c:9c:21:93:fb:8f:ad:24:69:f0:
                    81:60:86:15:15:82:6e:93:4b:5a:df:22:de:e4:3e:
                    68:64:d3:71:3f:9e:b6:dc:28:2d:4d:c4:55:e0:63:
                    28:dc:e9:20:25:dd:53:e9:11:1a:7f:06:57:b3:be:
                    b2:64:18:e3:bd:af:69:53:fb:e7:c4:85:bc:8e:00:
                    7f:ae:f1:d2:62:f9:53:a1:e1:dd:5c:93:53:a0:ea:
                    8d:e7:34:1e:74:b5:5a:9a:d3:45:1c:28:a5:1f:1a:
                    a9:5a:10:24:a0:28:be:00:fa:2d:f1:10:b9:06:f1:
                    97:cd:31:32:04:2d:bc:ed:4f:b0:89:1f:4f:d5:fd:
                    31:d9:9e:24:57:8b:38:f0:af:2e:e7:89:4f:c0:07:
                    e2:ca:72:41:4b:49:9b:cf:cc:0f:8c:f1:15:cc:8c:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:20:D3:6A:2E:5D:C1:4A:8C:2F:9F:8F:9A:72:CB:2D:70:47:3E:E0
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:1b:23:af:13:3c:a5:1c:37:bd:c1:b1:b3:4b:b0:e1:f1:
         58:c3:f4:5d:fd:70:69:3d:cb:fa:c8:44:42:bf:94:4d:a6:e6:
         b4:e8:b9:40:f6:16:f0:07:46:c7:e8:a2:74:05:e2:ac:b1:42:
         94:a9:6d:c7:19:df:e3:99:14:0c:dc:83:39:74:b1:5a:fa:a3:
         30:24:bb:c7:da:e6:23:0f:de:cc:10:a3:e0:0c:dc:04:68:d1:
         90:21:91:b5:19:df:ed:b5:e2:54:02:04:43:bc:94:03:f7:34:
         d7:e2:cf:77:c5:ba:17:32:66:85:d0:40:9e:03:95:df:8a:49:
         62:64:46:24:9e:ab:43:51:de:ff:32:f8:93:08:52:58:d9:63:
         15:c4:db:81:0e:3c:3d:37:53:f0:ff:ce:b6:76:05:1b:f0:ec:
         28:43:b9:e0:34:22:5f:e2:be:a8:3c:50:ab:de:5a:69:48:0b:
         a6:89:4f:8b:b2:cb:c2:4c:45:dd:e3:37:1f:7e:56:f8:8f:de:
         d4:59:02:8f:54:e0:4b:82:11:70:ab:cd:b9:ec:d5:ef:20:f8:
         4a:e4:9d:e8:e2:4f:2e:b8:d1:82:8e:76:0a:6d:47:a2:c1:8d:
         6f:fc:9b:80:92:de:0b:fb:10:53:98:b1:06:8a:4f:83:6f:41:
         49:66:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----