Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
File:                     mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft (raw, json)
Hash identifier:          8a57GpeKlVAYAbIh72HXCjbDi3MefjCKlVfnNq3qBuk=
Subject key identifier:   18:B3:13:98:68:C4:62:80:81:58:72:B7:0E:66:3D:1B:8D:F3:5D:2C
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       019A0712297E38A09BCC764D291E77BAC66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
Manifest number:          15DD
Signing time:             Tue 21 Oct 2025 14:00:21 +0000
Manifest this update:     Tue 21 Oct 2025 14:00:21 +0000
Manifest next update:     Wed 22 Oct 2025 14:00:21 +0000
Files and hashes:         1: 1-Cv5BKM8zNqXeWC17CN2zV2YkVQ.roa (hash: sAuytnhp2YO0VVHdD3xq3B3bN0hNL8MnMtuRRIK7UzM=)
                          2: 4decjSm7V12aNuuaOgSqrc8uhn4.roa (hash: 0/IjMpYVZGZEVI1ijQhujVx7Rgim31GeLEc/N/7gSpM=)
                          3: 62BDcwhbU_0uQc_enrWP-Z6m7QQ.roa (hash: OfrM2iB4mEqa+0lRBnK1oschgUGN5IX1UkkXWIZ/u/I=)
                          4: 6DiPHYmXhjx8dlm5fEGv1KFnYxo.roa (hash: AZBYul/WYrAc9HAfNCdaLFVE9sGftC+yaREw1QQ3tuA=)
                          5: 9OBeYetI89tN5bzHC0We7nAe0c8.roa (hash: JQiGQF8hr3Jc860TYChxUw28nKs7bCAae+7SdCc2ojI=)
                          6: BDdGh1HAKaPwVV1exuSfoiuaxX4.roa (hash: qb+7Rwi7E1y6pe36P5HsREOCOT62uFVpv6KxfmCI4os=)
                          7: CTpVhPCoPHqKWTpKCjGFjdYTHxU.roa (hash: Puy8MVTTNRlJVwOE7fGN2ckttFN6H6KOwMhA0Wrei7I=)
                          8: EUfATmkq1EdILfqvyPSZpu5gYIY.roa (hash: EymBkyrzbsAzI6nGiRxDgokuIHCyxUG6foppebGgSuY=)
                          9: HjuXXXUSfXncfn8MXn1opXEusBA.roa (hash: de3QC+08N81qaw/xj5AtjMnXwbIYVfRII0xnXRjd9Y0=)
                          10: IwmqUO5Bdk2j3timNXeqPfEF5nc.roa (hash: FQvshkZef45phExzjp94y2UhhZ4QwXZc9vGnxeRHx6E=)
                          11: Ky_o2gJmcuRwCykA12haZzX257w.roa (hash: 2SLVXpJ4g5619E7GOfQUMXqFNCcVwKAQTwJMwj4QH2Q=)
                          12: M4-LdIp_MqHF6qgOq3JN4pLRykA.roa (hash: zv5zfgWQAHHHUjh71ZARM/6yiSaQ31Ra+x9XeFztt3g=)
                          13: MNamUZCYqQdFWw9w_it4xBJQr64.roa (hash: TpVreUAYeyR1Peo8xeqq7r0L/O5Z6PIyehd9gPqsYhs=)
                          14: NIDu_UivXF2VPARoemzSztYH4wM.roa (hash: 1s9mUJ24UuMUK6JmJcMxqbCNdST0Hrq6UQb4GHGIZxg=)
                          15: QYFyLiA_3R6huFbxIua2tfyfZxw.roa (hash: mx0YJqmSn+IbdyskP4BBrOaMK8O15GO8GpWVAXfey/k=)
                          16: RiXc0w7t5xX26ELQVBzhzQ5s3W8.roa (hash: 1Vxr9lUuAjIlr6KEnNoJwv1Uhv0dUKXRd0yNKLuxU4U=)
                          17: TBs_8YMvmdiJjenAGhwwCjcNHYI.roa (hash: jMOO0WI2VuvW7cVJaN9yWkUsk5iYntxno76Se2WWgWE=)
                          18: UY3muR0INg99lrl6RyVRpmXQiVA.roa (hash: ngURFLpCNaHMjBAmks8mIdx4bSEFdYIbp1DYncrQTsw=)
                          19: bAre1OnQ-S06l58QEUg6UYK05F8.roa (hash: QR2q/y1snnMAQcqEMi3pVb5/K1OVjUGZNbsfyA0UMuY=)
                          20: cED4rrKmSCvGfS67cpWVFvr3cHQ.roa (hash: y22hsDEN/Sto2EwHMHl8+2qE8moFlDYks2CyeDAa8Eo=)
                          21: dYnDOKCdXu5149JQvacDbq7mVRc.roa (hash: cR2UPr8Ou2DR9OZZVMQrv2BPoOpAKYqw8Ud7NLgZ+3w=)
                          22: doixSHUxXbw5SQnGUuRYCtRmxoU.roa (hash: 0lEvCKmgRTuygoVFxu+Gi9HPYBsBseV6tb+dDfLUnnA=)
                          23: h8TFx7LySk9G9awVrMrjFHblEYQ.roa (hash: jkpS9ke0q9EXP5S35iE/9oGgCF2PK+eX0C8XKuqgRNM=)
                          24: hV-qNyT8ttunpu_f6R8IO_bNvNw.roa (hash: VGRn/MmvlR8cKE/rXsWSxATXTgYDFISD7K7nqqWj5gA=)
                          25: h_ISqfLip0HBjZrqefrLbw1u9Qo.roa (hash: C++Jh843tmFk3SPjLWZKi19wFJNEgD8xbR+oyUwhKMk=)
                          26: hhy_H3R0WF-dr485QZRdqYkj6Sk.roa (hash: ILkgpOgTRFsVyKk6aD2w0cSKSsWTAQh6L+29UxCjaY4=)
                          27: jt1Zmt4DT_Y7sXSl35beVxp19QA.roa (hash: DdgpSXcI3OxSMNfJJ9ZhlWPoGPhoA4vkTZiBlBg5a+8=)
                          28: mKGOkm5u0T9IdH0S04-7xgUuAno.roa (hash: We4iFFujIIuPiWeh69F9/uOh2Wx/iRl5rE6U5/MBWsA=)
                          29: mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl (hash: WQYZbjMOWEYrkXblwsMridPjbGcVk+E2aCYXkKG703o=)
                          30: oLB2NwVVfJwfGY-CeGchTG06b0o.roa (hash: m01+0JNKwIgkqLLZUiv7RwGcZrBYusJVFTlAThmwhfs=)
                          31: qSptZY9DA7TTOw01rjMccBEg63M.roa (hash: 1Ge8t7ARNpBeDac8VWbtlsdj9yB2OCW7N5eD5ZuctIE=)
                          32: qxdWVUWi_796FeERbGwX53IBTsA.roa (hash: ZLCkWXDfFCrHd3zvBgNV0bD9126xAMdTedsTZMd75vw=)
                          33: uofMtYfIpf24UZo3BlSGxitUkwE.roa (hash: kR/750TKbKhbBcBsfyZYl/862aPphhsx4Xa5VB5TIdU=)
                          34: vc0PhqXmgMFPNuHjQmrOwGtzym8.roa (hash: hyZ19U18gB5WuqYXdgBqpv0AJcd85R1RLE3EfscgBdg=)
                          35: xZ9s-lOWjzPOKryloYEBooflvbk.roa (hash: FhIBYy7jadsE7KXIp04secyaxmxLrjv8hCTIezq5e2s=)
                          36: zwLlwIImiPwFnO9JiTIl87LVjLA.roa (hash: sjKdUMw14Wvb+Na/NnXsaFKkGsO/QUwOy8YrrPOrC3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:07:12:29:7e:38:a0:9b:cc:76:4d:29:1e:77:ba:c6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Oct 21 14:00:21 2025 GMT
            Not After : Oct 22 14:00:21 2025 GMT
        Subject: CN=18b3139868c46280815872b70e663d1b8df35d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:b4:24:fa:c0:56:e0:9a:b8:70:0b:af:93:
                    a8:02:4f:9f:23:65:51:77:31:a6:ae:ac:ce:5f:2e:
                    02:df:0d:d6:83:d6:c9:e3:31:3c:5c:e8:14:f4:f5:
                    9e:5c:59:13:bf:95:ca:81:1c:30:95:17:8a:d2:70:
                    0b:0a:9a:66:8d:6a:9e:bc:16:64:b8:a1:85:9d:d0:
                    61:e6:6b:5b:4e:f7:59:9f:cb:5a:59:fe:ae:f1:04:
                    a8:b7:8d:83:b1:b1:61:10:35:1a:44:35:44:79:2f:
                    1d:13:ff:f7:09:5a:b9:0e:c4:91:cb:d7:31:0e:62:
                    0b:38:7e:2d:8b:f6:ce:0d:28:4e:f3:9c:63:0c:da:
                    14:a3:a2:9c:3f:a5:48:f8:03:e7:ae:71:60:6f:71:
                    39:e4:a6:b0:80:14:82:1c:a4:9a:27:76:10:a4:eb:
                    d3:24:88:f5:04:85:0a:49:c2:ed:f1:20:76:67:4c:
                    be:ea:2b:28:0b:f5:bf:45:3a:58:02:4b:31:ef:d4:
                    44:1c:f6:73:ef:fa:75:c6:63:66:2c:e3:47:43:b4:
                    c6:ad:4f:ea:df:1e:58:19:75:85:9c:78:22:64:6d:
                    df:28:54:8e:af:ff:50:aa:1b:e7:da:a8:5b:da:b5:
                    9f:d3:cb:8b:96:f0:07:f1:ad:5d:ca:24:05:4b:ab:
                    95:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:13:98:68:C4:62:80:81:58:72:B7:0E:66:3D:1B:8D:F3:5D:2C
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:40:29:58:a9:b7:84:cf:e7:e6:2d:7a:2f:d3:db:17:26:f3:
         a6:37:40:38:6f:53:ae:94:09:64:95:62:c0:21:b3:4a:d2:05:
         24:92:b5:b5:61:62:ec:88:1a:66:a4:82:52:6b:76:a2:5b:44:
         e9:67:1a:72:be:38:6a:16:cd:7a:d9:3d:4c:ff:d9:17:dc:cf:
         af:e0:4b:23:83:94:f0:22:09:b0:77:92:94:a6:53:7b:c3:ed:
         9f:12:97:71:37:ba:a8:e6:fd:50:bb:90:fa:21:32:79:05:20:
         32:06:dd:69:71:6b:7b:11:69:43:25:57:1c:c3:8c:c2:ac:19:
         e5:0a:9b:d1:2a:fb:a8:6d:6a:c1:a3:60:1a:9b:21:49:76:7c:
         e6:71:5a:6c:0e:5b:ee:f9:e1:46:be:bb:aa:ec:03:b9:4e:71:
         5f:7d:35:11:18:e8:2f:46:ab:b8:a8:48:3f:5b:0d:b1:94:9b:
         f4:0f:41:23:38:33:2c:c1:01:c1:7a:86:f2:96:27:14:3c:6e:
         a6:05:ab:d8:de:2f:e2:16:2d:d4:1a:7d:6d:e6:38:68:2d:41:
         02:45:f0:e1:4e:37:e4:36:65:6d:72:26:3b:2d:61:bb:62:93:
         89:03:5a:29:95:5f:6a:ec:d2:3a:61:76:6d:82:a0:98:0e:2e:
         b8:1e:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:28:24 2025 by rpki-client