Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          wNA1KF6Tw7dag+sj6075DG825RFojaGz0/hU5hDjVYA=
Subject key identifier:   61:DD:BE:CF:13:FE:C7:D4:51:82:4B:F2:CF:26:04:C2:77:C5:6F:75
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       019A1EE38FDC589F30E71233106A0DE310EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          171A
Signing time:             Sun 26 Oct 2025 05:00:21 +0000
Manifest this update:     Sun 26 Oct 2025 05:00:21 +0000
Manifest next update:     Mon 27 Oct 2025 05:00:21 +0000
Files and hashes:         1: 1--cUq91Mit5QH2cwWSOxBevK3nA.roa (hash: AeVg1wzE8EyDayqX6dUPTOAPPGnggkU3AZQPwR7KISU=)
                          2: 1-wSj_jNbSFZNPKzrs0H7fMlUYPs.roa (hash: QwucWuCpsfVGmeIL4+WbPwDASjNtyxA0uvqhnVE0kXk=)
                          3: 1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa (hash: 1mq5wz/1iFM0nRuaGbWeQP9cbSRi6hrmjA/870kNVwc=)
                          4: 1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa (hash: G0Gifm987y56WK0jOJQu1XmPLu2HpPxSaSdoMhrNoMs=)
                          5: 43W-eGhoB0OzAzZeV-7lIQQDIOo.roa (hash: Fa6j80QC7xY8XwzuoZlxIB/I65MycNffdEY3vuz4Q0w=)
                          6: 4cQzXFxUGlGjBPSq0EGUuwlerqM.roa (hash: RUnB3qpCxRiKVWfppqkGkTOE3BYzOLpwyJhoqNuHmnM=)
                          7: 7y1PMFZ77TvwERIOq36v9qt_I0g.roa (hash: XyYA5RSKyGwMjTqBAMbzkSTfG/qYbYS13qe9sSm88Pg=)
                          8: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: DQJWl8LBrxebKpE8edRJijywTDd1JpvmQUCNQhaZBBg=)
                          9: 9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa (hash: E45sd3llDs2pTTLi6LJkzrRBxW0QqdLu4AwwGiPWU8o=)
                          10: Bi6ckjMzIjswtGZpm48D-Wo_OB4.roa (hash: an659zUeBPl2S8rcFc9akGr14egOC85nfKG/rUkJZjU=)
                          11: F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa (hash: 7lkthzwPyq0Nlj6C7w8YmFjCDc9WUOXo1l3objgvoAw=)
                          12: GBjsCsDFhAmCrDosbrIyM2oi_k8.roa (hash: QxxcHsFFWLY2BHIJuYq1eLGTUZDCy2Zq1QP773WJCgc=)
                          13: GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa (hash: bhQ1Ond9uTsWLPhHEPCKrqbxdo9J0XGoFGPdOwUnfm0=)
                          14: GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa (hash: UkvxRNX70aIvJXPzKAnXBIMmTpv2f/Y+Dlu3mnma0Ac=)
                          15: HJd9P_PlKCAbara3DxGKUKKnE7c.roa (hash: eUsrGFzXfQW/Dn1ODD605ExEOtBlWFeJQugMdp5/EgU=)
                          16: K64ZDclpadQbVzMQRV2i46uDmJo.roa (hash: tpnZn4EYuI03Em/aELkelIAivjX/DuvgaCfyeISarg8=)
                          17: MhuwQoYW20TMcq1PdgNXXiGR7XU.roa (hash: cEjZXJsQfHnY+2fZ9qeslTeSc6LEnyffbV0K1USSZek=)
                          18: OOj6UEfy7tJhVvIZwv67cVkbCsw.roa (hash: bFAFslFKUorfRmuJkRc7/SiL4ZsIaQRH0zH9zHF2pgI=)
                          19: OqF2eyJ9Nah0S4xGSjJYn_h3cTU.roa (hash: UaxiQV187imUDaob7M2RSZknrvaHjuJ3BY11Fvhjz2E=)
                          20: P0SW_klNDbhNIIK8YKXaPuabqTU.roa (hash: 5FirmEmGhJEAP0DJn1h14sCEI/dbN7Gdq6ZuKutBsJU=)
                          21: R2zForXg41Xz6ZiOvoYxYCONTtc.roa (hash: w6iKooFVAmcB+szcwr+F/c/HtbTWkbLs+qqPbY5EcAA=)
                          22: Uy3DNd8cAhKYVPioxN7PoymKedw.roa (hash: L7X4DMP3u2TfIijoOqDl6Vi5RU6BP6p/8G5SNNVhw+I=)
                          23: WWSW__MVqK6dx_k6tsS9bRZ--CI.roa (hash: 0n+w/A4d8z6b0u844BV3PGZBGD8lEvEB6AFFqVVHQn8=)
                          24: WeCt8pup8wDWF42xeyTZdR7k2GQ.roa (hash: EDkq8tNxM3yn5LOawEnrqC45Ne8Yoo76GfpxJFb6xWI=)
                          25: WiON6CdHeAs54FIwJq22Q-CMJYQ.roa (hash: 4t1adRl+qe2aNtYrRhoxvc66aXOa5Y+iHAm8U5xH9j8=)
                          26: Wkh7uioWgBi7hYTbHKGwmYv2b2o.roa (hash: y1Qn0vF6vc29BjpVGN0maHU654epEzVd2ncJ5AsSc8s=)
                          27: WkmV1C3n1xckvk24Dg23f_uuw-Y.roa (hash: 4b9CQ+UDGsSD1Yt4Z/0/FrLqdoM9ExyMXp455k6OTOo=)
                          28: YTrCa9l5vP3dQlEy3g4e738RGCc.roa (hash: 7QjYk31Rz2LLsB0LYuegGouh51+CsDDyqSFe7Sy9+c8=)
                          29: _F7ev2MBBxNUWA2zbKywRx1epIs.roa (hash: ab/PBGhlf8KsdKFVWCStEJO1EAqxAF8tNS/JPsSqUvk=)
                          30: bApeGU9pDTxTCcxiN5J5ipRkqMI.roa (hash: NZoPIqG6nJxYq38KIr9pSvoBY19L9DXRzBM19WHpf7I=)
                          31: bo414DK33mQjPnsi2XO_OhuOXVU.roa (hash: DFhqXQ1ALcgUKGfkab9Ecq2SNxSXtHhgzid0rw+LjqA=)
                          32: cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa (hash: Tm+oi/lD++p4PhyCp4bPhVckvck4FHBGPjkqfjDYDXk=)
                          33: ec458CzjY63_tDvq0835iuvNeqM.roa (hash: G8uWZDny6okXGyK8fXhTSuZAQxB4Or51R+hkoXknGf0=)
                          34: ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa (hash: po9RSn1vnUJn8LraWDgTGQkIzqjsRElh5uulYlg6a2I=)
                          35: f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa (hash: 2GF/hcmuZptIjGpBhlhl/n2eM7lvmTB8GpajvQTfO1o=)
                          36: gS472YuNqbJechBg2iBckT3KoLM.roa (hash: FBUuQCDwaticAhPspr/z6ZENec/pu4iMj4JBkdQRnVA=)
                          37: mWetSYOn1BkhZCQeBuy0aNAtp2k.roa (hash: 7QsWLfC1FbX4IQpj2Fc+FdTBylJTVc8Q6Q3mzopMiwY=)
                          38: oMsbWqKig1Jz9KhQZB1o-hLbsjQ.roa (hash: OocXoaK/KzmHtgXJpn4l6UhsAXqtzLQU0zedQi9+930=)
                          39: pSNhVcz4ozKQCN-LCUrqu4lNRzQ.roa (hash: J/f/1amfAJOlGnKb0ytkwZwxYnhSDPmLNiJU63xKnhY=)
                          40: pW41aiqhh4TGOa0SfOJoWwzIC9A.roa (hash: NOVcfPSERPAJVKGKnsOL5db9Ocxsd5SZKJKLS2fsK1w=)
                          41: qPU2_LO_IOLwIw_5UdC9HILGfrU.roa (hash: zovHlBAPS+CTTK/Pgho2T3I/C6ghppduwnAgw0j/qyQ=)
                          42: sIfXnkT6_MznqZrO1Lae926CR50.roa (hash: NCRNDrTiw+6us5+S0PADTvnopFARdQ2lLkezVhE/00s=)
                          43: s_gtffJAdOdCOTF8JrwlspZV70Q.roa (hash: EE3zvO+17D2lS+ma9Jbmozdr5I2JwhR0u6QEkn1ojIA=)
                          44: t1xRr6zeiMtxYaGtbe-W72-oQS0.roa (hash: OyceZDHizIoFdT4fRa8zkuIKpKmh7T2n1xLe+VKJ1cQ=)
                          45: tP6196eoGxZ8sJXtGB2BxyyaQkc.roa (hash: Yg1BpZOhleklDTz62pqYALAo96J1wsRiT1axu+WPIZ0=)
                          46: udEkF_6Cl582j3MhipXtkqh60QA.roa (hash: KGfzfkRSS/8LMCpAd+TJJyVg600JQWb1fQuNDHspP4k=)
                          47: vIJrj75gZXSeJTed1CGI6o-Z5nA.roa (hash: T+o0LnzwgxW5JkSyu3hg3ocAmMnSSVFEWIqTX+78bsI=)
                          48: wuHCt2BHh06Bfff_BuCtG5z_hxY.roa (hash: /M0WlOuHwpu23wrIhCr+n8JWrn1Ijygmq8J4TbPhLBs=)
                          49: yc-gqrsX0Dlayvck585FUtBbJrE.roa (hash: Ks7WQxTUjzq6wrRJQNHa/tYNzP+1BfHd4p2Dur1U0Q0=)
                          50: yugfCm59zW-OCysnWXdRGYmiLPI.roa (hash: dyiopA0j5b5DW/jiTg8DD9JZwVemiDlrthtnV32cs90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 05:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:e3:8f:dc:58:9f:30:e7:12:33:10:6a:0d:e3:10:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Oct 26 05:00:21 2025 GMT
            Not After : Oct 27 05:00:21 2025 GMT
        Subject: CN=61ddbecf13fec7d451824bf2cf2604c277c56f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:2e:1c:c8:11:fc:de:ef:a5:4e:09:f4:e8:
                    b9:dd:fe:28:61:0c:44:58:89:13:2a:3e:ec:51:39:
                    6b:5f:a6:58:33:08:0a:17:f0:c1:19:9f:a4:cb:2c:
                    d4:4d:91:44:c2:04:d4:47:4c:61:90:53:05:cc:f3:
                    61:38:cb:c0:6b:b9:3e:77:57:0a:bf:b6:a7:52:27:
                    31:f9:6d:55:30:d1:1d:29:bd:98:77:09:6a:f8:74:
                    d2:32:a2:45:0f:25:c4:8d:54:1c:03:c1:5e:74:a9:
                    4b:7b:f7:d4:4b:64:1a:3e:90:92:42:16:4b:0b:2e:
                    c1:bc:5d:cd:96:e0:ff:30:89:19:58:2f:46:4c:4b:
                    d6:ae:85:f9:0b:dc:ad:e9:33:2d:ec:05:3a:2b:0e:
                    12:49:e0:4f:df:7b:f5:d5:48:c4:90:8a:d0:6c:d6:
                    57:7d:f6:56:5b:87:eb:21:91:92:7e:98:5e:8c:49:
                    7f:d2:2a:9d:8b:3d:9e:80:27:78:33:99:04:c5:a8:
                    70:89:c3:29:44:f2:eb:86:7a:ed:96:3a:c2:7e:f6:
                    d8:d8:1c:d8:95:6d:c8:a4:80:8e:1f:35:48:0a:09:
                    a6:86:dd:1f:31:76:ba:25:85:8b:66:f2:6a:ba:ff:
                    ea:12:c5:b6:14:e4:6b:a1:82:2b:64:f6:da:43:21:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DD:BE:CF:13:FE:C7:D4:51:82:4B:F2:CF:26:04:C2:77:C5:6F:75
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:93:c6:5a:71:be:1f:d3:2a:69:eb:a1:cf:0b:82:03:fb:
         bb:1b:47:0f:8c:cf:d3:86:14:3c:48:3c:73:af:cb:0e:62:8d:
         07:03:e9:b6:f1:70:f6:08:81:e9:51:28:24:57:20:74:00:f1:
         79:8c:9e:44:1e:c8:91:66:a4:39:0e:e5:e0:5b:e1:ca:71:ff:
         d3:7b:96:e4:e1:93:37:0c:a8:46:8c:07:67:96:46:35:a1:69:
         c9:3a:0e:db:ba:f9:6f:1d:a6:98:91:f8:6a:66:d2:a7:4e:2a:
         9a:8e:36:73:91:30:b7:ef:0e:84:5f:a0:32:74:2d:2a:7c:bf:
         21:6b:d2:c5:e8:ab:3f:ec:ff:7a:c2:2f:d3:6c:67:66:6f:22:
         2f:ec:56:f8:2d:f2:2b:bd:69:df:f2:fb:8e:d1:f6:68:63:4e:
         f4:37:df:fb:5d:4c:df:c8:32:18:97:a2:19:7f:58:cd:8b:f7:
         c5:d2:cf:e1:70:f4:ed:01:af:82:f9:33:b7:a3:79:e8:4a:46:
         36:5a:4a:70:0e:e5:7e:2a:e0:99:51:65:e8:39:98:48:11:92:
         07:d1:2d:0e:ee:62:ed:6f:82:64:55:95:38:43:ce:70:d5:db:
         c6:1e:2f:fc:bb:52:91:1a:cf:c5:06:e5:5f:eb:2b:11:02:5c:
         5b:bd:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----