Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          ik7HbYKoATTWmspuJjkFpRYInhIOf/4oSALy/2JPppA=
Subject key identifier:   52:6E:86:D0:2F:14:F9:07:96:BE:E4:8A:2B:93:8B:0B:9B:55:5D:74
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019932A3A4FFE27509539E02B3ACB3E0F267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0C8A
Signing time:             Wed 10 Sep 2025 08:00:09 +0000
Manifest this update:     Wed 10 Sep 2025 08:00:09 +0000
Manifest next update:     Thu 11 Sep 2025 08:00:09 +0000
Files and hashes:         1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
                          2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
                          3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
                          4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
                          5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
                          6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
                          7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
                          8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
                          9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
                          10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
                          11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
                          12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
                          13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
                          14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=)
                          15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
                          16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
                          17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
                          18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
                          19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
                          20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
                          21: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
                          22: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
                          23: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=)
                          24: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: EGZ+x2o9zFHAsXbnwXPhHvxOQ2ThRGJLvJyAS3UKb3k=)
                          25: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
                          26: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
                          27: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
                          28: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
                          29: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
                          30: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
                          31: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
                          32: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
                          33: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
                          34: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
                          35: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
                          36: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
                          37: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:a3:a4:ff:e2:75:09:53:9e:02:b3:ac:b3:e0:f2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Sep 10 08:00:09 2025 GMT
            Not After : Sep 11 08:00:09 2025 GMT
        Subject: CN=526e86d02f14f90796bee48a2b938b0b9b555d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:a7:52:1b:37:8a:05:b2:41:6f:d4:92:ce:
                    93:08:e0:07:76:b4:08:e1:fb:3b:db:bc:8d:3a:91:
                    3e:09:07:82:23:cc:74:df:ce:8e:cb:ae:69:42:1b:
                    f9:48:e8:16:7e:20:9c:b7:81:2b:4c:ba:7b:67:d5:
                    a1:d1:81:6d:6a:d2:77:f3:7b:7f:d8:d5:14:35:e8:
                    e9:99:38:ef:c7:c8:6d:8e:eb:55:f9:74:f3:ee:58:
                    20:36:87:c3:fb:66:6a:ed:b0:56:62:e6:ba:40:1f:
                    18:b4:49:79:2b:d4:db:da:12:04:c1:ec:73:18:81:
                    3b:85:7f:2c:20:75:db:b9:98:dc:d0:75:49:a0:39:
                    af:9e:f5:7f:3e:90:01:3b:e8:67:64:11:6f:e1:f1:
                    2f:c6:3d:0e:c7:0d:a3:68:de:54:68:a5:17:67:eb:
                    33:03:ea:06:b4:bc:9a:d3:3c:4b:4a:dc:4a:16:1f:
                    f1:6a:2b:e8:ff:4a:b5:2b:77:7d:fd:f5:74:81:c7:
                    03:da:0a:a4:cd:7d:3f:27:ed:ac:e0:42:4b:09:ad:
                    0b:04:2d:aa:f6:c5:ac:a7:7e:c8:d4:06:91:33:11:
                    38:a9:95:ff:71:43:91:a0:2e:96:06:69:5d:d6:78:
                    88:2a:a9:75:48:be:4a:5a:39:e0:21:6f:8d:0f:cd:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:86:D0:2F:14:F9:07:96:BE:E4:8A:2B:93:8B:0B:9B:55:5D:74
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:79:29:b5:fe:53:53:55:fc:3c:93:d6:46:71:a7:9b:d4:
         56:01:d1:53:05:82:68:a1:00:cf:54:a0:6f:b6:aa:89:13:9c:
         e5:9f:b8:46:51:96:66:5e:b2:ef:3e:10:ae:2f:86:fa:8a:7f:
         f2:ef:d2:15:10:82:3c:fc:d3:b8:61:2c:79:ff:71:e2:a6:a9:
         d9:8d:89:94:bb:eb:3c:76:47:58:dc:b9:cb:10:8b:71:73:d4:
         a2:5b:6b:33:8c:42:2e:85:00:8c:69:79:c7:99:13:80:10:1c:
         30:15:29:ab:0a:e8:45:4b:63:58:21:f4:fe:f5:1d:61:99:94:
         08:25:c8:84:29:46:ee:df:d1:d8:84:12:8a:76:45:52:25:9c:
         3e:99:f9:7f:c8:cd:a2:c1:08:79:bb:89:73:8b:fb:fd:c0:21:
         0d:c0:6b:1f:13:13:df:33:3f:1a:de:47:9b:8d:e3:20:b0:83:
         95:27:12:17:45:2d:f9:95:22:31:66:5a:a4:63:26:af:30:9c:
         73:29:31:f2:18:21:f9:0b:ab:82:d3:f5:2d:fd:12:7e:9c:65:
         f7:ff:cc:fd:68:d8:12:0f:a7:77:f7:33:1e:7f:31:6e:69:72:
         92:aa:ef:25:ce:09:c2:90:73:4f:9c:38:70:e2:c5:85:54:8e:
         f6:1f:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----