Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          YHfKyyu9Oun+6nmwmQs/VP2PjaKufjKlEL8iBaUayaE=
Subject key identifier:   AF:A1:5B:88:25:24:93:F4:CE:B7:BB:46:46:53:5B:93:76:6C:F0:59
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019A1F51DBB4807992264351256CEA7978DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0D05
Signing time:             Sun 26 Oct 2025 07:00:49 +0000
Manifest this update:     Sun 26 Oct 2025 07:00:49 +0000
Manifest next update:     Mon 27 Oct 2025 07:00:49 +0000
Files and hashes:         1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
                          2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
                          3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
                          4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
                          5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
                          6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
                          7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
                          8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
                          9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
                          10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
                          11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
                          12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
                          13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
                          14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=)
                          15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
                          16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
                          17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
                          18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
                          19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
                          20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
                          21: _LaL2NGVikd-BXS-ihRrP5NY6ik.roa (hash: 8tMeMGtCDzB7YrSEIzydRyBsTv0sIFfm9Cd8vLZYHTU=)
                          22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
                          23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
                          24: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=)
                          25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: 1oBZ3ih30AZKlxssz/6M9FDE0f3AucV3FMmSAYF538M=)
                          26: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
                          27: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
                          28: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
                          29: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
                          30: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
                          31: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
                          32: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
                          33: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
                          34: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
                          35: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
                          36: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
                          37: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
                          38: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:51:db:b4:80:79:92:26:43:51:25:6c:ea:79:78:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Oct 26 07:00:49 2025 GMT
            Not After : Oct 27 07:00:49 2025 GMT
        Subject: CN=afa15b88252493f4ceb7bb4646535b93766cf059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:6e:6d:27:4c:53:46:2c:4d:3c:10:94:98:
                    e2:12:ef:b3:9c:47:63:4e:84:ba:d0:75:07:5e:79:
                    c3:ab:93:e8:d1:ff:c8:31:82:2b:c8:b6:0e:2c:94:
                    48:8a:d1:fc:6c:4b:9c:3a:63:61:b6:c6:29:65:63:
                    d3:2f:bc:da:21:03:de:73:07:d3:87:9a:5a:e3:c3:
                    aa:3a:b1:42:09:32:2c:50:47:46:62:a8:44:9e:3b:
                    a4:47:a9:74:ed:e9:5e:44:56:d2:09:45:e5:20:0a:
                    8d:8f:c9:cd:36:4e:48:79:92:d0:4e:b0:fb:76:ad:
                    fa:bf:d9:c0:0d:8b:a6:28:2b:d9:11:6e:a2:cf:f7:
                    15:0c:26:bd:6b:13:e9:f9:76:73:95:f0:36:f8:91:
                    fe:98:45:2c:bd:51:56:41:f5:ea:2f:f6:09:23:de:
                    23:4f:ef:2e:e4:31:66:21:92:f6:a7:aa:3f:ae:59:
                    cf:84:3f:6e:2b:28:df:13:39:29:d9:3d:65:cc:a9:
                    8e:fd:3a:9c:bb:f8:f0:13:ba:3a:e3:2c:56:52:4b:
                    73:91:36:70:17:61:96:11:28:ac:9d:6f:16:ad:4a:
                    eb:fd:70:35:3f:40:95:f3:db:76:17:27:17:82:15:
                    42:e1:9e:69:9f:4d:bb:bf:62:06:2b:3b:5e:b6:5b:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A1:5B:88:25:24:93:F4:CE:B7:BB:46:46:53:5B:93:76:6C:F0:59
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:ad:80:ff:39:8a:40:2c:47:41:6d:14:6d:ab:41:e8:ce:c0:
         bc:37:86:02:2d:88:44:35:59:87:bb:b5:4b:a1:cc:a0:27:e5:
         96:ea:ed:d5:e9:bd:b6:46:b6:59:1e:dd:6d:6c:9d:be:b4:18:
         4a:d0:7d:69:7c:74:35:31:74:a7:2f:63:0d:7b:ec:81:5e:6a:
         8d:29:11:88:4c:ab:39:fb:19:f5:39:15:88:fd:c4:80:b6:a5:
         c1:08:bd:8a:9e:b4:14:fd:7a:de:46:8d:cd:a3:38:48:db:2e:
         17:2c:03:f9:84:62:ae:3b:0d:8d:12:3b:4c:c1:75:79:67:2d:
         63:2c:f0:97:57:8f:97:6a:43:4b:8c:63:61:d0:d9:70:e9:21:
         48:be:16:45:d8:46:47:1f:0c:f7:f8:be:32:7b:9c:d0:10:b9:
         f2:7d:34:e4:32:05:39:2c:2d:53:7e:56:d1:26:60:64:36:52:
         f2:3e:1b:f1:1e:d2:d9:7d:0c:56:aa:6e:67:ef:11:e1:28:92:
         d1:07:3a:ae:bb:52:e0:9b:1f:69:6b:bb:bd:a4:41:e6:87:bb:
         fc:82:94:dd:14:b6:a4:45:87:d1:af:69:09:a8:0f:df:95:b8:
         8d:65:27:06:bd:9f:61:f7:25:eb:ae:e9:65:76:99:56:ce:03:
         1d:66:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:34:25 2025 by rpki-client