Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          XxMGJ9KzLnWXJ9VKmFoxX7HHpn+xw9fu/JaCTcaoDkE=
Subject key identifier:   29:98:1E:5C:DE:8F:10:C1:1F:EB:91:D8:BC:49:BF:B2:2B:12:04:56
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019A1E08163CADCF1D937BCC762240687D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          17A4
Signing time:             Sun 26 Oct 2025 01:00:37 +0000
Manifest this update:     Sun 26 Oct 2025 01:00:37 +0000
Manifest next update:     Mon 27 Oct 2025 01:00:37 +0000
Files and hashes:         1: 0RiNeaxfc3ixxqgMq3kjExRDa_8.roa (hash: xbaiXGjy7fJ+ZwX/PzT0jaVewoPns9Qve+McDOCbcPs=)
                          2: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          3: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          4: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          5: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          6: 7fPxL-uHp2NClvaUSSes1QZFjgY.roa (hash: 10Jo3zGeUKwhoqlKRLe84C64rFl5TQbdrOY/xZjeKog=)
                          7: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          8: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          9: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: ceBVgYr49QedDtkKE9dUO2wxulyM/kib9EYGRPS0s3w=)
                          10: AkNXn7rEbn5U1zHOEyojmLfn9HA.roa (hash: eUfyWJR3emLshCuN0LH6dI3kQNXA3mfEJ88STDsNOVA=)
                          11: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          12: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          13: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          14: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          15: FOVVjhHE6lD5ldaF3iw0l2c9ERg.roa (hash: I442iPSVo2MZ/j5N7A+HUBY7gJD9hTNx176dhJ5NB8g=)
                          16: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          17: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          18: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          19: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          20: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          21: LaajQT8UwBWFNaRi-jIojBq0WyA.roa (hash: ZkZjakVN6aPN1d4jYMrA0iD1EVTfF2LyjXQ1E06pZwI=)
                          22: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          23: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          24: PGVYIzwHf6UcdybJmIRuEKbJaI4.roa (hash: B6cWExLpRhYUY+7dvKifsqY+kTpw4Z9WuxqoFZGkCSk=)
                          25: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          26: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          27: S-LyAPTyjR_trxSWtQRZeOWC_3g.roa (hash: mdb3EARrdNQMQqJtEZ6Yv2aaf9muu1ZlrouX6RhltB0=)
                          28: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          29: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          30: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          31: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          32: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          33: ffSTkNPIiZpEtpWWodnp-E62PR0.roa (hash: zfi9z9vv9i6kZpAB79iGBR0mg0wwIS76zddY9IyYsTk=)
                          34: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          35: jzZPQyTPxHmOrfm_zSEP30f3jkY.roa (hash: tZU3gCj8FKHIIHdBn9jyrUtj2ivWD71dmLJ5zAo81Ls=)
                          36: lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa (hash: o+KPskkXXJU6m9owbhikJKpLSsQPEnvEdVWpnWT3wq0=)
                          37: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          38: n_ERAGslTk3vQyjUYN5Y-K_UqXk.roa (hash: 8P793j/53ZScruOSOWiU0UBEL/rR3GoLLeExoTt6Gqk=)
                          39: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          40: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          41: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          42: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          43: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          44: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 20:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:08:16:3c:ad:cf:1d:93:7b:cc:76:22:40:68:7d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Oct 26 01:00:37 2025 GMT
            Not After : Oct 27 01:00:37 2025 GMT
        Subject: CN=29981e5cde8f10c11feb91d8bc49bfb22b120456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:09:c9:c2:16:14:b0:b1:be:c6:21:66:8f:
                    0e:65:f8:b5:6e:41:77:dc:11:91:ac:50:e9:85:dc:
                    37:88:ee:3c:a2:57:bf:65:dd:2a:f1:cb:2b:3e:82:
                    98:fc:6c:ec:65:50:6c:7a:69:1a:37:aa:67:4d:3b:
                    d8:29:a9:fb:9e:95:a2:28:64:2d:21:2d:a4:a2:fb:
                    97:4e:d1:f5:09:62:71:46:9b:d9:cb:41:86:53:b5:
                    96:2a:75:ff:53:da:fb:a7:14:7c:f9:d3:ea:c5:57:
                    7a:4a:f5:aa:46:f4:ef:bc:72:64:6b:85:44:b4:f9:
                    20:4d:7c:35:b6:0e:7c:53:e5:22:16:8c:d4:5a:7b:
                    45:e7:4c:5a:20:1d:61:c4:33:34:8c:58:2e:ed:c7:
                    f3:10:71:13:a4:69:9d:b3:fc:ed:22:19:93:b2:fb:
                    9c:5e:f3:b2:07:b4:0f:64:d7:ab:30:b2:67:50:c0:
                    d9:1b:55:e6:73:da:9f:13:71:cf:45:b5:0e:78:50:
                    99:f3:9b:cf:d9:be:7b:68:c3:d0:18:69:14:54:c4:
                    16:70:f6:71:ca:5c:9c:d9:19:1d:5b:6e:c6:5f:dd:
                    d9:12:45:ca:50:5c:a5:13:2e:7b:89:a2:c3:d4:dc:
                    2e:09:cd:50:6f:dc:86:70:64:06:6d:ca:48:2f:81:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:98:1E:5C:DE:8F:10:C1:1F:EB:91:D8:BC:49:BF:B2:2B:12:04:56
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:7d:ab:2f:70:8b:fd:db:95:22:01:30:61:05:8c:40:d9:
         5d:9e:64:ab:2d:80:42:86:f4:bd:ff:44:6c:af:19:16:f5:e2:
         d2:a1:6d:6a:cf:8c:4b:de:29:f3:70:f4:90:7b:d4:9b:b4:74:
         82:49:b0:f1:d1:4b:1b:a4:97:d0:ca:7b:ec:4a:44:ee:c3:82:
         c0:94:36:8c:b4:b2:73:83:46:b9:87:dc:bf:cd:49:8a:cd:54:
         ff:a4:03:9c:85:24:7f:33:20:a8:12:f2:79:0e:8f:c6:ec:35:
         2a:cd:20:5f:27:7a:56:f5:67:35:3d:b0:1d:09:38:a3:62:d4:
         45:f7:33:0d:10:c6:cd:cb:71:9f:2a:02:7e:18:dd:f0:b6:1f:
         9e:ee:e6:2c:7b:f9:55:d4:24:ba:44:54:35:c0:7a:0d:49:3a:
         96:f0:e0:39:65:bf:70:52:9c:22:bc:12:fc:e5:86:bb:ef:54:
         0d:e3:72:48:16:f3:47:ce:a3:6a:91:67:cd:b4:48:53:fd:52:
         12:94:4a:d3:c4:57:ef:3d:4b:8b:b8:1d:c7:d5:d7:88:54:e6:
         af:55:f1:36:66:c8:de:ce:ed:bd:43:ab:94:62:5d:5c:eb:57:
         89:03:fe:48:78:b5:2e:8e:76:83:3f:d6:4b:5d:4c:a0:bc:c1:
         06:65:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----