Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
File:                     MH9f4nQKK23kw3CdKWQRWzyWfaE.mft (raw, json)
Hash identifier:          BuGS+Zwqh9+pCfVU44ARs/7iRKNDxNjTDtYl/uUrTx0=
Subject key identifier:   FC:A1:DD:D8:AF:2C:D9:F8:B0:06:89:8B:0A:17:F0:2E:36:BB:49:56
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       019837CC88823A3F98FF65C78F82B117D3F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
Manifest number:          16C2
Signing time:             Wed 23 Jul 2025 15:00:07 +0000
Manifest this update:     Wed 23 Jul 2025 15:00:07 +0000
Manifest next update:     Thu 24 Jul 2025 15:00:07 +0000
Files and hashes:         1: 00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa (hash: /nCoLNktQTRkwf19+RkLZm6+K8Um4Om/CE/FhAF+NuE=)
                          2: 1-COYrNmS4Yj9DuD0Iitd9unCCQQ.roa (hash: JYNBrYFYnRoWLArFqkMLwPLI1r5eBOC15oN7aK1rASQ=)
                          3: 1-lpBuKXXx8g9yxpi6iuVgN2ZkaU.roa (hash: RgZnA77LWWsGNIxky5OwYiVUFovIqwLxtj+NYBSAZ9M=)
                          4: 1dc_AoVDsergaSgV7R-3yql_9KE.roa (hash: a9qa0YzuaGBz3jd/Pf5UATBtpu300fCkvirZYtsQepA=)
                          5: 3WNl-m7gCvquDzEDrkwIQEg6pro.roa (hash: FxKNwejyJuuX0RG0vdRP0TUvJlDOzXxsIbbdxEYJvWM=)
                          6: 6EnYKRUPOG0Bajz58Rzdix-x9Hs.roa (hash: hj5dsY/14wcoPQMYFN+FDqGIoYmYmbl7lzQUbFpSl9g=)
                          7: 6FhDGvyiE15m5in3JxEtWm2LQvU.roa (hash: Qb2nBgiw2wjL0NKInr8G6lRKGlTQkFAoRZAC/5y/JJ8=)
                          8: 95jWS9jKpRrroELAnGEuEqeiVuk.roa (hash: 9oQPUKrBIIejm5soFm9BOrvY+R8e49uut81KixCREME=)
                          9: C9rTZ6_iu1FXRg451e341Atg3Z0.roa (hash: XcWEYMD9cUcIh2EC0BBKyyITu1rFp8td9cXo80ANEyQ=)
                          10: Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa (hash: +iIyFBA3ZhKNuVhyNzUqDLxWmuz7/LHtk6wG8bzNLCw=)
                          11: Dcl4o4Mo7N0s3M3iAQoKIPl9m2g.roa (hash: SVwXdwnjQoGTLQZCk0CvIrT8UoqR6f7tYRnOAGH0NIA=)
                          12: EdlEeGF0p-ph_-EZ90A8Cv8g-lo.roa (hash: bxOL6/VDd4hVc81yHqPsVHT8CDLp/qHPAVWZhIxPWDQ=)
                          13: F4z4cRp1o2-2fDGziBvSnYHbVpM.roa (hash: 2wAWhkLWWqS0rO2Q1Az6KgQGqplVuffj57lG+uTxooM=)
                          14: JI0eb8S1GNh05B8yRPp4g-MmznE.roa (hash: vofbBr6agtDCq9C2DcAavwwJSfex0/8B3Z91wfqPM6M=)
                          15: KF8itGoY1xLI5AYmY-m8xyJCd-M.roa (hash: 3x8CCjFbHcFE+DJK2zQRD0PbpgAm7tcfoBUcCbuoWVU=)
                          16: KSKxvPfPoQ3-9nZ5IaAyZyw0eVA.roa (hash: Ldllwbeq3sVnl6+zDKpnVxt8zPewHEjiNMebEvP4PkM=)
                          17: MH9f4nQKK23kw3CdKWQRWzyWfaE.crl (hash: aUsbgbqzgHGn693wHE0P0lOk7V17DmTNExWCvwsdjsM=)
                          18: MOnyvymPV70rA-n7s2qFGgmyraY.roa (hash: 85Gf5MFfTrOZBrJ3gxPjNi7Zx/lmYfRY4Lsl6tbceT8=)
                          19: Na5QZvVlGuZQeLfXORY_9aEEYSo.roa (hash: 7zaWEKU6Pa667pchWMlNtONL4EFj3rNY7MR9JwlAuWs=)
                          20: NfrImU14VyPFoYoWbQqSwcjt0NE.roa (hash: MQdzlW7R+JzkpiS+Sg0oeOl5PeyecnB8iAb1AGvWxuA=)
                          21: OoYqylkHzmwaVAMQUI6VbW19fUY.roa (hash: GTuWmeM87GVOh1bcDtRCfkyFY8mWiN9eSfyMgGPB+zE=)
                          22: RYzhujVp6gIBgIh6wj1hAB_7rVc.roa (hash: dxOdcde2n2siUlRnNLCGHKOg3YoidL7qLRsEX5nlICY=)
                          23: StSv8ki3Hfy1kt0rrrfueNG7XQE.roa (hash: n5KuwRYffa0Ye2MfTHYi4Ou9cVdpBRC7za9HK1Mdc+U=)
                          24: UpgKqZKDk6DocsIHKTjtNdmcKOA.roa (hash: ks27GBa0bjdMoWqX1B0YBEH3qIWHeKCvjtYKHznBta4=)
                          25: W1J1-YCCiOxiAdhCBpIGiI6-ens.roa (hash: qQljpaYP6KShT3JCLBM16HPQvI04wWe99FsoBr17EDc=)
                          26: XZVtjWmGJy5TJN5gkclvuaDTx08.roa (hash: +A3dF//QsJfJLVvgoQOwQfNBd3HuH3X5Enj0ICpyoDU=)
                          27: Z9ftDVnLuDarY233BHukY7esuz0.roa (hash: 8IP/yjkR/p4P5xW7keZ1mbS3Olm9wSVSpmHnR8UNIxY=)
                          28: a5vhXTFxFnmVktk1fpfvlo_HM2M.roa (hash: jBANqiVsO0TchdCr8Pw27uhxGmAd9aIES2vzyb+GsNU=)
                          29: aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa (hash: K2mPF2eHRJwmWDINxTS4kipEwWDutquLs7wNrJd3zo4=)
                          30: afF1dxl_LmNwCvwOu-CxTaBAPsE.roa (hash: 2PsecFqYTcXE3Me2mMpOXpuvsS4y86LFqJBD0VQl4Yk=)
                          31: d0BuRJGTBJME-UfGA-2OKdcSu8A.roa (hash: z2YOjshPkvdigoOM2tcRV8Xm9HzCDzFMtVL5hbdAZ3g=)
                          32: hIqJAfSnn9KNywKp0QfHCh8jdEs.roa (hash: SVYSpB2PXKZBd+1YFg4Zcu+R5qUNSr3ksyKlguLNrhk=)
                          33: k4dE6GVK9WXXHG3YD6YqaU59DBE.roa (hash: gfljlL3cqgD/q79IzT5OLmzpfKZUJCewNF1J+kEHTmM=)
                          34: kTAZ1eq_4NqZeUF8WiyBjLmzzOM.roa (hash: FbN3ktB3aIhk7lj6tCA82i2iYB31YzcLrswYNQRr2fk=)
                          35: nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa (hash: Kkbt3awiC7wXEdfElBvXbg7tTE4YJO5Q0eMabJjQuQ0=)
                          36: o033YbxU_4pqzhTYeW8KgBTyJFQ.roa (hash: dhvpupNA3tAu+C5YNjmZoQsdlwc5TGF6rdYGFnIKpdI=)
                          37: ogWtRj9AJ-3VS3wVOcqhrepWr84.roa (hash: z7l4qX9iNc6t/itsLZx/1qV94NBFb0s6x69mJ0YgY6g=)
                          38: qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa (hash: x3hukl87lsHfId1sEhc10WEbYF6R3yTOTAtjx/H0dM4=)
                          39: rXpni-4ALcocOhcZ1QqAO1mIJGA.roa (hash: FRAHJFSzOsHBC4a0opWl+1Gehcqt2UuiLhry14uVIHQ=)
                          40: tHhXpyudxNYhrIxF4dzTai1PI1c.roa (hash: 9R176gAhLoJ/sjNZw1oAAKzgCQCA4wxJcDlCkPjxACI=)
                          41: wSL45AIT5EJXXFGp5vg6M2DPNCk.roa (hash: 1wb4FcpLDXgZHELKVN0aczuYaHIxl0jPkQS+LI1QUhs=)
                          42: yMSRSUOaD_I9-_w6JSkVSof-73c.roa (hash: IIoX68dv6Vr/WkUd893+l+Jc8xvnAeBmWPaJowHnKOE=)
                          43: zfjWVaBt_BelAB4wLgicMa-3gUk.roa (hash: mUXFCeRc2Y4QqbwjvPvmqd3yvXigvxAWleegmSOAAXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:37:cc:88:82:3a:3f:98:ff:65:c7:8f:82:b1:17:d3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Jul 23 15:00:07 2025 GMT
            Not After : Jul 24 15:00:07 2025 GMT
        Subject: CN=fca1ddd8af2cd9f8b006898b0a17f02e36bb4956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:5d:a3:94:6a:5f:db:ec:65:8b:33:0f:66:
                    db:f0:33:42:be:c4:29:5a:05:c6:92:ff:82:74:0d:
                    02:ef:7d:a3:02:1c:53:f3:a4:25:4e:c4:a8:a3:97:
                    11:54:7f:0a:9a:0a:4b:8c:ea:6b:c5:64:89:db:7f:
                    ce:bc:f3:94:85:28:c7:88:37:b0:3e:56:ef:da:a4:
                    6b:f6:6d:80:5c:99:26:8b:3d:76:67:b0:dc:ab:ec:
                    6c:53:8a:81:bd:8b:77:a5:78:97:b9:40:9c:92:fe:
                    97:cf:19:b6:12:42:90:cd:4d:43:bb:b3:40:32:d6:
                    b8:c9:ff:c1:0b:e5:64:4b:a7:28:d4:e6:35:90:72:
                    74:75:3f:66:48:ef:4f:ac:7d:68:cf:a8:80:81:ee:
                    08:c4:d0:96:88:1a:83:e2:ff:e5:91:49:f3:5c:00:
                    90:de:7c:ed:59:33:6f:35:6a:65:0c:e5:50:25:36:
                    1f:25:b6:1c:92:0d:e9:19:3d:25:19:3a:c4:f2:ef:
                    9d:0c:86:28:4a:12:16:7e:13:fa:17:b2:09:f0:ae:
                    ea:85:c6:2f:39:8a:bb:d3:c9:7e:96:c1:d3:36:b4:
                    72:32:53:fe:dc:4e:24:17:bb:ba:cf:a1:08:79:00:
                    96:b1:fc:d3:f0:63:b5:a5:65:16:1a:cc:ad:b8:9d:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:DD:D8:AF:2C:D9:F8:B0:06:89:8B:0A:17:F0:2E:36:BB:49:56
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:7b:9c:93:ec:ea:d0:f2:a2:06:1e:6d:75:56:90:19:ed:
         0d:f4:f8:01:3e:83:95:bc:d5:06:d2:f8:80:ce:28:85:76:09:
         79:c8:74:06:f7:76:d8:3e:b9:df:da:9f:14:ca:5a:9c:38:5f:
         d7:4f:e4:57:48:5b:d2:43:40:c2:86:3c:77:07:1c:20:9e:34:
         7d:90:5e:70:f5:a2:bd:73:55:10:cf:5b:cd:4c:67:a2:ee:09:
         75:ed:b0:3a:e3:c0:24:6d:b9:78:b6:0a:bb:b6:68:21:d6:c4:
         54:cc:1e:c2:cc:67:63:81:02:25:3e:e1:ad:b3:b0:80:64:61:
         89:0f:e6:3b:bc:2e:77:38:98:aa:4f:32:6b:a1:dd:ff:67:04:
         af:14:19:46:e9:d0:de:ff:de:ca:f4:ae:e6:c4:fb:10:ea:6b:
         d2:c1:8d:bb:f3:eb:f8:8b:27:a1:ce:88:df:ff:fc:d2:6c:2a:
         c7:59:85:5b:94:0c:7f:7d:71:c9:66:1d:5e:f2:09:41:6e:83:
         41:50:15:de:8d:10:94:bc:63:e8:4a:30:32:cd:7c:bd:df:87:
         7e:49:d4:b9:54:3e:a1:16:97:2f:7a:d3:01:3a:b1:37:e8:15:
         2c:c9:ba:b8:e3:1d:31:1e:b2:a6:83:f5:73:02:01:c9:00:1a:
         52:99:80:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg3zIiCOj+Y/2XHj4KxF9PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjUwNzIzMTUwMDA3WhcNMjUwNzI0MTUwMDA3WjAzMTEwLwYDVQQD
EyhmY2ExZGRkOGFmMmNkOWY4YjAwNjg5OGIwYTE3ZjAyZTM2YmI0OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxVdo5RqX9vsZYszD2bb8DNCvsQp
WgXGkv+CdA0C732jAhxT86QlTsSoo5cRVH8KmgpLjOprxWSJ23/OvPOUhSjHiDew
Plbv2qRr9m2AXJkmiz12Z7Dcq+xsU4qBvYt3pXiXuUCckv6Xzxm2EkKQzU1Du7NA
Mta4yf/BC+VkS6co1OY1kHJ0dT9mSO9PrH1oz6iAge4IxNCWiBqD4v/lkUnzXACQ
3nztWTNvNWplDOVQJTYfJbYckg3pGT0lGTrE8u+dDIYoShIWfhP6F7IJ8K7qhcYv
OYq708l+lsHTNrRyMlP+3E4kF7u6z6EIeQCWsfzT8GO1pWUWGsytuJ0dMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyh3divLNn4sAaJiwoX8C42u0lWMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdch7nJPs
6tDyogYebXVWkBntDfT4AT6DlbzVBtL4gM4ohXYJech0Bvd22D6539qfFMpanDhf
10/kV0hb0kNAwoY8dwccIJ40fZBecPWivXNVEM9bzUxnou4Jde2wOuPAJG25eLYK
u7ZoIdbEVMwewsxnY4ECJT7hrbOwgGRhiQ/mO7wudziYqk8ya6Hd/2cErxQZRunQ
3v/eyvSu5sT7EOpr0sGNu/Pr+Isnoc6I3//80mwqx1mFW5QMf31xyWYdXvIJQW6D
QVAV3o0QlLxj6EowMs18vd+HfknUuVQ+oRaXL3rTATqxN+gVLMm6uOMdMR6ypoP1
cwIByQAaUpmAbg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:44 2025 by rpki-client