Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          rh5UfFylrhFDuIdOzLmBTCIOTgUu2mUIuwzUf1XsSaQ=
Subject key identifier:   A8:0C:27:2C:89:1E:53:17:35:A3:38:A2:D2:67:59:6A:CA:57:8B:46
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       019A036C192E793FAA89954014B3ECDC659B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1745
Signing time:             Mon 20 Oct 2025 21:00:07 +0000
Manifest this update:     Mon 20 Oct 2025 21:00:07 +0000
Manifest next update:     Tue 21 Oct 2025 21:00:07 +0000
Files and hashes:         1: 5PF7JkQJruSRgX8OFdh0ldo0avk.roa (hash: GVp4KrnuPKkWi3YMSKTa/JA6oV/P98xz1Epz6kEOfe8=)
                          2: 5cZASCzQ1_Qe9PBF2M0DqdfpXMI.roa (hash: Rf0Oa7Oqc2NfeKqNzyeDikNG1+KFXQJRXbXb+WAl9nY=)
                          3: 5fJPK__Dd4uC8R8N04WEVU8iy9U.roa (hash: Qmkh3K7ul3A46uEpsUvjv4q6QEbDrXxxORLblbao0V0=)
                          4: 72MXyacTS0KtDpuANaheHhEI1AI.roa (hash: Q7ai7Um+aH+RTkwIG88T7cCbD3OURNh3G/4vvvdbzT0=)
                          5: 73FScvVGvMlaAHflY1GfRR2KhR8.roa (hash: Mg64mKQMTwKK6KukU7WA0wSoSu+Er1Z0C550ThiCdiE=)
                          6: B47n2nFo6V4_lhqWo7LSR_ZOnEo.roa (hash: v/Fw9I0elGk5l2rjATp0Jgbd8TqOetfNDwKGOZOe8hs=)
                          7: BLtDltDcRGj0HtF3SpV20yLYGaw.roa (hash: Tk1eO4HYXlQvNGjZV2Vfqss5Ms8m6buo5uUAsIBKs6g=)
                          8: E4KrSVaQy3iYS_50ejZpQ-glOlU.roa (hash: S6oqGewJjL66csnbFq/vHS/FJRCA0+VexfYauEgvefs=)
                          9: Ebj6lh9sP_u02E4TBV-mhdT6m3s.roa (hash: 8f3RjaJyLL/RlNIaXuouzYRAdOsKF2n1DYOxwJc6aAg=)
                          10: G8UiAwzFIb10aUPptVFyUcasAhU.roa (hash: gjnbnlPSOiei9ZOJedhvnLB5KEhfsa1u2kzW+Nmi6/I=)
                          11: Lp3xs_NqDzs1xbHpIoUGukzmy_4.roa (hash: nFsdDwpHhD6GQ3oPNu1oaeo0dVNHBrjV+Q6f0AITk4o=)
                          12: MJcx88_HCQr0GMiSkumKh_bLImU.roa (hash: LTExJ0hwpcPyyZlqFnxWdebDXwIqnlB2PBCd2NeS1VA=)
                          13: MuGh7vYnmaaQoXPokwSvVPCOIKA.roa (hash: lVRGi/VLNoNqpXvfkJyNc/SAJB8uwBUvZLmErfhX4KY=)
                          14: O0gbOkXz9uAbPUR5VVRrF_PvbYQ.roa (hash: JcmIHwdDGCYsmNAdAm8vBAUnuq5l4ZFb5XPq2AQJESo=)
                          15: PBf0S_XCOWGCDYc7IsBwzNjXUv4.roa (hash: wIJBZTHjWVLcl1Q1wQQRLHCktcuIvC2tO3xx3JR07wM=)
                          16: QPn7LB4emXSAeNnVjllQCH-31c8.roa (hash: UDaA069uPiYLLsVO5rPK+YfcDsIdYguYG3vzDQ8YWZw=)
                          17: TzcMUZJB36283MbQQ99iptGNtIw.roa (hash: B6MD76RKOjAWzFgIbMOdkpS2VEGooCsigDBU1azmGLA=)
                          18: VLlF_AXR4FbTjhByGR5qEVErlMQ.roa (hash: 4Ag/ngdLJdaGeBYzTA6ob6FUnWXtNio83zFOeIsrL/s=)
                          19: WNwGMlF8HyleZw_sjT3gIhzEnRk.roa (hash: T6H94RdGbaK6b2iiCjoHSo0V7zCoWUBk1fn8N66633w=)
                          20: WtiDHweHoVP7vFg1UkaAbUHfroo.roa (hash: AwuaTeCvVoZET/TE+x8YjJb03YnBfXufOtYgg+kcG9E=)
                          21: XdTdNrqpdaVAtmK5mvyXOVnl3-Q.roa (hash: niOmrxXQC8+P2ct60QeqjwhdtgOEKEYfRnrw9/VvT34=)
                          22: XlogNM-86Xj7ONjdKWZAhbVeYbU.roa (hash: SlCqOILhBBURHYXwlVTn23Ddg0R6hBj5JhBzEsR1TkI=)
                          23: fbZYdgPg6DYOC7L2O9FF8A3uAL0.roa (hash: c96jguDmh3eRDgkL2jnphzr/ODE3EQMnL3frDBUkSc0=)
                          24: j314qElR7yaLN86pViActqgw6kM.roa (hash: GPETvo8FzbgfgVgfAdY6WbFPbKVB4en5Wj1uqmckHOg=)
                          25: kpCN2dBOho5F3lNdwonEBf6sV68.roa (hash: wlERU651N1n4sxKO/yhNQIGcAdcq99zOsbGEr3eXkxg=)
                          26: lF2tMNmAECsDyNeG2rCO6R3__so.roa (hash: pWOiasxTY3xtkB3iN0Oo+urlEY6/TFwmjLa5LXlfNYI=)
                          27: lZk1JIP8_C7hDNXHw1WT1O1-u7Q.roa (hash: Dhpv7HsasW2h0lalzWLImx/yhoxcIiseYipJwKv/OHI=)
                          28: m5mJIZ0jpozcvDGXsACAvmLAzpM.roa (hash: LEZHu7OFPTNX9wUVXLSgUyzxAsybTM0N79+7ctnT/RA=)
                          29: nMaAIa9aCK4NygPlVIsk-lM-qhA.roa (hash: I9KHryt0stckym+t9HaTnrDjgZHYR+acQxElcB6opd8=)
                          30: npfW86bzVUIBWQHFlbmhnRV4Ph8.roa (hash: XKuss+rSffzcmWNLY+1FYtySKSs4mvxaRMowYWtn0pU=)
                          31: oB4nBj4XrOOepqFsNxnVaNx0L-Q.roa (hash: u5+zktI8MHGnKbkPD6/QqqJuS6A1LQ4SBogC7c5d6Uk=)
                          32: qCZRDftN7safEGDSy49dx5X7bWc.roa (hash: 9f9+AJZ2FKO47dOj0KUE2CxyPBT85uHO+ZxOkQi6T+M=)
                          33: qMhXr32E69KS_XGSq9GNjWyzggM.roa (hash: 0zQfffNxB+wdtcX0T4mMlaDZmm20MAXmA3PIYMW1yss=)
                          34: rN4qv2jr3J9qZtHRBTTNeBLtSyI.roa (hash: XnKk+dkszeDx6f5BnM3Seh2T2KcbxU0ayjv+qahJ680=)
                          35: ra2zdr5IKfQ8gw71S_KsMBnwFzo.roa (hash: vLDMC7GMknhz/OcvRxY0MXeR5yCUggTV3zqgw0HoUSQ=)
                          36: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: BBUIl9MFgkvnvFusuBc43mgpJYMRk6wZXAyMBQ288JY=)
                          37: sT2Q6qZsHQQ_fpb9bv-Px4xd4Dk.roa (hash: wBeou90+mehHieREcNLDM9Gi6DKGCbedKhCNOidBd4Q=)
                          38: shHLxUHAmWi7sC9-Vbk_w0YecX0.roa (hash: JH0Swx30enESY+rEj/ne04HVvOPMbUjQaCfDdkxL60E=)
                          39: uvXITES_lafzOob5IKK5TqpvAA0.roa (hash: J5QN9m7+T68qSz24qBS2QKaO7EswJahCWHCxA2p7yuI=)
                          40: vjKAe-wLEBQqE7ESMtidZJVOlq0.roa (hash: fpxkoi8RJON8YTNF17jgk+ZjAqKTWr8VHf0JiG8bJ1Y=)
                          41: z-C6C4gY1gwrtLSRTb29onSSX6s.roa (hash: ao4J2fQ5dE6eRqRG2TJNR4/is/NTZOA52q3QTDhhEW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:6c:19:2e:79:3f:aa:89:95:40:14:b3:ec:dc:65:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Oct 20 21:00:07 2025 GMT
            Not After : Oct 21 21:00:07 2025 GMT
        Subject: CN=a80c272c891e531735a338a2d267596aca578b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:fd:89:75:48:87:ee:cc:a0:86:62:51:ec:
                    6b:67:9a:66:ae:77:c0:15:b7:3e:1a:b7:ab:96:46:
                    e2:af:ef:5d:f4:1d:c8:58:f8:81:ad:b7:40:6b:fd:
                    5e:13:09:c1:de:d0:69:b4:80:c6:df:7c:c3:d0:53:
                    97:25:79:80:b2:41:76:7c:9e:c3:a9:e6:bc:2f:7c:
                    94:b7:61:a4:1d:89:9e:99:b4:03:8d:a8:54:86:44:
                    2d:cf:03:ce:96:64:1c:d9:3b:84:a3:71:c3:aa:9f:
                    18:78:f7:53:f0:e2:bd:ca:97:01:c1:89:67:36:d9:
                    87:b6:95:58:b9:e7:3e:5a:33:23:f3:34:07:4b:71:
                    19:1f:25:69:ca:43:c8:ff:98:b8:42:17:40:e0:39:
                    9c:f4:91:75:4b:97:bf:82:3a:05:7a:df:3b:28:4f:
                    3b:5a:43:18:77:e8:d5:7b:c2:1a:80:80:aa:72:5e:
                    d2:7c:60:ff:24:e1:ac:01:83:91:06:36:bb:a5:65:
                    1a:11:d3:a0:16:44:6f:da:ef:25:2b:0c:d3:95:e1:
                    49:69:38:0e:47:d2:3e:67:25:bd:fe:8d:6f:69:20:
                    61:b8:d8:bb:89:55:5b:6a:57:7b:6f:93:5c:d9:16:
                    85:ca:0d:be:f4:c5:f5:93:b1:98:9e:ce:0d:0b:50:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:27:2C:89:1E:53:17:35:A3:38:A2:D2:67:59:6A:CA:57:8B:46
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ae:1f:86:a3:85:08:8c:e3:3c:f1:a7:0a:08:62:b4:86:49:
         cd:9e:72:3f:b1:b9:ec:25:54:31:14:0b:0c:7d:24:01:ed:d9:
         fe:4d:1e:1c:d1:11:d5:b6:45:a8:08:27:a8:9d:9f:f2:12:18:
         6b:2b:9c:93:5c:66:b5:d8:92:12:ce:6c:68:78:71:02:49:37:
         7f:d3:53:a3:63:73:3c:0e:3e:c2:ff:7c:ab:65:d2:e9:c2:59:
         cc:38:ab:6f:80:f5:27:14:07:a6:7b:51:a5:25:0c:a5:ae:3e:
         6a:21:56:e3:1a:fc:5f:0e:ac:17:29:24:bf:76:e1:a0:a7:1a:
         fa:38:a2:f6:13:50:b5:8d:31:ed:4f:ea:94:08:38:76:3d:4a:
         ff:f0:74:8a:67:2d:a4:4c:3c:26:f6:c2:96:74:11:e9:39:c7:
         2b:c0:5c:0d:a9:47:97:00:6e:c4:0f:86:2e:14:c8:1d:8d:67:
         25:5d:c8:f4:cf:2c:79:80:3b:43:d8:0a:ac:5a:08:6a:83:1b:
         f6:82:48:bb:49:ef:8d:f6:eb:ff:40:b2:e7:21:4f:4d:50:f4:
         2f:7e:61:b4:95:fd:9a:01:db:ec:69:f0:6b:f8:50:fb:95:25:
         ed:53:b2:d5:71:d7:d5:2a:e5:49:0d:a6:e6:0e:38:5e:71:04:
         ff:e9:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:54:12 2025 by rpki-client