Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          f+qk3xnj3bdqwVk4BUUFyA7SlmakTUvj5kyIepnydig=
Subject key identifier:   09:CD:17:23:80:A8:A6:EF:7A:EC:F9:33:AF:49:76:40:03:C0:09:04
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019A05FF9B813859FFA2A17882785C19A077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          178E
Signing time:             Tue 21 Oct 2025 09:00:28 +0000
Manifest this update:     Tue 21 Oct 2025 09:00:28 +0000
Manifest next update:     Wed 22 Oct 2025 09:00:28 +0000
Files and hashes:         1: 0aa8_BKnq_2uEeu2lZ7-yjbtvuM.roa (hash: Ddp/LlQBMX46rH0IPNaZHNYeFIB8RtssPveBvjz8aL4=)
                          2: 1-xc1srblKkWVrQxPbJNDAqQ3mpc.roa (hash: ZzynvVG+bTIyDr7NXUASXUZ28E+DC5j8UwHhzSApKyk=)
                          3: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=)
                          4: 3UrcXAvUPXOxJHin-fpij-Rxeow.roa (hash: u5YOevQq4A8lK81tVn2BR62vGaGNiFwRH3yerg3JNHU=)
                          5: 43Lev2KmmsX2oQjHWOVqR7pGv_o.roa (hash: X3cJ9btnCgxa0qcBGYYxWGeuURRVSrnur28C/7enAsQ=)
                          6: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=)
                          7: 891CpnOYIk69iKnDpiqfcEZzfPI.roa (hash: Cl3FQjh7xo9Vv8l6G/85YiDrEYQtz+6HMhEUm9eKhPA=)
                          8: 9sivwV2Y2yAFFnmkYJ1Zol3pcUI.roa (hash: iIPWwTsolo+wvKdwR+ZK1g6w3Rsb/HA6Srp6m7oPlKE=)
                          9: AeRW2IzzHa8sgYjrW7QogaL1WWo.roa (hash: mOgxIrog/AxUhk6U2thPlE/gzaz0gGobQDleoJHGSnw=)
                          10: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=)
                          11: BT4HTe3oG2Sg-qKbCzfhjsWspIs.roa (hash: tr2IEWG8nbhwgOgVOSWuTH9VHkQ1QiViO3lhhSkyHIE=)
                          12: EASv7Pwp5s7xHptHeT8bx1BMvh8.roa (hash: 9Bt8ezrIdKBPIOWXNUErgI/itzrTUKWVaVktAfZtf/0=)
                          13: GBz9y95P8PDIcJhrMMpmV0mZCwI.roa (hash: dSj9Wh/I463emAgTbhC2m6aztY/BXSDsl2rzJ7qsj64=)
                          14: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=)
                          15: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=)
                          16: N-c5_PPTGr0gqxRfiirVSspbfGY.roa (hash: M5IIKDSRV6WeA4W9FG2QHmC4Kal5tmNKF1rVNFJCpog=)
                          17: Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa (hash: +uQK2AEnqPBoHu/xep/tQLvYp/ULstsLl2Xj5X9veFc=)
                          18: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=)
                          19: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=)
                          20: Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa (hash: 6FBW+7wKlFhVsfYtAAGEeciTYk/P+FI5nTEi81UvzA0=)
                          21: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=)
                          22: WaX26jWoRpSyNTjXI-QsFRwDKBI.roa (hash: yipaE9380n427VkfyNH9hBV6UP8h3/XAXxFHIhgfpDk=)
                          23: WnBP3ormFPR7ECQL-Oyv80YjE30.roa (hash: /5od8Dh5Xok7XKiFmY7DdvHrECCA+68JXtVsupW9/sE=)
                          24: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=)
                          25: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=)
                          26: Y0Jfvglhk12KRlx1qXrTTWIY1ZQ.roa (hash: OojwxcLLBQyxENv/409Gbc8GdADP7z6P1tN7CK7EnwM=)
                          27: a3komgsCxLhRcmMKYo5GI6ShhVs.roa (hash: fM/pkR6hc+Rk8Y4Pv5WiOCAvHuO8a4L/ZF4n+86Y4cU=)
                          28: a5UQ2z1RVywe791ih-JkkJe4oZw.roa (hash: z7MPhCjNypY3ndHfuAxQLWPw6x9rN6BVeFB92z9Vk4Y=)
                          29: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=)
                          30: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=)
                          31: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=)
                          32: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=)
                          33: k0KEFHW4fL4Ef8MopdylpfXrtX4.roa (hash: b5DhgBm+P5R0/x6SS6V5aLIs9QaubKbpXVVnCYru10M=)
                          34: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: QWmE3WcyOWw28XZSFg+PTkotS58gIWmzftMji04TCho=)
                          35: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=)
                          36: n7A9iNcydEM0dF7od9K9kn6dOlw.roa (hash: Q9nTEs63rW/GSV52zGEUvJPOGvhBCV1t2N9qF9Q1Hb0=)
                          37: nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa (hash: 4eNmWGzY3LU27cy4MOpIuF5JDu6Bi58le7fddIW+ow8=)
                          38: ujdLXoXrvhVfjksNi3jvUUhxPZQ.roa (hash: M1NGr3Kp/N5WVzCoJ45GNTOp19udI/hDhcVdgHkpFVQ=)
                          39: xOvbONmuHLggj1kz21tIox0xOws.roa (hash: ds3rCPllIr2md5+i8qtkfA5r8fRJicK2asbgHg2K2Q0=)
                          40: xy_J0ROxeO0huKk7onCsjN7UNOQ.roa (hash: R5m+5yIeBjbxBtHtLNr/BLRLpreLmmWcMrdmSiu877E=)
                          41: yHBye4nlaaxTAtDNDXQDzEX11B8.roa (hash: 0oqnKR/h/3antDNOJoHgCBtABVjV/H49DAa5RcH6OnE=)
                          42: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:05:ff:9b:81:38:59:ff:a2:a1:78:82:78:5c:19:a0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Oct 21 09:00:28 2025 GMT
            Not After : Oct 22 09:00:28 2025 GMT
        Subject: CN=09cd172380a8a6ef7aecf933af49764003c00904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:33:fa:dd:b8:11:0e:1b:70:23:be:ff:3c:
                    92:b4:6f:0a:8b:0e:c8:c8:b2:ad:b6:62:68:82:fa:
                    55:42:ad:99:98:aa:dc:b7:3a:82:92:1f:b2:0d:33:
                    b5:63:97:b5:a7:f7:7b:40:6d:66:2b:dd:3a:cd:5b:
                    1d:05:6b:19:8f:25:87:a1:46:51:b6:58:20:9f:f4:
                    55:4d:b5:2f:5e:ad:61:a3:f2:e0:26:12:4d:14:cd:
                    bc:ca:13:27:0d:69:65:1b:ad:1c:d6:d2:60:b7:8a:
                    e6:6c:a8:76:7a:e2:e6:6f:35:0f:d7:f4:b0:8e:ea:
                    44:a4:8e:57:d7:56:58:ff:01:71:9d:c3:b5:8e:a8:
                    ab:4d:e0:6b:bf:c0:d1:35:79:bb:83:f0:43:55:0d:
                    74:fc:2e:02:21:0b:12:ee:ab:92:5a:f7:29:3c:2d:
                    c2:c4:c2:a3:8a:a6:cb:d7:ca:a3:55:ed:8c:af:3d:
                    25:cf:91:37:a3:6f:d1:8d:25:e0:c3:99:49:4d:b3:
                    40:89:64:cb:85:5b:d9:04:80:ca:97:45:72:38:0a:
                    8d:e3:88:5c:8e:e1:77:12:52:0d:2f:7c:ae:15:6e:
                    a3:31:aa:37:b1:b4:09:40:8f:2e:13:5a:06:dc:22:
                    9e:03:09:ea:4f:7d:af:73:17:dd:40:91:60:b4:33:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CD:17:23:80:A8:A6:EF:7A:EC:F9:33:AF:49:76:40:03:C0:09:04
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:69:20:28:df:ea:de:e3:84:30:2b:0e:84:27:6c:6a:4d:7a:
         b1:60:e3:61:91:61:1d:42:73:c2:34:c1:5e:16:4e:ed:c9:19:
         39:8b:0b:b7:f6:e0:70:59:61:f0:cc:01:f4:27:85:92:78:1e:
         29:5e:1e:f7:d5:3d:f4:42:dd:53:ef:b8:d0:8d:d6:8e:1a:c1:
         41:cf:fe:9f:39:07:4e:25:94:27:27:a8:f6:ee:c9:80:70:20:
         3c:bb:0c:1a:ff:61:e3:1c:65:0e:ea:05:34:ba:97:87:e3:8b:
         be:ca:c7:29:51:ed:94:01:b9:71:fb:b2:8d:de:14:d9:f5:9c:
         3b:69:53:6a:7f:cf:7b:be:bc:22:ef:87:0d:7b:51:33:6d:a7:
         e3:34:3b:de:22:1c:7b:57:eb:a5:4c:fe:d2:b9:19:8e:5b:d2:
         c6:e6:79:58:08:83:6a:a4:37:47:14:ca:48:57:c3:fa:68:62:
         dc:16:31:43:5e:ca:32:a1:c6:47:f1:6c:39:63:36:ec:8f:27:
         64:4d:3e:74:b0:64:e4:ff:7c:34:50:ed:73:bb:f3:e8:70:89:
         4c:60:37:fe:4f:3e:f3:d9:27:d5:e7:22:46:69:15:fc:eb:ec:
         dd:ba:20:c1:34:d8:16:fb:dd:27:ce:83:29:58:7b:07:47:ce:
         ba:ad:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----