Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          JQ1s+4j6yFyqXX4qlXEJzQmDifRcgf6DDWf8YJUk3GM=
Subject key identifier:   E7:2F:B3:50:F4:10:16:7B:D6:B6:FC:6D:85:AC:80:0B:E8:54:F6:D8
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       019A1C872FFD23392A5C9F15C6309548134B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          137A
Signing time:             Sat 25 Oct 2025 18:00:12 +0000
Manifest this update:     Sat 25 Oct 2025 18:00:12 +0000
Manifest next update:     Sun 26 Oct 2025 18:00:12 +0000
Files and hashes:         1: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (hash: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=)
                          2: 1-KqzRG2ufGqmf5yQ7wQzU4Xpuyc.roa (hash: l2xJNQYVF3CqUltI0y/hIsNBwR8gaP86h2XHPrc9QSw=)
                          3: 1-UyIE7mqGVmQEQbqx8oewJU8LM.roa (hash: KQFvzUnWZGxgTX/FEU09xFGvTL2c/hN91WsuPQzlMhw=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: yL5b16b75JpT01Y9pw5ysqmTqAN2xgfTcwbnQjUisZc=)
                          5: 1Thh-ddTZfVIqD8iLx2me0HFkyk.roa (hash: JiNDcNhegE9v4OeDpVXiQordNiQilAq3rgA4Fmqk5iE=)
                          6: 2NIi98dN4sD0TIk71akteZnx1sw.roa (hash: k2get3lC4qal5WwpLqouWUlNle+TBDTdoCPLPn4qxTI=)
                          7: 30ltggt23rh7GTkDQejt9lmB4lI.roa (hash: 0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=)
                          8: 3KlMZ-8oPCOwu9zbCpY8l5ygzW0.roa (hash: Nge1ZCdkQPHDYH5IbuQgeafxrKKZqheIQyKLqfoWvq8=)
                          9: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (hash: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=)
                          10: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (hash: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=)
                          11: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (hash: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=)
                          12: 7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (hash: //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=)
                          13: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (hash: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=)
                          14: BF9-axl09aLWZxr5YBfgizGRwYQ.roa (hash: +Qu2Xjmm9jSdAOCIdC+nqYHdIw9cP+EHQrcHEv9RXEo=)
                          15: BKmZbRh0zQ9oa_wPaKfsvtQfYUE.roa (hash: MF5MiDvqIGWrFA0JrjP3/BbBY/oWFnXukDS276OlJ/k=)
                          16: DJvNc1stqMZ9mc1Wb-6RK-gsbvU.roa (hash: 1J9XRL8uRkAs4JvpW4rgrDzgKuN2J5fuItC/xeherRA=)
                          17: DlkMGzQHqOPh83nGG23nOj8tXkA.roa (hash: huMdxewxpuA4QGSVi+HwJbNMTf5SAHSJShnMsKq063c=)
                          18: F6rEC-DZF3Bn189GQxLFZdrW9ss.roa (hash: 0wg9QuGJMND5sNEy85LKkdkXbGMFG3a1ulykBXwSpbk=)
                          19: GKIBvtXq3THm63QH_8TaUji8HSI.roa (hash: +pvrI4erf1Lcj/8FcUip5ayRE0gXLz82FrGP84f2lSQ=)
                          20: I9PPHzCZLC3KRf5pPW4mcpNhTV8.roa (hash: 5VGGGh+D7rGqED1Cty/ds9a2QEhu4eIqlF+8kjtmXGs=)
                          21: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (hash: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=)
                          22: Mxanuz8H-jWPQ76CbAjfFZuLeOE.roa (hash: WVAlOpmnROyos+uYcbi4ZsjrfBBSfqbkTnpaMGhtSfM=)
                          23: R8VY5MGVdE17A_2z_8Qznz96tZE.roa (hash: Y6Us+zb47DyfsgxnI70nrLZEznsAibIlmNM0YizAwAI=)
                          24: R_6Boo__taaN3VAx2GBKAmJIKdQ.roa (hash: fuyB9El3FH7/OJZWRGlAxDEIBNos8nEiSk5ALbrazqs=)
                          25: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (hash: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=)
                          26: WVBsvJvxRXXzpiKQ5ooLV7iApwM.roa (hash: UI0HWLgrfRu9Oc9UqkpdFHFYDHuUCfL1cPPzzUGZoy0=)
                          27: XPRcOQ12damhWz672VXQCKzctD0.roa (hash: +UjnKkHiRNO5TAw4O2QYp9JmNxVCRQBE+d4ZaSLhA7Y=)
                          28: Ywm1jYc0iwGuAB63sRGCNirYSf4.roa (hash: r1HsrQz41mTN+65j1uhqS2AuuYL14Zx4+m/FTWRASv4=)
                          29: aQXWpkeo8CYBrBnYK0PT1cWdHCk.roa (hash: JF3VKXhZgLXaADeU/i5/1vCJwGFlrS9omLotINcIakY=)
                          30: bujGm6GH7mncfnxw5jTViL-bAwE.roa (hash: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=)
                          31: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (hash: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=)
                          32: i9xl1BGjEAWIRyvR7FDaRtUp3sM.roa (hash: jIIVL6j/6oDSxEFQvBU+uhsuGADZLxaxVVKJQbxIUsg=)
                          33: igGBFD8kNEyp0oLcDRQiMdpWqUg.roa (hash: JBfHKzIq0hybb3YSwoXuYc0ak5WjhrecAhw46dVwLpA=)
                          34: jimBz39dlHE2MfUY4L25nGwN-0k.roa (hash: ERw9Pg+xxXFworqjhjysZEnVIEowGkRsBZaaEld0xWo=)
                          35: n0D7QgHWZsopO1EgFVVvK-P6Dwo.roa (hash: 1Tdg8cemFUBIoV4egYbYb5wLjUFGRRBY2gDNWEAljR4=)
                          36: n74OnOk2cupPxqpmEGxm3X6NJi0.roa (hash: 4IFl5DFKU9Rz9OqnMogOy+LZtMk2c06yHfw/g7OpLv4=)
                          37: nE4q77HuE9eMvcYlJ0VXC5AQzH4.roa (hash: xhWHmf0Wl/9mSIPxWksh0jgqlzI8er3WRgeIRoZRvn0=)
                          38: nEOSCuQAAizH0ilRTTzdJdp07z8.roa (hash: NGLT1fxnsJeE2MIO3wdKFSCjjav2t9smqtzM/SWaYKo=)
                          39: nq598Y-mH7WXt-wp7oTFReqn5JI.roa (hash: Lm1lMb1JelLgN0kxz8OzEijA9ElHx0kaIfvRfFoPkz8=)
                          40: sIt3F6ds6E5Cw-7IGWGY_E58vEs.roa (hash: Sbu/A4tPhb/YMsWEmB4prBnkedMa/77cZPz9BrDKBSg=)
                          41: s_sfe0PwpYYFQ6HtLR5YzbGsYe8.roa (hash: Q4EHED4zem9TjQrfPSu31rh8tUnEGOxod/kov3RZEgM=)
                          42: sc5esKExOPd9MvtDyHiUo5axTto.roa (hash: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=)
                          43: tBCiClZ01i6bRTFcoV9J9olvPiQ.roa (hash: F04EUBkZe5J5GkXs7KwkzKr7Lxa3zzkxl/rd7ozso6E=)
                          44: uLID9O7nU2pNtz7HGdAH46WS7JM.roa (hash: oYgEaY31SpEl7BoKtZCP9Lzuu9kwt/rbH0ExUKFH0PU=)
                          45: uxnZYNa8d97ZTb_0yY6HvXc3zYY.roa (hash: Uc2FRxSyDw4WWufpEWvzn7eMEVoT2cdYyXigSL+3Mr8=)
                          46: v-xNq330WdoiiPlZjkVxav1Azgs.roa (hash: 5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=)
                          47: yh9ccliyxEcC6Avn1oCQoSv62L0.roa (hash: +3+0y4CEemTmWkaSTewyd3AcJUzmmij1RdzS9B5WjYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:87:2f:fd:23:39:2a:5c:9f:15:c6:30:95:48:13:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Oct 25 18:00:12 2025 GMT
            Not After : Oct 26 18:00:12 2025 GMT
        Subject: CN=e72fb350f410167bd6b6fc6d85ac800be854f6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:5f:17:da:b9:f3:3a:54:59:19:0f:e4:d1:
                    30:49:30:51:88:57:f0:76:f1:02:f6:a0:85:19:52:
                    c0:a4:1c:bc:75:fc:33:10:96:90:c9:20:aa:7b:83:
                    90:21:19:ec:47:61:e1:b7:80:1e:13:13:b2:a4:87:
                    dc:27:64:c1:66:b9:3d:ad:f8:f5:41:3c:a3:c8:a4:
                    9e:34:61:43:59:7d:6a:fd:74:7e:8c:a1:cc:4f:a8:
                    65:b7:d1:85:cb:99:30:01:e0:db:59:c4:fd:f4:a3:
                    df:2c:8c:81:db:9e:57:95:3c:8d:b7:d2:b4:6c:24:
                    cf:94:e6:de:29:29:e0:45:4f:d0:ee:b4:46:9b:01:
                    25:57:c2:53:40:0d:13:29:7a:f3:79:ce:01:b8:96:
                    5a:17:04:83:c0:1b:62:98:76:e0:04:c7:92:14:a7:
                    35:00:8d:db:30:9c:70:e4:35:b0:58:f4:d7:41:5d:
                    0e:73:e6:b8:2d:78:87:5d:f7:50:7c:be:9d:f6:73:
                    e3:47:04:da:7a:18:07:22:66:74:d6:3e:45:62:0b:
                    5e:79:c6:a6:6a:95:f4:93:df:89:e9:5a:f2:eb:c8:
                    d8:1a:b2:b0:ff:d6:dd:9f:ac:b5:8f:02:11:03:4d:
                    d8:9a:70:58:64:61:4a:cd:ad:01:b8:a1:f3:3f:cf:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2F:B3:50:F4:10:16:7B:D6:B6:FC:6D:85:AC:80:0B:E8:54:F6:D8
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:aa:27:09:ab:94:6c:f5:a1:e0:19:a7:76:53:b8:2a:c0:
         f0:3b:01:d9:e3:36:88:90:74:74:93:81:e4:3a:3d:40:cb:46:
         b8:6e:ca:02:55:2a:73:63:28:19:dd:bc:8d:78:01:e7:f0:1a:
         87:29:7e:e3:da:b6:15:41:ae:ba:13:d1:60:1d:f0:8c:32:eb:
         5d:c0:8c:7b:28:fc:a8:a6:f4:73:6e:0d:4b:1d:af:98:b3:51:
         b8:3c:da:ce:73:4f:f5:12:f0:7c:74:f9:18:52:d4:fa:9a:92:
         6e:aa:c6:e9:59:c9:43:ff:10:d1:b3:30:4b:80:0d:87:2d:66:
         a1:b1:2f:89:18:b0:c4:9e:6a:b1:f1:3e:5f:2f:4c:41:3e:3c:
         42:d2:68:56:a7:a6:0e:91:b8:0f:ce:1e:ff:e6:b3:18:9b:c4:
         43:6e:d7:d9:a9:fd:21:fd:83:0a:ce:8d:e8:93:c6:ce:79:c3:
         46:93:d5:0e:ca:f3:ec:43:f6:fa:be:cc:02:f8:5e:70:3e:da:
         99:2a:bf:89:d9:1c:10:a4:4d:57:6b:78:37:54:5e:74:c4:90:
         ce:62:e1:fa:e7:83:00:ac:0a:59:df:0c:3f:46:e3:9f:18:01:
         04:59:dc:a9:ee:84:c3:d2:d9:7c:ab:3a:f4:7b:04:ed:ec:56:
         a8:e4:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:12:25 2025 by rpki-client