Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          fpHxGgMOA+Hcq6opzbTlrReAEByInXDXZApuPCVvlFs=
Subject key identifier:   9C:01:1C:92:D6:7A:0F:F9:FD:BA:CE:17:41:91:B9:87:16:86:47:06
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01992D0FBD5C73B5A4DC37A35B8B2698DB73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          12F9
Signing time:             Tue 09 Sep 2025 06:00:30 +0000
Manifest this update:     Tue 09 Sep 2025 06:00:30 +0000
Manifest next update:     Wed 10 Sep 2025 06:00:30 +0000
Files and hashes:         1: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (hash: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=)
                          2: 1-KqzRG2ufGqmf5yQ7wQzU4Xpuyc.roa (hash: l2xJNQYVF3CqUltI0y/hIsNBwR8gaP86h2XHPrc9QSw=)
                          3: 1-UyIE7mqGVmQEQbqx8oewJU8LM.roa (hash: KQFvzUnWZGxgTX/FEU09xFGvTL2c/hN91WsuPQzlMhw=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: WDgqwfA88aLUpvTU5Us4UTsyTs4ZzZMdHRZ92mYQkHc=)
                          5: 1Thh-ddTZfVIqD8iLx2me0HFkyk.roa (hash: JiNDcNhegE9v4OeDpVXiQordNiQilAq3rgA4Fmqk5iE=)
                          6: 2NIi98dN4sD0TIk71akteZnx1sw.roa (hash: k2get3lC4qal5WwpLqouWUlNle+TBDTdoCPLPn4qxTI=)
                          7: 30ltggt23rh7GTkDQejt9lmB4lI.roa (hash: 0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=)
                          8: 3KlMZ-8oPCOwu9zbCpY8l5ygzW0.roa (hash: Nge1ZCdkQPHDYH5IbuQgeafxrKKZqheIQyKLqfoWvq8=)
                          9: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (hash: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=)
                          10: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (hash: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=)
                          11: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (hash: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=)
                          12: 7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (hash: //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=)
                          13: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (hash: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=)
                          14: BF9-axl09aLWZxr5YBfgizGRwYQ.roa (hash: +Qu2Xjmm9jSdAOCIdC+nqYHdIw9cP+EHQrcHEv9RXEo=)
                          15: BKmZbRh0zQ9oa_wPaKfsvtQfYUE.roa (hash: MF5MiDvqIGWrFA0JrjP3/BbBY/oWFnXukDS276OlJ/k=)
                          16: DJvNc1stqMZ9mc1Wb-6RK-gsbvU.roa (hash: 1J9XRL8uRkAs4JvpW4rgrDzgKuN2J5fuItC/xeherRA=)
                          17: DWWu1oVF2mdvJMucEtU7uCQwtIE.roa (hash: aAuGtxrXgaK+BVUTnKou9LLVeFIpGZ/gKCSewU27gCk=)
                          18: DlkMGzQHqOPh83nGG23nOj8tXkA.roa (hash: huMdxewxpuA4QGSVi+HwJbNMTf5SAHSJShnMsKq063c=)
                          19: F6rEC-DZF3Bn189GQxLFZdrW9ss.roa (hash: 0wg9QuGJMND5sNEy85LKkdkXbGMFG3a1ulykBXwSpbk=)
                          20: GKIBvtXq3THm63QH_8TaUji8HSI.roa (hash: +pvrI4erf1Lcj/8FcUip5ayRE0gXLz82FrGP84f2lSQ=)
                          21: I9PPHzCZLC3KRf5pPW4mcpNhTV8.roa (hash: 5VGGGh+D7rGqED1Cty/ds9a2QEhu4eIqlF+8kjtmXGs=)
                          22: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (hash: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=)
                          23: OVIN2I2HMxPGvvccBQ7JRPb-FOU.roa (hash: yeZoH767DGcpK6154bXnGYsbkSCc36PxnN7xleBqGro=)
                          24: R8VY5MGVdE17A_2z_8Qznz96tZE.roa (hash: Y6Us+zb47DyfsgxnI70nrLZEznsAibIlmNM0YizAwAI=)
                          25: R_6Boo__taaN3VAx2GBKAmJIKdQ.roa (hash: fuyB9El3FH7/OJZWRGlAxDEIBNos8nEiSk5ALbrazqs=)
                          26: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (hash: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=)
                          27: XPRcOQ12damhWz672VXQCKzctD0.roa (hash: +UjnKkHiRNO5TAw4O2QYp9JmNxVCRQBE+d4ZaSLhA7Y=)
                          28: Ywm1jYc0iwGuAB63sRGCNirYSf4.roa (hash: r1HsrQz41mTN+65j1uhqS2AuuYL14Zx4+m/FTWRASv4=)
                          29: aQXWpkeo8CYBrBnYK0PT1cWdHCk.roa (hash: JF3VKXhZgLXaADeU/i5/1vCJwGFlrS9omLotINcIakY=)
                          30: bujGm6GH7mncfnxw5jTViL-bAwE.roa (hash: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=)
                          31: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (hash: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=)
                          32: i9xl1BGjEAWIRyvR7FDaRtUp3sM.roa (hash: jIIVL6j/6oDSxEFQvBU+uhsuGADZLxaxVVKJQbxIUsg=)
                          33: igGBFD8kNEyp0oLcDRQiMdpWqUg.roa (hash: JBfHKzIq0hybb3YSwoXuYc0ak5WjhrecAhw46dVwLpA=)
                          34: jimBz39dlHE2MfUY4L25nGwN-0k.roa (hash: ERw9Pg+xxXFworqjhjysZEnVIEowGkRsBZaaEld0xWo=)
                          35: n0D7QgHWZsopO1EgFVVvK-P6Dwo.roa (hash: 1Tdg8cemFUBIoV4egYbYb5wLjUFGRRBY2gDNWEAljR4=)
                          36: n74OnOk2cupPxqpmEGxm3X6NJi0.roa (hash: 4IFl5DFKU9Rz9OqnMogOy+LZtMk2c06yHfw/g7OpLv4=)
                          37: nE4q77HuE9eMvcYlJ0VXC5AQzH4.roa (hash: xhWHmf0Wl/9mSIPxWksh0jgqlzI8er3WRgeIRoZRvn0=)
                          38: nEOSCuQAAizH0ilRTTzdJdp07z8.roa (hash: NGLT1fxnsJeE2MIO3wdKFSCjjav2t9smqtzM/SWaYKo=)
                          39: nq598Y-mH7WXt-wp7oTFReqn5JI.roa (hash: Lm1lMb1JelLgN0kxz8OzEijA9ElHx0kaIfvRfFoPkz8=)
                          40: sIt3F6ds6E5Cw-7IGWGY_E58vEs.roa (hash: Sbu/A4tPhb/YMsWEmB4prBnkedMa/77cZPz9BrDKBSg=)
                          41: s_sfe0PwpYYFQ6HtLR5YzbGsYe8.roa (hash: Q4EHED4zem9TjQrfPSu31rh8tUnEGOxod/kov3RZEgM=)
                          42: sc5esKExOPd9MvtDyHiUo5axTto.roa (hash: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=)
                          43: tBCiClZ01i6bRTFcoV9J9olvPiQ.roa (hash: F04EUBkZe5J5GkXs7KwkzKr7Lxa3zzkxl/rd7ozso6E=)
                          44: uLID9O7nU2pNtz7HGdAH46WS7JM.roa (hash: oYgEaY31SpEl7BoKtZCP9Lzuu9kwt/rbH0ExUKFH0PU=)
                          45: uxnZYNa8d97ZTb_0yY6HvXc3zYY.roa (hash: Uc2FRxSyDw4WWufpEWvzn7eMEVoT2cdYyXigSL+3Mr8=)
                          46: v-xNq330WdoiiPlZjkVxav1Azgs.roa (hash: 5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=)
                          47: yh9ccliyxEcC6Avn1oCQoSv62L0.roa (hash: +3+0y4CEemTmWkaSTewyd3AcJUzmmij1RdzS9B5WjYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:0f:bd:5c:73:b5:a4:dc:37:a3:5b:8b:26:98:db:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Sep  9 06:00:30 2025 GMT
            Not After : Sep 10 06:00:30 2025 GMT
        Subject: CN=9c011c92d67a0ff9fdbace174191b98716864706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:fa:ca:5b:4d:a1:77:07:35:90:7f:fa:b8:
                    84:af:f3:66:db:a3:cb:04:1d:72:c6:e2:f8:1c:7a:
                    ae:ef:02:2a:4e:8c:ff:26:ea:74:75:7e:ec:49:2f:
                    a5:cb:e3:15:b4:ee:12:85:ab:7c:6a:24:c1:a0:5d:
                    b3:ec:ec:aa:d0:4b:2e:82:f4:24:a8:5f:df:e3:22:
                    04:79:8f:2c:d3:bc:95:72:b4:e6:9b:2e:21:fe:c9:
                    63:b2:ec:50:9e:33:41:9c:eb:e2:3d:3a:8c:34:d8:
                    d7:4a:17:ae:13:81:3f:5a:12:99:cb:be:19:bb:b6:
                    5d:15:08:70:12:f2:a2:93:b2:58:85:e2:a4:ff:4c:
                    07:f2:40:ae:83:64:a3:67:68:eb:be:87:b3:dd:20:
                    b4:5f:07:bc:5e:37:f4:7e:2d:9e:79:5c:94:a0:13:
                    87:ce:78:3e:20:0b:8e:67:5c:fd:30:9c:8f:a9:06:
                    5f:b6:2c:04:57:a5:f2:84:88:9e:1b:3a:e8:ee:d5:
                    02:25:18:30:e6:7f:bb:02:1e:9e:2b:49:1d:f9:fe:
                    56:70:c7:0b:98:7e:68:15:e6:7a:5e:d8:6d:ad:f7:
                    1d:36:39:00:82:bb:af:11:53:9a:89:79:f2:65:90:
                    a2:bd:56:4a:26:ed:82:39:a1:94:4b:b5:4c:96:0d:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:1C:92:D6:7A:0F:F9:FD:BA:CE:17:41:91:B9:87:16:86:47:06
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:38:98:50:59:4c:f1:99:c2:09:55:1f:f3:1b:82:5a:c4:
         90:9c:d4:b1:e1:81:16:26:d4:42:66:79:1c:e9:2a:5f:12:d9:
         ef:cf:6e:18:29:81:0d:e5:47:0c:cb:6d:16:04:92:aa:d7:f2:
         6e:a7:9a:01:84:40:67:75:f3:d5:3d:b7:f2:78:53:58:91:ea:
         87:25:ec:dd:f4:38:95:e0:62:c1:05:24:38:a2:96:7a:75:b5:
         15:20:e3:8e:d3:40:12:d5:fb:67:90:0e:af:c6:79:b3:da:83:
         5f:16:86:9d:9a:4e:a4:de:1b:d3:87:00:50:5b:a9:cb:b2:55:
         71:6e:69:24:7f:c7:9a:a7:29:d8:97:31:b6:e9:49:7c:16:3f:
         2b:9b:da:80:ac:ae:ff:20:ca:70:48:f8:48:54:40:11:92:9e:
         de:24:67:09:16:0d:fc:c9:b9:9c:cc:34:45:87:44:72:f2:ba:
         6c:ae:cd:a8:0c:b7:30:a4:dc:3d:b0:5b:e3:2d:69:d6:ef:a8:
         0f:b5:8a:99:be:1f:50:1f:7d:0d:40:a5:7e:ca:86:d5:92:45:
         b8:4d:fa:27:83:d7:0d:3c:7e:ca:f8:ed:72:ca:2b:03:9b:7d:
         08:36:27:36:56:bf:28:dc:27:a4:74:51:cb:9c:2a:54:34:87:
         ff:d3:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:48:47 2025 by rpki-client