Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
File:                     tCU8TyM86YR2ma5o7L9ddRSw-ts.mft (raw, json)
Hash identifier:          u89t72WyaUEs6wvCQN7jaNoSTHTRYD/4+d9VoV8/0EE=
Subject key identifier:   A9:31:1C:7E:23:72:4E:5E:A7:87:D5:26:A8:15:D2:EF:41:76:0B:7A
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       019A066D6553A2B06DF5AF75D23B1253F858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
Manifest number:          1732
Signing time:             Tue 21 Oct 2025 11:00:23 +0000
Manifest this update:     Tue 21 Oct 2025 11:00:23 +0000
Manifest next update:     Wed 22 Oct 2025 11:00:23 +0000
Files and hashes:         1: 0s_8uV4y_4Qh9izsXyjdTvFnvko.roa (hash: eOw9cupvDiGzZK06bLbmO3r71BcAglZ1z0oB7mRXjtY=)
                          2: 1GKSBXVaZ0ag5v475kUXdEkbQhQ.roa (hash: X9uuaeQ/DFn7eKiljliRJ9ZtnztLoEh6oYyh/D1LlZE=)
                          3: 5y1fAHStJ-LIl-krEwTwF8xMfXw.roa (hash: CigYoXGgEpJO22j1bYVgQQOkgFTLXjpTUquBl/raWWc=)
                          4: 8LksUd4Bc07spLD8fADCnhn7LCM.roa (hash: Ltd+LZ1A4k2Ak2CxYsrw7bl+BSFB7+eAiWeQKA1mKH4=)
                          5: 9ZzfTs0es7d3dITh42i7PcrGHFI.roa (hash: j+RWh4sGZQYYo7/8IegKYIMXLt75CVdOknO/qydJXO0=)
                          6: 9aX1C0GBDjpl9KbtzL0_14BT4x4.roa (hash: 2ZwMdtmJ2Vb2cjnuC6vVTCJhkSLVLpECEfkccephonY=)
                          7: AWzKvVBumPuAv-ix9WEGZW27uLc.roa (hash: DAiyzPE0kSu04Hsgva4YCQLrUYc+yqLAnbyuT7wymo0=)
                          8: AXSoaMu602i_53-BQksf4H8rVso.roa (hash: Gozi2rQxeKnJmmPgfnbAWudEjv4AS8oCMzPcEaljedc=)
                          9: B_PNrqaypXS-uuqkeyPbkmY0Qnc.roa (hash: Du7C+6zjWvOoxLpFBJQPqQbDqvsJ2HaEuG+OJzC6pe8=)
                          10: CGUIbzoJQeR65zTqWRGx45Ja8R4.roa (hash: UN/Fnr6DI0baScUU9VdPUEJZbYixDKuX8x8+IhMnZMs=)
                          11: CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa (hash: zLuEq1mLrHs0mVf6yNVLD5Zej/7XVgYiGrCvNOWJeVo=)
                          12: D6p2t8uiBKfqdDi55_En4lYtIro.roa (hash: sj7YoIshSn7ixfErwrPSPMsqEYO9JvgtqizaCyYHm04=)
                          13: D8WtQTZCIdbzIxZEzqOjYt11R5A.roa (hash: mTjIP060ZUh7omSO0Zdfe1RUcEila1seoPIqhcfag/8=)
                          14: DEViOCwom1Mo8K90gqcr9zPFbsw.roa (hash: Cihwt2VtpCEg5M+ykbN0G+HzBd3bAEXknNMMljIBeis=)
                          15: DIjEKrN2QIgte3MOPHBqTqk6zL8.roa (hash: Djlgz0V/uM6rrvj+zsdR0L8f71DLX2CbBSL9RTlTtHY=)
                          16: DXFa04XkR8ChfH_xwX1BmgeTb_A.roa (hash: 1WqZ6YkVB4BBGv3WyiSyog9ZpZ/+LBnEHtOiijLFH+M=)
                          17: DhZk6hM6roky0GXyBISLUGoSmRs.roa (hash: pC/JWbY4U9zhPfPv2gepydBr/nV7NwyeUglshweIN8g=)
                          18: Ea4e2w-TlhuAPELanmi8d1DxoVs.roa (hash: QOPC10tzMsvEvvFKM74uMnOkNuc45EJt2v+p/yfgetA=)
                          19: FEp4V3P4SvU5bIxBRGf5REVatCI.roa (hash: AmoKP5wM2EI6Wb++arWmV3biIk/Ks/EcGE04F6LHmng=)
                          20: G1aApFV350lk6OS-Vyc-9RPE4-M.roa (hash: 7mUxZCiSxCgKGHPWHFdAuEdOy5f51Mh+o3uEji/Hz2o=)
                          21: GLdUx6Mq8lnhxMZlyh36cXuArUc.roa (hash: /6maqJyLJCZsoNtENWrCrEfLSdwCdyxAYSQXRDjR288=)
                          22: HAAgWHqkdMRqmc19opiIk4QvLvY.roa (hash: oRIuNu55ggWAnnK4TABpGs4LY3bJP2HWLbZZqvpkzPI=)
                          23: Ij0u4aEqiwJgZ9DwWrX6cCHy7bw.roa (hash: 8JcF/ZNT+C9IrR2OrdtXdAsZ+E+FEnCTr+m2GNnYuOc=)
                          24: LZq0FUTMcxN4welp3NcIvrEYcYw.roa (hash: HCRFlApUxilSWdrLbvTdJYldpokbEMHPwkoOwXJWdNI=)
                          25: NYC86BBuEJcyVLt5_VRehOd7hug.roa (hash: m7PSb81ZDGrYxDgDJu51cqbSBphKmTOCScI5P4IhrtI=)
                          26: O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa (hash: VRxwcyE4UrZz6xLqGqdVz8PVGg0wcs0oMtm/DmMYz1M=)
                          27: O9aaBKIbsI9Fl14QE_5gXVc466M.roa (hash: puorrULFQyq1rYKB90/Z0cb3hO3gtJLM6Iwr9QOTt/I=)
                          28: PHKOdowfTDkm4Ym-blDcENcWk9E.roa (hash: gEQ/3c+iOHJyyNR6EpoFDtWxPGDLhPruGOkZ744gOcQ=)
                          29: QwVFqW1cxvBL2o4-tPQAfG31V6w.roa (hash: IMKtYJw1aI4s13QbDf+l0CPN8GsM6khxtwC8WD7mBhQ=)
                          30: RUzXfADdmFEqEzN6P5KX5DHIcNc.roa (hash: lvZKC/ElUnGRUly3SVoAhCAAMBSnMiGtODQPJGvrDJA=)
                          31: S6-LsMS8UOxm1X7VabpjmNSwyI0.roa (hash: ISGzMTLOPHL5H8ofcmadroxeV92fZwtR8N0wvnG/8CY=)
                          32: TPgrv3-Rz1uG7sBK9Ywwao2cQ9E.roa (hash: ZyBXgBAANbwNEAytjzMmGl4UbJNZMOlMnvPElhDeYkc=)
                          33: U8ZUU3GFYbfbsIkHSaEoAuRmRVE.roa (hash: a2cZj3mdQkz6E8lml04tuTT4l7mx+oruDy+eevwshvQ=)
                          34: UZCoZ9iTJa-59E6kngXt58_J05Q.roa (hash: QNHS2wovka4SERkdOx96Y02FR40SnWP2tzMWZeNDd1E=)
                          35: X8CA8MplxHYpL5q3b_en-F-UQs4.roa (hash: kpBIXrcPDRA1vln2o7CgUflJFoexKXz4XzOQaKlJk44=)
                          36: XZs_n9LlWeIjgJyjQL-txO1IyBc.roa (hash: vdWb+SO51i4rlc6cEHTBn341KBPqNXiZLaJnJWGUZiA=)
                          37: asVMiTxQoOH4zq5J04HFS7t7oew.roa (hash: G//y1AaGY18G7+2P1OPo67QHsRKPZprev6YUEMRwkmo=)
                          38: bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa (hash: 6iwUdlESdz7+RkwneMjDQat08j+fPpdTnz5Y4bRYJrE=)
                          39: bbauAtpZJTnysprdGQB_7SBDCcc.roa (hash: S0jg+4F8XMSAzGWhr9YsJ3z7JLXhiocZw3kPMCq4hZU=)
                          40: cMPo4YpyyDUN4HXAKavH7BLGaEg.roa (hash: FZFlaBgot9IWdhWeB9A0YvT5yJ4VmfaV20DXW7RaKRw=)
                          41: dCNtZX3dyVqUESkVok9BWHucqLY.roa (hash: yN6ejh5FYh5uP+l/qguLyjfxVezE4QjvRy/DcEPSryo=)
                          42: dDJN0I-9g4eaOayV-D2asHocLds.roa (hash: OsVUxzOWHIIvs3G+yIJ8EZTTKtiy3cB0zrqdRNa7zHY=)
                          43: dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa (hash: t98pgB3eZJGWM8jwemiBCEit8151/JpilzmzBfDSgCE=)
                          44: eZULLshpMqJsslaZN07ZbXA7_a8.roa (hash: kHFcH9W+KqvgYoWxZWACVuGolVNMOd8+8Q2SvxFFqho=)
                          45: h8wPkuW6v520gSIrq-p3rQZnx5s.roa (hash: XPo5aSA4RsAh/kiPpMFtOxfPxaLX5GfrVz7xq+noQho=)
                          46: hfly-QA1TI8SEfY8okRD6J7LWnk.roa (hash: zPGsoxf6ulJsfd28h+ShLN/6uSNoxDnjudJQekSs+hU=)
                          47: hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa (hash: C14O+ch76NMbt5OI5YVUKsB04/tzGGuX2CLu1tn4/yw=)
                          48: k0QlprzRd36NvHYuNRv4f12GQM0.roa (hash: Hx84zYj3bWhYMPrnnvF3XuIdVOKhCJJnqYNhR0z12o8=)
                          49: k_q0_KCxGCY23ALr6XgnBWO3WkU.roa (hash: PK5vUI4tiDmBvp3V15H0GXhYuJsllxR7+Hz0FNggobg=)
                          50: nXaGHsEgPZBNKtmn56mRzt-VEzw.roa (hash: Ctb1FysygDYFjJRh3zZRcpuOzbIPJfh5qWmiEPC6f+0=)
                          51: oZQ0KLPPluLJX2BzR4Siyp1MYwc.roa (hash: CIlSeppEo+vRJ3AidstAx+zMSgZZV9xXWSANjJr4tvk=)
                          52: pFelJKjmsxI5R3DZJlChQC_3MD0.roa (hash: L8qIKNFDArN/1ptMdrOTwQqtla8X4v+mnYVreTvvMew=)
                          53: pG0mkjSpFcN6bJqBAZOYLrrCydg.roa (hash: d9LfFgKUYNmqqm0NXXgE2fV69QpfXlExSjmbZYXLteE=)
                          54: paWci91buJWWLtKLIOEAOw418mU.roa (hash: dlO2sPGf5wlMykSQwYuCaO5/Ofd38ZdhlMkCwlnECjI=)
                          55: qSF6nwyAcZBKbsVy6zwrTyHF9ws.roa (hash: FzvxNu1aICu/wHepWcUI8Z/WUlyAt8TsVejD9JLPlv8=)
                          56: t9NSysqYSVOb3-lSWme9hU4zhwE.roa (hash: Zg07uTwvFkymuiuSp6UEoXFGxNdx/y02GfTUe6wCzI0=)
                          57: tCU8TyM86YR2ma5o7L9ddRSw-ts.crl (hash: anu+udZ3uUFHJH3443tzLuF8tvAWV5bLKYEYI24lyv0=)
                          58: vVJ9mSBx6hNqTzTJrHhncI477is.roa (hash: IBqwcIh1REPuGTD9omt2SEUvQhYlPWiLYp90qo+sIJg=)
                          59: yAXUepuqy1Jbj9R6XNC4ai7FfGg.roa (hash: Br5sE3EcvHbcirwbPVNtC+403MF64TtCvGh57mDUGD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:6d:65:53:a2:b0:6d:f5:af:75:d2:3b:12:53:f8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Oct 21 11:00:23 2025 GMT
            Not After : Oct 22 11:00:23 2025 GMT
        Subject: CN=a9311c7e23724e5ea787d526a815d2ef41760b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:9f:04:3c:81:77:36:f6:b2:3a:7f:78:99:
                    21:fc:72:f2:59:cf:5d:97:14:e8:a7:4c:ba:87:98:
                    b7:d4:49:c9:69:18:26:1d:65:ed:94:49:3f:d3:98:
                    c8:7d:a6:6b:e4:0b:9b:59:22:35:e8:b1:3b:6b:1a:
                    52:9b:5b:4a:b9:37:eb:01:73:4b:46:1e:70:a3:d2:
                    5e:2a:82:15:00:2c:72:d1:3a:76:95:80:4e:c7:87:
                    62:ad:a3:fc:ec:e6:1b:d9:2b:0d:30:df:23:9d:0e:
                    07:40:ce:2c:28:b2:83:6c:95:91:83:39:fa:8c:51:
                    38:09:7a:44:a6:f2:28:93:90:9c:b1:72:3e:c2:bc:
                    01:28:40:5d:27:9f:44:4a:a7:9b:58:60:6e:55:5c:
                    f4:4e:70:e6:b7:5a:90:63:0a:25:1c:b0:cb:69:24:
                    53:7b:9c:db:f9:da:40:bf:27:64:22:59:67:39:46:
                    1e:4f:5a:ad:a7:14:b2:ca:ff:81:52:77:4a:36:dc:
                    85:52:0c:75:66:a5:5c:d7:6b:f5:a2:00:6c:49:37:
                    a2:22:57:71:44:ad:9d:07:90:e3:e1:b0:55:57:6e:
                    a8:cf:99:13:a4:97:7b:e5:01:d5:40:c2:bc:a7:c5:
                    f0:9b:1b:c3:c2:cd:7b:03:2f:dc:b0:43:31:8c:e9:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:1C:7E:23:72:4E:5E:A7:87:D5:26:A8:15:D2:EF:41:76:0B:7A
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:b2:2e:fd:94:94:59:d0:11:c0:25:28:c0:c6:e5:2c:30:
         bc:b2:7a:64:67:b3:b3:f2:a8:14:21:68:91:70:69:cd:8c:2d:
         c9:fd:3e:b9:da:74:98:68:14:91:7b:7c:9a:c8:3d:e5:25:3f:
         89:48:00:bf:4e:13:52:ea:41:5e:3c:3f:03:04:2f:68:e1:df:
         ba:67:97:d7:5e:a9:7e:bb:93:61:3d:5a:d8:b4:d7:0f:d2:0c:
         a3:ab:ea:61:5d:cb:5d:8f:1f:3c:8d:2b:80:e2:ea:d4:b3:95:
         7c:63:3c:5d:90:94:d0:71:af:91:5b:b0:4f:52:b7:52:72:59:
         d1:77:4e:47:ca:0c:4e:8b:00:2b:ec:2a:9a:0c:00:be:b6:d5:
         10:d7:ba:cb:a5:da:21:51:fb:b6:f2:12:92:aa:86:92:30:7b:
         88:89:27:99:6f:bd:f1:22:10:e6:c2:52:85:90:22:57:03:bd:
         63:3f:98:44:9d:e5:97:69:14:21:d9:d0:6f:0e:32:50:67:b4:
         02:47:85:b7:f3:51:93:f1:36:6d:4b:cb:a9:de:f9:65:61:9e:
         4c:7b:6e:df:9e:25:3c:ef:98:fb:9c:e7:48:7f:22:1f:5f:52:
         cc:59:a3:f5:2c:8c:cb:21:2c:06:43:e3:0d:f0:d4:92:91:8b:
         e6:a6:b4:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoGbWVTorBt9a910jsSU/hYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjUxMDIxMTEwMDIzWhcNMjUxMDIyMTEwMDIzWjAzMTEwLwYDVQQD
EyhhOTMxMWM3ZTIzNzI0ZTVlYTc4N2Q1MjZhODE1ZDJlZjQxNzYwYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0SfBDyBdzb2sjp/eJkh/HLyWc9d
lxTop0y6h5i31EnJaRgmHWXtlEk/05jIfaZr5AubWSI16LE7axpSm1tKuTfrAXNL
Rh5wo9JeKoIVACxy0Tp2lYBOx4diraP87OYb2SsNMN8jnQ4HQM4sKLKDbJWRgzn6
jFE4CXpEpvIok5CcsXI+wrwBKEBdJ59ESqebWGBuVVz0TnDmt1qQYwolHLDLaSRT
e5zb+dpAvydkIllnOUYeT1qtpxSyyv+BUndKNtyFUgx1ZqVc12v1ogBsSTeiIldx
RK2dB5Dj4bBVV26oz5kTpJd75QHVQMK8p8XwmxvDws17Ay/csEMxjOn/zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkxHH4jck5ep4fVJqgV0u9Bdgt6MB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAKyLv2U
lFnQEcAlKMDG5SwwvLJ6ZGezs/KoFCFokXBpzYwtyf0+udp0mGgUkXt8msg95SU/
iUgAv04TUupBXjw/AwQvaOHfumeX116pfruTYT1a2LTXD9IMo6vqYV3LXY8fPI0r
gOLq1LOVfGM8XZCU0HGvkVuwT1K3UnJZ0XdOR8oMTosAK+wqmgwAvrbVENe6y6Xa
IVH7tvISkqqGkjB7iIknmW+98SIQ5sJShZAiVwO9Yz+YRJ3ll2kUIdnQbw4yUGe0
AkeFt/NRk/E2bUvLqd75ZWGeTHtu354lPO+Y+5znSH8iH19SzFmj9SyMyyEsBkPj
DfDUkpGL5qa0Zg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 17:28:18 2025 by rpki-client