Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          TOy41Fyi9HrNmqiVfnFQJjDmM2rfe/5vhr4P/WDhiCE=
Subject key identifier:   CF:C1:9A:7B:CA:B3:AF:07:74:3B:C5:EF:BF:AC:41:DD:A0:59:EA:06
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019A1D9AA32DA00B6DCA025B2C8DAC0F6411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          174F
Signing time:             Sat 25 Oct 2025 23:01:04 +0000
Manifest this update:     Sat 25 Oct 2025 23:01:04 +0000
Manifest next update:     Sun 26 Oct 2025 23:01:04 +0000
Files and hashes:         1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: mWUmlVbi7TK4zkUFTr/C3khPtWaG22+InqgmCbE8UJk=)
                          2: 3bnDZUsDXnEjZmLC2l6TNlR44q0.roa (hash: wvyAIrwBTPizl931rTr7kAFeltcDxlBFhYT3hCElsC8=)
                          3: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
                          4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
                          5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
                          6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
                          7: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=)
                          8: DIIPkhIK2GpSY7ZT1zdEaY1N8S4.roa (hash: GZZtKk3KUtgI6t+m4e2aEMnaIKRSut5aw/uHqLEVs54=)
                          9: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
                          10: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
                          11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
                          12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
                          13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
                          14: RzWktUnWleyuAASpHpH94KSShkY.roa (hash: BoPLXDFgsIgaZzKNJy1XCZ2/akxih7lLoVGkf52tsHE=)
                          15: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
                          16: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
                          17: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
                          18: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
                          19: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
                          20: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
                          21: trntJUljpyKQ_RbnudcW1AEz8hI.roa (hash: ThfGBtnYJx9e9HpZNJCs79E8qICBYx162pji3AgfT1c=)
                          22: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
                          23: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
                          24: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
                          25: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:9a:a3:2d:a0:0b:6d:ca:02:5b:2c:8d:ac:0f:64:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Oct 25 23:01:04 2025 GMT
            Not After : Oct 26 23:01:04 2025 GMT
        Subject: CN=cfc19a7bcab3af07743bc5efbfac41dda059ea06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:ab:83:33:31:57:a3:bc:1d:8c:01:e5:95:
                    9e:34:5c:75:a0:0f:89:5f:96:e6:22:89:1f:07:4a:
                    e6:77:c7:62:f0:2b:1f:1e:d2:a5:ee:aa:f5:82:51:
                    dd:2c:d6:a7:80:80:26:09:db:31:ec:a0:54:05:a6:
                    fc:fa:f0:96:68:3c:ae:d1:07:98:36:4e:c4:d5:36:
                    22:a5:62:cd:94:06:4f:9b:4f:99:18:24:c0:09:fd:
                    5a:3d:13:4c:be:a5:6b:01:2d:98:ee:64:3e:05:55:
                    da:2a:7d:6a:02:08:b6:9c:d3:88:8e:0e:dd:16:26:
                    6f:ae:dd:26:22:f1:f6:15:84:71:75:43:18:79:42:
                    d5:66:c6:85:7e:2a:b4:0f:d8:0e:96:81:48:ca:3f:
                    e1:66:5c:75:08:f3:10:23:5d:e5:8d:98:8f:67:8e:
                    cc:90:6a:17:3a:6e:02:54:d0:73:fb:7d:8e:a0:88:
                    cc:65:02:98:77:0e:9e:dc:2b:b1:a5:ca:30:01:b0:
                    64:66:4c:84:5c:4c:d2:b6:9f:c5:b4:aa:ff:70:2b:
                    2f:36:b5:dc:f3:b1:9b:84:53:92:5d:b4:c9:e4:83:
                    51:d0:ae:bb:b2:bc:cc:54:d4:f2:ae:2f:18:98:38:
                    b1:74:f7:3c:ae:ca:2f:27:1a:68:81:97:99:e1:b2:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C1:9A:7B:CA:B3:AF:07:74:3B:C5:EF:BF:AC:41:DD:A0:59:EA:06
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:d9:ef:d0:d9:f5:37:08:22:41:cd:cd:c0:d1:2c:e9:03:
         97:af:24:a0:37:af:22:5f:6f:7a:0d:11:19:b5:07:31:e9:02:
         c9:20:06:f3:18:43:e9:1d:6b:2c:90:28:09:f6:c5:de:b2:67:
         48:58:3a:5b:d9:09:04:0d:8e:75:73:f7:bc:e1:c1:39:df:1c:
         80:25:f3:60:02:1e:fa:59:c4:ab:9c:2c:89:66:5a:f0:e3:3a:
         c7:8b:9c:78:78:77:3c:67:b6:d6:39:f5:31:e7:32:d3:d0:f8:
         7c:9c:dc:9e:02:bb:b8:51:e3:d2:09:c4:eb:f0:32:09:dc:c9:
         4d:0e:c9:4a:98:3a:6a:9a:bf:cc:80:7c:97:74:2b:5c:f4:4a:
         f4:29:bf:4b:c7:58:ac:ea:06:cd:bc:ef:d1:47:ff:a5:66:83:
         b7:25:ac:89:d7:12:78:75:b8:69:59:16:b7:47:28:31:f5:44:
         fa:31:3d:57:9d:21:70:b6:94:79:22:fb:3a:a4:35:c3:f1:42:
         6c:76:ef:6a:74:b8:0d:71:ed:d6:8a:f3:7a:20:00:e0:8e:c3:
         ed:90:a0:c2:95:52:09:26:52:9b:6c:1c:c1:35:f0:ae:a9:7e:
         58:d8:dd:29:81:fd:f8:a1:c2:d4:80:83:cb:3f:9f:1e:90:c1:
         dc:14:19:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmqMtoAttygJbLI2sD2QRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjUxMDI1MjMwMTA0WhcNMjUxMDI2MjMwMTA0WjAzMTEwLwYDVQQD
EyhjZmMxOWE3YmNhYjNhZjA3NzQzYmM1ZWZiZmFjNDFkZGEwNTllYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZergzMxV6O8HYwB5ZWeNFx1oA+J
X5bmIokfB0rmd8di8CsfHtKl7qr1glHdLNangIAmCdsx7KBUBab8+vCWaDyu0QeY
Nk7E1TYipWLNlAZPm0+ZGCTACf1aPRNMvqVrAS2Y7mQ+BVXaKn1qAgi2nNOIjg7d
FiZvrt0mIvH2FYRxdUMYeULVZsaFfiq0D9gOloFIyj/hZlx1CPMQI13ljZiPZ47M
kGoXOm4CVNBz+32OoIjMZQKYdw6e3CuxpcowAbBkZkyEXEzStp/FtKr/cCsvNrXc
87GbhFOSXbTJ5INR0K67srzMVNTyri8YmDixdPc8rsovJxpogZeZ4bKCBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/BmnvKs68HdDvF77+sQd2gWeoGMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxHZ79DZ
9TcIIkHNzcDRLOkDl68koDevIl9veg0RGbUHMekCySAG8xhD6R1rLJAoCfbF3rJn
SFg6W9kJBA2OdXP3vOHBOd8cgCXzYAIe+lnEq5wsiWZa8OM6x4uceHh3PGe21jn1
Mecy09D4fJzcngK7uFHj0gnE6/AyCdzJTQ7JSpg6apq/zIB8l3QrXPRK9Cm/S8dY
rOoGzbzv0Uf/pWaDtyWsidcSeHW4aVkWt0coMfVE+jE9V50hcLaUeSL7OqQ1w/FC
bHbvanS4DXHt1orzeiAA4I7D7ZCgwpVSCSZSm2wcwTXwrql+WNjdKYH9+KHC1ICD
yz+fHpDB3BQZnA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:46 2025 by rpki-client