Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          WHdzEC6B6GbEXl27Sxw26RKa2jJy30bg/fth7ZT6bD8=
Subject key identifier:   7D:A9:89:43:84:CD:90:B3:32:9B:23:82:AE:A5:BE:36:26:94:6B:14
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019A01481B6B3A3000DA2E55578BB239F630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          17C0
Signing time:             Mon 20 Oct 2025 11:01:34 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:34 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:34 +0000
Files and hashes:         1: 0ckvfg2XoUVrwydEPZi60_f4zOs.roa (hash: 4ae5pKLiyltE1bXTU95kL9BnWnNkVLpu6D4UBZJ9GQo=)
                          2: 3B7NNbeKRnZEKDmHNY1KeC1srmc.roa (hash: b9ZXFcLIXXCFjVrGvvhUY9iQ4k5SaEKXRcy7m/BXZ+U=)
                          3: 3jJZVXR76aOFchH2XpnzbLR0IWo.roa (hash: zHKnHcHp/PL5mg9H6WCik0iUnC6NdfAFnCs/0dptCUQ=)
                          4: 5C4YA50fBN7vcdBY1HqNC2bmMjc.roa (hash: sc/YMsXU3PgkkGc1oSkpeF8aFtzCCD0ar7drCdMUnQA=)
                          5: 5s5qGQoGev1jAV5c8T8dWS5HMq8.roa (hash: Br7JXU0oIeq94AWaj70g/oHJ4lU7FSYUKqT+ZWnKc5Y=)
                          6: 7cfhXO7iqxL21iOmbt8SZdt03J8.roa (hash: XOP+pz5fLA1+H2S8AXgAlUSrubeeYzWHiX11wOVEGUE=)
                          7: 7p7DRfsKRQgIFnRoD-torrVwpOU.roa (hash: vF6vZ5+aCaTu0YHZFUhcdCkat0uXKKUmkLzk7fzLfkE=)
                          8: 8IPQNKsJPkOpGC12sFlkQtMsYXw.roa (hash: Xs5ZWXQSLJ1Z58EHx7MQM3/jp/D+3KjEPCMs5TWn1es=)
                          9: AJXSyfymc0ZNXaBD4wQ_CXojrNU.roa (hash: IEKfVlGCNO0k9/PEwkKVpaVd+QI7iET2CIAUyaqWhoM=)
                          10: CS3fkAwQa6jbpAuBFjvlkhT4QM4.roa (hash: B07gzww+qg1cGY1+Noy7EqGS0qu6LsylkSmHxbsB5UI=)
                          11: CfvLO-ngsrsxaXPjjitCx4EMCPg.roa (hash: AJVHkzQLJA63L5gaz1iFFl0jYuxf6m7AczUPipJlpsI=)
                          12: CihCYCcRfHmYDycxhVRrCslM7wU.roa (hash: 8EK8gvioDzV5jlwA4y5lAA/cSLy5nx2+QcBlr4T3sHc=)
                          13: D8Npx5yQG7Ze4tcNJRq2T-3oN70.roa (hash: oSyETx06tyNiiNec4JR5AXYmY/qLJxXp2+L6i3DOKho=)
                          14: DNBsRV7t2HVO8env59jVAjOxkhU.roa (hash: u04P8i3SwISYkJ0oEkWX35FdtSG4l2gXii7MGpdcKHE=)
                          15: EC8RWNFJCuwwTQncl5DfzFYSaJU.roa (hash: /nklMpYhc5zKONNBtCKuXizg/to5ABQr9axNt5+yLCw=)
                          16: ElR1tFIaY2PsVDpiTByrXvXqpxo.roa (hash: iq5gGlEdNdHsXyZVWv/MPVHohphUvsytP0Ty+022UbU=)
                          17: GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa (hash: /r6B9YtsSkz5HiiZQ3D0LND5TwPnz38Pp1G53PkZKrg=)
                          18: GMmKt-5baeZVQ82hbvBrxYFlQXM.roa (hash: s5iUX/ExHm3pVTZBNgXMVP9bcmV8hfTJwbyd8w5AgEI=)
                          19: I6fa7upvk-8lxJh8Xg3J12wgh5s.roa (hash: bov/2d/GEEG2qFtvTVuW6lrqmm4nh/Cfgdq8NX02hTc=)
                          20: OkxhKGO3hHLaH6qZ2vA9JlrGREw.roa (hash: ytFzHiABycaJCtimxiXolzufiSd4PWYGRqD/u4TM94w=)
                          21: PegLLGDkYvs3XF-Lv9hiNho74dc.roa (hash: Vpb3C6Es4ErLDrckTZZ10f34MzLAYRtZRdftTDQsoSA=)
                          22: RMWbYdHceZbtSP3kPPphiVqhjKU.roa (hash: ZmPZq83tjvYdJrT/qGKDeRtwLFHx3yIuGdy+p00AfUY=)
                          23: SYldxtHjA_JYSV3y9S2yHMZne8Q.roa (hash: CfGuIWkCu6mC05Ds3gqdYYewye99hhQ/GRJmjn/6PVo=)
                          24: TeTlCFhRmBWsP7NVZyOUSwULl_M.roa (hash: mg3r9BXAscolOOydLk1rXM5DK7srxmHtjMbydFKmjt8=)
                          25: Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa (hash: rWWNSNbf0TpPeCx9vIr9DCtT6kmAFEPWocJVPgJZlfk=)
                          26: bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa (hash: CYGIK7KvoAnIIXqAQFMxwpkIsLNOXXwRLcfsIwViZMg=)
                          27: cfR-hVEEWkEUwMw2M1V8-p4d8xk.roa (hash: wz/4Xbt1g81a52SFupsdpkNdqPVC6kO1L1AiSoDnAFg=)
                          28: dukXrNFcAur9DNJHTrHF2dvZIns.roa (hash: +gvckuM3WrJ0ZC8yAiyvfLpgNPBfeWipzFo2tWbrTk8=)
                          29: eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa (hash: 7jK6GTgtOsW5ejSEUTMjmjF5N1YX94yuMyrHsebyc8U=)
                          30: fjv84iNlQrNIDl434ECeTTwr0W4.roa (hash: szzjxRTRI27CfDncELIdzVynm65szTrVvcBwbAR/+k0=)
                          31: hJ_BTbBrrE1DP__8DDhe52SVKU4.roa (hash: vQOjBEpXapD1L5OKTFCIZsaTYTd3BkhoB3Yz7me/w6A=)
                          32: j4X9hBaVyPVDHygvq-fZETVve70.roa (hash: z5G+VRr3oGmuSXVR1HckqXgI/DsnIY/XOw0j8sDgvBc=)
                          33: jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa (hash: /ylqB7KyfpIhWFWFpFGMmmVvMNfolX67eNrbZDEUJW4=)
                          34: mYW0ZahOVTcrAzTqNxYilfPfhxE.roa (hash: BwKgVg49yd12fGRJhBfLrcNhvxj8bT+foLtZZc8PITk=)
                          35: okLiPnx_37wLDBmkCPiMjbS6_g8.roa (hash: ASj3E5a6QDi3UoVchGVURUpzI7Z729JGPp26Uv4mP4w=)
                          36: p9HNpLognCCdHpHcYdvL_iHpKxE.roa (hash: ZQpCWRnEBpNVDW3N93TuNSYypf5jM4Miv6wnoSLZgOc=)
                          37: q7b7nVWpkVbr40N_Opdu9wphH-A.roa (hash: qMPucfrLKsdpwIUrrq74FwUiMd/2EJmaJ5bJL+xDKak=)
                          38: r9hxqmD0gUNcwPfjCYlZEBGSxBo.roa (hash: zBiX/c+pjyBrWwwCxlUmFq5xFdn6htcFMAiTP/ZMW2c=)
                          39: tB-dpjEah7-kA518mefoakifGPY.roa (hash: zJOUyeqqEIkkHILFuaRgCUtXRDySmHzFpYPS1t4iXso=)
                          40: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: Kbp9+APLJnBlba4BlLQLkxio7FIXMGgsCJT80LBO5f4=)
                          41: uYd3Rl4ywmtPnNm_f04k-3MhFCs.roa (hash: Yq+74aAgucW+GGbCLgjdacyHPboyZ7y3hRDi+tRFRd4=)
                          42: vZ4v2lo2-sXeStle6vqKr87Cnyw.roa (hash: iuW5h9zDLSCcSeiWR+xV0dE4RiZoDLZqiq7ZP9qa/2g=)
                          43: xLGDaC118LcfUDYtMnB3DY44_sc.roa (hash: 4ZP2Bk0aJ3rot/Ut/uex6Y+e07pNyyqnsZS0TCsrmZk=)
                          44: yuuB2KONhG_4U4b8x6sLfT_QyK8.roa (hash: nmT4hg/orDDfGbLVfXOBmgugDkVcFUxF1FfArL2tLbY=)
                          45: zbIR0kzSnqsQppAEnVlytUjNxzs.roa (hash: A5R4DtRsqGNnQjc0WtD6M5DgyLoDVTlkGrAxxgOsLFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:48:1b:6b:3a:30:00:da:2e:55:57:8b:b2:39:f6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Oct 20 11:01:34 2025 GMT
            Not After : Oct 21 11:01:34 2025 GMT
        Subject: CN=7da9894384cd90b3329b2382aea5be3626946b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:8a:86:f0:7a:90:91:af:5f:a3:06:b5:89:
                    60:38:10:9e:e7:e3:a4:a1:b3:d3:bc:fe:90:b7:84:
                    fb:34:91:0b:68:69:00:0f:e3:9e:be:39:39:f7:3d:
                    c1:59:dc:63:fb:db:e4:39:d2:7f:fb:2c:55:78:ab:
                    d8:7f:1d:ce:b7:e2:0b:43:50:d2:b7:77:37:d9:99:
                    f6:80:28:3e:b6:2b:5c:66:c6:cc:4c:be:be:36:78:
                    98:e9:4f:27:80:66:bb:b2:1d:a4:66:50:6b:c0:ab:
                    03:2f:0b:46:05:de:a3:96:dd:98:cc:c4:90:2e:9c:
                    9e:90:13:0e:f3:41:78:3d:dc:99:f7:16:f1:5c:77:
                    cf:17:cc:2d:13:3f:64:90:02:fb:02:f6:59:e1:f3:
                    7f:9f:54:4e:cb:d8:4e:c4:48:1f:02:21:17:fb:7d:
                    1f:1e:e4:63:29:57:08:b3:40:6d:6b:d1:05:27:05:
                    5b:7e:0e:72:52:98:8d:5c:3a:da:bb:87:c7:fd:5a:
                    b3:22:56:da:12:01:56:da:ab:e0:29:55:10:f6:d7:
                    8f:88:f5:95:4f:be:4a:8e:d8:30:0e:0c:f2:e6:68:
                    be:df:ac:af:58:46:46:97:36:74:c8:72:ac:5b:52:
                    82:37:46:c5:9b:20:87:97:29:5f:43:dd:f6:55:ff:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:89:43:84:CD:90:B3:32:9B:23:82:AE:A5:BE:36:26:94:6B:14
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:79:9e:9d:9d:c8:86:9d:7e:e7:45:7d:db:be:82:e9:f1:25:
         e8:38:55:22:71:6d:85:b6:e7:55:74:44:88:2f:20:84:c6:33:
         27:ae:cf:2d:6e:99:fd:22:5a:36:c5:f9:b6:65:86:5e:f5:3b:
         82:74:5b:78:d2:40:46:6e:32:a4:04:e5:70:a7:76:0d:7f:cd:
         1c:86:51:9a:44:39:13:0b:04:84:4d:9d:5a:fc:c1:12:b2:2f:
         d3:59:46:1e:38:d5:62:a4:89:8c:ec:ba:a9:1d:54:c3:9e:f1:
         c3:f3:e3:03:1d:cb:92:30:99:b8:d4:5f:99:26:2d:ad:4c:fc:
         58:c1:df:b6:60:8a:30:3f:49:0d:b4:f2:cb:f7:6d:3b:00:06:
         b5:3c:d8:37:3e:10:e9:68:e5:19:01:a9:18:6e:aa:a3:59:06:
         59:8e:be:88:c1:29:42:27:b5:c6:bb:43:b0:ba:9a:55:49:6e:
         96:af:e6:62:64:d3:8a:61:ac:67:5e:65:94:bb:e5:6b:4a:26:
         27:2b:cc:ab:5a:59:93:ec:63:f7:be:57:27:bc:d8:32:73:c7:
         1d:06:34:f9:37:5f:31:bd:6b:d8:df:08:e9:76:1e:e0:df:30:
         dd:9d:52:c7:9f:a0:0c:54:ff:70:45:c1:5c:d0:41:85:f4:1d:
         08:9d:90:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----