Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File:                     CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier:          z1yFVBMK61rhyOTmpzwmAV1do05HmuZ7dx8ZEVf7L9U=
Subject key identifier:   87:68:76:E5:F1:D4:7F:64:77:5C:52:58:0B:39:E9:5D:5F:5E:66:1C
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       0198D6982F09C636C505378B9B0AC670D866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number:          166C
Signing time:             Sat 23 Aug 2025 11:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:34 +0000
Files and hashes:         1: 0WVAn9YvgOWg_yNJalsG8HWMv_4.roa (hash: o9Uyp3iYPto8Ogeet4RXU658pKPPwu/4VlXDv2Wj41I=)
                          2: 1-HibKYNRlVckj_iTZXhupR1bakY.roa (hash: Pbr797a3iSuwQPzQuuhzHtYhPcEF76lPdVXFTnoW0hM=)
                          3: 1-M-VbyCsItZcG9hA_XDnasi-D8A.roa (hash: b/qbiDYWw8CaeeHb6nquKsuF2wjB+A0cqxq8LMSb+5Q=)
                          4: 1-kWteBemYeM6XkcJ_ZUss1hXG38.roa (hash: 53KhatrrAtQ3Krc/O/sxE+vOAlFJYCo6re5dXOrYPbw=)
                          5: 11lOaRU7MF7FcgxE4R9XRkIdnqo.roa (hash: M2CH14vyLfisxEvGm4ORm0aaawOu/BRSvOS3W2Ud6h0=)
                          6: 5_Mzkp4AJ0QwGWnN3VvEdaOfRtY.roa (hash: KPRBRfXnJeYECt7rkwbA5HLNQN041J0Mdk2L9JLyBZo=)
                          7: 5luPFN5i1lVouRmEBcyTwypwbk4.roa (hash: NHJ5Mbfg05vw8ufC9Y1UIjix6uHWmtoYQh4zJ5PimRw=)
                          8: 5uoV4iXBKOHPftTz02DmU-CdsdA.roa (hash: 2mpqQFSXOUV6zOOM8zKnqxs62eDdoR9K/P9KflUVZuE=)
                          9: 5xoa_s9hHCqBdRVojMZQkieywOI.roa (hash: dLkmlG+BPyJ83dYgEjVkZRzgqQ7WrHrEwODRUOEeHuU=)
                          10: A3kgD4Yh6ZMjOUE4gcsu8drzx2M.roa (hash: rSbRVMQTbgAlKJRB8d21HopmvnA8JdFqIMhpnSws1rA=)
                          11: AbAEVxebdm5G6D1PAcaC5LnGsN8.roa (hash: Dq6Ap6xJijHogpVYcHLyNczvNtcQKKUMlCLwYT3XZ8M=)
                          12: B2R_-aZKC-fKD2cM0Y_ju4yWqAo.roa (hash: tBZsJi3mmXm6MIP7FFZRS9nAQq34IKAHgmKAGADHUfg=)
                          13: BI3sgIaTUM9B3H9IM95i6cQ79tI.roa (hash: lcX08Q/BWVZC00vOiV25sRoANDFaOIFw5t/+Q+BGNvA=)
                          14: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: BREfmvEBncIkkKXDi1665p8DI53n2wIVUvSRWWlGzNg=)
                          15: DDGgge6d5LlDy5dfWiBTroZGTmE.roa (hash: zUOcG6+MR1ospsTENGFCDauMx9GhwzFthN3G8vcsKdo=)
                          16: DN8DQEopeZn2s_vginrteZyRblg.roa (hash: zusAIGD0N+4YFi9tXrSAhBA0eAPQf96DOjVae8bFzrU=)
                          17: DeT4H9vHwyuu35zhI-U0tyFq8YA.roa (hash: d0w+8cvUotAVfyvFf8K4WVYM3e72pkNRc5Y9xUxniZE=)
                          18: EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa (hash: Us3Y5yljNy3p7flzVkHUSVVxPFvWxXzsb07771aSlx8=)
                          19: ELbRMj9dpYGXHBkS3x9fr4fVjNM.roa (hash: pFN7vf4Bi+e7UowjcIQLdhSSW0ELN5XtTgINgLEACV8=)
                          20: ETH1wFBSXTyIScZMuYhOjWG7_Xo.roa (hash: 4pgFORs2NoGVTWQG8JLEHJW5hEBDfhwioOYGj1ZkQ/k=)
                          21: Ehc3A5wFyxSxaVu2JN_l2n6bEM4.roa (hash: 7Tt2rA6zfiq0xOHK0YG3vUvHjTlygYo8XF+ji7LgCg4=)
                          22: G4d6Vi8fwpfBMbAKMprgK-hp9Io.roa (hash: pSEwB6TkhO46uqD2vIRYPbUeH5EsncPmsM5P6q2Yt9c=)
                          23: GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa (hash: hMPbKb1NXJhU4uvH0If2mxxGXgVJxSXaj+jSWiiTlE8=)
                          24: J1Sv-9BBXW9QDU0QoAVtf83HkDc.roa (hash: h0eilDzFJc63ldeHb0QL9b1OgF0191jasEAOBuxrT4M=)
                          25: KhUy9UUnOlFas6aD25pl3uvHOgo.roa (hash: pRLRdQeFQBTTu2BRQ6e6LQQWDfH1gqbpxEW93Q6xIJk=)
                          26: NwTJLgWLnMQ9EeqpznhmvvPQgvM.roa (hash: ViH5oqEBI9vRU6MTGLiUbaYIP8vxiKBaD+q325XXZOE=)
                          27: PFn-sywxKaqL-MQoHYaDo3Ylvxg.roa (hash: 7M/nt+kbs5nOYGFBdJB98Fe7ciYZvkhYXohc8zrAuko=)
                          28: PsSM5b3oLk5wUeBSmklEPX40UQ8.roa (hash: ktnZORaDvt42fZYrrjp7EBxS9xvZh108Mt9SBXfu83A=)
                          29: PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa (hash: 4OKKH899BiMarrXaTVhgCrQZ8xaivHpsNV8dYRA/+C4=)
                          30: Qfd2pQFSud35Kd5afgx_HllnhlU.roa (hash: AVzGY15QZRw23nEpfQHWMOhslLM4/l7mK/LlAJnwT6k=)
                          31: SVAo8dmVNs_cgWnjmR5t-BqxJsg.roa (hash: YTFvZ6MXaLQqcE67dzd6EDQHER7pxnY4XSKLt9tK4LI=)
                          32: SrF5yr5Pqaq1Ja-_kcWWL91gbc4.roa (hash: 2vqcvGcuZtO87Apo8Qmd6BopBmIN2/9Y++vnVJ5lTDM=)
                          33: TUFAZf04oKU71K-dzly3Tm0m00k.roa (hash: 8Q/4UFhDOuKqDkvv68K1gJSZ0i88GSnNRtnULQsx+Ss=)
                          34: V-LCmOe10R8krDgxZ26_D69-M1s.roa (hash: e5tLg2l3aiV5VWqL3jXIWtw0V144t3f3X8rGhSYx2N8=)
                          35: VKpWLCVvnM9Bk9gkuramrbyr9oI.roa (hash: iufCNvmg9pyXxypfL82+6UjxiEFR4YOVBGjjYXCmNCA=)
                          36: W4x_U8KKzKhD7jUq27wP_pnDHSQ.roa (hash: FvDjm270NNg4f/ya97U4H5ElApGRQootXEuMHYZH6cM=)
                          37: YenQr5nH_V3kb3uSF9W13TFvB5Q.roa (hash: GpHupGsKceamB9tAnqXoExG/BKA3+rfzw7wdC7Z1p8s=)
                          38: ZMGiCYqIYbLxIDFLGSrZr7x3AKA.roa (hash: WLL9B2mOtaR0OnLgCRktu1TUID/GGlBWdDeo/4knmL4=)
                          39: ZYJYAUZp_j_itV_LMDtubipZeiY.roa (hash: q9JTHNrd4ky3nao+8K8Fep/n3EM0IokF1M/TQKCLjEA=)
                          40: Zi1QbNVUNm3mfz1CTqhQtalYVwM.roa (hash: gT07hI4kfkPaZsHUUATtMtjxeDaYW50HEiIkbWM7BGA=)
                          41: alXjjyJjACKReiBWFe9q2LojJSA.roa (hash: 0CGeb6hxkkcv5NiB3c+nNxG+nWc/zDf3rldJ9DYLqso=)
                          42: d0OziBiaSaqujGGg39NmZm8WAQc.roa (hash: wPE4wVxV1u8jFuZvEhRcVJN0ZIEnlAfJeb7rkOgWfjo=)
                          43: dEQn4gfsJRxfhqKslfN41v3D4hc.roa (hash: TZ0sobRJ9WMYF6aBcf3Cq1/T45j0yE6z5roNHeVXmhg=)
                          44: eo3YEkR_kIlvbYQzw6Gy-UPzN1Q.roa (hash: JLhOns4DewIU/XF05/PioRQMuqO3MR2c58DWu+qOVVQ=)
                          45: gQLDHDpGBQlgALs9GcfAUzVclt0.roa (hash: DRtfp1UtfULNf5WPwgIsVkdZx6FfMZanPaD3QZoUync=)
                          46: ifEtStLPeAA8jKJ4MhxpZv8xwu0.roa (hash: SHKwnaRe/appNbcVWvQlAJculHJjzlHZPzKL+wqnct8=)
                          47: j0kswT18M65pGw9oZ5vF0p46VKQ.roa (hash: 32N3pVed44e+OfqPtN7yUzxwpydaC6y88MI0aFPEPT8=)
                          48: jY7niDqbHThw-tNhaxyppo0lcEY.roa (hash: V1mUjItVWw410qTmkUZlb5i/69zvNslDL21/SgXV274=)
                          49: motJg_hClgvKFxrmI0ThBISo3lo.roa (hash: 1+GgeLsk0bVXeFjHtsYrISwKmvPy/YI4vUXD5HuoJw0=)
                          50: mvBA8v6ECbu_1CHCq3Ygov29IXM.roa (hash: 66IPvJEHtgW9wEKAU5V3GW2FisJZNIcyhujZbbm68Eo=)
                          51: nxm2z-N8DzZSbo0806BLGjh1MGI.roa (hash: LBhQJnrLYwLBMi2jNJHPP6NuErBJyyIWsF2qumnunWA=)
                          52: pPb-CBexk36WjvY49Sg0ZGeG_AI.roa (hash: C2eHQ74TxOJX4sjzgtNLD8HryHtD6jrPYZrRej2PG9w=)
                          53: qz_DmGy9IAKXRI9f4REmBeW1T9Q.roa (hash: AyfH+v4itEz/GELogPNr7gp6yMRLDbtAVMRnMQ0R1Zk=)
                          54: rF-q7agOPCH4-t_lEDeqW9htfmY.roa (hash: BtOMLbBjtNuDENxRwlH88b+1W2N7L+162hA6Uib2VAY=)
                          55: tKWY7-wssBbVkK8gi5xh_V7LyWo.roa (hash: 9iQCM9DBb9SNVfP6FnCOqNxt4sGo669zHK843eqyeJQ=)
                          56: uprewwcTXCcmQN0Ey7EpJWORj44.roa (hash: QV157YO0Y71rObCzvJ0bY8O5Oh3zS2lhjp5uOHkyL5o=)
                          57: xVpekrjNm2Ym4WMpRSG3_hwYsv4.roa (hash: sahJiwW9mBR8LlyaT8TmE2NDfFoKYM4WzqhrscZG6Os=)
                          58: yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa (hash: e8Eyw72rq0/GtFG8y5QenGef6gli7tTz0dJgGjM7CME=)
                          59: z_xZZaAWa8QdNga7zU3z3y_ctgs.roa (hash: 3uv9J0zNy4D6OdhhkaZfxXnVW6d77XB4ndHuoNeUg80=)
                          60: zgMzIdhRlx-sM532UYZ-ab0aXII.roa (hash: DccIHmb2BgsXvdBuA8mWTiKispMrxrNFl+zv/Fzyie4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:2f:09:c6:36:c5:05:37:8b:9b:0a:c6:70:d8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Aug 23 11:02:34 2025 GMT
            Not After : Aug 24 11:02:34 2025 GMT
        Subject: CN=876876e5f1d47f64775c52580b39e95d5f5e661c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:36:70:52:06:7a:43:58:64:4d:85:bb:5d:
                    28:76:b8:d4:a7:03:ee:fd:d6:7f:03:dd:b7:30:e5:
                    31:27:cf:4d:d1:5b:10:b6:2a:94:05:32:5e:1b:73:
                    ce:db:f8:5e:d9:5f:df:15:71:5c:c0:de:58:4f:ca:
                    7a:3f:41:83:fd:1e:ea:0f:93:d5:2b:a5:a4:d9:2f:
                    19:0d:83:77:07:db:b1:a6:79:54:ac:0b:1b:28:97:
                    59:b2:10:9d:fb:e0:df:5a:85:f7:0f:ed:f1:2c:b6:
                    85:41:71:55:ca:01:ee:57:43:62:f5:36:72:2a:00:
                    13:7c:a2:c3:fe:36:78:05:78:26:45:46:13:58:dd:
                    1e:37:f6:5a:b3:ca:7f:69:db:90:96:03:f9:5c:c7:
                    a6:c3:ba:50:64:a2:51:fe:aa:21:ec:9e:c6:48:1b:
                    24:4a:a9:1f:81:c0:3f:77:be:18:b1:68:1c:9f:25:
                    48:82:41:f5:f1:9d:ad:56:2a:36:74:73:72:af:ca:
                    ed:c9:8d:2b:4d:78:28:1f:a2:80:c9:6f:92:ce:86:
                    b5:1e:f1:f2:7f:a4:43:25:91:a5:47:2b:5e:43:ef:
                    2a:5a:36:15:b5:e4:f3:7b:b5:37:c2:25:b3:63:68:
                    88:40:f4:5b:51:60:97:7f:0e:f1:14:7e:09:75:6c:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:76:E5:F1:D4:7F:64:77:5C:52:58:0B:39:E9:5D:5F:5E:66:1C
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ca:7d:fb:4a:35:35:b8:ce:08:d8:ca:74:4d:eb:5d:90:88:
         88:ab:15:a3:51:ca:10:1d:99:a0:e6:4e:26:36:f6:46:f6:b0:
         0f:1c:b9:ae:22:a0:f3:35:63:30:5b:f6:f1:cd:2d:a2:8f:af:
         ae:54:3f:7a:22:a7:d6:ad:c7:4d:0e:b1:94:0e:76:b8:50:cc:
         58:ff:1a:0f:2c:d5:d9:a1:28:8a:1e:86:9f:72:ba:c0:2b:2d:
         be:24:58:77:fd:0c:b7:4e:32:ef:9d:43:e4:30:24:fd:22:48:
         b6:06:bc:f5:97:b4:73:3e:24:2d:82:02:66:43:fb:ac:ef:ee:
         6a:58:b9:6a:8f:d7:1b:27:66:cf:d7:d6:71:e9:04:ce:06:4a:
         80:f2:40:7d:2f:be:f5:f4:94:06:83:69:5e:c0:80:3f:db:0b:
         98:99:f6:f6:d3:e9:e2:88:a3:59:88:c1:b0:21:2a:fb:8c:b3:
         92:38:45:79:7d:18:cb:34:e0:74:0b:49:85:e0:27:84:db:fb:
         1c:27:ba:1b:96:25:83:96:8b:f9:fa:bc:4d:20:3a:17:38:dc:
         c4:47:c9:c9:65:fb:63:c2:f1:4e:55:bc:0b:72:37:dd:7d:95:
         d2:76:48:bf:f1:79:53:53:a6:2b:8d:9c:0a:36:2e:4a:b6:2a:
         95:a5:d3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmC8JxjbFBTeLmwrGcNhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjUwODIzMTEwMjM0WhcNMjUwODI0MTEwMjM0WjAzMTEwLwYDVQQD
Eyg4NzY4NzZlNWYxZDQ3ZjY0Nzc1YzUyNTgwYjM5ZTk1ZDVmNWU2NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUA2cFIGekNYZE2Fu10odrjUpwPu
/dZ/A923MOUxJ89N0VsQtiqUBTJeG3PO2/he2V/fFXFcwN5YT8p6P0GD/R7qD5PV
K6Wk2S8ZDYN3B9uxpnlUrAsbKJdZshCd++DfWoX3D+3xLLaFQXFVygHuV0Ni9TZy
KgATfKLD/jZ4BXgmRUYTWN0eN/Zas8p/aduQlgP5XMemw7pQZKJR/qoh7J7GSBsk
SqkfgcA/d74YsWgcnyVIgkH18Z2tVio2dHNyr8rtyY0rTXgoH6KAyW+Szoa1HvHy
f6RDJZGlRyteQ+8qWjYVteTze7U3wiWzY2iIQPRbUWCXfw7xFH4JdWzH1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdoduXx1H9kd1xSWAs56V1fXmYcMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8p9+0o1
NbjOCNjKdE3rXZCIiKsVo1HKEB2ZoOZOJjb2RvawDxy5riKg8zVjMFv28c0too+v
rlQ/eiKn1q3HTQ6xlA52uFDMWP8aDyzV2aEoih6Gn3K6wCstviRYd/0Mt04y751D
5DAk/SJItga89Ze0cz4kLYICZkP7rO/uali5ao/XGydmz9fWcekEzgZKgPJAfS++
9fSUBoNpXsCAP9sLmJn29tPp4oijWYjBsCEq+4yzkjhFeX0YyzTgdAtJheAnhNv7
HCe6G5Ylg5aL+fq8TSA6FzjcxEfJyWX7Y8LxTlW8C3I33X2V0nZIv/F5U1OmK42c
CjYuSrYqlaXTsw==
-----END CERTIFICATE-----