Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File:                     1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier:          qzAQsWYpkXXiNMdP4FZI2Ky8Uk++v/MQrENnKfUvKTA=
Subject key identifier:   DD:64:A0:AA:8F:F4:B5:4D:BE:C7:37:EA:A1:6E:ED:E4:9D:0E:AC:A3
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       0199FF9033F292850FBF7E0026FD98196919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number:          178D
Signing time:             Mon 20 Oct 2025 03:01:04 +0000
Manifest this update:     Mon 20 Oct 2025 03:01:04 +0000
Manifest next update:     Tue 21 Oct 2025 03:01:04 +0000
Files and hashes:         1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: 3mJ+5TP+JnFJjeTGjf49vxSh613aPPqR+3d87PhJYfI=)
                          2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=)
                          3: 2e0lc1JzQ87yGAowww8kgZqV7YY.roa (hash: gNVpmyo9CJXnk0pgBpahH9O86M9z121dgiIEC4Sk0fY=)
                          4: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (hash: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=)
                          5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
                          6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
                          7: LTUhQjilzFX-k7Bgy9ysyxEOPb4.roa (hash: e1xccoiOvs2L5dWiIhyAcjjVHRB1nFtrLWnpfffBP84=)
                          8: Oz1W0gA_gp2o0ksJWMkSuPbI3kg.roa (hash: LL/ivhxpLxJhJ9AWIntZGeKRbSlrt1Vlzwu4w7/JynA=)
                          9: P1AouXfemIWVVfo5TEibTocze1c.roa (hash: wHpE6e7xo4f0TlJdJmgZHfCjcbJSNy3kZ6obH44Jzik=)
                          10: Q8GhfkJiK1i0aNFsl1zpqBN38ok.roa (hash: zSrNTOjH2jHkfF8npGjnRGpLF3j5CwGhLlQ8eGbMR74=)
                          11: RBnwpqzlc9TBDZASvVPEAjuX7Rw.roa (hash: 9Xw6rUQ+UEHileke6uv0nhej/HOGc+mY9NGx2oOIPgw=)
                          12: SYjATDQ1I6kN9eqCLTNcZMWeeh0.roa (hash: Njd04jRClV/GG253dPwIxhrsePepY7gbrmA3HPI3sFU=)
                          13: WL0U37rtoMnf9rEUXD_6ssGaivA.roa (hash: LZX1y/DWyL3Za7uA7BHBrGus17Rh9zUmNUrw7i+k7xU=)
                          14: YXgU_rntcNw21ln86OT_hE-baC4.roa (hash: Zfz6wwu/xRjdBTBaC0Uu8DehxoVZAk/DKVlT5B4P8OY=)
                          15: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=)
                          16: ZYDhKr44GWTgEYGd8eG37WPsh2Q.roa (hash: uwfjzikgAFKzWJv9BNoB9JKx/LJZPhS6gL+6tEOAI2U=)
                          17: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=)
                          18: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
                          19: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=)
                          20: m7QQoFX-u7UYoA41yiP24F7uP9s.roa (hash: +WD8froPo/LUjMw2nwzZtOdRqdsnPQ5Rv0Au1qYv4lg=)
                          21: tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa (hash: ERiDa3qSUTy4z76OEMu4pDL44NVgIEtbghpVZdjpp9k=)
                          22: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
                          23: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
                          24: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:33:f2:92:85:0f:bf:7e:00:26:fd:98:19:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Oct 20 03:01:04 2025 GMT
            Not After : Oct 21 03:01:04 2025 GMT
        Subject: CN=dd64a0aa8ff4b54dbec737eaa16eede49d0eaca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:2a:04:01:ad:84:75:36:c4:12:01:3c:b5:
                    79:77:17:30:c5:50:a4:82:f0:c9:c3:b1:8c:5c:1f:
                    6f:d6:bc:55:b3:33:08:70:5c:4d:a0:39:da:5c:3d:
                    1b:7a:28:e9:e7:b9:ff:73:d5:d4:3c:38:5d:28:a3:
                    be:7f:3c:76:a1:4c:6a:14:53:cb:82:01:1c:d5:7c:
                    55:5b:a4:97:be:be:02:9a:1a:30:31:84:5e:5f:11:
                    6e:65:fb:e7:35:69:18:39:41:51:a4:e5:1a:8c:f8:
                    7a:5a:cc:8f:38:10:88:e3:85:e3:eb:09:4d:ef:09:
                    bf:c8:53:7e:fc:9b:72:9b:e2:58:2c:49:b5:c9:d3:
                    94:81:e5:4c:4e:08:ab:1d:f7:f8:4e:e7:3e:a3:4c:
                    b5:a9:34:83:af:e5:6c:3c:7a:9e:34:cb:f6:48:fa:
                    79:37:23:a4:c9:e4:e8:21:cb:e2:b3:b3:a0:3b:b8:
                    b7:93:ba:88:2e:63:b6:c2:07:87:75:a7:b8:4e:1d:
                    b5:f2:2a:b7:a5:ff:3e:79:04:92:7c:39:42:45:5a:
                    7f:20:2a:7f:dc:ff:24:aa:5d:7a:7d:39:9a:31:f0:
                    10:c4:4f:44:0c:76:70:23:25:97:fe:ad:cf:c3:b8:
                    8c:51:4c:01:33:cf:0c:d2:99:15:fc:65:2e:16:bb:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:64:A0:AA:8F:F4:B5:4D:BE:C7:37:EA:A1:6E:ED:E4:9D:0E:AC:A3
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:98:fd:97:a1:9e:b4:5c:e9:d1:ba:61:7c:d3:4e:54:36:f7:
         c7:e2:c0:36:be:33:38:7d:68:69:ed:66:65:66:b0:4d:92:31:
         c1:6d:e0:48:d7:e3:c8:63:a7:e0:2d:e5:20:77:f6:5b:28:7b:
         ed:a2:c4:d7:3d:19:80:bd:40:ee:0a:46:7d:48:59:36:1d:2f:
         75:82:cb:8e:36:28:67:fe:d7:db:50:82:a8:55:56:18:28:87:
         c6:73:ea:9f:5e:7f:40:7e:b9:ec:d9:d9:5c:e7:22:cc:f3:1f:
         34:73:7e:4b:34:48:03:8c:16:16:0d:9e:16:8d:83:9d:bf:0a:
         be:cf:11:51:79:b1:e7:c0:c1:2c:44:08:93:c0:36:d0:71:d6:
         dd:de:f8:e3:ea:53:c1:7f:dc:e3:5d:eb:8b:6c:07:ef:47:b9:
         3d:93:1d:27:6a:d4:c3:c5:55:d1:6b:45:44:aa:f5:6a:9e:e9:
         d7:e8:7d:9a:ee:d0:61:48:e8:2e:1b:76:26:e6:18:51:b7:5c:
         8c:19:a0:7a:09:a9:75:dd:6c:94:bb:64:8c:ae:3e:89:2f:5e:
         8b:42:3a:2a:a2:ff:d4:45:52:2e:f2:f7:1f:b0:29:09:a4:a3:
         45:b2:d9:17:3f:ea:24:a3:6e:69:d4:a3:62:72:11:f8:59:1a:
         64:29:a1:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/kDPykoUPv34AJv2YGWkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjUxMDIwMDMwMTA0WhcNMjUxMDIxMDMwMTA0WjAzMTEwLwYDVQQD
EyhkZDY0YTBhYThmZjRiNTRkYmVjNzM3ZWFhMTZlZWRlNDlkMGVhY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp44qBAGthHU2xBIBPLV5dxcwxVCk
gvDJw7GMXB9v1rxVszMIcFxNoDnaXD0beijp57n/c9XUPDhdKKO+fzx2oUxqFFPL
ggEc1XxVW6SXvr4CmhowMYReXxFuZfvnNWkYOUFRpOUajPh6WsyPOBCI44Xj6wlN
7wm/yFN+/Jtym+JYLEm1ydOUgeVMTgirHff4Tuc+o0y1qTSDr+VsPHqeNMv2SPp5
NyOkyeToIcvis7OgO7i3k7qILmO2wgeHdae4Th218iq3pf8+eQSSfDlCRVp/ICp/
3P8kql16fTmaMfAQxE9EDHZwIyWX/q3Pw7iMUUwBM88M0pkV/GUuFrtpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1koKqP9LVNvsc36qFu7eSdDqyjMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpj9l6Ge
tFzp0bphfNNOVDb3x+LANr4zOH1oae1mZWawTZIxwW3gSNfjyGOn4C3lIHf2Wyh7
7aLE1z0ZgL1A7gpGfUhZNh0vdYLLjjYoZ/7X21CCqFVWGCiHxnPqn15/QH657NnZ
XOcizPMfNHN+SzRIA4wWFg2eFo2Dnb8Kvs8RUXmx58DBLEQIk8A20HHW3d744+pT
wX/c413ri2wH70e5PZMdJ2rUw8VV0WtFRKr1ap7p1+h9mu7QYUjoLht2JuYYUbdc
jBmgegmpdd1slLtkjK4+iS9ei0I6KqL/1EVSLvL3H7ApCaSjRbLZFz/qJKNuadSj
YnIR+FkaZCmhgQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:04 2025 by rpki-client