Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
File:                     F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft (raw, json)
Hash identifier:          kTFaVvRudrkg1Sahj5vzrr2rx+OLC0UoCza8fk70cMQ=
Subject key identifier:   6F:61:84:98:08:26:B9:70:C5:1F:C2:2E:29:36:82:EE:55:5C:9A:9C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       0199FB45FDDE7183C269D9221283B1163EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
Manifest number:          17D1
Signing time:             Sun 19 Oct 2025 07:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:32 +0000
Files and hashes:         1: 0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa (hash: kji0fDrg1UCCF1e89e3x4DtqXEf9lBqkRhHoCvYmuiw=)
                          2: 1-1lRKLu371HDTHk8c8EivyJBtuU.roa (hash: JU9c2IXBDe8sTydlUA5qMPVW4/hxpmRR4ICEo97INqw=)
                          3: 1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa (hash: CH2FU6z+GEc8HtvIaf7B+I0OFI1CGjk8f53ju01Zw1U=)
                          4: 3eACAQy46sHpLdk_clPryggqLqA.roa (hash: EofnSqwwa7Mab+n1I2t3VR5ifr+qtLtBnN0yP00uuQ4=)
                          5: 4oyZa4gdDUkTyvig9B5MyEBxtgY.roa (hash: 65mItYo2Zy5ZDdSzQQF5aR64hGTdR3bqRDrtgJvvNZI=)
                          6: 502f50d1NmQlr_QgXEe6FmpQuXs.roa (hash: /FaifmzpLcs3/LqoeHJo9JuiLbqNAC7mFVWjJRhMRO0=)
                          7: 8V1ryzk7LfNRSiFKp_7toQJ8huM.roa (hash: joPe9uWB9UCnoIbEth1HHghcYtVJJ07pHsyNYeVnqPw=)
                          8: 8drSNO4c28JBTvdRZ2V_eb-ECc8.roa (hash: gR2B7vbwxu/2iESNk/phikf31ZfQzoZkgpf8LTcbqJc=)
                          9: AqkuMwOWpcjFIQUNACx397i9qMI.roa (hash: ha/OMr66LwgOd9K7o9DEGPQxt1hmy9/aNOLXxw8wx6w=)
                          10: BgvMLxSeSe60azRb1NkUA0ot22s.roa (hash: C7aDDYI0X+QRoHMtx0ezoJw1C8mWVSKIdotzc0BXCH4=)
                          11: DR6SICtYwwm1HogED7BDIhfpeoI.roa (hash: GHQceK37rrfaAB/D7Oaacj1eUTWMgMM/nsbZCEXmHkg=)
                          12: Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa (hash: rW8mc8/vAfi5HR0gCnT0PC1Da6a+T1zVjRQOt1IWh/0=)
                          13: F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl (hash: WDWfOQg468C7ys4wex6vZ9xvz0CY4X8Oku+VfReUGeQ=)
                          14: GcchgiajCXxa9KVue-wbvF3k3Rs.roa (hash: m7M+iG8ePoyQdRj+JQNsjxYIZN0DVm5ibaTqXMTle0Q=)
                          15: H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa (hash: rv//nIfVZsrdzhdfXCHCp7/ysXvAYIb8HuuMGaQi3tw=)
                          16: HdJxPdso7JVrZYx9UQ0nvOnNryo.roa (hash: zqP1nETzTGVCqbMo3I/K5MwH+sEDXTpAb5N+eSbyenQ=)
                          17: Hgor3XOJG_33qkL94qd2eia1vzY.roa (hash: yQpTujKyRlMiL/Y1O2gPBdFC/8SSAUfzxqd1Meo2vUg=)
                          18: IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa (hash: yyew7EQmZw1cR5FC5jaEonANxJjuYsh1ytGgvuE1p98=)
                          19: IG5mSmtKzkJj8RTljMdMBjniTjs.roa (hash: gvOzCSa8vDbFgYDTYfRkyPudCfEKxmfVO6kLEZWirf4=)
                          20: KmC6wS-Bry5klAycE2tBc7Q2hVk.roa (hash: ZcqNpLLMacfOeosAYfPte8ziOUeM115N30agsD9prWg=)
                          21: LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa (hash: IXlBtSHgll3EWlIRCHI/7XXmqvwCKUDds5SRDvZb09g=)
                          22: NmWTLDpy2yZqa32LE2bz27-5gz8.roa (hash: qmzFDt328zkb8dn9LXMEg8+Thy3R0TfIILvJm7WduiE=)
                          23: O59qU3GlbCPOunuU26RSWdQm6Ys.roa (hash: cUEfityQpCrIrR/hweLcH6F77z41nX/RM/hfo/Kr52s=)
                          24: Plhp8kozsjJjr5xutG_5OmCKOzc.roa (hash: jHhve6x91eRg7+8bDu5j5Ify1fEYSDj5qu2zoKgYUY0=)
                          25: PvnYj70vWIEtSZ4-TLAUROqH-mQ.roa (hash: C32arwbPmPblT8QjzIktSbeBph+9mftQGk8FxNUGy80=)
                          26: QikrQfPZcEuLXxNM9QRFuZqmwX8.roa (hash: GTgZFx+2E4BxRZ/cmNVpT3kb9A3tv7hfyB2pD3LWoag=)
                          27: SiQZbt7Y66GtmJ_f96kwaY-G998.roa (hash: dgNLChdS6cQ5M1MIq+zgZcYxmgFmlTXUHjgAF6gyPTw=)
                          28: SvD0YrflKZtrg8ajsXRYlZShlIQ.roa (hash: BCIwz2vY2jLgYS7z7fY4QU/HwErNwcVpkosUz//VdPM=)
                          29: TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa (hash: T0MoII0bHUQVy4/EIU0McUWW03OrtpRdQcw2oGJ90xw=)
                          30: UEYPaIJk57iANe2fXLEYrDHuBW8.roa (hash: vVCdcBaBVIiJ2UFubFblYlCEyga/mYmujS2FPpjWlf8=)
                          31: YFWVotFPF4rkids3QA341Z9fyK4.roa (hash: YvO+2nszTC3s3sqVEtLJ1xWwZVIVv6VgaQF2qtreTRU=)
                          32: Zc0fVpIzsz1W6a-QmZHBJJqJJnQ.roa (hash: Q3pSXhF3hBwJGb/V5w/lVnpT0wURqnu+NuHtZ4Q12Jo=)
                          33: _1gr71TtxKrGYfishpOTTlC-Yf0.roa (hash: LXqUscGa5O5l0ANuPWlp7ZJ5IGrnqrBbr0WR9gp+Xlg=)
                          34: _4lvYeV-ayqEuNBULPPOUTjxshM.roa (hash: NdQ48sOIXtMVgyfAT4cDSjJrP8NrGiMF8pPwF4Fl/SU=)
                          35: _NP7KLLqMrN1MnGQmRzYwY7srro.roa (hash: yxeClpkT7+DTzIpMnMbwVDLNUo4DerckRO6AAThHbTE=)
                          36: evYLEFvdvSvmkbuLm6rh3tZsvKw.roa (hash: 52BX1RaGCebJiVa5KK5DyLHFtzsT7REGB3uiL5jegrk=)
                          37: fNzqJvsbqb0H74heu_eSek8VtgI.roa (hash: o4Nod9JSdaU0RMBqsV3JfhPtjNeHWMXe4pMD3qdsnU8=)
                          38: fiZS1QoC13O9LGwSQ4heL3EDJHg.roa (hash: cQaKdfdjwvkVki02Gk6rg/cphkwoTFB2MpHuxaFIw5A=)
                          39: gRpxZ9tPgRBVp8qdYzJqgIxd2nc.roa (hash: 83UGnHR1vvpOBiG28c0LTC7t5cOOarvTlEqPeJagnUo=)
                          40: itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa (hash: bTfyy1SxJCeaK5coWhOr/Q8NlmQaYiJZYALhNcfWwOg=)
                          41: jDRBJTXqU-l0mlBW0i631wxPZt0.roa (hash: iDEkyKeMVMFwrMXDKR4bsKp+geBFSFoieBkCq1waIkE=)
                          42: n0JluA_q73XjEpq04uEzn-RmsXg.roa (hash: T7rTE9/E8va60SJXGuKikAJZCiAgEmhE8Vpka/OYUOA=)
                          43: nlWr11m2o9h4NC-tzohScSJdOxg.roa (hash: A3Wa8TFObznb1XsDpDHOQf+qyyepDtcekiYNrboghKo=)
                          44: nyh3L1_fO9-0gtPACanLqE-8L6A.roa (hash: 3ZfslFeCGwiSaXAFPs++rXWZnjwclEp0fgAs/mguHtQ=)
                          45: o3jnOci1LEZmio5eVK_R1X59Bc8.roa (hash: ksK9oLd/45fgUjzdDyp1g1OluUQE8WOO6qYAiQZLnSM=)
                          46: qZFf8xBKOBqZq28f1CYsPIryFfY.roa (hash: c2azlwgqsewfRUN5oiHErUO6fO6RA6AsE7ib1fWtYcI=)
                          47: r7mPdu3mcXlmiFWy88dMv4tMIwE.roa (hash: Tev3vha+XFV/k1WflgN7brJaSUjSziylhI0zOJ7XJU0=)
                          48: rxVm1BUHBkaau-7W_r_kxy-XrHo.roa (hash: rLOdOXbVl3h3am2CiNQtp6HBEUOsXCq9yn33g8ZOc4Y=)
                          49: xdzMl2dBjCTNBQybuXYBgSxzduo.roa (hash: JEkwDfKXDwIr/2rXwBPBdk3uqDoMAYK5dQs47lFmsqg=)
                          50: yWlbkrEj2-GR1WBLh_nb3kwtTP4.roa (hash: M9mG3BDKpakDn8xVlL2w2ltK4fDQEQSGSLniQRr2b/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:fd:de:71:83:c2:69:d9:22:12:83:b1:16:3e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Oct 19 07:01:32 2025 GMT
            Not After : Oct 20 07:01:32 2025 GMT
        Subject: CN=6f6184980826b970c51fc22e293682ee555c9a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:46:74:b4:5c:cd:cf:66:0b:fd:a2:7f:f5:
                    b2:cd:a5:9f:f6:96:12:37:85:90:bf:72:1d:49:c6:
                    22:d1:83:70:39:e2:18:45:d2:f7:f1:34:d4:fc:5d:
                    b8:41:b5:89:3c:75:ab:00:36:88:e9:67:9f:d4:b0:
                    fd:14:cf:fc:eb:ec:7b:f1:01:e5:59:31:67:ab:55:
                    61:a4:b5:52:4f:d6:c7:26:d9:a8:ca:f9:22:ad:a2:
                    3a:11:89:dd:bd:03:e2:09:93:9a:60:51:d5:a3:6f:
                    41:9f:62:5b:cd:7f:97:22:7d:49:31:33:d3:51:7a:
                    9a:bc:ec:a2:26:e2:3c:ea:08:27:e4:95:e7:6c:57:
                    bd:7b:82:f9:b1:18:a3:a7:35:4c:52:c0:9f:91:0c:
                    a5:62:50:35:97:b7:c0:2f:d7:96:61:97:a2:3c:33:
                    c8:a5:39:35:34:75:f0:21:5e:3d:b5:a1:de:5c:14:
                    79:24:7b:92:78:c0:e7:00:62:7c:c7:2d:25:ea:e6:
                    ea:2c:cc:d2:58:0c:27:a0:0d:cc:6f:af:1e:18:68:
                    2a:a2:62:37:f1:7a:ab:67:7b:88:37:cd:48:38:8c:
                    fb:e8:c5:29:52:81:00:ad:f1:ee:ae:a0:09:c3:68:
                    f3:ec:92:b5:82:fc:0a:ad:e1:87:ea:d1:2c:5a:fd:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:61:84:98:08:26:B9:70:C5:1F:C2:2E:29:36:82:EE:55:5C:9A:9C
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:f0:63:9b:6c:ff:2a:cd:9c:2e:9a:f7:26:70:0f:ca:29:
         71:f4:dc:48:a8:16:2c:56:21:57:43:29:b5:24:21:b4:c5:9d:
         b1:78:5b:7a:c9:db:ee:81:3d:e7:52:83:e4:69:1e:8f:b6:39:
         f4:8d:30:03:93:5d:f2:aa:00:8a:2b:40:24:99:b8:0f:6c:ae:
         fa:05:0b:fc:0c:d4:40:50:54:48:dd:05:11:ae:35:c8:72:5c:
         18:55:61:54:b8:29:e7:00:3d:6f:ff:c7:12:35:d4:8e:b8:12:
         4d:43:54:a5:9f:63:e9:bd:bf:e2:73:17:cf:e1:dd:fb:88:df:
         79:4e:d0:51:58:2b:a5:83:5a:71:8f:f7:0f:21:25:20:10:a0:
         36:bc:d2:45:7b:fd:72:a0:af:5c:7d:39:bb:d9:aa:91:96:aa:
         a7:c2:4d:18:87:d4:88:05:a3:e6:0e:cc:32:78:34:fb:a2:22:
         4a:5b:91:aa:68:23:b3:b4:17:af:79:a4:2d:39:a4:bf:e6:ee:
         64:d2:b1:fe:ea:11:92:34:a3:c5:c8:b3:06:6b:d8:c1:f5:fa:
         01:10:bc:ba:7f:58:e7:e6:cb:b2:cd:d1:27:0d:64:91:72:2d:
         8c:91:bd:1c:b2:52:26:56:a0:60:ff:12:84:d4:d3:d1:53:ae:
         bc:58:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----