Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
File:                     F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft (raw, json)
Hash identifier:          VZPbsD8VqSxJ/SdDpKgeBuIY3QLZbDDUxgBFe+sxA9c=
Subject key identifier:   C0:DB:F9:9C:58:D9:09:1A:F1:F9:48:76:DF:36:45:7C:8B:EF:CB:1A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       0197B70F29620703211707141874B090B699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
Manifest number:          169F
Signing time:             Sat 28 Jun 2025 15:01:53 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:53 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:53 +0000
Files and hashes:         1: 0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa (hash: kji0fDrg1UCCF1e89e3x4DtqXEf9lBqkRhHoCvYmuiw=)
                          2: 1-1lRKLu371HDTHk8c8EivyJBtuU.roa (hash: JU9c2IXBDe8sTydlUA5qMPVW4/hxpmRR4ICEo97INqw=)
                          3: 1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa (hash: CH2FU6z+GEc8HtvIaf7B+I0OFI1CGjk8f53ju01Zw1U=)
                          4: 1W8YwVPVVmWribwLy9LvtNVEaUM.roa (hash: YW6U541Esgjax5jt18u+1nzqZU1iI0A9cYffbNQQT6c=)
                          5: 1da-nRUpH3Q-pVNM1A6DWGL_mNU.roa (hash: 2729J8QVRQ7EloC1ud+dkEVB7yadtZKjM1kooyqR724=)
                          6: 4oyZa4gdDUkTyvig9B5MyEBxtgY.roa (hash: 65mItYo2Zy5ZDdSzQQF5aR64hGTdR3bqRDrtgJvvNZI=)
                          7: 502f50d1NmQlr_QgXEe6FmpQuXs.roa (hash: /FaifmzpLcs3/LqoeHJo9JuiLbqNAC7mFVWjJRhMRO0=)
                          8: 8V1ryzk7LfNRSiFKp_7toQJ8huM.roa (hash: joPe9uWB9UCnoIbEth1HHghcYtVJJ07pHsyNYeVnqPw=)
                          9: 8drSNO4c28JBTvdRZ2V_eb-ECc8.roa (hash: gR2B7vbwxu/2iESNk/phikf31ZfQzoZkgpf8LTcbqJc=)
                          10: AqkuMwOWpcjFIQUNACx397i9qMI.roa (hash: ha/OMr66LwgOd9K7o9DEGPQxt1hmy9/aNOLXxw8wx6w=)
                          11: BgvMLxSeSe60azRb1NkUA0ot22s.roa (hash: C7aDDYI0X+QRoHMtx0ezoJw1C8mWVSKIdotzc0BXCH4=)
                          12: DR6SICtYwwm1HogED7BDIhfpeoI.roa (hash: GHQceK37rrfaAB/D7Oaacj1eUTWMgMM/nsbZCEXmHkg=)
                          13: Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa (hash: rW8mc8/vAfi5HR0gCnT0PC1Da6a+T1zVjRQOt1IWh/0=)
                          14: EqYoYfSSuHO4ZXymegrqik-Htrk.roa (hash: 8v4APsy7t8eGT/7UldLhNCClDHzeBHejHmhxpQ5qjBU=)
                          15: F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl (hash: xU8wGvl0bguRr03oh36Qlp7oHDmdmxwXTkOhATFaZJg=)
                          16: GcchgiajCXxa9KVue-wbvF3k3Rs.roa (hash: m7M+iG8ePoyQdRj+JQNsjxYIZN0DVm5ibaTqXMTle0Q=)
                          17: H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa (hash: rv//nIfVZsrdzhdfXCHCp7/ysXvAYIb8HuuMGaQi3tw=)
                          18: HdJxPdso7JVrZYx9UQ0nvOnNryo.roa (hash: zqP1nETzTGVCqbMo3I/K5MwH+sEDXTpAb5N+eSbyenQ=)
                          19: Hgor3XOJG_33qkL94qd2eia1vzY.roa (hash: yQpTujKyRlMiL/Y1O2gPBdFC/8SSAUfzxqd1Meo2vUg=)
                          20: IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa (hash: yyew7EQmZw1cR5FC5jaEonANxJjuYsh1ytGgvuE1p98=)
                          21: IG5mSmtKzkJj8RTljMdMBjniTjs.roa (hash: gvOzCSa8vDbFgYDTYfRkyPudCfEKxmfVO6kLEZWirf4=)
                          22: KmC6wS-Bry5klAycE2tBc7Q2hVk.roa (hash: ZcqNpLLMacfOeosAYfPte8ziOUeM115N30agsD9prWg=)
                          23: LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa (hash: IXlBtSHgll3EWlIRCHI/7XXmqvwCKUDds5SRDvZb09g=)
                          24: NmWTLDpy2yZqa32LE2bz27-5gz8.roa (hash: qmzFDt328zkb8dn9LXMEg8+Thy3R0TfIILvJm7WduiE=)
                          25: Plhp8kozsjJjr5xutG_5OmCKOzc.roa (hash: jHhve6x91eRg7+8bDu5j5Ify1fEYSDj5qu2zoKgYUY0=)
                          26: PvnYj70vWIEtSZ4-TLAUROqH-mQ.roa (hash: C32arwbPmPblT8QjzIktSbeBph+9mftQGk8FxNUGy80=)
                          27: QikrQfPZcEuLXxNM9QRFuZqmwX8.roa (hash: GTgZFx+2E4BxRZ/cmNVpT3kb9A3tv7hfyB2pD3LWoag=)
                          28: SvD0YrflKZtrg8ajsXRYlZShlIQ.roa (hash: BCIwz2vY2jLgYS7z7fY4QU/HwErNwcVpkosUz//VdPM=)
                          29: TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa (hash: T0MoII0bHUQVy4/EIU0McUWW03OrtpRdQcw2oGJ90xw=)
                          30: UEYPaIJk57iANe2fXLEYrDHuBW8.roa (hash: vVCdcBaBVIiJ2UFubFblYlCEyga/mYmujS2FPpjWlf8=)
                          31: YFWVotFPF4rkids3QA341Z9fyK4.roa (hash: YvO+2nszTC3s3sqVEtLJ1xWwZVIVv6VgaQF2qtreTRU=)
                          32: _1gr71TtxKrGYfishpOTTlC-Yf0.roa (hash: LXqUscGa5O5l0ANuPWlp7ZJ5IGrnqrBbr0WR9gp+Xlg=)
                          33: _4lvYeV-ayqEuNBULPPOUTjxshM.roa (hash: NdQ48sOIXtMVgyfAT4cDSjJrP8NrGiMF8pPwF4Fl/SU=)
                          34: _NP7KLLqMrN1MnGQmRzYwY7srro.roa (hash: yxeClpkT7+DTzIpMnMbwVDLNUo4DerckRO6AAThHbTE=)
                          35: evYLEFvdvSvmkbuLm6rh3tZsvKw.roa (hash: 52BX1RaGCebJiVa5KK5DyLHFtzsT7REGB3uiL5jegrk=)
                          36: fNzqJvsbqb0H74heu_eSek8VtgI.roa (hash: o4Nod9JSdaU0RMBqsV3JfhPtjNeHWMXe4pMD3qdsnU8=)
                          37: fiZS1QoC13O9LGwSQ4heL3EDJHg.roa (hash: cQaKdfdjwvkVki02Gk6rg/cphkwoTFB2MpHuxaFIw5A=)
                          38: gRpxZ9tPgRBVp8qdYzJqgIxd2nc.roa (hash: 83UGnHR1vvpOBiG28c0LTC7t5cOOarvTlEqPeJagnUo=)
                          39: itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa (hash: bTfyy1SxJCeaK5coWhOr/Q8NlmQaYiJZYALhNcfWwOg=)
                          40: jDRBJTXqU-l0mlBW0i631wxPZt0.roa (hash: iDEkyKeMVMFwrMXDKR4bsKp+geBFSFoieBkCq1waIkE=)
                          41: n0JluA_q73XjEpq04uEzn-RmsXg.roa (hash: T7rTE9/E8va60SJXGuKikAJZCiAgEmhE8Vpka/OYUOA=)
                          42: nlWr11m2o9h4NC-tzohScSJdOxg.roa (hash: A3Wa8TFObznb1XsDpDHOQf+qyyepDtcekiYNrboghKo=)
                          43: nyh3L1_fO9-0gtPACanLqE-8L6A.roa (hash: 3ZfslFeCGwiSaXAFPs++rXWZnjwclEp0fgAs/mguHtQ=)
                          44: o3jnOci1LEZmio5eVK_R1X59Bc8.roa (hash: ksK9oLd/45fgUjzdDyp1g1OluUQE8WOO6qYAiQZLnSM=)
                          45: oJeAWSGr8gD3PXO9rzjxXx4-ZyA.roa (hash: Jxu2QQjAL0Qu9NCUdoEoeCIiAUW2HRHCWONMi80RPg0=)
                          46: qZFf8xBKOBqZq28f1CYsPIryFfY.roa (hash: c2azlwgqsewfRUN5oiHErUO6fO6RA6AsE7ib1fWtYcI=)
                          47: r7mPdu3mcXlmiFWy88dMv4tMIwE.roa (hash: Tev3vha+XFV/k1WflgN7brJaSUjSziylhI0zOJ7XJU0=)
                          48: rEhdV-K5_kqKt-Sjko69uXNv_XU.roa (hash: FWqZBhMlKrKNHitrAHOC+5iiinw13J+bpXwwdqNUNPc=)
                          49: rxVm1BUHBkaau-7W_r_kxy-XrHo.roa (hash: rLOdOXbVl3h3am2CiNQtp6HBEUOsXCq9yn33g8ZOc4Y=)
                          50: xdzMl2dBjCTNBQybuXYBgSxzduo.roa (hash: JEkwDfKXDwIr/2rXwBPBdk3uqDoMAYK5dQs47lFmsqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:29:62:07:03:21:17:07:14:18:74:b0:90:b6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jun 28 15:01:53 2025 GMT
            Not After : Jun 29 15:01:53 2025 GMT
        Subject: CN=c0dbf99c58d9091af1f94876df36457c8befcb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:77:b5:d6:bd:a5:5b:c0:10:a7:b2:fa:81:
                    df:a6:b5:48:62:0e:9b:f1:28:4e:87:2f:db:17:aa:
                    6c:67:fa:91:5d:57:2c:5e:d2:7e:21:28:13:0e:6d:
                    15:35:6c:66:5d:f7:3d:f1:78:31:05:f8:19:23:a6:
                    ed:1f:2a:b2:76:2b:dc:de:7d:e8:55:3f:6f:c4:1d:
                    9d:9f:71:5b:2c:5f:54:a9:02:2f:d4:09:91:d3:18:
                    22:68:4c:cb:be:bd:c1:6d:53:b3:9a:fd:bb:64:f8:
                    c2:ac:bc:88:cf:30:55:d5:5e:fd:86:17:95:99:49:
                    d5:72:76:8d:a6:e8:ea:c6:d6:1b:8b:f3:0f:79:84:
                    48:2b:92:d0:c2:35:dd:0a:64:fe:b5:4d:91:72:81:
                    53:9e:e7:31:1c:40:7a:ce:43:34:d3:f0:8e:d0:cb:
                    04:f2:2b:a7:bb:ae:75:64:0e:14:e6:f4:b8:4d:e7:
                    94:e1:79:71:f4:0c:77:20:7a:c7:ff:cc:1c:b9:15:
                    c9:d9:42:a9:f5:82:aa:d0:e8:7c:e4:67:11:cc:32:
                    92:0f:7b:c1:a8:65:cb:38:08:a8:75:d7:6d:f6:55:
                    78:fb:f7:32:aa:97:ed:08:d0:49:33:e2:17:f4:75:
                    39:43:df:a0:ae:73:02:3e:83:06:00:77:a3:81:17:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DB:F9:9C:58:D9:09:1A:F1:F9:48:76:DF:36:45:7C:8B:EF:CB:1A
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e4:ba:df:5d:87:e9:e1:b1:23:cc:f5:1e:75:a7:17:11:df:
         35:f1:2a:98:be:b4:c9:29:4f:3b:50:ee:d4:19:35:64:4d:d9:
         15:cd:2e:b7:55:c1:1a:b4:97:e1:7d:b4:57:48:05:16:a4:8f:
         b3:2a:5b:88:64:73:57:f7:31:db:3d:2d:22:3e:a0:0d:68:07:
         44:5e:83:01:ae:c9:67:89:10:4e:ef:bf:e4:2b:69:ad:9c:b2:
         01:36:54:af:0f:1a:e1:79:64:c0:72:2c:f9:3a:a7:f9:27:01:
         db:67:4e:0c:50:02:b5:ac:83:8a:07:84:fe:68:df:73:8c:8c:
         d4:a1:59:ac:de:78:dc:7e:8f:ce:8a:bd:7c:d3:73:af:20:ae:
         9b:9e:0f:98:2c:22:d2:80:18:80:12:27:f6:bd:e1:a5:77:3c:
         55:37:77:bb:b8:31:b7:bc:a7:3a:e1:97:a2:01:5c:7c:8b:69:
         dd:52:ef:0f:e6:fc:6b:7e:2d:0a:64:8d:0a:c4:e4:64:3d:c9:
         e3:44:01:17:b9:ff:0d:ee:db:43:1c:a3:3e:6e:80:e4:79:00:
         6d:dd:b7:fd:e4:9c:ec:3c:d7:e7:97:99:6c:d0:24:15:26:cc:
         80:e9:2b:ea:89:32:ba:97:62:e4:97:0d:d2:95:66:0c:6a:f9:
         c3:fb:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:16 2025 by rpki-client