Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          iwL22oaUmMeV+8oh9tpiJwmcM7AfzEJdiJOnYTZWTUU=
Subject key identifier:   52:6B:1B:E7:54:A2:B8:46:4A:43:8E:CB:59:99:23:B2:CC:DB:CE:17
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       0197B6694CEF8B0E98F94734E0F9C4C02755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          160C
Signing time:             Sat 28 Jun 2025 12:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 12:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 12:00:43 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 1kiFOzSUYK3pcMeNGPSk3j4Tzsg.roa (hash: vMMj9ST74YlPNcRgppnnEZwNxejYhCE+D5UgkKQqDFA=)
                          3: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: qu9bx0IG4UKZyPDCgJ+GfMx6toUbOaBDNTdSLl7MCBQ=)
                          4: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          5: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          6: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          7: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          8: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          9: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          10: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          11: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          12: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          13: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          14: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          15: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          16: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          17: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          18: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          19: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          20: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          21: Ll8a4av9F_WCc02Z_m7Z6LrCBIs.roa (hash: j0lX+Ygmw9aduyhN4QitQlABcsH+/GAy8ttwJsSIeFE=)
                          22: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          23: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          24: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          25: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          26: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          27: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          28: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          29: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          30: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          31: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          32: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          33: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          34: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          35: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          36: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          37: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          38: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (hash: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=)
                          39: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          40: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          41: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          42: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          43: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          44: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          45: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          46: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          47: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          48: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          49: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          50: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          51: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          52: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          53: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          54: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          55: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
                          56: ylEgvmf2Edwqr6JMpW-xH5LCR7c.roa (hash: BK+TL29JkN+DVc/LG21brTqrMPOr6JiJ4Q+YvOP4Kes=)
                          57: zZ3LXASmvnU-tG5IFxAXhcytpeY.roa (hash: vauvWlngvw9B9FLlnT3JWLQjDLxvQzC3J5a7IlzCo4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:69:4c:ef:8b:0e:98:f9:47:34:e0:f9:c4:c0:27:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Jun 28 12:00:43 2025 GMT
            Not After : Jun 29 12:00:43 2025 GMT
        Subject: CN=526b1be754a2b8464a438ecb599923b2ccdbce17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:11:4e:a8:20:25:e0:30:4f:93:ce:8a:4e:
                    4e:04:39:16:2a:41:8c:2e:e3:3c:63:65:1d:13:be:
                    22:83:c4:9d:2b:55:b6:d4:a8:a2:a3:b0:0e:5a:50:
                    c3:4e:7b:91:77:70:2e:ea:0c:b3:80:91:59:2c:81:
                    e4:d1:f3:0a:fe:70:a8:75:d1:a5:5c:40:10:13:45:
                    a2:b0:9f:fd:a4:8c:16:9d:d6:49:6c:fb:e9:f0:5d:
                    74:c2:31:29:b9:9a:b3:11:aa:92:12:8f:32:0d:bb:
                    46:da:6c:97:47:e3:23:9a:bd:f3:84:53:90:22:b2:
                    14:25:eb:0b:42:f4:f5:8a:e8:c3:60:98:cf:3b:11:
                    8e:74:93:b7:b0:5a:90:69:7c:43:1b:b8:c7:cf:4a:
                    03:93:78:30:bd:be:c9:bd:b5:46:b2:16:45:ea:7a:
                    e2:7e:da:92:84:50:4c:96:6c:65:d6:c9:4b:12:f1:
                    ff:12:f9:48:a6:84:e5:2f:d1:11:4c:f9:1c:37:26:
                    4a:c5:ef:e6:6c:11:d7:9a:e1:68:7a:2b:de:e7:c9:
                    25:7b:62:2a:4f:22:dc:f9:b1:f2:4a:e0:31:27:b6:
                    e8:10:47:a2:1e:a8:df:f7:d0:54:19:ce:44:d3:a8:
                    05:08:c2:a1:35:2f:d8:29:79:0b:65:a7:d5:7a:3a:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6B:1B:E7:54:A2:B8:46:4A:43:8E:CB:59:99:23:B2:CC:DB:CE:17
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:d6:3e:db:c2:7e:89:85:2b:02:4f:7f:19:d1:81:81:13:
         6f:01:19:b3:8d:09:da:3b:2d:cc:b6:05:0a:b7:96:88:a9:fd:
         a5:67:8a:47:ee:8f:52:df:de:2d:90:c3:2b:0b:2b:85:2e:21:
         da:ca:0f:0e:62:d0:c7:6e:2b:da:93:fa:78:22:84:19:57:1e:
         3f:71:51:f2:b4:53:79:78:4f:3e:d9:52:0c:4e:8c:5a:dd:00:
         52:13:06:a4:fb:bd:a1:0f:73:b1:f0:87:f7:a8:eb:be:42:c9:
         ca:9b:50:6f:d4:99:24:89:da:df:d4:f7:e0:e9:6c:17:56:af:
         0a:3f:1a:4c:f1:55:f6:7a:94:08:70:78:4a:86:a3:79:db:ef:
         30:21:da:a9:17:fa:64:6c:13:39:d4:db:54:19:73:49:c8:76:
         03:6f:ca:16:37:d8:30:a9:69:94:1a:18:56:70:d3:e3:0f:b6:
         ae:4e:dd:74:2a:42:81:e7:97:4e:98:d9:61:55:b3:fc:86:64:
         19:80:3f:bd:d5:6e:9c:d0:ce:d9:9c:a1:9b:bc:02:40:12:e8:
         a7:a5:3c:64:4a:a0:0d:de:59:27:24:1a:3c:f9:47:b6:90:a7:
         bd:f9:b7:2c:68:df:23:f4:4f:c8:85:47:89:6a:0a:c2:4a:16:
         9d:77:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----