Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
File:                     2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft (raw, json)
Hash identifier:          4/ox1P2bOwkiVIYHflISXcs9MpFtEvbOM2PU1S/dg7w=
Subject key identifier:   17:E1:7C:AD:8D:3E:9D:11:AB:7B:07:B8:61:A0:D4:9A:C6:4D:AE:FE
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Certificate issuer:       /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial:       0199FDD9F02CAEC8CBA8C8992C328D26A90C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
Manifest number:          1742
Signing time:             Sun 19 Oct 2025 19:02:22 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:22 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:22 +0000
Files and hashes:         1: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (hash: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=)
                          2: 2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl (hash: YiYJBZIjq3Ze7wadhYACXVV2+WTmYchAghdi1tdGC1E=)
                          3: 316HUHVaTURv6QAbNKnjijxsrWc.roa (hash: HxDnqH4jBx7TcLDFfZMb8hD49uNoY7/Hc2rLkshPS+w=)
                          4: 3K-ochPFznfa1R58KADoobpI-vU.roa (hash: E6kgHgglfZ2aDwdeJ1gi09PFBDh7xrY6BBweccfhYH4=)
                          5: 5RKzYYqhL3oKCJRewL9NQlha8YY.roa (hash: G5InDowN/2/xf7/t/A+otG1kRZ2u5R+12fwWnuC2D7w=)
                          6: 7_-XQ5S3ycvuSV1bhy-uYlLyOfc.roa (hash: J+exth7L5Mno2CstKeAk8mFxBC1KnZRyQEI9CbsZFlU=)
                          7: 8Si4NFM1aPw38WaLXshjg45ES-o.roa (hash: UrtM0JR+sNV9ZzpQeGuDk9MuIMLeRxzIPtw2VVcogHo=)
                          8: 98W2p6rqVlQsbZ0blHTEkf-sWSY.roa (hash: 6a0M06Lv1SRNn4VgtI5MyppdIV/qAeomn6q+aHDsUgU=)
                          9: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (hash: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=)
                          10: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (hash: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=)
                          11: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (hash: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=)
                          12: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (hash: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=)
                          13: FQqrVaWrjwGbwrQKWFwL-ALxue0.roa (hash: Y21wnJ7WUmqlJg6zD0OtGsbthsIYepPEi/nFJcnb1eU=)
                          14: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (hash: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=)
                          15: GWp0rSjdfGwKcSPnGUUsbETvzK0.roa (hash: ivBZ83R8nrtLIJ9zF7ql/DDHWzrqf4gsmmhVIUPiq24=)
                          16: H06BbJyNlAXeT08Nn4bdJB41xCo.roa (hash: Wq9Dn1EkBtDctGuDuDoxtK4x2zafJvfVPsDyoqHd97U=)
                          17: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (hash: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=)
                          18: IH4sXcqwnvhlYhYNVGkohML13P0.roa (hash: 0Ria3/AvAd2cgyor17KXSZfKr+gZyyKEPG1CmeJ0Q+Y=)
                          19: ImnbYn4T1Zatwc0Mcgra3ZdwtWE.roa (hash: ybXh4v0CDSKBBEJI/ZcZGuGpcfyqFJev7VApGdh0SHo=)
                          20: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (hash: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=)
                          21: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (hash: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=)
                          22: JDTeB5ypilgeJHkI8PjR-xHlw0s.roa (hash: pnZ6eyfA1+Rq55dO0siEmrlk8zVFvVQdaV2xF71oA9A=)
                          23: NVxN2pUJ5hU7q6WInqRgg2VCXdM.roa (hash: ozIX4QNRWum7wQcyJGvbiqD2NKOdyiaePqT6L3VyYp4=)
                          24: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (hash: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=)
                          25: Qegn6rKTYeBsjc4SCsbtD3nkXIY.roa (hash: L0tLGFkuWFIKwICmtL17UlqlhulwH0ojyrlH6YIUJls=)
                          26: RU50R6pd3nRtCHtX2WkkAw7Llyg.roa (hash: T5CeoexH64aMyXZVlfI39Z1RQIh+lo/XDGBIg41v35o=)
                          27: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (hash: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=)
                          28: TCNerbOYM531qLiSNUelOuHidRg.roa (hash: 3I5Oxm4sYwoSvKFd38TBXes5Lqmb9dRt3fPryeODDKo=)
                          29: TZ8F3d3rBpKHR-R3hXvibc-affE.roa (hash: P6bovpmV8OJZ3kMwUqsF9enDTGE3fNmKJ0/O8Ggq2YQ=)
                          30: Tk5FVyyG3Ot1X3u6aXw2Bhnw9tA.roa (hash: u50CkzZ73g67Lxgry6JDrMhUj3lKi4QNNH7Eh+oX3A4=)
                          31: Tz4xIKHLTZxOJOkgYeHX5p4k0g8.roa (hash: jsyU4csifLHfmNDkk88po/6joQrMVPaK6WEml7DFV/Y=)
                          32: Vaon60b4zHrksDOoYnDPkaadIxU.roa (hash: Uok4nskSinodPJTJYseZVbLMCiqE058+0pxNVBQOsk8=)
                          33: Wk2nk_npfvuDK3d7yb8uiNsWgso.roa (hash: 9uoY0xdAMA71Q732eb1TH1o48fqtG8bkS/TtEFw86ho=)
                          34: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (hash: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=)
                          35: YN7VOdrFA4DxBRGKlzu-DkZKxbw.roa (hash: Tw2n5Zr+e89OCD53j7fn1mis/crLkVVV4D/UZkzzMS8=)
                          36: _rGOoLombdqZx64ZxDfzpaqjTrg.roa (hash: dApbReBYXmLZrFYcB/cQX8tI6KM0yzgxOVCRPmnuLoY=)
                          37: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (hash: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=)
                          38: d_mDouVtydIsXoD1I1kmanE7QdE.roa (hash: LhnrAE1NqO/WJxjZIP+R8AUtoWMyRXFMztjGxmdOIhE=)
                          39: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (hash: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=)
                          40: f64HEsfjUTGHiPx41MWM2cHiM2U.roa (hash: SKqWEKDgMxXFaDkpMUBUvNz346Wmbv49+UVUYcVNV0E=)
                          41: hrNAsHvAiF3wM9SA462bg8ZfLa0.roa (hash: XcVoDsvzCljVGMYXw4itgRqDUp6Fp93GIEi5VbC5J1U=)
                          42: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (hash: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=)
                          43: l9yER5OzV2Zs9rEny9MaVLJSJWE.roa (hash: MTvM1L4a3zSotoCTxk4B550ByU2kERL/BORHSPutlKs=)
                          44: lA75bW7UySj-4Gmj2_AP8C_iuC4.roa (hash: hqdS8xALOEXysaeF5hAmiV4VjJ9G3SYaE0SbHmeuKBQ=)
                          45: lHAwqxpq3Bk851rpL4G6G32KPvo.roa (hash: SsFPabE3LSUH4F0liColQhC10VYQbs8KMbBtFFz0miY=)
                          46: mzknVHY04SbVvkzSjTvkOKHusbU.roa (hash: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=)
                          47: nNCkOfG_W5tXBcfy3ePAuNExXn4.roa (hash: Veh+B3lJzCP5HGhQvtAXGs8A6jPedDNBSb38EUASDkY=)
                          48: nb1DMSWD0ydUqO8eKHUNScXGURk.roa (hash: oTJe1GNauOKZxSYDo+8j4eezAo0VUMGAfZcmWGMZY+g=)
                          49: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (hash: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=)
                          50: rVq_rgyYfxisfZosLTEYOK8012I.roa (hash: qfUc/8CPVfgW5D79b9lNR+Fs0Ehkxd+q6+C5E566Dkg=)
                          51: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (hash: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=)
                          52: t0rBAKgYsiYrjVsbAkJNYYT70fU.roa (hash: 6uujdjjncCVXzPlW8+sHpbZpcMrWi+RVeuO4nmVWv+Q=)
                          53: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (hash: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=)
                          54: vnfpX8VN5wePb4gxJPo9osi4y68.roa (hash: +iO0VZb7J6Ag3acv9aypcQVTaO/2DiP8TP90mQZy6/s=)
                          55: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (hash: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=)
                          56: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (hash: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=)
                          57: xNPqn5SIMHiXARXbHfFajMtKxBg.roa (hash: dT+L/nzcJBKc6owxGRNwZ+MkdqrDMpSlMlQezZcEb8g=)
                          58: yNbbJn707tS_a8Gi9J0Tcx69Bis.roa (hash: /P8YL51lx4GgfeOWwtR+Oj2TBAmtiisgHyAoHeKBLU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:f0:2c:ae:c8:cb:a8:c8:99:2c:32:8d:26:a9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
        Validity
            Not Before: Oct 19 19:02:22 2025 GMT
            Not After : Oct 20 19:02:22 2025 GMT
        Subject: CN=17e17cad8d3e9d11ab7b07b861a0d49ac64daefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:0a:04:4b:81:e1:a3:d6:3f:db:72:17:45:
                    ea:99:40:b5:58:3a:06:8f:a4:5e:8d:08:38:6b:33:
                    b2:ad:dc:da:58:57:ff:71:25:02:ca:ba:ca:11:1a:
                    c6:73:df:93:65:66:50:fa:10:d7:2f:5a:c7:9e:40:
                    2b:ef:43:80:c2:fd:45:29:5e:9b:30:0c:1d:ca:f1:
                    f1:71:c1:08:5c:fe:a9:a9:f3:a7:f1:38:cd:4e:cf:
                    8c:14:24:e7:9f:cf:47:13:18:95:2c:5e:dc:91:b1:
                    4a:c7:7a:04:d1:39:b0:19:d5:e7:11:c1:2d:bf:42:
                    c8:e8:14:ec:86:fa:4c:a7:0f:30:05:52:a2:32:88:
                    20:06:12:af:33:d3:ce:b9:ce:cb:12:ea:9b:fb:f1:
                    7e:85:0e:a5:0b:ad:b2:39:31:ae:e8:37:56:ef:19:
                    c1:ac:15:a7:7e:22:19:7d:6c:0d:e8:56:02:a7:c7:
                    9d:37:26:20:54:43:13:20:0f:80:75:66:d3:32:bc:
                    73:44:db:20:a4:02:47:ad:98:4d:38:5c:0d:57:16:
                    dd:a8:4f:5d:4b:b3:16:5a:05:27:ca:bf:24:29:75:
                    39:ba:6d:4e:10:19:2f:39:ab:84:41:dd:39:12:26:
                    4e:58:1f:82:31:e3:e7:b1:52:db:28:8b:ec:e3:78:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:7C:AD:8D:3E:9D:11:AB:7B:07:B8:61:A0:D4:9A:C6:4D:AE:FE
            X509v3 Authority Key Identifier:
                keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:04:1b:2b:60:ec:41:3c:49:79:2d:26:30:80:b1:05:d3:85:
         c9:b0:58:50:c8:1d:2f:9d:2f:db:58:20:42:55:9e:3b:6f:6a:
         e7:2f:81:b0:38:42:ca:f1:f2:f7:42:87:b2:f9:68:fc:04:48:
         18:d1:79:91:0c:fc:84:2d:8f:b9:f1:d8:67:25:4f:04:0d:ea:
         9b:a5:c9:15:d7:3d:40:29:27:b5:ad:01:c8:08:a8:a1:fa:73:
         e2:dc:a0:df:2b:67:0e:19:0a:15:e8:fd:3d:e3:7a:db:8b:5e:
         7f:9b:43:d5:3b:cf:bb:75:c1:c7:7b:c1:cb:a9:0c:94:79:1c:
         35:e3:9e:37:3e:1b:36:38:12:6e:74:b8:a9:61:96:e6:67:ab:
         31:38:74:32:fe:4a:89:bb:99:af:6f:f6:c7:b1:cb:c7:9b:44:
         3d:a6:25:4e:ac:83:b2:40:19:d2:f3:67:4a:e2:d8:4f:9a:09:
         62:cf:6a:24:17:ad:5d:a4:0f:34:76:18:23:d9:74:02:fa:d2:
         01:8b:5f:f7:d2:ed:64:32:80:16:53:82:22:49:97:33:70:95:
         84:e7:0f:8a:57:32:01:e2:4f:24:05:e0:4e:29:fe:d4:93:c2:
         92:73:1a:f7:2d:c9:c9:f3:2a:26:5f:0a:46:19:54:cb:b6:1e:
         fa:6b:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:52 2025 by rpki-client