Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          nqi1bVId66G9z71huBmLTFaISZn92dAj35SQh1PIaCQ=
Subject key identifier:   E1:BF:27:77:06:CF:EE:59:BA:F9:CC:38:2D:92:BC:A2:C2:41:F1:C0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       0199FB0F1656290EACCBA24FDA356EFE8679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          17A2
Signing time:             Sun 19 Oct 2025 06:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:33 +0000
Files and hashes:         1: 190LxKM5s1ZchW-1QFPWBCXJIzw.roa (hash: i2UBTnCRLZfI59Lc+8ptifYqjvgfC+5cvDv+xCq8UE4=)
                          2: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          3: 2qlsylzgqXhlEayXE9wkcK5qmug.roa (hash: uhfOGYd80G0548JpMljPb9TBOvg2gxGmo4JHGRdJP94=)
                          4: 45tL-NSBHodaksRDpK2BnTL6Pg0.roa (hash: 9aD/cGsEDm3tuWSuuFsHXgYn2a7J4uwCri2o7lDx6TU=)
                          5: 4G_hLtAbDUZ70PLgQlRhmGd1eNc.roa (hash: wmpDbVETxoLeblIgd50u7tjYlbJnrcIWiWDK1Lpalb4=)
                          6: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          7: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          8: 9xAImfJODTs2zsrACx9eeEsMp4M.roa (hash: gSkZqCfSwfOJL0b2bYeZUGWxUdiYjnYulJENp5XdAs8=)
                          9: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          10: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          11: BRc1wLBXX2wQNzWXVlrbs7NYzz4.roa (hash: boDsQDSUU/u5nFgGrYRYmA2sSdeyKeVOtKcDLDgtg6w=)
                          12: C2GrQzBO3vl5T105EzYHvBqFqSY.roa (hash: JsqpwBb8513EA82J6T2Eh579nv6JIkErIIaCpTYKtxo=)
                          13: C5neA90kjVHnDPfO-djUn4i2zAA.roa (hash: 6roTXs09K6iOJG+sNAF1RcACFRNOxhrWD6dzp7AoLnY=)
                          14: E5lP18ybHMTHTnPo0M0LIgPaYUo.roa (hash: YCZh/ekLx0cpTY4qWcdCoc57O+gA2agdNfcO7UjD4OY=)
                          15: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          16: Fl_ha6ZRrcj7LNabFfiIvy4PXBQ.roa (hash: rGTu/eBvREBIS2YrmRECHoO4Fq6M0d9n2xt5c5qKdlE=)
                          17: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          18: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (hash: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=)
                          19: OkV10ej4i1aWkWynfHxAfefl68k.roa (hash: 5dmrYmVBIjHF14pmICYPZDuHTrGireyhaa0Od9fQBWk=)
                          20: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          21: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          22: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          23: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          24: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          25: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          26: _0v8B3PHRVD7yYQcASHCL5uWyOY.roa (hash: pu+m41bbVsvu3wkqU3+YbKOTAB8KfYUq9S8Plxm7sds=)
                          27: _6fk9u3GMpi14RhY0Vpqi7RoUuY.roa (hash: 8J+04Jyy5QLdgaXHvTT5XyET/UweE7ZvDXWvk66tOH0=)
                          28: aICCzElnzJknym2DSGk7d2QgTsw.roa (hash: yaKmTcO06l/sp1/gt2jOhWZ8bbVOixF2S4MAOqEgIOQ=)
                          29: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          30: dY03HFRy1RllCenKPrieGUzQXmc.roa (hash: Whvf/7UBVmwJMgZJVFUghC//K+ikEuNaWx2rK86SYdI=)
                          31: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          32: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          33: gs8xSDnEf5s-t6tRm1MXSkj8uJo.roa (hash: 04Lr7IgwBqz8hk2OcpuxvWUwYYvADfjHLZqerwnsaPQ=)
                          34: hBq6DPEIeY8Yhu3iLZgYcqX86wc.roa (hash: G+wF6iZXun53udNk6xg5sIb/Bo1cfj+jezlEcYlaiX8=)
                          35: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          36: mMuNhDHUSaN-3W7qaO6Hm8u40DA.roa (hash: RFI70cIBANA/kk+2ZsSGD/UPxHmrw25D/iyiJJMSmG8=)
                          37: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          38: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          39: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          40: pD9YdY0kZIyV4tT8Grm6rpRjhMg.roa (hash: iWFl3KeSrkOlRwk9579ovrOA2IUp/1Q3ethXhdT5Cjw=)
                          41: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          42: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          43: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          44: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          45: vkMtx0iH2ditYOsc7bVpRJWZ70Q.roa (hash: 7KAQHgMSezL1YcfEWojGi9XjUX3sRvjuf26EdqtBLpU=)
                          46: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          47: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          48: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: K8RMJFrQxqLDo7r3i6yRpcRalrZPZ40hb+pjvBqGsBE=)
                          49: zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa (hash: /TspGM70/yRXNVHKhWj5smL/PZUzQoqRLk1Lpb2lDmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 01:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:16:56:29:0e:ac:cb:a2:4f:da:35:6e:fe:86:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Oct 19 06:01:33 2025 GMT
            Not After : Oct 20 06:01:33 2025 GMT
        Subject: CN=e1bf277706cfee59baf9cc382d92bca2c241f1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:75:82:ac:4f:08:53:ae:17:ca:99:83:b4:
                    3a:ea:01:0b:df:83:33:ae:54:00:d8:50:dc:e4:5e:
                    0d:37:49:9d:89:57:2a:ae:8e:00:61:69:f1:f5:a2:
                    eb:c1:4c:2c:73:8a:28:de:20:a7:fd:ae:a5:4b:ca:
                    75:9e:f5:c8:b6:b8:8c:61:ff:c8:a7:4e:66:4a:f6:
                    50:eb:0a:34:cf:3f:97:ef:aa:d9:c9:13:0d:65:00:
                    35:0d:a4:d7:e7:8c:51:9c:a7:58:9a:79:f9:bb:28:
                    64:3b:d1:aa:3c:88:6f:b5:0d:80:61:b5:e9:83:bd:
                    c2:fa:5a:06:b4:b4:78:5d:aa:d3:68:63:67:3d:7d:
                    3c:49:17:f3:b7:25:a8:6d:55:e8:a4:b3:61:60:b3:
                    e7:36:b4:5e:6b:7c:7d:fb:4d:f6:d6:fa:5b:02:0b:
                    af:01:61:c5:c9:9c:1b:73:53:be:b4:df:a2:70:df:
                    1e:28:dd:40:45:a7:f9:46:99:09:4d:6e:6e:59:cf:
                    e8:58:43:a4:53:c1:2b:6e:df:74:2d:d2:84:18:ae:
                    14:35:a9:78:d1:b2:81:b5:35:bf:5c:f4:8f:fa:28:
                    15:1e:ba:81:84:33:01:77:6e:32:5e:b9:ae:64:05:
                    89:98:8f:5a:65:53:8d:3a:b1:25:0d:e2:5a:ef:ff:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:27:77:06:CF:EE:59:BA:F9:CC:38:2D:92:BC:A2:C2:41:F1:C0
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:86:cb:1f:3d:00:e3:85:aa:1e:38:1f:51:25:2f:df:88:
         9b:21:e8:00:e0:75:5f:7d:20:d9:e4:b1:23:14:de:63:69:33:
         bf:f7:80:af:98:3f:e2:6e:56:54:da:e7:52:82:31:29:87:06:
         31:5c:42:43:f7:12:5b:0a:18:b8:f6:2c:ff:07:77:48:87:5b:
         7e:46:6e:08:f4:a1:f2:93:39:3f:c4:e4:05:a2:da:45:d4:e0:
         1b:73:39:81:f6:d1:7d:8d:f4:da:62:ff:9b:c9:34:8b:0e:81:
         da:02:a3:b9:fb:69:f3:73:8f:7e:cd:41:e0:b2:75:87:e8:59:
         3b:74:d7:8e:22:bd:b7:1f:5d:78:56:79:82:86:cb:ea:aa:9a:
         83:3d:d9:7f:09:9e:e1:f7:c9:b9:92:a6:1d:fd:cf:c1:1b:cd:
         a5:29:43:be:31:77:ff:0e:17:08:a6:ca:ee:f7:18:c5:0f:74:
         f6:2b:ea:9a:f8:95:c4:e5:4e:c5:ed:83:6f:d0:ef:30:b0:dd:
         c1:29:72:26:ba:56:54:d1:50:28:84:7a:d1:8f:9b:ea:eb:55:
         6d:8c:c9:1d:0f:e3:a4:f3:59:78:ff:2d:35:b9:71:62:eb:d7:
         10:cc:15:73:84:d5:4b:db:0e:66:ca:f9:69:df:c1:8d:0c:4b:
         0d:ca:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----