Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File:                     7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier:          8wvcPHF0MzHn4Dm/6b1vwiZ1rf/v13xETfHiOTQ3dTo=
Subject key identifier:   A4:A5:55:1A:19:4D:26:72:7D:A4:68:B9:0D:45:71:14:76:48:69:91
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       0199FBEB5E3CC430AD9B073E239A8171FDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number:          170B
Signing time:             Sun 19 Oct 2025 10:02:10 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:10 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:10 +0000
Files and hashes:         1: 1LHZTYTL7zXSNbURJx33AGGJ_jU.roa (hash: ZCVf+uWinCAj5Wsl4w3DRqhhemyGlUb1mHPRd1We1lA=)
                          2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: 4o1oAEHrM4JmFj0QXckBtjHrNbiED1huXC/CtCj2zGA=)
                          3: A8PVa9vWSAwziXQoA3-_9FI8Klw.roa (hash: XOf6bTSMS9ukvYg53bvOoLSXUdGWB4/jS9MgEcYi5I0=)
                          4: BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa (hash: EhHoS/FD/TPZMfKWMnkYMzvxXKRlrokVae/pr8W31Fk=)
                          5: DTFLEZbU53RUxpbGCJ7xpH1wiT4.roa (hash: ijyiWI9NCfuTWvoi057x4Mhna5X/5xBxTCKG7ZnDJYo=)
                          6: EhBwV4ETdq9F_mf3TtRo4dLCK7Q.roa (hash: mC580gxvB3KBFmXIOJyzC5FKQdMNmnwwmoA8fTGfjv0=)
                          7: FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa (hash: /mPez/L0Vr+EoPocb/dhaqkaLues0KokkJJZezW2ow8=)
                          8: MI904WmPdL5oiRhP7S6FeaCAFak.roa (hash: scgaazBwq6y+Oc9C9eGo0W4xwalauzkyjxbQ4wwwgLU=)
                          9: PRQLZdsK1DQs1qv6M77wqTY-8gE.roa (hash: kluODCNS9Ohs7cHGK+NxzDBwM4XzNPkjizB01UMfLag=)
                          10: Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa (hash: 0/Vyhy1R/OkAOBC9blQ+o7238jYUr5Pu0HfZsEBCqFA=)
                          11: RaS1Do31InjbQCFGnTA-YqKnIe4.roa (hash: 6QaZ0lK6HEZVx8vJm4K3nfnSTx8TNZ47FuFw64/BpII=)
                          12: beAFyhqFvuFjdXVUNjFjACkebr4.roa (hash: c4PQ30y59KAo6fg6oopq6KruOFK1py7waXQnLyMtf+A=)
                          13: dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa (hash: EC7IY47xBAWr3k7hTs+1NK5U2ipaAGq2Sy+LIMFTR20=)
                          14: kl36awhzfsop7GgELsEJo3vTqlM.roa (hash: i1Y1Q4V1qiBLr3d5jT6i7TzoPO+NTihTUU++FBZ5ox8=)
                          15: lao8bHeqDQtESMGOKFSeFdxwj-s.roa (hash: elImsTbe0o9ywVCBRni5u407KloMMvHe03FwOzsl4Y8=)
                          16: pZSrV2l3WhVw5oetxkzKTuFut08.roa (hash: OVPrfbWkq15CVQU+AkW9e1dfy6vyOgMcPm5QJ7yajMY=)
                          17: qRvHhsUzZRo3GIbvVdtrbB33RHM.roa (hash: I0ja9Wkg3NaDCO4/Iu1ewOYHJdhLcuLZy6a2WJD503M=)
                          18: s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa (hash: TIYNz1LcI70+SJrW3UzaV1tb56c2tS4JWFrmk3Zw1oo=)
                          19: t18vpttXogOnxguJ7pGpoYLrk2Y.roa (hash: w64HKCyG1jpJ4LOOvXrj2J1OE37lFLFqT6Q1/gy6SUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:5e:3c:c4:30:ad:9b:07:3e:23:9a:81:71:fd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Oct 19 10:02:10 2025 GMT
            Not After : Oct 20 10:02:10 2025 GMT
        Subject: CN=a4a5551a194d26727da468b90d45711476486991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:fe:86:40:69:7d:6e:b9:96:33:7e:0f:f1:
                    60:a1:e6:e3:3c:66:71:fd:8c:d5:9e:f3:63:f2:38:
                    77:12:82:11:0e:3b:16:16:35:ff:91:f6:ca:f3:02:
                    95:67:0a:cf:e5:a4:84:7f:2e:3d:cc:c5:d4:2c:b7:
                    b0:35:39:1d:b2:0b:60:04:11:48:97:04:bf:50:2b:
                    9e:8e:e6:a5:79:f4:2a:87:e5:95:3e:7e:16:2f:b4:
                    ab:51:62:e3:c2:af:83:4d:1a:26:d8:71:44:80:e3:
                    5b:fa:4a:63:a8:82:fd:c1:49:3b:b4:f3:ad:24:c5:
                    89:56:a3:76:fb:c5:9c:1a:92:c5:e3:d1:9e:64:8a:
                    c9:42:01:12:31:a3:c7:a0:af:de:ba:79:ee:f1:43:
                    30:d0:8d:a0:a4:f6:28:7b:ef:5e:5b:58:bb:f0:db:
                    fb:6d:b7:52:60:a8:e3:14:34:b7:b6:98:c9:a2:ad:
                    33:84:27:a9:96:8b:d4:e2:d6:b3:42:a4:aa:ab:f0:
                    b5:12:7a:5f:e1:23:8d:a5:f1:e2:77:f6:b5:ad:c0:
                    1a:78:0e:9a:f2:28:ff:69:17:c2:54:33:2b:1c:30:
                    2d:61:52:2c:90:f6:62:a6:03:e0:7c:47:75:2a:a3:
                    8a:7f:bf:09:88:50:fe:60:cb:0d:18:10:79:32:78:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A5:55:1A:19:4D:26:72:7D:A4:68:B9:0D:45:71:14:76:48:69:91
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:36:12:95:07:fb:dc:5a:78:1d:76:b8:03:2c:06:b3:2f:54:
         1f:14:11:99:b6:06:ca:e1:c8:e7:c2:3c:ff:14:0d:82:37:ac:
         06:56:93:ce:c4:8f:84:f0:9e:92:0e:bb:7b:95:93:bf:96:33:
         c6:6b:fe:d2:04:96:6c:5b:48:66:93:06:7e:93:15:89:32:a6:
         3b:77:fc:88:a3:45:d7:0d:27:bf:e7:ef:6a:61:7e:79:cc:ca:
         c3:cc:a5:8b:6f:a9:d2:50:d5:a8:4f:9b:8f:ea:42:d7:e4:d4:
         ea:1b:f9:f9:c1:d9:83:dc:cd:a2:18:4c:3a:66:12:5e:38:e8:
         e1:43:8e:59:fa:6d:dd:03:51:40:d2:28:85:32:bd:6f:8a:7a:
         db:ce:d8:60:71:55:b9:b3:97:6d:c0:e0:4d:34:d4:91:f7:d8:
         54:42:e1:8e:78:dc:5f:da:17:e3:a2:49:87:d7:b2:d4:a4:4b:
         15:c0:f0:5b:37:a5:30:5d:03:12:4c:cc:58:31:33:2b:d9:0a:
         20:7b:58:0b:67:4b:af:5c:67:b0:35:32:92:5b:44:04:7b:dc:
         84:2e:f6:ac:39:59:46:3e:30:38:43:86:37:bb:ca:9f:14:31:
         f3:77:df:b0:d4:eb:9d:e0:b0:bd:47:02:82:0b:0b:d6:b7:e6:
         61:24:bb:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76148xDCtmwc+I5qBcf23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjUxMDE5MTAwMjEwWhcNMjUxMDIwMTAwMjEwWjAzMTEwLwYDVQQD
EyhhNGE1NTUxYTE5NGQyNjcyN2RhNDY4YjkwZDQ1NzExNDc2NDg2OTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8X+hkBpfW65ljN+D/FgoebjPGZx
/YzVnvNj8jh3EoIRDjsWFjX/kfbK8wKVZwrP5aSEfy49zMXULLewNTkdsgtgBBFI
lwS/UCuejualefQqh+WVPn4WL7SrUWLjwq+DTRom2HFEgONb+kpjqIL9wUk7tPOt
JMWJVqN2+8WcGpLF49GeZIrJQgESMaPHoK/eunnu8UMw0I2gpPYoe+9eW1i78Nv7
bbdSYKjjFDS3tpjJoq0zhCeplovU4tazQqSqq/C1Enpf4SONpfHid/a1rcAaeA6a
8ij/aRfCVDMrHDAtYVIskPZipgPgfEd1KqOKf78JiFD+YMsNGBB5MnjcFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSlVRoZTSZyfaRouQ1FcRR2SGmRMB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDYSlQf7
3Fp4HXa4AywGsy9UHxQRmbYGyuHI58I8/xQNgjesBlaTzsSPhPCekg67e5WTv5Yz
xmv+0gSWbFtIZpMGfpMViTKmO3f8iKNF1w0nv+fvamF+eczKw8yli2+p0lDVqE+b
j+pC1+TU6hv5+cHZg9zNohhMOmYSXjjo4UOOWfpt3QNRQNIohTK9b4p6287YYHFV
ubOXbcDgTTTUkffYVELhjnjcX9oX46JJh9ey1KRLFcDwWzelMF0DEkzMWDEzK9kK
IHtYC2dLr1xnsDUykltEBHvchC72rDlZRj4wOEOGN7vKnxQx83ffsNTrneCwvUcC
ggsL1rfmYSS7CQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:36 2025 by rpki-client