Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
File:                     bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json)
Hash identifier:          u+3w5j1IIk90OXqBt9X2ncnB0AGZHwWgF7l9shYIRjU=
Subject key identifier:   D1:24:65:B1:C0:F3:DB:9A:4F:83:99:10:A4:15:D4:92:93:0E:0A:B5
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Certificate issuer:       /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial:       0199FE7D8F7D5FE907E1FB56B985F0F1F2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
Manifest number:          1793
Signing time:             Sun 19 Oct 2025 22:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:05 +0000
Files and hashes:         1: 0SqzGu12mDjFCGhzy8gHIULllqg.roa (hash: q/N5B3QV4KYlMCuam0x9LaRBbkHiisoMmXCRQH3slec=)
                          2: 1tP6HbCLfJQolIJff1meJLf4HpI.roa (hash: Jqq8+MBFvN33b5MWz0+bttdbA5gDNeaR+L9jbZUqu6E=)
                          3: 6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa (hash: FZsvLuR+Gv0TTTTehRc9baUO0MbvwTK+elKj7u0SA+A=)
                          4: 96ar9m-bGL-MgyLfFLGB37-jKJw.roa (hash: Th24yD0i3kvTxzcR1uGKbyFN4whCra0flQBFeq2u56c=)
                          5: DiJuQ_kG7WvUzBjzRy7osCFiLa0.roa (hash: ZZdF3mZX0+NSB3GzJXDHjRpoKegOrxgL6WcAfOKZIVo=)
                          6: HAicZvITeyleor-6egpXMr7Qpw4.roa (hash: e7xMYcGEuBR+nLo70n2qEgYYrjFEpdzgW97wkgGJRs0=)
                          7: JpuV5HcluBalVoMeoldTQN8DAn8.roa (hash: 0lAWMY1XRCrRPS6rRebMRa+pBrqjVQZeCT1ofxGRwac=)
                          8: K4j3TVsL4gnmFiz9srl9RAcBvvY.roa (hash: wFXlK8wv1SsW+ShrU0Dc1r1iGz+dGvdi49gKuqhv10g=)
                          9: Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa (hash: QyWcllmsgsfma+CXqtcPhBcL7qxdhG/KE09cbC5TDFE=)
                          10: RKnIbaV6UL_9ANWtNqGZZQu3yts.roa (hash: jyYhVILnHC5qMnxjfXjvdXIkELevKM9iXOHgHKyLBGQ=)
                          11: UkwQ5P4K-6hNdEb9fPfnCQvn8Cg.roa (hash: 3YnYR2wJLHM5g/DZxwAp32GCtIPF1553r3/M3FEeh+s=)
                          12: VWCKQLWfEJArBPgjqn1y3QF-M0s.roa (hash: Pvnjz6Z1kdnTY2B8V2B0JwmeucbK2OLPuOj7UzzKFk8=)
                          13: Wxba01eGRfIHYvB1oPclxJQ4A0o.roa (hash: sSvWgZ3B4RqSdjjqU7MubuyAeeaSCSvFOe1guspwNLI=)
                          14: X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa (hash: rQu7xdiT+nmHcmLVj2/49bWlcYuEeveWXCKAsMSKvZs=)
                          15: Z2wUduBacPPn24EXsqlot_meu2w.roa (hash: AEMqV7i2lS/tTsR42US266Qk+OTUkbe36ZW2IKlEfq8=)
                          16: _iGFugOP1tiOEaPOTqAHoHJWFQc.roa (hash: 8esaTWX6gTmO0Sy1HkL3uRDiAwcID3fH35AmBjVF024=)
                          17: _qAPGYVD_1gJgljuSDHPl3Z-xK8.roa (hash: mSFnXP7nj9WP4ezEw+z517FTzVwTAKGKRj7RSpQ5oaI=)
                          18: bZwjzP4gjKnjcT_SMEdSZH0cpus.roa (hash: Ae2HLoEm9GipjYsypJz84+I8/D7aRxBKdkOkxmref+c=)
                          19: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: TcEliasmxKB8KsTMr0mGCpH9QGqKxV7X592lG68bFlw=)
                          20: cUxNuuncWZfarme1cI14yQnQNsg.roa (hash: PonhIqEq+HlR25qBRv/lgkjVfu5bq061Uc+5tUF57MQ=)
                          21: dNq1dUWXo15xfK5j2ALgaL9-X9M.roa (hash: mGCrS09whic27p0ypY0pInzSeZzWepSv0K6RiezO+4c=)
                          22: gXnyfZ7WRzAT1jk1R3OiRc3jdHI.roa (hash: 1IuLazqVse8UR3WGm/7OBA3uGo+uBSbgZ52bY8PWM0E=)
                          23: kwpnT1xPB1VAITNADjwIbPKhMO8.roa (hash: ldLWOu27228oPxmRhkfkGlE8wNUIUYwgvY62aRxFVm8=)
                          24: mazjpEOiTRGyO0IL263f_3CQd1U.roa (hash: MKiEFvVqubL0G1YHY988sj28nrhwlcgHnMA3zXfPogY=)
                          25: n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa (hash: yMYv0kAJ/QEz5fR9SrsfYu/yiezyRaShWj8NQosvLuo=)
                          26: oDvyhw0Z5BzGywcGv613xbb1a04.roa (hash: TggFNJyRaWKwfnI72CJfFi7OzR+7gBXBZSwCOfYLwgM=)
                          27: t7GXfmFs4SvUU1woS_yjKajz9qA.roa (hash: qpOOpZ+Lx6VRGoW3LqmTlKrk3gdbsn1KHmD1554Ouzw=)
                          28: vvKX9oflY3swSadfJukjOxOYg3M.roa (hash: wjPx8ZTmwvSDu1PVRFMY+WcMogZCOGW5+T7IBF9kYL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:8f:7d:5f:e9:07:e1:fb:56:b9:85:f0:f1:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
        Validity
            Not Before: Oct 19 22:01:05 2025 GMT
            Not After : Oct 20 22:01:05 2025 GMT
        Subject: CN=d12465b1c0f3db9a4f839910a415d492930e0ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:77:f7:e8:7a:9c:02:52:1c:eb:13:94:34:
                    30:2a:c4:88:39:6e:75:d2:98:d0:98:e0:f5:76:d0:
                    d4:de:32:7d:01:2b:a1:3f:80:3e:0e:0d:45:e5:b3:
                    76:c6:4a:dd:1c:41:e3:59:d9:0f:59:27:a7:5e:9c:
                    5f:c2:35:2d:99:8f:27:c2:f9:fd:a6:a5:e1:30:31:
                    68:a3:6e:28:5d:ba:c4:45:8b:70:d7:fb:21:74:05:
                    9c:93:62:5a:ce:c0:ed:8f:de:23:c2:9f:5d:ee:01:
                    a2:a8:9f:f2:67:81:23:fe:fe:ff:9b:8c:32:af:50:
                    c5:12:d5:71:25:5b:ec:36:c6:df:f7:02:67:5a:a9:
                    82:0c:1a:d0:f9:ed:e7:b6:2f:05:4b:8a:b7:47:a9:
                    15:bb:57:1b:9f:d4:eb:2e:b7:76:d0:f6:64:d0:d7:
                    ab:7c:31:24:00:12:86:87:e6:67:23:b7:b3:b7:d1:
                    32:01:e4:a6:3d:44:b8:07:08:e5:5b:69:c6:0f:75:
                    ea:3c:5e:42:43:73:c0:38:f9:a6:ed:c4:c0:15:7c:
                    4c:10:23:62:b0:ed:5a:86:1a:6e:b1:ba:5b:99:54:
                    ab:a9:0e:89:79:32:33:be:f5:85:02:8d:13:20:9c:
                    a3:ec:ad:73:60:04:8a:b0:e2:b1:f5:a9:a1:7b:96:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:65:B1:C0:F3:DB:9A:4F:83:99:10:A4:15:D4:92:93:0E:0A:B5
            X509v3 Authority Key Identifier:
                keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:19:db:5c:42:35:6d:fc:50:63:f4:cf:71:b4:be:61:cc:f3:
         41:c5:64:97:74:c4:58:a2:f6:53:95:76:6f:1f:98:0c:8e:f6:
         d7:2d:b7:10:ca:4a:f1:e4:e6:3e:fb:1d:5d:3b:a1:cf:57:4f:
         0b:c9:c1:26:98:08:18:61:1f:b9:68:19:bc:7b:fd:a5:fa:65:
         53:45:9e:64:90:35:1e:0e:b9:c0:b3:c9:d1:d8:80:08:4c:37:
         cd:0d:01:84:61:2a:10:d7:20:ef:ce:ba:17:e6:14:45:4f:66:
         6f:76:77:b2:32:d5:93:15:0d:4f:25:c2:88:cb:8e:a9:df:06:
         56:62:69:19:f0:9e:d5:0e:2a:17:92:23:b5:ea:dd:30:b9:94:
         7d:c9:71:8d:7d:d3:88:0b:4f:fa:05:81:a1:c5:43:0d:00:87:
         ac:ec:15:e2:44:77:67:3d:7d:83:45:29:00:cf:84:a3:03:98:
         8d:c8:76:c7:f7:b6:cb:fb:50:b0:25:6e:e0:e8:7b:bf:1b:d5:
         03:1c:41:15:bc:56:7d:4a:48:12:55:28:3c:00:3d:d9:3c:70:
         4f:05:07:5b:39:c1:51:27:f0:4a:aa:57:92:95:67:f1:6f:b2:
         9e:7c:e4:7c:d7:4c:17:2c:32:33:2c:71:3c:28:0f:88:6b:c1:
         3e:3d:f2:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fY99X+kH4ftWuYXw8fLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjUxMDE5MjIwMTA1WhcNMjUxMDIwMjIwMTA1WjAzMTEwLwYDVQQD
EyhkMTI0NjViMWMwZjNkYjlhNGY4Mzk5MTBhNDE1ZDQ5MjkzMGUwYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUF39+h6nAJSHOsTlDQwKsSIOW51
0pjQmOD1dtDU3jJ9ASuhP4A+Dg1F5bN2xkrdHEHjWdkPWSenXpxfwjUtmY8nwvn9
pqXhMDFoo24oXbrERYtw1/shdAWck2JazsDtj94jwp9d7gGiqJ/yZ4Ej/v7/m4wy
r1DFEtVxJVvsNsbf9wJnWqmCDBrQ+e3nti8FS4q3R6kVu1cbn9TrLrd20PZk0Ner
fDEkABKGh+ZnI7ezt9EyAeSmPUS4BwjlW2nGD3XqPF5CQ3PAOPmm7cTAFXxMECNi
sO1ahhpusbpbmVSrqQ6JeTIzvvWFAo0TIJyj7K1zYASKsOKx9amhe5ZXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEkZbHA89uaT4OZEKQV1JKTDgq1MB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBnbXEI1
bfxQY/TPcbS+YczzQcVkl3TEWKL2U5V2bx+YDI721y23EMpK8eTmPvsdXTuhz1dP
C8nBJpgIGGEfuWgZvHv9pfplU0WeZJA1Hg65wLPJ0diACEw3zQ0BhGEqENcg7866
F+YURU9mb3Z3sjLVkxUNTyXCiMuOqd8GVmJpGfCe1Q4qF5IjterdMLmUfclxjX3T
iAtP+gWBocVDDQCHrOwV4kR3Zz19g0UpAM+EowOYjch2x/e2y/tQsCVu4Oh7vxvV
AxxBFbxWfUpIElUoPAA92TxwTwUHWznBUSfwSqpXkpVn8W+ynnzkfNdMFywyMyxx
PCgPiGvBPj3yrg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:44 2025 by rpki-client