Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          8jQNnNJL91GSyLRi4KcKIldJplEnBzzFdcFZBvFJCys=
Subject key identifier:   BB:7E:6E:90:72:AD:4A:0D:E0:FF:E6:D4:B1:74:64:C0:E8:1D:14:12
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       0199FCFD93FCD9F21043EF69BBD3001C4BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          0F57
Signing time:             Sun 19 Oct 2025 15:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:40 +0000
Files and hashes:         1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=)
                          2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=)
                          3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=)
                          4: 5Gpugl9qvXvWFS1DpStrfULxE_U.roa (hash: KZiaRVIOQGiZVW3R13UM2WDkj8fWfnSB18hjkaWIqbs=)
                          5: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=)
                          6: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=)
                          7: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=)
                          8: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=)
                          9: 8wGardeeEmTMhzRkH2QgILTu5wc.roa (hash: Cdy17idpQ91vblcr1bF/c0NNDsf4K72mGLO3I6JxJgc=)
                          10: 9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa (hash: Nh8bc26byCkv5gvckcokp5euxtQrzclKwBg68owpgwo=)
                          11: AH9IWPeSjn4zPMXrJdOOZZAn9Aw.roa (hash: NZOres5BfCUJDRAZEdwJLZ3pKyCM0qr94CohvGLshJM=)
                          12: EqQMeL6zx5KJ7G-6yvg5oeaml80.roa (hash: +hIYVqIF3npRwqzc+KC9S17raCPIuUeac2Niy0EAaaQ=)
                          13: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=)
                          14: FimbbsHn2jc8IcRxIxxINlHusDo.roa (hash: mRuLXz8In/TStacwqh2TnQ+1/4mCcS9qP3qUXv5e8ZU=)
                          15: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=)
                          16: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=)
                          17: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=)
                          18: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=)
                          19: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=)
                          20: P1Oafitv1-CeGpiS3295bk_jc2k.roa (hash: zdC8sgbH1GuCJi8ZjmFdq/tJ5mm7D49KA4AN5K55yRY=)
                          21: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=)
                          22: SqKkKM173VSrB36qGmxTUJHKCo0.roa (hash: 48hEcJJ8yoYkRJhZ40G+F37LnKZ8jLN3UCGXFfcuN8I=)
                          23: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=)
                          24: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=)
                          25: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=)
                          26: aq6KlZysbDLQ4D4CtmviBNX9mxE.roa (hash: 0VRSVc6dFAyx9rP2hf9m+j4g6HQK7GBOvG2B/JoJUo0=)
                          27: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=)
                          28: eRDw7dF55P7wHv9vfdNgciZiits.roa (hash: MdrDuZVh60KAJjt7uD5dLHrckgAME9PGiYJbxXCoOHg=)
                          29: eb1JGLGjHk8dUCm22Z9YVbWJfI4.roa (hash: 4dk6LdqYI6h3lwSIwoSI/6KhGYHQ7oiRewrKPkKoR8Q=)
                          30: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: a2uKrOb2LavX+XEry8jFazESvLkh448iKjy6rLJnSMo=)
                          31: j0owTqfb6J2K4z_WjLAW8r1RFFM.roa (hash: X5tA8t/omIcY6zR7IcyAjgCB8QTCsQ9yQsR/p/iKCPI=)
                          32: jVzLhR_-fZDDxOR849cM8vp6pzo.roa (hash: j+TN92lkP2jjoQ1DpZsUrV4hygUYX+rjfYRIwGn+Dyc=)
                          33: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=)
                          34: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=)
                          35: kMtd6Q6faSofDN0lp3zD9l3Gdzs.roa (hash: QTK8SH5Xb+6Bx10XX5dvQEh39Vc9s2UGKcmxtby4cBs=)
                          36: moTDq53FtqLZAk0AGJnD6LpxpL4.roa (hash: yDXZvfMOXGpBwTjMd4JFoseeDN5zwWwTjLyIqfnezgg=)
                          37: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=)
                          38: nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa (hash: N7pYS0DZbvPX9AJ7+c9P/Fy4kdTMZIvg/FrKj/0hE8k=)
                          39: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=)
                          40: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=)
                          41: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=)
                          42: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=)
                          43: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=)
                          44: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=)
                          45: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:93:fc:d9:f2:10:43:ef:69:bb:d3:00:1c:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Oct 19 15:01:40 2025 GMT
            Not After : Oct 20 15:01:40 2025 GMT
        Subject: CN=bb7e6e9072ad4a0de0ffe6d4b17464c0e81d1412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:07:bc:96:eb:f7:71:3d:fb:68:1b:18:ab:
                    e2:fa:1c:09:01:fe:15:ed:d5:4e:e8:32:1a:30:4e:
                    5e:8c:8b:ec:54:a1:48:46:58:87:e4:49:89:e5:25:
                    84:3f:92:dc:d9:8e:3b:d0:5e:b1:8e:25:09:c8:77:
                    53:16:f0:f4:7d:a8:8f:4f:25:0f:d8:b0:ba:bd:b8:
                    1b:f7:86:8e:fa:c9:94:2b:07:1c:02:8c:be:fd:00:
                    1f:3d:43:04:83:9e:c2:75:0a:5a:be:60:76:19:a3:
                    d4:a9:8d:64:50:7f:8e:de:e6:8e:94:7b:7a:22:e9:
                    50:a7:3a:c3:60:2e:3a:c5:f0:ea:4e:9e:37:b0:16:
                    8a:b5:97:4d:4e:4c:6f:87:b5:31:7c:5d:7e:00:f0:
                    d6:05:0e:28:1a:23:9d:42:1f:4b:f7:a1:b2:cc:ce:
                    76:d0:12:ac:38:6d:7d:f1:b1:91:ae:8e:f3:41:83:
                    8c:f3:a2:a7:c1:bc:8c:07:31:b5:cc:02:cc:ff:ae:
                    62:30:18:d5:6e:0e:71:60:d8:9d:1b:0c:a1:51:91:
                    f4:5a:97:23:4c:52:90:8c:97:0a:0f:57:9b:55:99:
                    32:ca:a3:cb:b5:aa:b8:52:3a:5c:8c:af:4a:3b:0e:
                    da:c9:84:0c:b7:dc:00:0b:c8:ec:cb:bc:37:00:ee:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:6E:90:72:AD:4A:0D:E0:FF:E6:D4:B1:74:64:C0:E8:1D:14:12
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:f0:1b:8a:bc:f7:6d:6d:88:e1:88:d7:52:79:69:25:4b:
         63:b7:a6:d7:23:0b:75:85:a6:c3:64:c1:d1:0a:0b:b3:a5:8c:
         b8:82:a6:88:53:76:00:a7:3f:0f:9f:00:9d:a2:7a:47:02:89:
         be:74:89:40:45:ed:57:40:f8:09:47:bc:65:0b:b4:85:c4:58:
         ce:50:2d:52:fe:6d:6b:37:2f:89:38:a4:ac:9d:93:5d:79:c3:
         4d:77:b0:07:46:88:16:fa:07:bb:ff:4b:8f:16:fb:4c:b7:82:
         3f:22:be:52:a0:42:d9:74:57:82:11:27:c8:cc:c4:a8:c0:3b:
         ea:de:a6:ab:84:2a:fa:2f:12:43:15:95:2f:6c:a6:c2:a5:ea:
         f7:1a:4e:b9:7a:13:66:53:a5:d4:43:03:b7:4a:1c:5d:4b:45:
         7b:62:ad:3d:d5:cb:fc:06:80:8a:c3:fa:60:26:65:05:41:cc:
         3f:eb:94:57:9e:78:6d:38:c5:79:a7:f8:29:9e:6c:f7:dd:43:
         c3:c5:92:b0:c4:a7:9f:0e:1b:74:54:26:c0:f8:23:f5:52:0a:
         db:a8:c2:85:80:1c:8d:98:8c:b6:eb:f7:16:a5:fb:2c:37:86:
         c4:5c:0c:3a:42:15:36:72:5b:78:b4:84:10:7f:05:30:20:8a:
         c6:83:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----