Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
File:                     SeUWlMTUa0_MAvrnHl25QqcQjkc.mft (raw, json)
Hash identifier:          a4S/wziLFVFBrgybtAqJT628Xyp5oDz2NFWi7o7syA4=
Subject key identifier:   75:0A:A9:28:93:E5:AA:4A:AE:E7:5B:28:15:B6:34:CA:24:5D:86:5A
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       0199FF5956592D7A8B9500A9D05E20019B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
Manifest number:          0D67
Signing time:             Mon 20 Oct 2025 02:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:08 +0000
Files and hashes:         1: 3HEQhcEOqnMp9TI9xIKL4PSt8W0.roa (hash: iiGEol1UAzOhPwjCBYaXalraGFMujqIBu0vrH6mF0zc=)
                          2: 3swNa_xzTgP8AkYyLBBIrCVQ52s.roa (hash: VNJUFw+Fdi5x2QiAhG7d0Y2q6bY9iIUHwJCHJkGc3H0=)
                          3: C-MSWSvm3OTDVE2duSkWpMXE84E.roa (hash: jsquoK9AtIVVBU3de8ie3Hiws/uN+v3GJ1XNGw6m0Ug=)
                          4: E1EO9upkpndaiy50em5ro_t9uCQ.roa (hash: W53zyPHzL2qgdBx33fZuYZhZ3vGH4VL/6IR6RK22H0I=)
                          5: F5FaMdQw0MwW_Giq48Id-E6jckU.roa (hash: ycVnq2WGmWZbnOTWd7xSopOSJK6+V+w/gf05ZEHAXvs=)
                          6: HMWIckkJ0EFmlufS7jeHUcRkiZ8.roa (hash: wrTE46v7Pu8f0rMBrwmsZCyhCkVzBcDkMy40eUdiqdk=)
                          7: KpADruS1t-FrRBApnlZPFJY044I.roa (hash: FblHHhnY1K4Tn2oDFypjs57NiKHIKxo90JdaB5VDVf0=)
                          8: OsTSkCOxPbkeHMOmTXfsLMS7woc.roa (hash: h+L9av8bXXKsaSR0XEI7iXB1ecuqXKwYJToOJUYyey4=)
                          9: RBTW4PghL4MkyXPFUniuXO_ee7U.roa (hash: siS08xEOOq/xj/+MzravRvfNhhyYd/80SZnoXQMbY0g=)
                          10: SeUWlMTUa0_MAvrnHl25QqcQjkc.crl (hash: 17n3/FIZeK4MlCXrPgTLkGSEIPomFn7h0C5BPwUMkMc=)
                          11: SqbLsMut2L9xDSC2SD34PpCt2Uk.roa (hash: wgKwkfj11T9F7d4o0ip1KisIV9MHG61CxHpRs/9XSIY=)
                          12: UNbSCVknEzloxl6RzSrT2hvahlA.roa (hash: 2isaRD3NquVeN9o7LwIF82XNJFZ+UFl0v5L31W0RR3E=)
                          13: UtsKYaswyHuE02j4W0pIwBksKks.roa (hash: lnWCCnMCWE2GH801EFlDSMJ7rs6Gz0jAkG4Ic8Ylwvk=)
                          14: W00xBD91CIN8dXZ5AMvwMZKAj7E.roa (hash: W71k5Ty54QTQy1zzm6WiQ5UlzJ7wtv9wzwbgHIVk10c=)
                          15: W13QjiXrftJDe5I4GISO_dSUsyA.roa (hash: OmpFewYVSiOwmDy2faHYiIokbRxXwpcWFXeLkG/LARo=)
                          16: _AnCIflcegi1TG_Bv_AnfepaFiw.roa (hash: PoWkT5w8reeyRG+Mi9so0rpgs+gcKWwDhCVDFV2nfrQ=)
                          17: _oksDFSuMnMqsIgD2xIpQMBMthw.roa (hash: ea23MjnNhyR9HJDD5DM69trVWqfIriV9YcmUWE06hcg=)
                          18: b1fIABSYNIk_wfTaWhK1GpZPKt8.roa (hash: U82kIgLxTvdUQdNHSx7mK2pMDucJCtaoNPC8koSclMk=)
                          19: bw4Iwz9bOYyFD-xqammwmJHMMa4.roa (hash: pwcE+xi66kROG+p5xDnCwV+2UvenePGTLhmbXAVGhCQ=)
                          20: dqdCGJIarF_fA_bp2OJUuyDhlUg.roa (hash: Fif7RHAQgWJkfwYtkxdDWVHz+hTK4+EvnpSylmo25qI=)
                          21: jKLif-TMdnx4gdmFScothAJ_J_U.roa (hash: z4kaspEVbDiBr+9rZCZXxVGjU31c7C+HRYCRX/q4eCY=)
                          22: jLDEnrnVXx_a1P4WIX-rO9Pvx3w.roa (hash: CIN0Yhj4MQrkUgKXcPNi03Gv1QWAOMr6+p6QpjP/y4A=)
                          23: m-g_tm-dDlPdk0elvgbebHGNY8I.roa (hash: 34AI0Bk8uDAgPTJzmwveFc3JyDgenHOyuvbkfx2CWHI=)
                          24: m96scIfxZMSco2yPWhjNX1cZlYc.roa (hash: D+8dY/xSxjGbWfcbkK3VmbaqQKaGEqWtcYMtYrn+I1w=)
                          25: mGfyRjDRuTgx9y2ssaKRC9CnTI4.roa (hash: 2UqU980bJXZLE+Qc5pA1Y2aKIB/zyZpSy3xDygargsU=)
                          26: vu3gXxNtqWeVKe4P2LSMHjwmk90.roa (hash: yPp4Qt4ICx9Z3QKMiO76AjMJPiTd6H2m5YPVIHkBo1g=)
                          27: xK4UStYZpxl5WaBqzM4Z1Ma_r4g.roa (hash: AtvX/iaf8g7CiAoITeIvKvEKZQTERVLHMHXffA7KZCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:56:59:2d:7a:8b:95:00:a9:d0:5e:20:01:9b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Oct 20 02:01:08 2025 GMT
            Not After : Oct 21 02:01:08 2025 GMT
        Subject: CN=750aa92893e5aa4aaee75b2815b634ca245d865a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:b5:81:3a:f0:1e:5e:60:43:18:e0:4c:72:
                    bd:8d:d2:8f:98:86:e0:96:e1:fe:32:82:c9:26:fd:
                    d5:ec:98:0c:d1:bf:91:95:c3:6c:99:8b:38:8d:44:
                    76:6c:f8:65:27:23:29:fc:87:03:bf:a3:48:93:7f:
                    00:cb:2e:8d:03:ee:cf:21:59:2b:32:0b:84:36:dc:
                    96:80:84:71:c5:d1:9b:3a:07:12:fc:64:c8:a7:fd:
                    a3:1b:27:c0:53:68:fb:8e:04:f8:cb:e5:9d:3f:92:
                    67:bc:5c:5a:6b:6e:8a:68:47:bc:14:72:f3:6a:95:
                    e2:e4:6c:1c:c4:90:e6:f8:70:ee:20:4d:a9:f3:e2:
                    91:04:07:41:0b:ea:cc:7f:75:6c:a6:1a:e2:60:6c:
                    e4:22:d9:7e:27:2c:0f:40:ac:af:88:38:42:11:e6:
                    ea:c0:29:db:f2:f8:25:88:17:48:6a:13:c7:24:19:
                    22:1e:2f:44:96:bf:02:9e:53:e8:8b:4d:dc:ed:0f:
                    14:c3:7b:93:d2:bc:8d:ae:42:44:d6:d4:0e:93:42:
                    94:9f:cd:3a:da:d7:ae:dd:47:0d:9d:46:db:ca:be:
                    4d:ae:35:05:58:2e:e5:51:8c:91:77:40:db:d5:d8:
                    b8:03:2b:ec:7f:54:c0:d7:c5:61:fa:1d:c1:84:24:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0A:A9:28:93:E5:AA:4A:AE:E7:5B:28:15:B6:34:CA:24:5D:86:5A
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:06:7c:6d:b5:c2:3c:d2:f6:97:97:58:15:07:b5:bf:cb:b8:
         3b:25:81:fd:ee:69:4b:d4:c0:a7:b2:68:2c:fa:fa:f2:90:1a:
         a3:b2:f5:0e:ca:0a:a2:76:38:e8:7c:ed:87:10:fb:4c:7a:b7:
         1f:e5:c3:4e:cd:7c:4e:eb:43:85:d1:28:09:90:f2:7d:56:4c:
         28:f3:cb:a2:52:c1:e1:b1:c2:fe:e8:50:f1:6b:95:2a:d1:25:
         34:17:12:33:e5:42:cb:fc:2a:80:19:98:a3:20:6d:c3:ea:bd:
         ef:c4:53:55:87:77:cc:bc:02:16:6c:6a:e6:fc:1b:33:67:70:
         47:96:72:65:c7:05:57:3e:a3:61:bb:53:53:32:62:64:71:40:
         85:20:1f:47:f2:9a:06:ca:94:b4:c9:48:e6:aa:2f:2a:e3:8d:
         b5:39:12:14:10:19:ae:53:d9:84:70:64:93:60:2e:eb:5b:ee:
         c7:d0:92:ee:5d:41:dd:9a:df:8c:50:7f:b3:21:91:a7:86:a9:
         1f:a4:b2:00:ce:b1:aa:67:3f:08:75:dc:fb:a7:dd:68:28:8d:
         4f:6a:1f:65:8f:2e:31:7e:00:4f:b4:0a:4f:e8:a9:d8:0d:41:
         16:63:c3:76:5f:40:e1:e0:d4:03:2e:ba:df:7e:36:76:70:18:
         44:60:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:56:33 2025 by rpki-client