Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          f7s6kJaKgNBfdheXn0www42sCCR6LkoRxBeTme6kVSM=
Subject key identifier:   59:43:93:C2:8F:85:3F:1E:E9:7C:28:C1:0D:27:14:28:EC:85:47:3E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       0199FC214BEFC5BD0FF95278637E809C8AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          1708
Signing time:             Sun 19 Oct 2025 11:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:04 +0000
Files and hashes:         1: 1--cUq91Mit5QH2cwWSOxBevK3nA.roa (hash: AeVg1wzE8EyDayqX6dUPTOAPPGnggkU3AZQPwR7KISU=)
                          2: 1-wSj_jNbSFZNPKzrs0H7fMlUYPs.roa (hash: QwucWuCpsfVGmeIL4+WbPwDASjNtyxA0uvqhnVE0kXk=)
                          3: 1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa (hash: 1mq5wz/1iFM0nRuaGbWeQP9cbSRi6hrmjA/870kNVwc=)
                          4: 1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa (hash: G0Gifm987y56WK0jOJQu1XmPLu2HpPxSaSdoMhrNoMs=)
                          5: 43W-eGhoB0OzAzZeV-7lIQQDIOo.roa (hash: Fa6j80QC7xY8XwzuoZlxIB/I65MycNffdEY3vuz4Q0w=)
                          6: 4cQzXFxUGlGjBPSq0EGUuwlerqM.roa (hash: RUnB3qpCxRiKVWfppqkGkTOE3BYzOLpwyJhoqNuHmnM=)
                          7: 7y1PMFZ77TvwERIOq36v9qt_I0g.roa (hash: XyYA5RSKyGwMjTqBAMbzkSTfG/qYbYS13qe9sSm88Pg=)
                          8: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: NlgCtENffn9Y25zNWVL1k1xcI44Z1AF6uBkd+AxhGec=)
                          9: 9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa (hash: E45sd3llDs2pTTLi6LJkzrRBxW0QqdLu4AwwGiPWU8o=)
                          10: Bi6ckjMzIjswtGZpm48D-Wo_OB4.roa (hash: an659zUeBPl2S8rcFc9akGr14egOC85nfKG/rUkJZjU=)
                          11: F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa (hash: 7lkthzwPyq0Nlj6C7w8YmFjCDc9WUOXo1l3objgvoAw=)
                          12: GBjsCsDFhAmCrDosbrIyM2oi_k8.roa (hash: QxxcHsFFWLY2BHIJuYq1eLGTUZDCy2Zq1QP773WJCgc=)
                          13: GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa (hash: bhQ1Ond9uTsWLPhHEPCKrqbxdo9J0XGoFGPdOwUnfm0=)
                          14: GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa (hash: UkvxRNX70aIvJXPzKAnXBIMmTpv2f/Y+Dlu3mnma0Ac=)
                          15: HJd9P_PlKCAbara3DxGKUKKnE7c.roa (hash: eUsrGFzXfQW/Dn1ODD605ExEOtBlWFeJQugMdp5/EgU=)
                          16: K64ZDclpadQbVzMQRV2i46uDmJo.roa (hash: tpnZn4EYuI03Em/aELkelIAivjX/DuvgaCfyeISarg8=)
                          17: MhuwQoYW20TMcq1PdgNXXiGR7XU.roa (hash: cEjZXJsQfHnY+2fZ9qeslTeSc6LEnyffbV0K1USSZek=)
                          18: OOj6UEfy7tJhVvIZwv67cVkbCsw.roa (hash: bFAFslFKUorfRmuJkRc7/SiL4ZsIaQRH0zH9zHF2pgI=)
                          19: OqF2eyJ9Nah0S4xGSjJYn_h3cTU.roa (hash: UaxiQV187imUDaob7M2RSZknrvaHjuJ3BY11Fvhjz2E=)
                          20: P0SW_klNDbhNIIK8YKXaPuabqTU.roa (hash: 5FirmEmGhJEAP0DJn1h14sCEI/dbN7Gdq6ZuKutBsJU=)
                          21: R2zForXg41Xz6ZiOvoYxYCONTtc.roa (hash: w6iKooFVAmcB+szcwr+F/c/HtbTWkbLs+qqPbY5EcAA=)
                          22: Uy3DNd8cAhKYVPioxN7PoymKedw.roa (hash: L7X4DMP3u2TfIijoOqDl6Vi5RU6BP6p/8G5SNNVhw+I=)
                          23: WWSW__MVqK6dx_k6tsS9bRZ--CI.roa (hash: 0n+w/A4d8z6b0u844BV3PGZBGD8lEvEB6AFFqVVHQn8=)
                          24: WeCt8pup8wDWF42xeyTZdR7k2GQ.roa (hash: EDkq8tNxM3yn5LOawEnrqC45Ne8Yoo76GfpxJFb6xWI=)
                          25: WiON6CdHeAs54FIwJq22Q-CMJYQ.roa (hash: 4t1adRl+qe2aNtYrRhoxvc66aXOa5Y+iHAm8U5xH9j8=)
                          26: Wkh7uioWgBi7hYTbHKGwmYv2b2o.roa (hash: y1Qn0vF6vc29BjpVGN0maHU654epEzVd2ncJ5AsSc8s=)
                          27: WkmV1C3n1xckvk24Dg23f_uuw-Y.roa (hash: 4b9CQ+UDGsSD1Yt4Z/0/FrLqdoM9ExyMXp455k6OTOo=)
                          28: YTrCa9l5vP3dQlEy3g4e738RGCc.roa (hash: 7QjYk31Rz2LLsB0LYuegGouh51+CsDDyqSFe7Sy9+c8=)
                          29: _F7ev2MBBxNUWA2zbKywRx1epIs.roa (hash: ab/PBGhlf8KsdKFVWCStEJO1EAqxAF8tNS/JPsSqUvk=)
                          30: bApeGU9pDTxTCcxiN5J5ipRkqMI.roa (hash: NZoPIqG6nJxYq38KIr9pSvoBY19L9DXRzBM19WHpf7I=)
                          31: bo414DK33mQjPnsi2XO_OhuOXVU.roa (hash: DFhqXQ1ALcgUKGfkab9Ecq2SNxSXtHhgzid0rw+LjqA=)
                          32: cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa (hash: Tm+oi/lD++p4PhyCp4bPhVckvck4FHBGPjkqfjDYDXk=)
                          33: ec458CzjY63_tDvq0835iuvNeqM.roa (hash: G8uWZDny6okXGyK8fXhTSuZAQxB4Or51R+hkoXknGf0=)
                          34: ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa (hash: po9RSn1vnUJn8LraWDgTGQkIzqjsRElh5uulYlg6a2I=)
                          35: f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa (hash: 2GF/hcmuZptIjGpBhlhl/n2eM7lvmTB8GpajvQTfO1o=)
                          36: gS472YuNqbJechBg2iBckT3KoLM.roa (hash: FBUuQCDwaticAhPspr/z6ZENec/pu4iMj4JBkdQRnVA=)
                          37: mWetSYOn1BkhZCQeBuy0aNAtp2k.roa (hash: 7QsWLfC1FbX4IQpj2Fc+FdTBylJTVc8Q6Q3mzopMiwY=)
                          38: oMsbWqKig1Jz9KhQZB1o-hLbsjQ.roa (hash: OocXoaK/KzmHtgXJpn4l6UhsAXqtzLQU0zedQi9+930=)
                          39: pSNhVcz4ozKQCN-LCUrqu4lNRzQ.roa (hash: J/f/1amfAJOlGnKb0ytkwZwxYnhSDPmLNiJU63xKnhY=)
                          40: pW41aiqhh4TGOa0SfOJoWwzIC9A.roa (hash: NOVcfPSERPAJVKGKnsOL5db9Ocxsd5SZKJKLS2fsK1w=)
                          41: qPU2_LO_IOLwIw_5UdC9HILGfrU.roa (hash: zovHlBAPS+CTTK/Pgho2T3I/C6ghppduwnAgw0j/qyQ=)
                          42: sIfXnkT6_MznqZrO1Lae926CR50.roa (hash: NCRNDrTiw+6us5+S0PADTvnopFARdQ2lLkezVhE/00s=)
                          43: s_gtffJAdOdCOTF8JrwlspZV70Q.roa (hash: EE3zvO+17D2lS+ma9Jbmozdr5I2JwhR0u6QEkn1ojIA=)
                          44: t1xRr6zeiMtxYaGtbe-W72-oQS0.roa (hash: OyceZDHizIoFdT4fRa8zkuIKpKmh7T2n1xLe+VKJ1cQ=)
                          45: tP6196eoGxZ8sJXtGB2BxyyaQkc.roa (hash: Yg1BpZOhleklDTz62pqYALAo96J1wsRiT1axu+WPIZ0=)
                          46: udEkF_6Cl582j3MhipXtkqh60QA.roa (hash: KGfzfkRSS/8LMCpAd+TJJyVg600JQWb1fQuNDHspP4k=)
                          47: vIJrj75gZXSeJTed1CGI6o-Z5nA.roa (hash: T+o0LnzwgxW5JkSyu3hg3ocAmMnSSVFEWIqTX+78bsI=)
                          48: wuHCt2BHh06Bfff_BuCtG5z_hxY.roa (hash: /M0WlOuHwpu23wrIhCr+n8JWrn1Ijygmq8J4TbPhLBs=)
                          49: yc-gqrsX0Dlayvck585FUtBbJrE.roa (hash: Ks7WQxTUjzq6wrRJQNHa/tYNzP+1BfHd4p2Dur1U0Q0=)
                          50: yugfCm59zW-OCysnWXdRGYmiLPI.roa (hash: dyiopA0j5b5DW/jiTg8DD9JZwVemiDlrthtnV32cs90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:4b:ef:c5:bd:0f:f9:52:78:63:7e:80:9c:8a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Oct 19 11:01:04 2025 GMT
            Not After : Oct 20 11:01:04 2025 GMT
        Subject: CN=594393c28f853f1ee97c28c10d271428ec85473e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:95:1e:56:aa:91:5f:b0:cf:f7:d1:a9:c5:de:
                    c2:22:7d:2f:5c:92:9d:a1:d7:3a:60:7a:90:4a:4d:
                    d5:71:f9:85:7e:fd:c0:c6:83:d5:38:0e:5c:e0:65:
                    ba:a0:e1:2a:2f:ee:20:45:dd:eb:5f:fa:ee:b7:33:
                    d5:bb:a1:78:4a:75:b3:9b:83:f0:46:ea:17:e6:44:
                    86:e1:65:f5:d2:5b:14:b1:a0:89:53:ac:99:21:44:
                    8b:43:9c:ba:89:ea:1b:ee:13:83:d5:6b:78:55:db:
                    bc:25:c4:ae:d3:f8:ef:9a:07:ff:ea:db:e3:20:87:
                    af:69:54:84:1a:03:b0:ed:7c:b6:7e:ea:cc:50:c7:
                    19:77:80:84:49:32:cf:06:f7:e1:09:43:8f:be:e9:
                    6b:63:15:79:d7:7d:9e:5e:66:3c:0c:bf:48:17:05:
                    8a:23:03:36:ad:a2:d4:4f:6c:ea:05:04:87:a1:bd:
                    ed:bc:0f:5b:cd:9c:50:e8:33:67:31:b2:6b:7a:ed:
                    70:d1:16:32:d5:7b:4d:e4:89:f2:ec:5c:63:97:d5:
                    42:29:3a:3f:4d:75:22:93:ce:a0:27:4f:ac:07:2f:
                    0d:63:6b:4e:8d:01:fa:26:09:26:c4:0e:87:9f:28:
                    21:39:8d:dd:b9:26:a8:94:2f:e9:64:40:2d:7d:e7:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:43:93:C2:8F:85:3F:1E:E9:7C:28:C1:0D:27:14:28:EC:85:47:3E
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:70:29:45:a0:b0:d1:a1:ef:a9:d7:d1:57:b8:71:29:7d:
         4e:61:0c:05:7f:ea:c0:6e:d1:8a:47:74:7f:e3:88:b1:df:c3:
         1e:5f:7a:82:22:c2:07:56:8f:61:0b:b5:09:65:e3:59:4d:e1:
         ed:65:15:bd:19:01:a9:e1:07:69:ac:4f:59:7d:ac:68:c5:c1:
         f2:a9:1f:6a:b7:7e:00:01:72:06:68:8d:30:f9:8f:51:c6:01:
         d7:8b:01:c3:3a:35:6c:08:3c:a8:e4:8b:f0:7b:20:e6:99:12:
         4c:42:8a:74:08:45:8f:b2:c4:9a:76:63:50:02:71:a4:05:a8:
         56:b2:3a:e1:8e:93:ce:3e:81:c5:cd:83:4b:a0:02:c5:d8:bb:
         49:19:5d:af:22:c7:ef:ae:59:56:d7:fb:7d:95:05:0e:84:b2:
         04:c8:69:e7:15:a1:12:47:77:e5:b7:cd:51:79:2c:9f:ca:23:
         cb:c7:e4:ca:a7:f7:02:c0:6d:43:24:0a:56:3e:2b:9e:39:3f:
         6c:d7:d7:38:95:d4:9c:6b:a7:e9:59:08:9f:74:41:80:05:42:
         12:2f:3f:03:30:21:52:7a:37:26:d7:36:77:ea:4a:13:ef:21:
         ba:46:24:09:09:ae:96:27:48:b5:6f:b6:ef:ec:76:7c:51:96:
         df:c4:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----