Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File:                     ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier:          Groj5XHQqRjk9BL2h3pHD3YI2f80naNsTA0KmersXL4=
Subject key identifier:   A7:18:83:AF:72:60:EC:F8:BD:44:D3:15:64:10:67:34:8A:03:1C:72
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       0199FDDA5DF53626399628128529816B56B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number:          144F
Signing time:             Sun 19 Oct 2025 19:02:50 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:50 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:50 +0000
Files and hashes:         1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=)
                          2: 3Q5YOz_BI10ve__t3IetYuqaGUA.roa (hash: ZILL1qGL3E11+bnE750yzGJ+LQfFTIO6h5xfluweBiQ=)
                          3: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=)
                          4: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=)
                          5: ONBLhs2q3EPNBcKzjuUXI9NfDXk.roa (hash: 02TEqjTXH1kKdBwPOe/Fj5S0NZ7Hp7pCF4TDcYi4oGk=)
                          6: WW6N0nsC2pVQw7M3pHrlWJbBGXw.roa (hash: XS90Xu8sWkUM1Fcl71wR/SDIDYfHwCcW1jjcYUuog9M=)
                          7: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=)
                          8: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=)
                          9: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: 6XL4WuBSnwaiONtHx2VLusQPkYnE6TlRUeJ7DThLcz0=)
                          10: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=)
                          11: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=)
                          12: hEZZKQJ28Km_5UhH3cpxvYkLLZU.roa (hash: +vaYxbzQEi6M9mf3DyKNxFAOI6eLzddsZf7cVFe2WCE=)
                          13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=)
                          14: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=)
                          15: lUA4Psv--QayOhT_SsZZvDZxilM.roa (hash: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=)
                          16: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=)
                          17: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=)
                          18: obCoVAm0hvxcip-w22N9REpmREE.roa (hash: vGwldn+RYwwVCdhqcXFmCabgvTD/eyh/8OG4WUPwxXM=)
                          19: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:5d:f5:36:26:39:96:28:12:85:29:81:6b:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Oct 19 19:02:50 2025 GMT
            Not After : Oct 20 19:02:50 2025 GMT
        Subject: CN=a71883af7260ecf8bd44d315641067348a031c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:92:73:a8:17:e7:ba:5e:27:c2:b4:a8:90:
                    91:7b:4e:00:2c:11:8d:67:20:12:4b:3b:1d:45:8f:
                    85:e3:c4:97:6e:6e:c4:72:a8:51:9c:05:20:7f:a9:
                    b1:c8:17:b5:84:79:91:1c:b9:33:5f:96:56:29:34:
                    77:ef:c0:73:69:dd:8c:a3:c6:cf:58:d7:e6:86:57:
                    d0:2e:85:71:22:53:ec:56:4d:51:68:17:db:01:f6:
                    f4:1b:34:d1:d4:01:12:f9:00:a1:a3:24:78:fc:bb:
                    dd:cc:26:30:f3:5b:53:e2:d0:7f:5e:1d:0d:3c:ae:
                    61:4f:0f:53:e1:cb:5d:a5:d6:06:7f:3d:51:b1:43:
                    86:d3:c9:79:ac:22:d1:57:4e:67:07:b6:3b:1e:8e:
                    a1:51:63:2e:35:35:49:1c:16:09:bd:ac:94:ba:76:
                    5c:fc:10:49:bc:24:e6:b6:6d:d1:33:a2:b0:67:44:
                    39:6a:96:90:6f:47:4a:97:51:a0:ae:14:a4:8b:a3:
                    8a:7a:97:e5:1b:bb:37:8b:ed:d3:bf:f5:9d:6c:41:
                    48:26:0f:bd:09:fd:88:e0:33:44:53:71:c9:b2:5c:
                    af:f0:98:aa:78:f6:5d:69:d4:b2:41:6f:d0:c4:e1:
                    a1:56:c3:d4:18:9a:3d:75:a5:7c:f3:d8:81:bb:bb:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:18:83:AF:72:60:EC:F8:BD:44:D3:15:64:10:67:34:8A:03:1C:72
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:c6:f3:d0:56:9e:f8:e8:84:a7:45:fc:7e:7e:cb:11:e0:
         f4:6a:2c:ac:e7:33:81:19:b4:d2:f4:8d:17:1a:a1:ea:19:7e:
         bc:ae:ec:e8:c9:ee:0f:4a:ad:14:1b:01:42:4f:ff:bb:12:5d:
         e2:e6:69:1e:ea:7b:4a:9a:69:41:12:85:9f:2d:e9:9c:7f:7a:
         20:7c:22:de:2a:43:98:d8:39:71:84:57:9c:c0:8d:7a:ae:ab:
         21:50:0e:7c:04:a7:3f:5c:e2:a8:90:5f:f7:5c:69:7f:20:03:
         ab:a3:1f:ef:22:5c:f1:df:25:04:78:42:b0:35:74:f6:e9:48:
         cd:56:f8:3d:b6:7e:4b:19:47:87:c9:95:f3:a8:8b:35:bd:ad:
         2b:bb:5b:b8:4f:7a:af:1d:5b:28:a3:f8:be:1a:51:b9:7e:9d:
         60:d1:85:17:97:31:3e:09:6b:2e:dd:b1:b6:6e:c9:2e:31:c2:
         99:43:93:2e:5b:71:c2:04:40:e7:04:df:52:c3:6b:81:40:73:
         19:eb:70:29:39:e4:9c:b9:37:ba:94:c0:c5:3c:fb:c5:5e:d4:
         fd:db:e3:b0:75:35:93:19:65:f7:b0:4f:c2:40:28:77:53:75:
         e9:b7:23:bf:0d:e4:3f:c8:b5:b3:c2:b1:ca:27:29:74:6e:46:
         fa:8c:c2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92l31NiY5ligShSmBa1awMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjUxMDE5MTkwMjUwWhcNMjUxMDIwMTkwMjUwWjAzMTEwLwYDVQQD
EyhhNzE4ODNhZjcyNjBlY2Y4YmQ0NGQzMTU2NDEwNjczNDhhMDMxYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/eSc6gX57peJ8K0qJCRe04ALBGN
ZyASSzsdRY+F48SXbm7EcqhRnAUgf6mxyBe1hHmRHLkzX5ZWKTR378Bzad2Mo8bP
WNfmhlfQLoVxIlPsVk1RaBfbAfb0GzTR1AES+QChoyR4/LvdzCYw81tT4tB/Xh0N
PK5hTw9T4ctdpdYGfz1RsUOG08l5rCLRV05nB7Y7Ho6hUWMuNTVJHBYJvayUunZc
/BBJvCTmtm3RM6KwZ0Q5apaQb0dKl1GgrhSki6OKepflG7s3i+3Tv/WdbEFIJg+9
Cf2I4DNEU3HJslyv8JiqePZdadSyQW/QxOGhVsPUGJo9daV889iBu7ttoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcYg69yYOz4vUTTFWQQZzSKAxxyMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8DG89BW
nvjohKdF/H5+yxHg9GosrOczgRm00vSNFxqh6hl+vK7s6MnuD0qtFBsBQk//uxJd
4uZpHup7SpppQRKFny3pnH96IHwi3ipDmNg5cYRXnMCNeq6rIVAOfASnP1ziqJBf
91xpfyADq6Mf7yJc8d8lBHhCsDV09ulIzVb4PbZ+SxlHh8mV86iLNb2tK7tbuE96
rx1bKKP4vhpRuX6dYNGFF5cxPglrLt2xtm7JLjHCmUOTLltxwgRA5wTfUsNrgUBz
GetwKTnknLk3upTAxTz7xV7U/dvjsHU1kxll97BPwkAod1N16bcjvw3kP8i1s8Kx
yicpdG5G+ozCHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:59 2025 by rpki-client