Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
File:                     8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft (raw, json)
Hash identifier:          oLP3NFsljzr8Mfh5fL5J1mByaXnf4KIDpjtutV9m+b4=
Subject key identifier:   76:C8:C0:10:AA:33:C4:7F:D4:D2:FA:FF:29:97:6A:D2:76:E8:76:2C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       0199FAD9742EB8E436CCD86545A4062DD7E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
Manifest number:          17A3
Signing time:             Sun 19 Oct 2025 05:02:59 +0000
Manifest this update:     Sun 19 Oct 2025 05:02:59 +0000
Manifest next update:     Mon 20 Oct 2025 05:02:59 +0000
Files and hashes:         1: 3nPG-CM1jjEmXF6XDlPgCgntfQg.roa (hash: Sb1ZHVgBDy5ifPkmmrVoXHsKaHLar+3PzllY+7Vhpsc=)
                          2: 4bHfzm1fuJUKFdFvq81Zj1J7nZ8.roa (hash: cYPYZrlg6fQ6IO6sn0agmIqG6bfzhmVqtlsX+KCd26U=)
                          3: 6wIUZIBC7o21wltDwigx7lx782g.roa (hash: KsD2qATWnlH1JI+kDKAmMhUibT7qf+G28GI+6ncf2G8=)
                          4: 8LiKyExS9yKyeuuVYA6WBSbIbnY.roa (hash: RB436KqkjHTmxSSzIRYR38pGLg6GsnctCMOI8v0caHw=)
                          5: 8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl (hash: VRvD8ExCLs4/1zgXwYnDeucNXnq+aqId2zir4cvmHZU=)
                          6: 9-Y0aWZrtpwstXXpKAi4n__bel4.roa (hash: GAFuW8iAmDtblZCnA4ow69qvWKaKSY18TY/SvaQs/uE=)
                          7: 9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa (hash: r9B2NrNcCL1IbHEMQ2e6VWbR42EMOv3qQYj9s2HeM6o=)
                          8: CBfKytqpvt0tAB2PjVjEtEOii5Y.roa (hash: i27ozZoSMlAv0My0Jipe0pJfvbBrT7aRoob1vtMvHMc=)
                          9: D_OPVvimajNIkdxddRCzEZyxV38.roa (hash: ppja+zul0vsh+mpmNBN6d4rLEwyi9iHDDiod9WKUfTM=)
                          10: EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa (hash: gmkGHYqKxDCqtYbJRJf1ZjpQV4FPkXqmKecKGoXCqA4=)
                          11: FJOFGWXD3VTTT2WV_P0e7Bs_AJg.roa (hash: JEofwhWwyCHUGzPrbMphpJXd78/dFdYz2MuQwQR1yJ8=)
                          12: FKODHcMCbVnlraW8e3pZVW4Jt1U.roa (hash: on2RzMiODWuSmU08fPG+UPwP9nXYGCG9yiUDZkxUHqE=)
                          13: FxTPp2SnMGGNkJ7P2_Ob53WyM0Y.roa (hash: 9G0u1WX4afGR4k9YBZZfwrLJucjXCIiwYEnAJ/9iwVU=)
                          14: G9dZ5r4m371OBTQhAUF2j7baz7Y.roa (hash: B7NSm9g64XLALIBjI5GU/NjrZiQcCShIB/93FWdmyPM=)
                          15: KRkXrh5vqktxAukUYwKEkf01PR4.roa (hash: FhB06ea4PPxnlbrSmHt+yVwcmkem9lE6fs+aLQmy5mg=)
                          16: NQPnV7taNAdtfXxvQ-xhCav1x98.roa (hash: +ogbQ4IOQIb1aVAiBrCGh9Ug+96DExtvEZ8W9Ayjx+g=)
                          17: NYN9WiXGNsG_8fWXEG6QoadN1p0.roa (hash: 83Uc8qCBBqNcIws7dgz2pUX5jtWGpKdkbMsqvj+i/wk=)
                          18: P2ie-v_e1qakswKBkYe8ZLKWxEc.roa (hash: Pu7A+yMkzaTHEk1fItsWmMW/+SCDTYOw3FWfhMAzaK4=)
                          19: QXixlGT-IWBWMs-K9puON_m-KlA.roa (hash: hug41wpb3u0mBV1YR0lUs8u3c04vJ26g36R8fCXqj3A=)
                          20: R62AVX9PSX_LR3e7BXrfaNWa-sk.roa (hash: YzMi859O+qBTTC6gsM6vWbR1mp+LYP/rXN/pWI8xAyk=)
                          21: UKHZWUb2QMnIeyFceeYsJyNs2dE.roa (hash: R5MOCmFKtRGlB3Py2M6AJaYUWsq318YC7IDgmUdJw+k=)
                          22: ZWCXXdfhMKu44PX-A6YEp2UiZPA.roa (hash: QZ9nw6Rb8b+5Ipz/WfFz/MQUV3NqW6gj+wcTZJ283/A=)
                          23: bbrVRJCo_Kq0jG62YGVKV5kqDnQ.roa (hash: 0LSMM83OGpO+BicY5IpwKPs75GhmmsY9wivMtlBMixg=)
                          24: cQXbLD3t1saXEnISbFZ-Z9wBcuo.roa (hash: BitU7YdfmBPoL8mPTYZZ6Qt04sbtc1LwooL1j4vtw7k=)
                          25: en2dnDKYTzj8JiV39_-BCieoTM4.roa (hash: t2tGanJVvoRZN18O65CZXHL2kvHFCeOL9VB4L5jlOl0=)
                          26: evNnHKfdE81fV-2dA-Pl5eqaGHo.roa (hash: ywmWM1qUYAMtn//4pTN8Jv+BIv75cg5QrP0+2AUgN78=)
                          27: mn_AZLEAiiU2qaQy6aQbNLhTx3M.roa (hash: tI/D+AW7xVeXQ1wV3rmgIy+tmP/yt57p+h1QtJmdkzA=)
                          28: opGiqd1EaZ4LjFf_mBRxRWMEJ9I.roa (hash: nszAzu935HQlCyZMmDgpA9FbHtuxCNO+fnERnO7qyoI=)
                          29: oz8WuNequXvsoaSrfyjDTnTQW3k.roa (hash: xlVm6Ij0YZyImV9HgneJ0I8dGPn1CBP8GzwgQHOUY74=)
                          30: vKfEUggSmeN1QnZLqXG04etpiPg.roa (hash: YSgw9NA3h6S4POGsrrMkyK+GnsnUKKzFwVL8h2Y0UDg=)
                          31: wqA8s5FaVsEu75KJ16vUmh5lVIY.roa (hash: bTi24pHBT2mcdfNQXGRRmSMYGfySkCQJDX6/So2k1Yo=)
                          32: z4-0mMmoIyejZQvLscU0F3zOajE.roa (hash: vANNj2jxJfRqckJm7O1qZBEwtb2B5XjYC24oRQYqHmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d9:74:2e:b8:e4:36:cc:d8:65:45:a4:06:2d:d7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Oct 19 05:02:59 2025 GMT
            Not After : Oct 20 05:02:59 2025 GMT
        Subject: CN=76c8c010aa33c47fd4d2faff29976ad276e8762c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:0a:08:4a:0f:85:e3:67:8b:bf:4d:e5:b1:
                    79:5f:04:f3:e3:98:0e:f2:96:1d:b0:c5:8d:d8:d4:
                    42:db:3c:76:4b:87:e3:a9:79:bc:1a:23:74:bd:e9:
                    9a:08:f6:e0:67:1b:b2:37:03:b4:f9:e4:38:ee:5d:
                    36:66:dd:f0:08:a3:cf:34:91:9e:4f:60:d8:a8:4b:
                    71:ec:8b:d3:b6:23:a2:a4:49:6d:3d:91:d2:84:1e:
                    50:de:50:52:ee:4b:fe:36:62:0a:f1:78:a2:ea:ac:
                    6e:ab:7e:bc:b8:1a:4b:60:93:ce:6c:20:63:95:d6:
                    a4:64:ba:c4:dd:60:62:d5:96:34:2d:09:2b:b7:53:
                    2c:fd:b1:39:79:ad:be:5f:f1:69:48:19:11:c2:f3:
                    a5:61:21:74:0d:68:52:1d:c2:ce:7d:cf:25:ad:e0:
                    9d:09:ae:7e:0e:44:a8:61:b4:51:11:ba:31:68:23:
                    65:61:ff:a7:34:21:93:98:2a:a3:6b:8d:1c:63:c9:
                    8d:f2:19:af:77:ef:32:f3:3b:24:83:68:2e:f8:af:
                    22:e5:31:90:f6:29:59:55:22:00:d1:92:56:01:24:
                    59:ef:4f:fa:20:8e:5d:46:8b:8f:05:a7:9b:96:b5:
                    08:44:a7:0b:b2:81:23:7f:ba:91:4d:c5:1c:56:50:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:C0:10:AA:33:C4:7F:D4:D2:FA:FF:29:97:6A:D2:76:E8:76:2C
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d9:7f:00:45:8e:66:ee:70:e9:f8:90:b8:ae:b1:de:ba:69:
         f0:8b:b4:0b:ae:ea:e1:76:0d:fe:f5:a7:dc:f6:37:48:f9:2a:
         87:bd:a0:9d:de:06:58:6c:22:46:e9:66:f8:fb:32:30:33:95:
         03:8d:3c:9d:ac:51:d5:92:4a:21:05:a0:00:59:db:0c:b0:40:
         e5:9c:d7:c7:f4:45:22:2b:04:8e:e1:f4:34:02:a4:c2:de:d7:
         25:63:91:cb:6a:7a:cc:f9:6a:56:41:f5:f1:d1:73:d2:27:9e:
         8c:e1:91:b1:51:b6:a0:8b:7e:f3:ca:d3:f3:b4:d8:2a:df:5b:
         3a:5f:1e:3f:4f:fb:b3:88:b6:a1:76:78:c3:a0:be:49:59:67:
         ee:a5:dd:4e:d6:06:36:9c:7f:64:54:5d:71:2d:b7:8b:cd:5f:
         d4:35:01:f0:00:65:f1:3c:de:59:62:8a:59:02:9f:12:a1:b4:
         f9:46:08:e9:6c:63:f2:e8:44:cc:d8:49:ad:39:f0:7c:b0:bc:
         e9:63:f0:48:84:46:e3:04:8d:bd:62:5b:58:0b:ac:24:af:98:
         60:00:f2:b9:e6:01:d3:9a:ac:d7:1f:16:05:d9:0f:e6:33:c9:
         91:92:fd:05:c6:fc:82:3f:bc:ec:38:73:a5:d7:23:59:b4:b7:
         8b:18:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:10 2025 by rpki-client