Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
File:                     AHddlHG4XZY_720oNZDi2ULdXCE.mft (raw, json)
Hash identifier:          nxppxzhlxAqojxm4QA40p8EYm6biyFjh9IwgmZrsRD8=
Subject key identifier:   02:D1:5A:7F:56:E9:11:49:77:A5:A4:E5:CD:A3:81:8D:0F:F9:56:16
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       0198D5F1891CF64B419CD5AEAD330D251702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
Manifest number:          16F9
Signing time:             Sat 23 Aug 2025 08:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:32 +0000
Files and hashes:         1: 0RiNeaxfc3ixxqgMq3kjExRDa_8.roa (hash: xbaiXGjy7fJ+ZwX/PzT0jaVewoPns9Qve+McDOCbcPs=)
                          2: 1-8NhGOxlnqEQxwi7WkKPFEf5GnU.roa (hash: BXxU9Nug/AmC1t8I+DtLwTbrChrbzvNM3RFHiYEpT3s=)
                          3: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (hash: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=)
                          4: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (hash: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=)
                          5: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (hash: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=)
                          6: 7fPxL-uHp2NClvaUSSes1QZFjgY.roa (hash: 10Jo3zGeUKwhoqlKRLe84C64rFl5TQbdrOY/xZjeKog=)
                          7: 9AcCssdJvuaZTQctbDzQLGVLLA0.roa (hash: nQlShP1uJ+k6uaAb2BhTXPGapSbEPx+5TYI+SUBlr+E=)
                          8: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (hash: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=)
                          9: AHddlHG4XZY_720oNZDi2ULdXCE.crl (hash: bBW/mZOLGEeR3GAI04+M64a5azSRaZSmwdLt9lQrmyk=)
                          10: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (hash: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=)
                          11: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (hash: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=)
                          12: CAxK9zGMORt-lHU50N6cryd_SWU.roa (hash: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=)
                          13: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (hash: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=)
                          14: FOVVjhHE6lD5ldaF3iw0l2c9ERg.roa (hash: I442iPSVo2MZ/j5N7A+HUBY7gJD9hTNx176dhJ5NB8g=)
                          15: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (hash: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=)
                          16: GlJLYgf16agSfqwntlZ-9s0ycuE.roa (hash: H/pf+nizH//gW/qa/JKNB79H5K4HjIq/Ki214ycp+sk=)
                          17: GnOgt2Zpp9axfGj5NOdGMq3qB1o.roa (hash: xw5e8NNx97AjIQpx/W2pOHvzyer0Hz54CK55xogl9EM=)
                          18: I6QQ8D4a1STk2kbXz6J_lGrDBok.roa (hash: ZM3Jp/vIZlNwcWJYO4LQNG51RgTy2h9eCX0o1rBPK2s=)
                          19: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (hash: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=)
                          20: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (hash: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=)
                          21: LaajQT8UwBWFNaRi-jIojBq0WyA.roa (hash: ZkZjakVN6aPN1d4jYMrA0iD1EVTfF2LyjXQ1E06pZwI=)
                          22: LabIk5FAqxFN9-2h0QRFGlVAWZs.roa (hash: g1aIF++7RUIR0+sMIarFEmboCFxIcCYOYgS81Y87k+w=)
                          23: MFR-YAMljVNcPKmnKZwjQ7eWi44.roa (hash: TTX+IGNIg23QPSCa7nfKUJYtcDdlZ3y7IqFBrM4egmc=)
                          24: PGVYIzwHf6UcdybJmIRuEKbJaI4.roa (hash: B6cWExLpRhYUY+7dvKifsqY+kTpw4Z9WuxqoFZGkCSk=)
                          25: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (hash: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=)
                          26: RpJEdMSkLG4QBobqqHL1nJkC1MY.roa (hash: Q+HvYQTOIS5u8UvuYMNirVCecblcOPhOd1H1jNc8YFU=)
                          27: S-LyAPTyjR_trxSWtQRZeOWC_3g.roa (hash: mdb3EARrdNQMQqJtEZ6Yv2aaf9muu1ZlrouX6RhltB0=)
                          28: Sf5MtSRfpud-Rj7gXlfDQovo9VA.roa (hash: DztTJ+PmNoJjtlD/fM0OJRI9qPdiLEutbyjPYOfl4ss=)
                          29: U3moSjgLtc28nWvPqi0yFKSO3r4.roa (hash: yy0z8EFc2P2yOYlK0LdaqPXOy+81gs4j81+B3I6NpO0=)
                          30: UmgbGhDQg4iStAILKxYzKIGzHDI.roa (hash: ftNgxvJlAvY7vv9vaFzZaCVWZcnVrr2K8MpigLR1NBw=)
                          31: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (hash: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=)
                          32: awDEAjc-vsUA8PFN4mikXx3QtXo.roa (hash: x6QRS39zUaIqgQ6Fa+3uC6hdw20sHPfHEbtVFExHXi8=)
                          33: ffSTkNPIiZpEtpWWodnp-E62PR0.roa (hash: zfi9z9vv9i6kZpAB79iGBR0mg0wwIS76zddY9IyYsTk=)
                          34: hx8COhVdZH3qD7ow8tVDVEthRPc.roa (hash: 9Fb/TlXj91Uiy/zQMHh1FmWNO1ee5ZA/jKsf3Ls2K6w=)
                          35: jzZPQyTPxHmOrfm_zSEP30f3jkY.roa (hash: tZU3gCj8FKHIIHdBn9jyrUtj2ivWD71dmLJ5zAo81Ls=)
                          36: lJ1ZDrcXWKyaIgh7k3wlRWiE4KI.roa (hash: o+KPskkXXJU6m9owbhikJKpLSsQPEnvEdVWpnWT3wq0=)
                          37: mxPP407x3lOwcH4j2_RBFrvGReI.roa (hash: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=)
                          38: n_ERAGslTk3vQyjUYN5Y-K_UqXk.roa (hash: 8P793j/53ZScruOSOWiU0UBEL/rR3GoLLeExoTt6Gqk=)
                          39: ppCk9Vty6iMCcMW-ol544MdX-nM.roa (hash: RbUUKI0R1fzO+MrlEm9gtrrkQzniS9iGiF6DxgNPmhU=)
                          40: rR4l2xUYr0OdmuEcxVObDbOzlqI.roa (hash: SbZ3z0LnIb85i0XrcQrhpe4jEBYPuMhEizzk+VDHMwg=)
                          41: traiv6_-l01Qxbk8SPkNfmLvm4c.roa (hash: CI9rHZtrpUltSkl67ei2RUQxjkqCmXGq8894J8xB5NI=)
                          42: wjn_g8Ud_phf8VtDr4NFD_T6V2E.roa (hash: b7py8XpSo/z3meAMsSMoNSuWPElstGPGRA7+z5qylZ8=)
                          43: wpwHC6-Poxu6SDJgu8vGH-m4Ioo.roa (hash: WmqHKfyX/TMrPdPMBnH6rTehuBzS9Hw/upM81OWelH8=)
                          44: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (hash: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:89:1c:f6:4b:41:9c:d5:ae:ad:33:0d:25:17:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Aug 23 08:00:32 2025 GMT
            Not After : Aug 24 08:00:32 2025 GMT
        Subject: CN=02d15a7f56e9114977a5a4e5cda3818d0ff95616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:d5:7b:32:6a:08:14:49:1b:4e:40:d4:93:
                    f3:65:1f:54:29:16:94:40:7e:d6:d2:1e:cd:f8:53:
                    30:89:2e:8b:bd:65:78:3a:45:77:b4:dc:77:79:5c:
                    a7:d8:b4:91:19:8b:a3:28:83:0c:e0:43:31:23:75:
                    5d:e8:34:f2:10:e7:67:89:88:e0:9d:71:55:5d:36:
                    96:30:27:a9:21:69:49:63:58:4f:7e:ba:b7:72:31:
                    92:33:e9:b9:e6:82:59:93:06:36:b9:7e:c5:92:d2:
                    12:c5:4e:2c:e6:d7:b7:e1:6a:1b:d6:dc:41:db:18:
                    56:7c:e5:54:a1:45:b8:7f:76:f1:41:f5:78:7e:03:
                    a6:d2:af:3f:32:0b:74:21:b8:0c:9e:3d:c2:d0:07:
                    8d:9b:61:cf:cb:b3:3a:95:52:50:a0:1a:9f:91:e4:
                    17:98:a0:e1:24:36:d6:10:a4:6f:e2:fc:01:ec:23:
                    a6:db:15:af:96:18:86:98:65:86:5f:71:a1:f6:bf:
                    bb:67:59:c6:ea:84:ba:2f:3c:45:7d:7b:bc:e0:8a:
                    f7:ad:f3:21:35:33:3e:19:66:bb:88:d3:9b:ed:b5:
                    ec:ae:a4:bf:6d:80:f1:a8:ab:44:7f:86:7f:98:05:
                    f7:1c:a4:09:85:91:5c:82:5b:96:0e:b4:e0:a3:2f:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D1:5A:7F:56:E9:11:49:77:A5:A4:E5:CD:A3:81:8D:0F:F9:56:16
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:6f:c7:e1:26:c3:04:32:b2:8f:f3:e7:7b:62:be:ff:b3:
         33:c0:44:34:14:40:4d:13:e4:4b:20:3b:b8:d3:7d:e2:06:7b:
         96:81:98:ed:53:30:8c:73:28:20:e7:7f:ef:b6:b8:63:71:cf:
         e0:c6:7d:43:ef:d9:74:f2:3b:67:07:03:56:6b:f1:b7:18:31:
         d0:93:38:8b:14:1d:a3:7f:fe:37:bb:15:43:75:df:71:c9:6f:
         f3:df:85:60:b5:6f:2e:16:d4:a3:ad:96:9d:b4:42:f4:3d:bb:
         64:2d:e2:29:81:d2:51:8e:c9:36:79:bc:88:21:a0:fb:10:0c:
         94:dc:1b:af:05:3e:65:07:74:e2:d4:63:15:0a:b1:2a:6a:5e:
         61:3a:b1:b5:5a:1c:0b:23:2b:f8:f8:27:65:ce:6d:64:5c:ee:
         61:11:90:6b:c5:5e:fc:1e:d9:7f:c2:f8:e5:7d:63:04:e4:df:
         4c:3b:2c:b6:73:e5:00:34:29:ce:14:c6:88:41:6d:88:54:32:
         fd:27:de:bb:43:d7:5f:59:7d:f2:35:c1:de:11:e5:93:5c:d1:
         62:78:a8:fe:83:53:a3:43:ff:32:9c:e1:e1:58:50:ce:f9:e6:
         b7:27:df:08:3c:c0:c0:bb:08:37:b6:e8:31:61:f1:fa:e6:97:
         6c:cd:64:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Ykc9ktBnNWurTMNJRcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwODIzMDgwMDMyWhcNMjUwODI0MDgwMDMyWjAzMTEwLwYDVQQD
EygwMmQxNWE3ZjU2ZTkxMTQ5NzdhNWE0ZTVjZGEzODE4ZDBmZjk1NjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VfVezJqCBRJG05A1JPzZR9UKRaU
QH7W0h7N+FMwiS6LvWV4OkV3tNx3eVyn2LSRGYujKIMM4EMxI3Vd6DTyEOdniYjg
nXFVXTaWMCepIWlJY1hPfrq3cjGSM+m55oJZkwY2uX7FktISxU4s5te34Wob1txB
2xhWfOVUoUW4f3bxQfV4fgOm0q8/Mgt0IbgMnj3C0AeNm2HPy7M6lVJQoBqfkeQX
mKDhJDbWEKRv4vwB7COm2xWvlhiGmGWGX3Gh9r+7Z1nG6oS6LzxFfXu84Ir3rfMh
NTM+GWa7iNOb7bXsrqS/bYDxqKtEf4Z/mAX3HKQJhZFcgluWDrTgoy+xLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALRWn9W6RFJd6Wk5c2jgY0P+VYWMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvNvx+Em
wwQyso/z53tivv+zM8BENBRATRPkSyA7uNN94gZ7loGY7VMwjHMoIOd/77a4Y3HP
4MZ9Q+/ZdPI7ZwcDVmvxtxgx0JM4ixQdo3/+N7sVQ3Xfcclv89+FYLVvLhbUo62W
nbRC9D27ZC3iKYHSUY7JNnm8iCGg+xAMlNwbrwU+ZQd04tRjFQqxKmpeYTqxtVoc
CyMr+PgnZc5tZFzuYRGQa8Ve/B7Zf8L45X1jBOTfTDsstnPlADQpzhTGiEFtiFQy
/Sfeu0PXX1l98jXB3hHlk1zRYnio/oNTo0P/Mpzh4VhQzvnmtyffCDzAwLsIN7bo
MWHx+uaXbM1kvA==
-----END CERTIFICATE-----