Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
File:                     MH9f4nQKK23kw3CdKWQRWzyWfaE.mft (raw, json)
Hash identifier:          Tmpk+6RbKqjItzmGL6bUBsfehNMcKIX/Y95dtPeXdbc=
Subject key identifier:   E7:FB:2D:9F:2D:FE:FE:FB:94:88:7E:3D:D2:5D:4B:0C:93:E2:91:12
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       0199FBB3757DC047427100B3286CFC27174B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
Manifest number:          17AF
Signing time:             Sun 19 Oct 2025 09:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:06 +0000
Files and hashes:         1: 00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa (hash: /nCoLNktQTRkwf19+RkLZm6+K8Um4Om/CE/FhAF+NuE=)
                          2: 1-COYrNmS4Yj9DuD0Iitd9unCCQQ.roa (hash: JYNBrYFYnRoWLArFqkMLwPLI1r5eBOC15oN7aK1rASQ=)
                          3: 1-lpBuKXXx8g9yxpi6iuVgN2ZkaU.roa (hash: RgZnA77LWWsGNIxky5OwYiVUFovIqwLxtj+NYBSAZ9M=)
                          4: 1dc_AoVDsergaSgV7R-3yql_9KE.roa (hash: a9qa0YzuaGBz3jd/Pf5UATBtpu300fCkvirZYtsQepA=)
                          5: 3WNl-m7gCvquDzEDrkwIQEg6pro.roa (hash: FxKNwejyJuuX0RG0vdRP0TUvJlDOzXxsIbbdxEYJvWM=)
                          6: 6EnYKRUPOG0Bajz58Rzdix-x9Hs.roa (hash: hj5dsY/14wcoPQMYFN+FDqGIoYmYmbl7lzQUbFpSl9g=)
                          7: 6FhDGvyiE15m5in3JxEtWm2LQvU.roa (hash: Qb2nBgiw2wjL0NKInr8G6lRKGlTQkFAoRZAC/5y/JJ8=)
                          8: 7uyz50yy6Hw96HGzOKfD1adh_ck.roa (hash: n4kWCxw/NHUiGeVP5x0IvmrVoASb0wzvbCgftEjfsB8=)
                          9: 95jWS9jKpRrroELAnGEuEqeiVuk.roa (hash: 9oQPUKrBIIejm5soFm9BOrvY+R8e49uut81KixCREME=)
                          10: C9rTZ6_iu1FXRg451e341Atg3Z0.roa (hash: XcWEYMD9cUcIh2EC0BBKyyITu1rFp8td9cXo80ANEyQ=)
                          11: Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa (hash: +iIyFBA3ZhKNuVhyNzUqDLxWmuz7/LHtk6wG8bzNLCw=)
                          12: Dcl4o4Mo7N0s3M3iAQoKIPl9m2g.roa (hash: SVwXdwnjQoGTLQZCk0CvIrT8UoqR6f7tYRnOAGH0NIA=)
                          13: EdlEeGF0p-ph_-EZ90A8Cv8g-lo.roa (hash: bxOL6/VDd4hVc81yHqPsVHT8CDLp/qHPAVWZhIxPWDQ=)
                          14: F4z4cRp1o2-2fDGziBvSnYHbVpM.roa (hash: 2wAWhkLWWqS0rO2Q1Az6KgQGqplVuffj57lG+uTxooM=)
                          15: H4YuarFLRv2DKAM6083yrFzz9JY.roa (hash: fMRUn4uvKnHkcfGAlHBm1byeQeTo8bCHBsHlwHjMTDA=)
                          16: JI0eb8S1GNh05B8yRPp4g-MmznE.roa (hash: vofbBr6agtDCq9C2DcAavwwJSfex0/8B3Z91wfqPM6M=)
                          17: KF8itGoY1xLI5AYmY-m8xyJCd-M.roa (hash: 3x8CCjFbHcFE+DJK2zQRD0PbpgAm7tcfoBUcCbuoWVU=)
                          18: KSKxvPfPoQ3-9nZ5IaAyZyw0eVA.roa (hash: Ldllwbeq3sVnl6+zDKpnVxt8zPewHEjiNMebEvP4PkM=)
                          19: MH9f4nQKK23kw3CdKWQRWzyWfaE.crl (hash: elwFbI7MviJK1zdIdgHVfvemtVlE1i5+3sBdRWaCrFI=)
                          20: Na5QZvVlGuZQeLfXORY_9aEEYSo.roa (hash: 7zaWEKU6Pa667pchWMlNtONL4EFj3rNY7MR9JwlAuWs=)
                          21: NfrImU14VyPFoYoWbQqSwcjt0NE.roa (hash: MQdzlW7R+JzkpiS+Sg0oeOl5PeyecnB8iAb1AGvWxuA=)
                          22: OoYqylkHzmwaVAMQUI6VbW19fUY.roa (hash: GTuWmeM87GVOh1bcDtRCfkyFY8mWiN9eSfyMgGPB+zE=)
                          23: RYzhujVp6gIBgIh6wj1hAB_7rVc.roa (hash: dxOdcde2n2siUlRnNLCGHKOg3YoidL7qLRsEX5nlICY=)
                          24: StSv8ki3Hfy1kt0rrrfueNG7XQE.roa (hash: n5KuwRYffa0Ye2MfTHYi4Ou9cVdpBRC7za9HK1Mdc+U=)
                          25: UpgKqZKDk6DocsIHKTjtNdmcKOA.roa (hash: ks27GBa0bjdMoWqX1B0YBEH3qIWHeKCvjtYKHznBta4=)
                          26: W1J1-YCCiOxiAdhCBpIGiI6-ens.roa (hash: qQljpaYP6KShT3JCLBM16HPQvI04wWe99FsoBr17EDc=)
                          27: XZVtjWmGJy5TJN5gkclvuaDTx08.roa (hash: +A3dF//QsJfJLVvgoQOwQfNBd3HuH3X5Enj0ICpyoDU=)
                          28: Z9ftDVnLuDarY233BHukY7esuz0.roa (hash: 8IP/yjkR/p4P5xW7keZ1mbS3Olm9wSVSpmHnR8UNIxY=)
                          29: a5vhXTFxFnmVktk1fpfvlo_HM2M.roa (hash: jBANqiVsO0TchdCr8Pw27uhxGmAd9aIES2vzyb+GsNU=)
                          30: aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa (hash: K2mPF2eHRJwmWDINxTS4kipEwWDutquLs7wNrJd3zo4=)
                          31: afF1dxl_LmNwCvwOu-CxTaBAPsE.roa (hash: 2PsecFqYTcXE3Me2mMpOXpuvsS4y86LFqJBD0VQl4Yk=)
                          32: hIqJAfSnn9KNywKp0QfHCh8jdEs.roa (hash: SVYSpB2PXKZBd+1YFg4Zcu+R5qUNSr3ksyKlguLNrhk=)
                          33: k4dE6GVK9WXXHG3YD6YqaU59DBE.roa (hash: gfljlL3cqgD/q79IzT5OLmzpfKZUJCewNF1J+kEHTmM=)
                          34: kTAZ1eq_4NqZeUF8WiyBjLmzzOM.roa (hash: FbN3ktB3aIhk7lj6tCA82i2iYB31YzcLrswYNQRr2fk=)
                          35: m3-MxjwFGNnDf8jTTqX1e91a7rg.roa (hash: 9iAPPIgHqVmIrbnk1/uNszzl+9R/1IZgQLeSx78jY20=)
                          36: nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa (hash: Kkbt3awiC7wXEdfElBvXbg7tTE4YJO5Q0eMabJjQuQ0=)
                          37: o033YbxU_4pqzhTYeW8KgBTyJFQ.roa (hash: dhvpupNA3tAu+C5YNjmZoQsdlwc5TGF6rdYGFnIKpdI=)
                          38: ogWtRj9AJ-3VS3wVOcqhrepWr84.roa (hash: z7l4qX9iNc6t/itsLZx/1qV94NBFb0s6x69mJ0YgY6g=)
                          39: qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa (hash: x3hukl87lsHfId1sEhc10WEbYF6R3yTOTAtjx/H0dM4=)
                          40: rXpni-4ALcocOhcZ1QqAO1mIJGA.roa (hash: FRAHJFSzOsHBC4a0opWl+1Gehcqt2UuiLhry14uVIHQ=)
                          41: wSL45AIT5EJXXFGp5vg6M2DPNCk.roa (hash: 1wb4FcpLDXgZHELKVN0aczuYaHIxl0jPkQS+LI1QUhs=)
                          42: yMSRSUOaD_I9-_w6JSkVSof-73c.roa (hash: IIoX68dv6Vr/WkUd893+l+Jc8xvnAeBmWPaJowHnKOE=)
                          43: zfjWVaBt_BelAB4wLgicMa-3gUk.roa (hash: mUXFCeRc2Y4QqbwjvPvmqd3yvXigvxAWleegmSOAAXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:75:7d:c0:47:42:71:00:b3:28:6c:fc:27:17:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Oct 19 09:01:06 2025 GMT
            Not After : Oct 20 09:01:06 2025 GMT
        Subject: CN=e7fb2d9f2dfefefb94887e3dd25d4b0c93e29112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:c4:30:77:6e:d2:20:13:c5:f8:da:3c:1c:
                    26:79:f1:7d:d8:cd:39:eb:42:69:b9:c5:f2:d1:6b:
                    da:71:bf:6a:1c:fe:7a:c1:a5:1b:60:c9:f3:0f:f7:
                    0d:5d:72:0d:39:53:41:b7:45:53:7b:0d:a6:cd:ae:
                    21:e9:69:9d:bd:72:59:7e:ca:b0:eb:9a:b3:70:92:
                    23:62:f3:ea:d6:2b:a5:13:29:be:bc:19:2a:ff:8e:
                    9d:dd:e6:6d:aa:61:8b:16:8e:00:9e:b9:7b:d5:55:
                    57:79:76:5c:ef:21:71:49:69:7a:4c:df:ba:5c:9a:
                    7b:b9:dc:b0:81:6b:a7:56:30:f0:8d:82:1b:25:e9:
                    6c:1d:0e:73:05:fe:de:5f:ae:24:ad:5d:d4:c9:81:
                    b1:91:5f:9f:49:27:ef:1b:9b:30:02:a6:6a:60:d2:
                    82:d3:4a:64:73:ea:6f:8c:e5:4e:67:dd:22:97:79:
                    fb:3d:b4:fb:1b:c7:fa:a7:c7:72:ba:20:c9:af:61:
                    93:98:f7:80:d9:0c:72:88:a1:a5:cb:9b:ff:46:18:
                    3e:cc:a9:f1:64:cf:04:1b:4f:41:27:ac:3c:e9:d2:
                    00:0f:ef:b6:cf:50:d8:de:aa:d5:bc:d3:a3:c5:14:
                    a4:39:97:32:c5:b6:92:99:8d:dc:24:9c:69:9a:e7:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:2D:9F:2D:FE:FE:FB:94:88:7E:3D:D2:5D:4B:0C:93:E2:91:12
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:81:87:46:ee:37:c4:55:e8:f6:0b:7a:72:ad:95:c9:f5:c1:
         c0:7f:e7:8e:ab:ee:8d:37:42:a3:be:72:95:fe:4e:6b:45:a8:
         54:6f:f9:4a:e2:b3:89:5b:c9:69:0b:8a:6b:01:f1:bb:2d:a7:
         a6:f6:ea:77:54:c7:bc:e3:19:c4:33:83:71:52:ef:aa:76:0a:
         5c:19:4a:36:9c:17:0b:b2:60:68:c0:f1:a7:c1:af:07:c8:21:
         ae:2e:c8:ed:14:fa:0f:cc:ef:66:69:25:4e:f4:ef:58:58:cb:
         9e:49:ed:ee:e6:d3:f9:65:60:30:2c:ef:0e:cf:cb:e8:7a:e2:
         62:3e:d0:b0:55:8d:e9:53:ea:e5:a0:8c:37:de:cf:eb:39:5e:
         2c:da:e9:af:6f:65:21:5f:b9:2c:28:4b:73:10:27:f7:ea:14:
         95:27:3a:8e:b1:47:0d:a0:ee:e2:cf:07:db:ad:24:65:6b:a1:
         c0:dd:3a:33:06:2c:fa:38:7f:8b:e3:14:2c:81:c3:c2:58:b0:
         2a:4d:38:7b:d9:91:1f:1a:71:45:35:b0:65:66:ce:d0:da:63:
         3f:8b:a7:87:8c:03:67:19:4b:c8:53:f4:55:88:12:7f:05:df:
         3b:07:3d:0c:87:f7:2b:2a:3a:4a:e6:0b:80:43:02:f7:8d:ab:
         0a:d3:76:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3V9wEdCcQCzKGz8JxdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjUxMDE5MDkwMTA2WhcNMjUxMDIwMDkwMTA2WjAzMTEwLwYDVQQD
EyhlN2ZiMmQ5ZjJkZmVmZWZiOTQ4ODdlM2RkMjVkNGIwYzkzZTI5MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L/EMHdu0iATxfjaPBwmefF92M05
60JpucXy0Wvacb9qHP56waUbYMnzD/cNXXINOVNBt0VTew2mza4h6WmdvXJZfsqw
65qzcJIjYvPq1iulEym+vBkq/46d3eZtqmGLFo4Anrl71VVXeXZc7yFxSWl6TN+6
XJp7udywgWunVjDwjYIbJelsHQ5zBf7eX64krV3UyYGxkV+fSSfvG5swAqZqYNKC
00pkc+pvjOVOZ90il3n7PbT7G8f6p8dyuiDJr2GTmPeA2QxyiKGly5v/Rhg+zKnx
ZM8EG09BJ6w86dIAD++2z1DY3qrVvNOjxRSkOZcyxbaSmY3cJJxpmudyKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf7LZ8t/v77lIh+PdJdSwyT4pESMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYGHRu43
xFXo9gt6cq2VyfXBwH/njqvujTdCo75ylf5Oa0WoVG/5SuKziVvJaQuKawHxuy2n
pvbqd1THvOMZxDODcVLvqnYKXBlKNpwXC7JgaMDxp8GvB8ghri7I7RT6D8zvZmkl
TvTvWFjLnknt7ubT+WVgMCzvDs/L6HriYj7QsFWN6VPq5aCMN97P6zleLNrpr29l
IV+5LChLcxAn9+oUlSc6jrFHDaDu4s8H260kZWuhwN06MwYs+jh/i+MULIHDwliw
Kk04e9mRHxpxRTWwZWbO0NpjP4unh4wDZxlLyFP0VYgSfwXfOwc9DIf3Kyo6SuYL
gEMC942rCtN2BA==
-----END CERTIFICATE-----