Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
File:                     N1GNGAkjp_PABlPsErxwK5WquQc.mft (raw, json)
Hash identifier:          vwaBLj94GbKrrkn3X6HGe9VdJr6uSUKpPaf2MO1pgdE=
Subject key identifier:   0F:99:04:43:FA:3A:5F:EC:1A:9F:B3:E1:60:38:47:68:59:32:1B:84
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       0199FD344BFAA90146C7FC492EF8FE82D5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
Manifest number:          16F7
Signing time:             Sun 19 Oct 2025 16:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:26 +0000
Files and hashes:         1: 2Mh_TFJedBaslxcz94noGA2Qytc.roa (hash: i1Zh/xLaGj0PGJC85bKgW/jpsDzYBRvPQzKlGbY0Jqc=)
                          2: 2co2CWHyAEWUlmkNDLU4f8jPJQg.roa (hash: 46ReLpCYncpSiDnrC/4ChfPtfL50ZK29XsrvXazEWSQ=)
                          3: 3-lCwXyhs7gijBnZJRUSuPJM_Pw.roa (hash: YQ/z+1V67b2+kazhrsP+LNf7uo8cgh4S0hNLSnP+da8=)
                          4: 3J7eyLG1r0nHWXtJOZKA52KcUTg.roa (hash: Qw/zK727tZ2i+s7UgVjOi/B+jPQRYCV/ax9zZA4jS0U=)
                          5: 4A0zWJ4NV28Aj54h6zY-IluB6Do.roa (hash: rfedrAjMllNAlqGJ74GuEiVJe7oNxWX2+pz2+IYq280=)
                          6: 6EHcMUdIhjJoUv7tuo2VFFavj1I.roa (hash: sOTV8LIX47DYFqhd5/wOFwCvjRBSj+Fylzp4Tl0JsxE=)
                          7: 8187awHmnLaq2Hx0gBdgfAzL-UI.roa (hash: EvBmaW5Fp3fVZ/1i18IIju/5N2XLJrzEU8mo3jrLMqw=)
                          8: 8erVUpFu_SWhnDZ0_l1Vtu2sHPw.roa (hash: 9WQMcrHYwxyep2DR6oFwYC8VDui4KgN0q3L7C72HEVI=)
                          9: 9kL7_n6oe34Z8vviGq3YICiBLSs.roa (hash: Qoh6yw8Pp+9Lcz6TEmDxMm/MIOz5l9NoByWV46axgEE=)
                          10: N1GNGAkjp_PABlPsErxwK5WquQc.crl (hash: l+an7ag+Xz5VQRbRoPfHSEmMoMEWMjSTG9jRDC7uHeI=)
                          11: NfqSWbJdJXxqFxN8cBz_Qs2JCHY.roa (hash: lveW/dgSbzQIqR2OETitUQrTBS86brQw8N0Uo5SrheM=)
                          12: SQyeIvS9IJP7UtMmTGW_fvUq864.roa (hash: sgFHxWCX6mlZtvFOm2lRUSak5BQz5+xj75/uzN5NnSo=)
                          13: Sl3rfOJQgGeoDh7qWVaOpWCVQK0.roa (hash: 72TNI/so/3OBFMFfxfO7UTaQUiPfe9aZZStTUL4m1WM=)
                          14: X0DytevtLn_tD-UIlvCY6CSOdKg.roa (hash: Th1+P8gx4BoI3AyiSLEceUjwPmG4/h5mNLTNI2Ql9CI=)
                          15: X0jFPtY61yWZFoZOpWbF-Hyf-qQ.roa (hash: 2XoYX0A8zLDob5+URwsqSsqDCm+UXdsFMFbNsUpLWeo=)
                          16: _X4xd1Q30ZWzt-lph0b6j7vMA_k.roa (hash: uHtxYdqdcHIDWS2VWJdQOofw/WLe+SAxyZ6U6AhTufo=)
                          17: c_hgrXwWiFyz3nd6PwDsHDYvJRc.roa (hash: 6BkjtBIpdAnW6zBv64Dj5gD6rhB2Up+LHmHdfpuN1D4=)
                          18: hR4dKEJ2ZMW9mv8zjaNAAKFA_Vk.roa (hash: CKCvaIuVw4us1yulbZrSQYv83SdDJvRhRtZIcvdKG4w=)
                          19: hYdlQZoJApaUrpLPSwRpF_Alth8.roa (hash: lAjo+84ZROUk28Kp0cwaSeeA7ssn2GU1agYTVX8INPc=)
                          20: hmcTq0ht51TAQ68lvBQEzSS9f_g.roa (hash: 8ukBXow/FuwryekZQZF1ufn8k0YeF/kCXA4kwvSaupY=)
                          21: lLOh6luqTBaLKuTZsKHpgvacIKo.roa (hash: FnwAvD4mCWsVQIEAvPejFhFzmC8kaFOk2uZReTeDf58=)
                          22: lzlK41JQdrC3BzutFzinXaQwgTI.roa (hash: rW30YIBySW9XT5Gur57+peTfdydQoKgfK8aumZY63vE=)
                          23: pYif-zRR213byCwtfAGYu1zMZeM.roa (hash: UUApk8H7qjC7v+fLxh+GD5xcNm7fiKpLQIro+hZI89M=)
                          24: szzET8_PcbYHrkv0DjCX2K6Wsnc.roa (hash: /zyW+8rn7EZekTQXTlSNLl868eRIf0RZNeXPcokMeG4=)
                          25: trnquIeGzcsfUn-ICQYKFCSwTXU.roa (hash: CEyHyDW+VNifYLkT7DvsOiT1GMhHaNzGkMztPVekgpc=)
                          26: uFdxf9d4cK91TAE3KExcKlZ4dHk.roa (hash: V0SLGkXn3ckVtmcHZZRHQ7llTtRwmxdYvYnh4fPZT7A=)
                          27: ujLBX7H6OIZKRstz5qmvgA1EITQ.roa (hash: mWYbMp79+CfYCZ0EUKPeEq7x+MnCVwTn2DiLjbeMu9Q=)
                          28: x-aWmx9xt3UlN8LTKHOaep8nb1E.roa (hash: URKvcIolbNVwyMOId7LzopRA4aL+b5mPWmLF3PC5lbw=)
                          29: yG32tlHODIhV5vCLTDAj-FshTBg.roa (hash: PYArFpTe7F7o6/CCQVcEtf2E3kR9UBX3etNSz7nmqCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:4b:fa:a9:01:46:c7:fc:49:2e:f8:fe:82:d5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Oct 19 16:01:26 2025 GMT
            Not After : Oct 20 16:01:26 2025 GMT
        Subject: CN=0f990443fa3a5fec1a9fb3e16038476859321b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:2c:11:1b:c7:07:ad:13:02:65:77:6b:3b:
                    48:90:e9:d4:6d:10:69:67:64:10:18:11:72:be:b7:
                    cb:8b:d7:55:9c:f8:d2:5a:ae:61:0a:80:d7:3a:6c:
                    07:cc:a3:2f:1e:48:10:16:23:e7:d5:69:e0:31:3c:
                    2b:f1:05:c1:05:68:e7:51:f6:17:2c:aa:4c:89:a4:
                    be:8f:9e:98:2e:04:5f:9e:79:a7:6a:35:63:95:ee:
                    06:26:b2:e9:ee:0f:c5:71:a0:1d:9a:82:31:bf:9b:
                    79:eb:1c:cc:e7:8e:18:07:e8:92:d3:53:e1:86:00:
                    f8:83:c1:67:be:37:40:6e:f9:be:9a:3d:ba:84:ad:
                    82:c1:7a:fd:30:e2:13:42:86:f4:a2:5e:31:c6:c3:
                    7f:16:cf:a0:84:a8:12:43:85:ae:92:d5:75:21:27:
                    49:f9:28:dd:48:6f:6f:06:77:92:4b:19:44:60:c9:
                    2c:39:7f:4f:b2:97:0a:49:3b:51:23:a0:1c:55:ac:
                    cd:19:09:d4:17:e9:e1:41:aa:23:83:42:89:64:f1:
                    ca:e0:34:e0:1e:a7:ea:90:aa:ae:aa:65:66:b7:c5:
                    2e:c0:ff:b1:1f:11:ca:ab:78:ce:a1:7e:8a:a8:93:
                    ce:9e:bf:45:6d:aa:14:24:bb:af:72:eb:6f:d8:24:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:99:04:43:FA:3A:5F:EC:1A:9F:B3:E1:60:38:47:68:59:32:1B:84
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:00:47:b5:c3:b6:d6:c1:31:75:bd:de:a4:71:80:d7:34:
         5e:44:fe:60:81:78:be:84:11:2a:a3:cc:2a:c1:d5:bb:3c:b8:
         6f:ae:4b:77:b9:b8:60:73:5a:7f:0d:a7:7f:2e:3e:f7:c5:3c:
         1c:6e:69:2b:81:3b:5c:fb:f1:2d:7f:e8:62:a2:67:69:19:27:
         e3:22:7f:01:8a:33:85:a1:c9:0b:9d:9c:90:0b:d5:3d:70:e7:
         dc:72:59:fe:1a:4a:89:f6:5e:3e:db:9c:4d:8c:ad:37:b0:9d:
         75:11:a7:5e:ad:ce:48:e8:28:a1:84:d9:5a:ef:ab:8d:e7:23:
         82:d8:cb:b5:97:ba:6c:d4:ce:94:27:dc:b6:bc:df:27:1b:06:
         05:09:a6:92:98:f2:2c:36:97:2f:6c:08:e0:60:a2:6c:53:0c:
         d5:82:78:f6:42:3a:c1:07:d0:ad:02:d2:78:46:ae:f5:b8:e8:
         4b:35:08:5f:2e:ef:5a:a3:3f:11:0a:25:77:cc:c8:63:dd:48:
         0b:c3:bd:80:27:2c:06:d6:4c:6a:27:2d:c2:8a:9f:cd:e2:e1:
         71:3e:0d:70:14:c7:eb:69:d1:14:24:a8:55:9b:a6:7a:05:36:
         56:4f:51:81:88:e2:74:18:06:b4:80:32:09:bb:d2:76:79:c4:
         3a:0f:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:02 2025 by rpki-client