Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          SkdNbMnBIMuyHhCvnzK7tuVdEnrvrBE2j+xoWIQI8gQ=
Subject key identifier:   29:88:F7:0A:66:8D:1E:93:07:3F:82:F8:28:90:F0:D3:94:12:A6:B9
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       0199FE46F12062853547DDDC4C86F7F2F92F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          178A
Signing time:             Sun 19 Oct 2025 21:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:26 +0000
Files and hashes:         1: 0aa8_BKnq_2uEeu2lZ7-yjbtvuM.roa (hash: Ddp/LlQBMX46rH0IPNaZHNYeFIB8RtssPveBvjz8aL4=)
                          2: 1-xc1srblKkWVrQxPbJNDAqQ3mpc.roa (hash: ZzynvVG+bTIyDr7NXUASXUZ28E+DC5j8UwHhzSApKyk=)
                          3: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=)
                          4: 3UrcXAvUPXOxJHin-fpij-Rxeow.roa (hash: u5YOevQq4A8lK81tVn2BR62vGaGNiFwRH3yerg3JNHU=)
                          5: 43Lev2KmmsX2oQjHWOVqR7pGv_o.roa (hash: X3cJ9btnCgxa0qcBGYYxWGeuURRVSrnur28C/7enAsQ=)
                          6: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=)
                          7: 891CpnOYIk69iKnDpiqfcEZzfPI.roa (hash: Cl3FQjh7xo9Vv8l6G/85YiDrEYQtz+6HMhEUm9eKhPA=)
                          8: 9sivwV2Y2yAFFnmkYJ1Zol3pcUI.roa (hash: iIPWwTsolo+wvKdwR+ZK1g6w3Rsb/HA6Srp6m7oPlKE=)
                          9: AeRW2IzzHa8sgYjrW7QogaL1WWo.roa (hash: mOgxIrog/AxUhk6U2thPlE/gzaz0gGobQDleoJHGSnw=)
                          10: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=)
                          11: BT4HTe3oG2Sg-qKbCzfhjsWspIs.roa (hash: tr2IEWG8nbhwgOgVOSWuTH9VHkQ1QiViO3lhhSkyHIE=)
                          12: EASv7Pwp5s7xHptHeT8bx1BMvh8.roa (hash: 9Bt8ezrIdKBPIOWXNUErgI/itzrTUKWVaVktAfZtf/0=)
                          13: GBz9y95P8PDIcJhrMMpmV0mZCwI.roa (hash: dSj9Wh/I463emAgTbhC2m6aztY/BXSDsl2rzJ7qsj64=)
                          14: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=)
                          15: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=)
                          16: N-c5_PPTGr0gqxRfiirVSspbfGY.roa (hash: M5IIKDSRV6WeA4W9FG2QHmC4Kal5tmNKF1rVNFJCpog=)
                          17: Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa (hash: +uQK2AEnqPBoHu/xep/tQLvYp/ULstsLl2Xj5X9veFc=)
                          18: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=)
                          19: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=)
                          20: Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa (hash: 6FBW+7wKlFhVsfYtAAGEeciTYk/P+FI5nTEi81UvzA0=)
                          21: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=)
                          22: WaX26jWoRpSyNTjXI-QsFRwDKBI.roa (hash: yipaE9380n427VkfyNH9hBV6UP8h3/XAXxFHIhgfpDk=)
                          23: WnBP3ormFPR7ECQL-Oyv80YjE30.roa (hash: /5od8Dh5Xok7XKiFmY7DdvHrECCA+68JXtVsupW9/sE=)
                          24: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=)
                          25: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=)
                          26: Y0Jfvglhk12KRlx1qXrTTWIY1ZQ.roa (hash: OojwxcLLBQyxENv/409Gbc8GdADP7z6P1tN7CK7EnwM=)
                          27: a3komgsCxLhRcmMKYo5GI6ShhVs.roa (hash: fM/pkR6hc+Rk8Y4Pv5WiOCAvHuO8a4L/ZF4n+86Y4cU=)
                          28: a5UQ2z1RVywe791ih-JkkJe4oZw.roa (hash: z7MPhCjNypY3ndHfuAxQLWPw6x9rN6BVeFB92z9Vk4Y=)
                          29: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=)
                          30: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=)
                          31: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=)
                          32: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=)
                          33: k0KEFHW4fL4Ef8MopdylpfXrtX4.roa (hash: b5DhgBm+P5R0/x6SS6V5aLIs9QaubKbpXVVnCYru10M=)
                          34: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: 3S1yZxdUryj0ueH2Icw41RYEZ+0N2ny/N+eUW0CS90s=)
                          35: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=)
                          36: n7A9iNcydEM0dF7od9K9kn6dOlw.roa (hash: Q9nTEs63rW/GSV52zGEUvJPOGvhBCV1t2N9qF9Q1Hb0=)
                          37: nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa (hash: 4eNmWGzY3LU27cy4MOpIuF5JDu6Bi58le7fddIW+ow8=)
                          38: ujdLXoXrvhVfjksNi3jvUUhxPZQ.roa (hash: M1NGr3Kp/N5WVzCoJ45GNTOp19udI/hDhcVdgHkpFVQ=)
                          39: xOvbONmuHLggj1kz21tIox0xOws.roa (hash: ds3rCPllIr2md5+i8qtkfA5r8fRJicK2asbgHg2K2Q0=)
                          40: xy_J0ROxeO0huKk7onCsjN7UNOQ.roa (hash: R5m+5yIeBjbxBtHtLNr/BLRLpreLmmWcMrdmSiu877E=)
                          41: yHBye4nlaaxTAtDNDXQDzEX11B8.roa (hash: 0oqnKR/h/3antDNOJoHgCBtABVjV/H49DAa5RcH6OnE=)
                          42: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:f1:20:62:85:35:47:dd:dc:4c:86:f7:f2:f9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Oct 19 21:01:26 2025 GMT
            Not After : Oct 20 21:01:26 2025 GMT
        Subject: CN=2988f70a668d1e93073f82f82890f0d39412a6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:94:a1:58:18:d9:8c:b7:e4:e0:85:05:c5:
                    8b:1e:12:fc:ac:d9:06:87:0a:ed:26:07:4e:f2:e0:
                    d1:24:f0:84:72:21:25:57:47:ce:de:14:0c:e7:23:
                    a0:47:cd:65:a2:26:3d:0a:87:90:18:ea:b1:cf:a2:
                    45:71:9b:a4:6d:d3:22:a2:47:4f:4c:f1:7c:8a:db:
                    9c:e4:d0:5d:4d:06:a8:f6:67:54:15:c7:36:4c:b3:
                    77:93:fa:33:48:03:00:24:52:fa:93:2e:d7:6d:8d:
                    17:53:9e:5e:df:3c:76:99:3b:85:3e:59:e8:e2:89:
                    02:15:2e:1b:15:78:d2:22:fe:a6:67:3a:04:98:3a:
                    5b:de:15:b7:0d:dc:d5:5e:c0:37:17:3c:35:2d:a0:
                    fe:92:5d:d0:75:c0:c6:e6:ff:43:dd:15:fa:c2:3c:
                    90:bf:d5:36:a8:1f:17:41:db:21:d4:b3:40:30:da:
                    5e:86:e6:37:58:51:76:a7:71:e8:2d:cf:c5:1d:c4:
                    f0:d6:2d:6f:68:33:54:4d:3f:40:17:4f:46:29:8e:
                    11:1a:c4:69:9d:0c:69:10:13:eb:01:0e:a0:c9:1a:
                    4d:ac:0d:35:0b:db:6d:79:c6:10:6e:82:f9:4a:06:
                    60:cb:46:64:d5:09:f7:f4:17:58:ca:12:b6:e6:72:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:F7:0A:66:8D:1E:93:07:3F:82:F8:28:90:F0:D3:94:12:A6:B9
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:72:e6:8a:aa:fb:c7:76:20:bc:da:32:92:dc:31:64:b7:92:
         5f:d5:07:12:9f:ef:63:4a:02:6b:8a:19:32:69:c5:0a:d4:fb:
         66:9c:d0:21:7e:09:9d:54:f0:7c:c7:fd:52:7d:22:4c:09:c7:
         59:82:46:79:57:18:7c:8d:05:dd:97:ee:4c:60:1a:af:6f:d6:
         d6:8f:d3:be:63:89:e3:a8:f4:9e:3f:cd:f4:6c:8b:55:a7:d7:
         0f:bf:19:40:72:64:b1:ec:be:b8:26:29:39:da:d4:8c:95:a1:
         e1:39:4e:5e:2a:5d:94:a0:b4:f2:1b:48:6c:1d:6a:10:9d:3a:
         7a:e0:0c:e3:ce:65:74:a2:11:cf:1b:ae:fe:ef:98:ef:e4:e4:
         67:82:80:21:1c:98:62:ec:67:cc:c9:73:e1:47:0c:ab:bf:16:
         40:76:51:60:f6:ea:8a:80:3d:42:ba:2d:7e:5a:26:cb:a7:8c:
         71:aa:a4:a1:f3:ad:ea:c4:bc:ab:86:ed:9f:8e:cb:b2:e6:f7:
         c1:68:1d:f9:dd:02:34:99:f9:cd:e2:0f:e0:08:5f:14:25:e5:
         eb:ae:17:5b:21:3d:7b:56:b6:24:82:6d:29:9d:de:0c:62:23:
         ca:d5:0e:50:34:42:97:a7:a7:84:35:9a:50:b7:62:26:1a:bf:
         8e:41:54:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----