Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          +8e0H/hk8iaMrfjO7sQfkezG1AQ3GNrGIuy7DVcZiEY=
Subject key identifier:   7A:CA:D0:00:84:82:C2:22:94:18:F6:F6:11:60:5B:39:89:40:3E:BC
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       0199FBB369AB1097D970F6177A3D7700B093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          1369
Signing time:             Sun 19 Oct 2025 09:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:03 +0000
Files and hashes:         1: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (hash: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=)
                          2: 1-KqzRG2ufGqmf5yQ7wQzU4Xpuyc.roa (hash: l2xJNQYVF3CqUltI0y/hIsNBwR8gaP86h2XHPrc9QSw=)
                          3: 1-UyIE7mqGVmQEQbqx8oewJU8LM.roa (hash: KQFvzUnWZGxgTX/FEU09xFGvTL2c/hN91WsuPQzlMhw=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: WQV5KlxnJ3Ag5MozzIS5yR09Ka5+5I4KY5rvk+I/QJw=)
                          5: 1Thh-ddTZfVIqD8iLx2me0HFkyk.roa (hash: JiNDcNhegE9v4OeDpVXiQordNiQilAq3rgA4Fmqk5iE=)
                          6: 2NIi98dN4sD0TIk71akteZnx1sw.roa (hash: k2get3lC4qal5WwpLqouWUlNle+TBDTdoCPLPn4qxTI=)
                          7: 30ltggt23rh7GTkDQejt9lmB4lI.roa (hash: 0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=)
                          8: 3KlMZ-8oPCOwu9zbCpY8l5ygzW0.roa (hash: Nge1ZCdkQPHDYH5IbuQgeafxrKKZqheIQyKLqfoWvq8=)
                          9: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (hash: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=)
                          10: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (hash: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=)
                          11: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (hash: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=)
                          12: 7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (hash: //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=)
                          13: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (hash: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=)
                          14: BF9-axl09aLWZxr5YBfgizGRwYQ.roa (hash: +Qu2Xjmm9jSdAOCIdC+nqYHdIw9cP+EHQrcHEv9RXEo=)
                          15: BKmZbRh0zQ9oa_wPaKfsvtQfYUE.roa (hash: MF5MiDvqIGWrFA0JrjP3/BbBY/oWFnXukDS276OlJ/k=)
                          16: DJvNc1stqMZ9mc1Wb-6RK-gsbvU.roa (hash: 1J9XRL8uRkAs4JvpW4rgrDzgKuN2J5fuItC/xeherRA=)
                          17: DlkMGzQHqOPh83nGG23nOj8tXkA.roa (hash: huMdxewxpuA4QGSVi+HwJbNMTf5SAHSJShnMsKq063c=)
                          18: F6rEC-DZF3Bn189GQxLFZdrW9ss.roa (hash: 0wg9QuGJMND5sNEy85LKkdkXbGMFG3a1ulykBXwSpbk=)
                          19: GKIBvtXq3THm63QH_8TaUji8HSI.roa (hash: +pvrI4erf1Lcj/8FcUip5ayRE0gXLz82FrGP84f2lSQ=)
                          20: I9PPHzCZLC3KRf5pPW4mcpNhTV8.roa (hash: 5VGGGh+D7rGqED1Cty/ds9a2QEhu4eIqlF+8kjtmXGs=)
                          21: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (hash: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=)
                          22: Mxanuz8H-jWPQ76CbAjfFZuLeOE.roa (hash: WVAlOpmnROyos+uYcbi4ZsjrfBBSfqbkTnpaMGhtSfM=)
                          23: R8VY5MGVdE17A_2z_8Qznz96tZE.roa (hash: Y6Us+zb47DyfsgxnI70nrLZEznsAibIlmNM0YizAwAI=)
                          24: R_6Boo__taaN3VAx2GBKAmJIKdQ.roa (hash: fuyB9El3FH7/OJZWRGlAxDEIBNos8nEiSk5ALbrazqs=)
                          25: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (hash: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=)
                          26: WVBsvJvxRXXzpiKQ5ooLV7iApwM.roa (hash: UI0HWLgrfRu9Oc9UqkpdFHFYDHuUCfL1cPPzzUGZoy0=)
                          27: XPRcOQ12damhWz672VXQCKzctD0.roa (hash: +UjnKkHiRNO5TAw4O2QYp9JmNxVCRQBE+d4ZaSLhA7Y=)
                          28: Ywm1jYc0iwGuAB63sRGCNirYSf4.roa (hash: r1HsrQz41mTN+65j1uhqS2AuuYL14Zx4+m/FTWRASv4=)
                          29: aQXWpkeo8CYBrBnYK0PT1cWdHCk.roa (hash: JF3VKXhZgLXaADeU/i5/1vCJwGFlrS9omLotINcIakY=)
                          30: bujGm6GH7mncfnxw5jTViL-bAwE.roa (hash: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=)
                          31: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (hash: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=)
                          32: i9xl1BGjEAWIRyvR7FDaRtUp3sM.roa (hash: jIIVL6j/6oDSxEFQvBU+uhsuGADZLxaxVVKJQbxIUsg=)
                          33: igGBFD8kNEyp0oLcDRQiMdpWqUg.roa (hash: JBfHKzIq0hybb3YSwoXuYc0ak5WjhrecAhw46dVwLpA=)
                          34: jimBz39dlHE2MfUY4L25nGwN-0k.roa (hash: ERw9Pg+xxXFworqjhjysZEnVIEowGkRsBZaaEld0xWo=)
                          35: n0D7QgHWZsopO1EgFVVvK-P6Dwo.roa (hash: 1Tdg8cemFUBIoV4egYbYb5wLjUFGRRBY2gDNWEAljR4=)
                          36: n74OnOk2cupPxqpmEGxm3X6NJi0.roa (hash: 4IFl5DFKU9Rz9OqnMogOy+LZtMk2c06yHfw/g7OpLv4=)
                          37: nE4q77HuE9eMvcYlJ0VXC5AQzH4.roa (hash: xhWHmf0Wl/9mSIPxWksh0jgqlzI8er3WRgeIRoZRvn0=)
                          38: nEOSCuQAAizH0ilRTTzdJdp07z8.roa (hash: NGLT1fxnsJeE2MIO3wdKFSCjjav2t9smqtzM/SWaYKo=)
                          39: nq598Y-mH7WXt-wp7oTFReqn5JI.roa (hash: Lm1lMb1JelLgN0kxz8OzEijA9ElHx0kaIfvRfFoPkz8=)
                          40: sIt3F6ds6E5Cw-7IGWGY_E58vEs.roa (hash: Sbu/A4tPhb/YMsWEmB4prBnkedMa/77cZPz9BrDKBSg=)
                          41: s_sfe0PwpYYFQ6HtLR5YzbGsYe8.roa (hash: Q4EHED4zem9TjQrfPSu31rh8tUnEGOxod/kov3RZEgM=)
                          42: sc5esKExOPd9MvtDyHiUo5axTto.roa (hash: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=)
                          43: tBCiClZ01i6bRTFcoV9J9olvPiQ.roa (hash: F04EUBkZe5J5GkXs7KwkzKr7Lxa3zzkxl/rd7ozso6E=)
                          44: uLID9O7nU2pNtz7HGdAH46WS7JM.roa (hash: oYgEaY31SpEl7BoKtZCP9Lzuu9kwt/rbH0ExUKFH0PU=)
                          45: uxnZYNa8d97ZTb_0yY6HvXc3zYY.roa (hash: Uc2FRxSyDw4WWufpEWvzn7eMEVoT2cdYyXigSL+3Mr8=)
                          46: v-xNq330WdoiiPlZjkVxav1Azgs.roa (hash: 5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=)
                          47: yh9ccliyxEcC6Avn1oCQoSv62L0.roa (hash: +3+0y4CEemTmWkaSTewyd3AcJUzmmij1RdzS9B5WjYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:69:ab:10:97:d9:70:f6:17:7a:3d:77:00:b0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Oct 19 09:01:03 2025 GMT
            Not After : Oct 20 09:01:03 2025 GMT
        Subject: CN=7acad0008482c2229418f6f611605b3989403ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:b5:8a:fa:b1:2b:7e:a6:34:9e:78:78:1e:
                    ea:2c:db:5a:58:bf:2b:68:c2:04:7f:d5:e2:cb:62:
                    90:91:4c:05:27:36:6f:97:f8:8e:b7:7f:e6:5c:d3:
                    d8:bd:b6:c3:54:bb:ff:44:b4:27:c3:e7:60:44:4b:
                    68:5d:35:4b:67:e6:3f:c8:c6:c8:0e:28:96:9c:d2:
                    4c:fb:d9:50:a1:32:19:c4:27:7d:0e:23:f9:93:33:
                    10:12:f3:21:a4:92:b2:f3:84:35:16:46:aa:c8:7a:
                    2f:c5:bd:cd:94:1c:22:29:66:31:17:cf:7a:26:70:
                    f8:9f:e9:ba:4a:bd:f4:f8:f3:30:ae:90:9c:5b:1f:
                    c2:4e:8f:7c:a4:3b:97:9e:52:0b:cd:9e:83:89:6a:
                    9f:02:39:19:e4:bb:70:78:af:9c:ac:06:6c:de:8b:
                    00:1c:a7:42:36:0f:ba:63:f2:36:2c:e2:31:3e:7c:
                    06:7c:b3:36:c3:de:72:95:4e:27:1d:22:f6:96:7b:
                    55:20:1e:15:ad:73:b3:2e:73:ab:56:fc:4c:eb:2b:
                    57:e8:61:fd:d1:6a:2b:b5:32:9c:d4:ea:67:f0:c3:
                    44:0b:87:d9:3a:31:ba:42:94:32:ce:20:59:7f:2a:
                    34:23:f4:79:33:cb:b1:d4:5e:23:90:37:ea:22:8c:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CA:D0:00:84:82:C2:22:94:18:F6:F6:11:60:5B:39:89:40:3E:BC
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:cd:7c:0a:fa:a2:e4:78:b1:d9:04:c3:10:83:4a:49:34:
         ec:0b:13:3f:90:a5:15:2b:10:50:a9:2c:5e:cc:75:5e:43:b4:
         0f:20:f2:da:81:3f:88:5c:80:a9:7a:fa:3b:16:d6:5a:32:49:
         ab:24:0d:3c:3c:c4:d6:54:9c:c8:06:5e:b7:dc:c2:4d:f0:db:
         0a:bd:e9:a6:d4:13:f4:fa:d7:9e:1c:36:29:01:d5:e5:b6:f0:
         4a:cd:8c:78:2e:4a:19:77:34:e2:9e:22:41:06:5e:c5:5d:61:
         b3:b3:17:93:08:31:67:78:2c:b0:45:f4:4c:b9:c5:c2:c4:22:
         fa:c9:e9:df:00:07:51:3b:20:f1:25:d7:fd:84:bb:58:b6:c6:
         dc:7e:6f:34:3e:3e:67:5c:31:41:9d:dd:d9:09:1b:9d:c7:a6:
         8c:d0:4e:bf:7b:29:5a:a7:78:66:85:fe:64:9c:60:de:16:19:
         1d:22:4b:61:57:82:e7:56:6e:6a:c3:bb:1b:01:d3:66:15:fc:
         86:0c:d4:14:d3:c5:73:c3:1d:04:2b:92:42:14:25:d2:e4:38:
         9f:6d:f7:23:c2:ae:08:68:92:29:31:23:15:23:f3:5c:e7:23:
         d7:02:cc:db:24:f1:94:30:18:dc:47:55:f5:b3:3e:3b:61:80:
         d5:31:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:13 2025 by rpki-client