Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          UqJdj1go/LpuvWvo6qLPdbMnHVa5I7n9i0wJ6agHWhk=
Subject key identifier:   C7:2F:7A:4C:2C:F6:D2:19:53:22:97:B2:62:89:E2:4D:3B:76:C4:71
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       0198D404BF1BF2375D27240029F51E299FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          12C8
Signing time:             Fri 22 Aug 2025 23:02:17 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:17 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:17 +0000
Files and hashes:         1: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (hash: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=)
                          2: 1-KqzRG2ufGqmf5yQ7wQzU4Xpuyc.roa (hash: l2xJNQYVF3CqUltI0y/hIsNBwR8gaP86h2XHPrc9QSw=)
                          3: 1-UyIE7mqGVmQEQbqx8oewJU8LM.roa (hash: KQFvzUnWZGxgTX/FEU09xFGvTL2c/hN91WsuPQzlMhw=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: aj8rXzsPln15oe1oakD5WKe/VPmGrOQnHgDCSGtRopg=)
                          5: 2NIi98dN4sD0TIk71akteZnx1sw.roa (hash: k2get3lC4qal5WwpLqouWUlNle+TBDTdoCPLPn4qxTI=)
                          6: 30ltggt23rh7GTkDQejt9lmB4lI.roa (hash: 0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=)
                          7: 3KlMZ-8oPCOwu9zbCpY8l5ygzW0.roa (hash: Nge1ZCdkQPHDYH5IbuQgeafxrKKZqheIQyKLqfoWvq8=)
                          8: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (hash: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=)
                          9: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (hash: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=)
                          10: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (hash: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=)
                          11: 7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (hash: //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=)
                          12: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (hash: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=)
                          13: BF9-axl09aLWZxr5YBfgizGRwYQ.roa (hash: +Qu2Xjmm9jSdAOCIdC+nqYHdIw9cP+EHQrcHEv9RXEo=)
                          14: BKmZbRh0zQ9oa_wPaKfsvtQfYUE.roa (hash: MF5MiDvqIGWrFA0JrjP3/BbBY/oWFnXukDS276OlJ/k=)
                          15: DWWu1oVF2mdvJMucEtU7uCQwtIE.roa (hash: aAuGtxrXgaK+BVUTnKou9LLVeFIpGZ/gKCSewU27gCk=)
                          16: DlkMGzQHqOPh83nGG23nOj8tXkA.roa (hash: huMdxewxpuA4QGSVi+HwJbNMTf5SAHSJShnMsKq063c=)
                          17: F6rEC-DZF3Bn189GQxLFZdrW9ss.roa (hash: 0wg9QuGJMND5sNEy85LKkdkXbGMFG3a1ulykBXwSpbk=)
                          18: GKIBvtXq3THm63QH_8TaUji8HSI.roa (hash: +pvrI4erf1Lcj/8FcUip5ayRE0gXLz82FrGP84f2lSQ=)
                          19: I9PPHzCZLC3KRf5pPW4mcpNhTV8.roa (hash: 5VGGGh+D7rGqED1Cty/ds9a2QEhu4eIqlF+8kjtmXGs=)
                          20: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (hash: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=)
                          21: KsdspA2MoKkVoFCXal_5ncHXxFQ.roa (hash: 3LFoOYaJ+oCMr/nbexDRPdA4xLqgKNUJVUNsBuPiNi8=)
                          22: OVIN2I2HMxPGvvccBQ7JRPb-FOU.roa (hash: yeZoH767DGcpK6154bXnGYsbkSCc36PxnN7xleBqGro=)
                          23: R8VY5MGVdE17A_2z_8Qznz96tZE.roa (hash: Y6Us+zb47DyfsgxnI70nrLZEznsAibIlmNM0YizAwAI=)
                          24: R_6Boo__taaN3VAx2GBKAmJIKdQ.roa (hash: fuyB9El3FH7/OJZWRGlAxDEIBNos8nEiSk5ALbrazqs=)
                          25: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (hash: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=)
                          26: UbBowgJO64AbNJQONn43HBBmUMs.roa (hash: aEgbNonS/d/Sk1EKZEDiv5UeXQ2Ujam6n98rqCde7Bw=)
                          27: XPRcOQ12damhWz672VXQCKzctD0.roa (hash: +UjnKkHiRNO5TAw4O2QYp9JmNxVCRQBE+d4ZaSLhA7Y=)
                          28: Ywm1jYc0iwGuAB63sRGCNirYSf4.roa (hash: r1HsrQz41mTN+65j1uhqS2AuuYL14Zx4+m/FTWRASv4=)
                          29: aQXWpkeo8CYBrBnYK0PT1cWdHCk.roa (hash: JF3VKXhZgLXaADeU/i5/1vCJwGFlrS9omLotINcIakY=)
                          30: bujGm6GH7mncfnxw5jTViL-bAwE.roa (hash: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=)
                          31: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (hash: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=)
                          32: i9xl1BGjEAWIRyvR7FDaRtUp3sM.roa (hash: jIIVL6j/6oDSxEFQvBU+uhsuGADZLxaxVVKJQbxIUsg=)
                          33: igGBFD8kNEyp0oLcDRQiMdpWqUg.roa (hash: JBfHKzIq0hybb3YSwoXuYc0ak5WjhrecAhw46dVwLpA=)
                          34: jimBz39dlHE2MfUY4L25nGwN-0k.roa (hash: ERw9Pg+xxXFworqjhjysZEnVIEowGkRsBZaaEld0xWo=)
                          35: n0D7QgHWZsopO1EgFVVvK-P6Dwo.roa (hash: 1Tdg8cemFUBIoV4egYbYb5wLjUFGRRBY2gDNWEAljR4=)
                          36: n74OnOk2cupPxqpmEGxm3X6NJi0.roa (hash: 4IFl5DFKU9Rz9OqnMogOy+LZtMk2c06yHfw/g7OpLv4=)
                          37: nE4q77HuE9eMvcYlJ0VXC5AQzH4.roa (hash: xhWHmf0Wl/9mSIPxWksh0jgqlzI8er3WRgeIRoZRvn0=)
                          38: nEOSCuQAAizH0ilRTTzdJdp07z8.roa (hash: NGLT1fxnsJeE2MIO3wdKFSCjjav2t9smqtzM/SWaYKo=)
                          39: nq598Y-mH7WXt-wp7oTFReqn5JI.roa (hash: Lm1lMb1JelLgN0kxz8OzEijA9ElHx0kaIfvRfFoPkz8=)
                          40: o61tWyoDeSANWV5bTMy4s3KqSks.roa (hash: PQTk7QcYHLBNLSmS0Wr55gg+GLop4Y4wA8UmdzsBXis=)
                          41: sIt3F6ds6E5Cw-7IGWGY_E58vEs.roa (hash: Sbu/A4tPhb/YMsWEmB4prBnkedMa/77cZPz9BrDKBSg=)
                          42: s_sfe0PwpYYFQ6HtLR5YzbGsYe8.roa (hash: Q4EHED4zem9TjQrfPSu31rh8tUnEGOxod/kov3RZEgM=)
                          43: sc5esKExOPd9MvtDyHiUo5axTto.roa (hash: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=)
                          44: tBCiClZ01i6bRTFcoV9J9olvPiQ.roa (hash: F04EUBkZe5J5GkXs7KwkzKr7Lxa3zzkxl/rd7ozso6E=)
                          45: uxnZYNa8d97ZTb_0yY6HvXc3zYY.roa (hash: Uc2FRxSyDw4WWufpEWvzn7eMEVoT2cdYyXigSL+3Mr8=)
                          46: v-xNq330WdoiiPlZjkVxav1Azgs.roa (hash: 5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=)
                          47: yh9ccliyxEcC6Avn1oCQoSv62L0.roa (hash: +3+0y4CEemTmWkaSTewyd3AcJUzmmij1RdzS9B5WjYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:bf:1b:f2:37:5d:27:24:00:29:f5:1e:29:9f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Aug 22 23:02:17 2025 GMT
            Not After : Aug 23 23:02:17 2025 GMT
        Subject: CN=c72f7a4c2cf6d219532297b26289e24d3b76c471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:49:33:bf:66:40:19:68:7d:6c:76:72:3c:
                    17:91:a6:8f:f5:11:d9:59:d6:9f:9c:95:0f:18:68:
                    49:24:ab:b4:55:46:cf:26:f2:dd:fd:4f:2e:da:ca:
                    78:b9:24:08:10:9a:4e:2e:a8:23:06:1f:47:c1:25:
                    fb:6d:63:93:b1:85:f1:4d:9e:74:91:68:9c:f4:97:
                    97:61:04:76:34:04:01:cf:7d:6c:82:45:1b:b3:1d:
                    bd:62:a5:5e:60:58:2a:40:65:a9:86:9b:99:6a:ce:
                    2c:f5:7b:8e:a5:b2:f5:39:aa:e2:46:31:88:40:b5:
                    36:5b:3a:ae:25:e3:5a:cc:f4:76:6b:0d:44:11:de:
                    67:51:95:c8:d5:2f:0c:ba:01:16:ab:6d:5a:96:3f:
                    8e:a4:bf:55:0d:5c:75:0a:ed:93:01:21:e0:5c:e3:
                    a5:a7:f4:95:fe:d7:11:c6:a7:7f:ce:3d:ea:8e:2b:
                    88:88:45:3a:17:c3:ac:94:a2:9b:31:66:17:3a:96:
                    78:cb:cc:e5:c3:ac:13:eb:01:b0:cb:5d:89:27:8e:
                    1f:4d:3d:3b:30:69:2f:93:3e:3a:59:0a:43:a0:db:
                    f1:95:8e:23:cd:32:c7:6b:e9:e8:16:4b:d1:6a:78:
                    50:de:3c:f3:17:c3:49:d3:1e:52:6d:ed:6a:06:a1:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2F:7A:4C:2C:F6:D2:19:53:22:97:B2:62:89:E2:4D:3B:76:C4:71
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:e7:9b:73:ab:31:c2:2e:12:87:ba:bd:31:dc:ba:b8:5c:
         21:13:29:a7:4a:a0:95:e5:c1:1f:d5:70:1f:24:33:a0:20:bf:
         2a:cf:fb:ce:ad:92:97:e9:d1:df:4a:37:0d:05:81:19:53:1c:
         27:bb:81:25:21:f2:2b:cc:f8:cb:19:f6:81:88:32:3c:3d:f1:
         99:2e:45:ba:10:d6:47:06:39:d7:3a:cc:63:59:48:70:d2:ac:
         88:2a:58:d0:88:5b:a3:46:25:78:e9:77:e6:37:97:3e:2c:7e:
         c2:84:41:d5:d2:17:c9:41:5d:f6:51:5d:c9:04:94:76:af:41:
         d3:bc:18:5d:ce:0e:42:eb:87:77:77:50:b3:6a:47:84:3d:00:
         53:47:83:17:34:a2:23:6c:fc:57:ec:39:bf:dc:04:31:47:de:
         91:c0:cd:39:33:b5:e4:64:83:d8:10:3d:a5:5b:e7:fe:55:9f:
         cb:4a:1c:0f:66:12:45:35:cf:cc:bd:52:2b:90:64:5b:11:ef:
         ca:f0:76:bc:86:99:d9:d4:35:d6:57:3b:4a:c4:3a:80:6b:65:
         b7:a8:2e:25:16:91:db:2e:ac:46:e5:81:a5:02:09:b5:20:dc:
         51:23:41:c3:db:bf:0a:0e:a2:25:5d:7c:68:16:37:e2:b5:87:
         8e:86:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:03 2025 by rpki-client