Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
File:                     tCU8TyM86YR2ma5o7L9ddRSw-ts.mft (raw, json)
Hash identifier:          dYWP3lni8zaa1J1JQN4Vj45ZcqD0pXU73qjVg1qg5xY=
Subject key identifier:   79:F1:6F:EB:8B:5C:55:DE:2C:E1:8B:F4:D2:97:EA:F1:9D:96:4E:CD
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       0198D884F7BEDDB11EFF81CC3B5DB3F9B9F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
Manifest number:          1694
Signing time:             Sat 23 Aug 2025 20:00:49 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:49 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:49 +0000
Files and hashes:         1: 0s_8uV4y_4Qh9izsXyjdTvFnvko.roa (hash: eOw9cupvDiGzZK06bLbmO3r71BcAglZ1z0oB7mRXjtY=)
                          2: 1GKSBXVaZ0ag5v475kUXdEkbQhQ.roa (hash: X9uuaeQ/DFn7eKiljliRJ9ZtnztLoEh6oYyh/D1LlZE=)
                          3: 5y1fAHStJ-LIl-krEwTwF8xMfXw.roa (hash: CigYoXGgEpJO22j1bYVgQQOkgFTLXjpTUquBl/raWWc=)
                          4: 8LksUd4Bc07spLD8fADCnhn7LCM.roa (hash: Ltd+LZ1A4k2Ak2CxYsrw7bl+BSFB7+eAiWeQKA1mKH4=)
                          5: 9ZzfTs0es7d3dITh42i7PcrGHFI.roa (hash: j+RWh4sGZQYYo7/8IegKYIMXLt75CVdOknO/qydJXO0=)
                          6: 9aX1C0GBDjpl9KbtzL0_14BT4x4.roa (hash: 2ZwMdtmJ2Vb2cjnuC6vVTCJhkSLVLpECEfkccephonY=)
                          7: AWzKvVBumPuAv-ix9WEGZW27uLc.roa (hash: DAiyzPE0kSu04Hsgva4YCQLrUYc+yqLAnbyuT7wymo0=)
                          8: AXSoaMu602i_53-BQksf4H8rVso.roa (hash: Gozi2rQxeKnJmmPgfnbAWudEjv4AS8oCMzPcEaljedc=)
                          9: B_PNrqaypXS-uuqkeyPbkmY0Qnc.roa (hash: Du7C+6zjWvOoxLpFBJQPqQbDqvsJ2HaEuG+OJzC6pe8=)
                          10: CGUIbzoJQeR65zTqWRGx45Ja8R4.roa (hash: UN/Fnr6DI0baScUU9VdPUEJZbYixDKuX8x8+IhMnZMs=)
                          11: CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa (hash: zLuEq1mLrHs0mVf6yNVLD5Zej/7XVgYiGrCvNOWJeVo=)
                          12: D6p2t8uiBKfqdDi55_En4lYtIro.roa (hash: sj7YoIshSn7ixfErwrPSPMsqEYO9JvgtqizaCyYHm04=)
                          13: D8WtQTZCIdbzIxZEzqOjYt11R5A.roa (hash: mTjIP060ZUh7omSO0Zdfe1RUcEila1seoPIqhcfag/8=)
                          14: DEViOCwom1Mo8K90gqcr9zPFbsw.roa (hash: Cihwt2VtpCEg5M+ykbN0G+HzBd3bAEXknNMMljIBeis=)
                          15: DIjEKrN2QIgte3MOPHBqTqk6zL8.roa (hash: Djlgz0V/uM6rrvj+zsdR0L8f71DLX2CbBSL9RTlTtHY=)
                          16: DXFa04XkR8ChfH_xwX1BmgeTb_A.roa (hash: 1WqZ6YkVB4BBGv3WyiSyog9ZpZ/+LBnEHtOiijLFH+M=)
                          17: DhZk6hM6roky0GXyBISLUGoSmRs.roa (hash: pC/JWbY4U9zhPfPv2gepydBr/nV7NwyeUglshweIN8g=)
                          18: Ea4e2w-TlhuAPELanmi8d1DxoVs.roa (hash: QOPC10tzMsvEvvFKM74uMnOkNuc45EJt2v+p/yfgetA=)
                          19: FEp4V3P4SvU5bIxBRGf5REVatCI.roa (hash: AmoKP5wM2EI6Wb++arWmV3biIk/Ks/EcGE04F6LHmng=)
                          20: G1aApFV350lk6OS-Vyc-9RPE4-M.roa (hash: 7mUxZCiSxCgKGHPWHFdAuEdOy5f51Mh+o3uEji/Hz2o=)
                          21: GLdUx6Mq8lnhxMZlyh36cXuArUc.roa (hash: /6maqJyLJCZsoNtENWrCrEfLSdwCdyxAYSQXRDjR288=)
                          22: HAAgWHqkdMRqmc19opiIk4QvLvY.roa (hash: oRIuNu55ggWAnnK4TABpGs4LY3bJP2HWLbZZqvpkzPI=)
                          23: Ij0u4aEqiwJgZ9DwWrX6cCHy7bw.roa (hash: 8JcF/ZNT+C9IrR2OrdtXdAsZ+E+FEnCTr+m2GNnYuOc=)
                          24: LZq0FUTMcxN4welp3NcIvrEYcYw.roa (hash: HCRFlApUxilSWdrLbvTdJYldpokbEMHPwkoOwXJWdNI=)
                          25: NYC86BBuEJcyVLt5_VRehOd7hug.roa (hash: m7PSb81ZDGrYxDgDJu51cqbSBphKmTOCScI5P4IhrtI=)
                          26: O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa (hash: VRxwcyE4UrZz6xLqGqdVz8PVGg0wcs0oMtm/DmMYz1M=)
                          27: O9aaBKIbsI9Fl14QE_5gXVc466M.roa (hash: puorrULFQyq1rYKB90/Z0cb3hO3gtJLM6Iwr9QOTt/I=)
                          28: PHKOdowfTDkm4Ym-blDcENcWk9E.roa (hash: gEQ/3c+iOHJyyNR6EpoFDtWxPGDLhPruGOkZ744gOcQ=)
                          29: QwVFqW1cxvBL2o4-tPQAfG31V6w.roa (hash: IMKtYJw1aI4s13QbDf+l0CPN8GsM6khxtwC8WD7mBhQ=)
                          30: RUzXfADdmFEqEzN6P5KX5DHIcNc.roa (hash: lvZKC/ElUnGRUly3SVoAhCAAMBSnMiGtODQPJGvrDJA=)
                          31: S6-LsMS8UOxm1X7VabpjmNSwyI0.roa (hash: ISGzMTLOPHL5H8ofcmadroxeV92fZwtR8N0wvnG/8CY=)
                          32: TPgrv3-Rz1uG7sBK9Ywwao2cQ9E.roa (hash: ZyBXgBAANbwNEAytjzMmGl4UbJNZMOlMnvPElhDeYkc=)
                          33: U8ZUU3GFYbfbsIkHSaEoAuRmRVE.roa (hash: a2cZj3mdQkz6E8lml04tuTT4l7mx+oruDy+eevwshvQ=)
                          34: UZCoZ9iTJa-59E6kngXt58_J05Q.roa (hash: QNHS2wovka4SERkdOx96Y02FR40SnWP2tzMWZeNDd1E=)
                          35: X8CA8MplxHYpL5q3b_en-F-UQs4.roa (hash: kpBIXrcPDRA1vln2o7CgUflJFoexKXz4XzOQaKlJk44=)
                          36: XZs_n9LlWeIjgJyjQL-txO1IyBc.roa (hash: vdWb+SO51i4rlc6cEHTBn341KBPqNXiZLaJnJWGUZiA=)
                          37: a_HHfSnnEdlNg0ultiOhxzmWjFo.roa (hash: Xvx8P4+JF036CRUk9QunfpMcTc8ubzmyRZkCP638Vyk=)
                          38: asVMiTxQoOH4zq5J04HFS7t7oew.roa (hash: G//y1AaGY18G7+2P1OPo67QHsRKPZprev6YUEMRwkmo=)
                          39: bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa (hash: 6iwUdlESdz7+RkwneMjDQat08j+fPpdTnz5Y4bRYJrE=)
                          40: bbauAtpZJTnysprdGQB_7SBDCcc.roa (hash: S0jg+4F8XMSAzGWhr9YsJ3z7JLXhiocZw3kPMCq4hZU=)
                          41: cMPo4YpyyDUN4HXAKavH7BLGaEg.roa (hash: FZFlaBgot9IWdhWeB9A0YvT5yJ4VmfaV20DXW7RaKRw=)
                          42: dDJN0I-9g4eaOayV-D2asHocLds.roa (hash: OsVUxzOWHIIvs3G+yIJ8EZTTKtiy3cB0zrqdRNa7zHY=)
                          43: dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa (hash: t98pgB3eZJGWM8jwemiBCEit8151/JpilzmzBfDSgCE=)
                          44: eZULLshpMqJsslaZN07ZbXA7_a8.roa (hash: kHFcH9W+KqvgYoWxZWACVuGolVNMOd8+8Q2SvxFFqho=)
                          45: h8wPkuW6v520gSIrq-p3rQZnx5s.roa (hash: XPo5aSA4RsAh/kiPpMFtOxfPxaLX5GfrVz7xq+noQho=)
                          46: hfly-QA1TI8SEfY8okRD6J7LWnk.roa (hash: zPGsoxf6ulJsfd28h+ShLN/6uSNoxDnjudJQekSs+hU=)
                          47: hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa (hash: C14O+ch76NMbt5OI5YVUKsB04/tzGGuX2CLu1tn4/yw=)
                          48: k0QlprzRd36NvHYuNRv4f12GQM0.roa (hash: Hx84zYj3bWhYMPrnnvF3XuIdVOKhCJJnqYNhR0z12o8=)
                          49: k_q0_KCxGCY23ALr6XgnBWO3WkU.roa (hash: PK5vUI4tiDmBvp3V15H0GXhYuJsllxR7+Hz0FNggobg=)
                          50: oZQ0KLPPluLJX2BzR4Siyp1MYwc.roa (hash: CIlSeppEo+vRJ3AidstAx+zMSgZZV9xXWSANjJr4tvk=)
                          51: pFelJKjmsxI5R3DZJlChQC_3MD0.roa (hash: L8qIKNFDArN/1ptMdrOTwQqtla8X4v+mnYVreTvvMew=)
                          52: pG0mkjSpFcN6bJqBAZOYLrrCydg.roa (hash: d9LfFgKUYNmqqm0NXXgE2fV69QpfXlExSjmbZYXLteE=)
                          53: paWci91buJWWLtKLIOEAOw418mU.roa (hash: dlO2sPGf5wlMykSQwYuCaO5/Ofd38ZdhlMkCwlnECjI=)
                          54: qSF6nwyAcZBKbsVy6zwrTyHF9ws.roa (hash: FzvxNu1aICu/wHepWcUI8Z/WUlyAt8TsVejD9JLPlv8=)
                          55: t9NSysqYSVOb3-lSWme9hU4zhwE.roa (hash: Zg07uTwvFkymuiuSp6UEoXFGxNdx/y02GfTUe6wCzI0=)
                          56: tCU8TyM86YR2ma5o7L9ddRSw-ts.crl (hash: Es6hLRHU3LAnnwHJOieApDHkcsV0bLoSlwP2160vci4=)
                          57: vVJ9mSBx6hNqTzTJrHhncI477is.roa (hash: IBqwcIh1REPuGTD9omt2SEUvQhYlPWiLYp90qo+sIJg=)
                          58: yAXUepuqy1Jbj9R6XNC4ai7FfGg.roa (hash: Br5sE3EcvHbcirwbPVNtC+403MF64TtCvGh57mDUGD0=)
                          59: z-0CrEqUXAoUcisoviCwDteNUEU.roa (hash: lFkuxwfffEskjMEdfakNhlymEzyTB8krTfzuZVtheeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:f7:be:dd:b1:1e:ff:81:cc:3b:5d:b3:f9:b9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Aug 23 20:00:49 2025 GMT
            Not After : Aug 24 20:00:49 2025 GMT
        Subject: CN=79f16feb8b5c55de2ce18bf4d297eaf19d964ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:b0:70:ea:90:4a:64:b5:b2:3b:88:dd:06:
                    82:b0:26:50:c8:91:27:bf:23:dd:dc:f6:e3:86:cc:
                    6c:fb:81:69:23:bd:81:8b:63:0c:0a:3d:fc:be:a6:
                    38:9f:5f:6e:b7:59:ec:43:1b:b8:e1:ef:5d:53:ac:
                    50:76:a8:c4:3a:b2:8d:ba:d0:71:33:6c:d6:a0:e6:
                    1e:6f:4b:9e:fc:14:ae:e8:38:9b:bf:22:97:9d:68:
                    a4:cb:f5:c8:a6:7f:50:2c:8c:9f:29:62:02:1a:b0:
                    fb:e5:32:6f:f7:f2:e9:e1:4e:0d:f1:49:c7:a6:4c:
                    5a:62:15:54:e1:97:f7:5a:98:05:92:8a:0c:96:bd:
                    34:62:3d:69:2d:fb:cb:43:a3:a5:e6:a6:bf:da:5d:
                    92:a6:34:f4:81:ce:be:a2:76:d3:e0:34:ff:0f:a8:
                    52:fc:4b:58:94:79:dd:55:bf:b7:c2:ae:2c:cb:a8:
                    ec:7d:9a:3a:5e:c7:ab:5c:43:6f:db:2d:80:76:92:
                    6d:0b:0c:00:d5:cd:97:40:c7:39:65:14:04:b1:13:
                    f9:ee:6e:e3:85:0e:4b:e1:4b:4c:0c:e3:29:e0:33:
                    85:51:23:5f:bc:13:d1:36:54:bf:21:79:ed:5f:e9:
                    e7:ea:5c:16:0b:2c:89:f5:79:fe:69:fd:25:8e:3f:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:6F:EB:8B:5C:55:DE:2C:E1:8B:F4:D2:97:EA:F1:9D:96:4E:CD
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:bf:34:2e:9d:a7:f1:d7:6b:bf:ff:7c:51:a9:4c:b6:72:
         4a:03:1a:df:b3:b6:3f:b7:96:78:d3:37:5f:f0:6f:2f:2f:41:
         ea:a4:1d:35:1f:b4:e1:5e:4c:a8:f8:53:c9:b0:0c:2e:7b:34:
         70:19:e9:3c:24:5b:b2:58:ff:26:71:18:0e:90:0d:b0:be:0d:
         f4:6a:01:f0:0b:51:a6:4e:bb:b8:7f:fc:44:72:07:14:7a:c7:
         82:8f:67:f2:fd:bc:b1:15:15:21:68:72:82:cf:95:f8:c0:5d:
         53:06:c9:2a:31:2b:61:d3:4f:54:5d:6b:b9:8d:4f:82:bb:69:
         72:64:0e:69:c2:e2:70:77:f5:18:0a:ff:1f:98:57:8e:e8:d1:
         b5:c5:78:24:8b:a1:23:0f:11:02:47:ac:ef:c6:4b:5d:f8:93:
         cf:4d:63:70:08:56:63:6a:3e:c7:ec:29:52:16:e3:0c:df:49:
         f7:54:45:73:5e:89:d8:94:fc:07:d9:6d:07:e3:29:47:e5:46:
         18:ac:ff:a6:55:47:2c:49:3a:57:a3:7a:2c:fc:f1:d4:ad:81:
         68:dd:f2:4a:da:0c:9e:90:50:88:04:07:f2:44:12:f6:e5:64:
         ec:b9:75:84:f7:ed:b4:42:04:0b:ec:3a:60:92:db:ea:e2:77:
         55:ad:bd:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhPe+3bEe/4HMO12z+bnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjUwODIzMjAwMDQ5WhcNMjUwODI0MjAwMDQ5WjAzMTEwLwYDVQQD
Eyg3OWYxNmZlYjhiNWM1NWRlMmNlMThiZjRkMjk3ZWFmMTlkOTY0ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6uwcOqQSmS1sjuI3QaCsCZQyJEn
vyPd3Pbjhsxs+4FpI72Bi2MMCj38vqY4n19ut1nsQxu44e9dU6xQdqjEOrKNutBx
M2zWoOYeb0ue/BSu6DibvyKXnWiky/XIpn9QLIyfKWICGrD75TJv9/Lp4U4N8UnH
pkxaYhVU4Zf3WpgFkooMlr00Yj1pLfvLQ6Ol5qa/2l2SpjT0gc6+onbT4DT/D6hS
/EtYlHndVb+3wq4sy6jsfZo6XserXENv2y2AdpJtCwwA1c2XQMc5ZRQEsRP57m7j
hQ5L4UtMDOMp4DOFUSNfvBPRNlS/IXntX+nn6lwWCyyJ9Xn+af0ljj9riwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnxb+uLXFXeLOGL9NKX6vGdlk7NMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsS/NC6d
p/HXa7//fFGpTLZySgMa37O2P7eWeNM3X/BvLy9B6qQdNR+04V5MqPhTybAMLns0
cBnpPCRbslj/JnEYDpANsL4N9GoB8AtRpk67uH/8RHIHFHrHgo9n8v28sRUVIWhy
gs+V+MBdUwbJKjErYdNPVF1ruY1PgrtpcmQOacLicHf1GAr/H5hXjujRtcV4JIuh
Iw8RAkes78ZLXfiTz01jcAhWY2o+x+wpUhbjDN9J91RFc16J2JT8B9ltB+MpR+VG
GKz/plVHLEk6V6N6LPzx1K2BaN3yStoMnpBQiAQH8kQS9uVk7Ll1hPfttEIEC+w6
YJLb6uJ3Va29Fw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:53 2025 by rpki-client