Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          GgbunkBWjbrgMZjD43BlsK1s0haRNaYSIbKWIb3XXJE=
Subject key identifier:   0D:E1:FF:31:B9:9D:32:80:E3:E8:6D:6C:6F:E6:22:89:48:06:C6:76
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       0199FEB4CC08759C93266398762616A6261B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1724
Signing time:             Sun 19 Oct 2025 23:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:25 +0000
Files and hashes:         1: 1G4hJtK-Q6kU7icYScQRC5-Be-s.roa (hash: dMz2je+c/O1VWWnftEtGiGhh3+EYMNwffk18Dr9qsq8=)
                          2: 48lDGC9bYCTuSM8HwQhmLCbmZus.roa (hash: NHmuOU8Cy9kJ9mGcVBS8Mv1uoHjoSm8ONFcGWnM3sBI=)
                          3: 5XmJB8L9LQKzWCvnzU0no13nSW0.roa (hash: T9GOvhBZ+sI1Yn9j42OnP6O/5jv10olowsyPXKbQ3qs=)
                          4: 7hWCsPelXMQmpESwr4GWvxzkq98.roa (hash: oD7zlhvzmlTWXnuOdQmMdbtoa//UwgMcOCLQqr4S1S8=)
                          5: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (hash: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=)
                          6: Am-SSkYzBGNOVD5iZuCxEBeUzyE.roa (hash: mvoXPLstsggjeVFKeI+JEtzXmHTtkfMv+mllobMchjw=)
                          7: Bm5srVh_81xtwsDQZjL_phr1EiE.roa (hash: 7fmqR7TnR8pgOLrtjSSrB/cFA86aEz/WfgUxvDNNZKU=)
                          8: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=)
                          9: IqmCKhj0YirWDztKQKxV-Tkp8wA.roa (hash: PBdp+ZbHGedan6tJHhjQF/VqDVDnpQuJLH8duAyClhY=)
                          10: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
                          11: LxDX7O3eQGaJYExU85kcexK4__Q.roa (hash: rErxx7Om3Ta/mvJcqv+K5/2MJQzhGaZ1sKgBE7WSm3c=)
                          12: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
                          13: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=)
                          14: SQq8_rpvdfY7BXFUyrphnnlL84o.roa (hash: vSJi9Ykpxa0TPPtAkLzqMYrT9acxNfMsWIZzD/ELaTo=)
                          15: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=)
                          16: _8zCTGBJxw-u7lVEsPTjCM3nWwA.roa (hash: LjXxLmtwWhA2Mlf9B9WEsLpzMalKSd7C+ucRfQqnP4k=)
                          17: _CZTuF6DCgR7hWjr3imC3BuUGco.roa (hash: otj+SUgUnYev14Hu3/FWe/Yz8NTcHKr89T8ufOfcyxo=)
                          18: _U2iLKvuzlqwilJSzER831z98M8.roa (hash: okZmcDXPqmxDEhwwoZbqsUwyHhANmRv1gbDLhJFifeM=)
                          19: _YRU7gsUw7AnTGw-h2hVshCcJZw.roa (hash: UcrlnWWaVRHvoC0MHPAo0D7Go62USxqpkzcfjfXtLfc=)
                          20: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=)
                          21: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=)
                          22: ohVU4yVmd-OijruvfZC34wLcjwg.roa (hash: yjaz/vvh2Eiz0xB2wMJcJT1niuvKwNPERYNbxNIkKUo=)
                          23: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=)
                          24: tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa (hash: 1l4DY4og67nsoecheqcUHwFJJl1I+VZAOse9iPXrkJI=)
                          25: uFUEGSfPHjgulVJP0gmjr5Io5BE.roa (hash: N+zSHr/8E6EDAHMdhe9NDa8SXOzYh6T68xumfpCPwis=)
                          26: uH80Eiiaft3lL2JNSBJK4vprMmE.roa (hash: vDDRb77ZSje6Mi35F5Bp/wnrEb7HYmMVlt3kX82ZuxQ=)
                          27: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: c1KStfHue7vbeeGN/IhlkKVycdF+IlqXyVahPIYOdFU=)
                          28: zKC6n_t_VgG-LjOI7EZyAWxbwfA.roa (hash: xTXsk3AHK3+UMeTc89XGRCu0j4laHeIShFJJ2s+vJRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:cc:08:75:9c:93:26:63:98:76:26:16:a6:26:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Oct 19 23:01:25 2025 GMT
            Not After : Oct 20 23:01:25 2025 GMT
        Subject: CN=0de1ff31b99d3280e3e86d6c6fe622894806c676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:c6:78:d0:c5:4e:06:47:f6:05:db:f5:21:
                    50:ae:43:52:37:21:6b:45:2b:07:3d:3b:94:06:1c:
                    cb:46:d7:83:b3:44:47:2e:7b:d3:6f:76:72:14:2d:
                    84:94:0c:30:50:c1:50:a7:e2:83:8c:fc:76:5b:9f:
                    df:ae:ac:de:f9:fa:05:72:81:b0:0a:0a:dd:74:6a:
                    d0:cc:31:03:53:f2:ba:65:97:da:03:d8:83:23:3c:
                    3a:e6:5b:5b:84:4c:00:fe:92:f4:bd:6a:c0:64:c2:
                    47:8d:03:4d:cb:24:c7:e1:0f:65:81:19:dc:c4:da:
                    87:d8:df:19:fd:20:68:54:d1:71:59:a5:25:b3:2c:
                    6d:72:fe:60:1a:25:3d:83:d2:bb:19:1d:1e:a2:1f:
                    9d:a5:76:a4:74:8b:e1:bf:0e:51:98:5f:a1:29:51:
                    2e:09:b8:d0:27:7f:2b:5e:3e:5a:bf:ca:6e:d0:b9:
                    2b:35:97:60:6f:ee:08:cb:f3:8d:19:19:8f:98:c9:
                    6f:23:80:84:15:0f:2b:72:25:84:77:aa:6d:20:9b:
                    56:61:e8:e1:cc:df:d7:63:57:31:20:aa:87:24:4b:
                    c9:87:59:46:93:c6:7e:38:73:d7:78:a8:cb:e6:2f:
                    a5:9f:4a:70:e1:1f:a3:a3:5c:37:99:a8:8f:cd:72:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:FF:31:B9:9D:32:80:E3:E8:6D:6C:6F:E6:22:89:48:06:C6:76
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:30:f2:73:cf:d2:66:9c:f2:91:fb:73:34:92:d5:18:6a:
         4c:95:4a:be:27:d5:61:fe:23:90:9e:28:c3:95:94:6e:81:d0:
         d0:34:15:20:f8:98:12:cf:c7:c3:70:6b:00:93:cf:ec:2b:e6:
         76:bc:d7:f5:14:a8:b1:8e:49:a5:0a:8c:84:47:5d:5b:22:6b:
         e7:b1:13:31:e1:26:6b:ec:b7:93:0c:f1:7e:34:fc:28:b2:2b:
         87:83:a1:81:3a:9b:9d:04:f2:07:d9:05:18:56:4a:54:3b:9c:
         f0:d4:d9:1f:f0:cd:f5:ff:bd:39:10:f4:86:de:a4:10:f3:18:
         7e:43:70:11:87:29:1e:1d:63:42:ec:6a:b3:19:dc:29:75:59:
         c1:69:5b:cf:10:8a:02:ee:96:f1:09:6c:a0:8b:4f:7b:40:4b:
         e8:17:20:ec:3b:44:50:cf:f0:29:56:1a:4f:bd:77:38:b7:c4:
         70:da:83:c3:69:6e:56:69:3e:65:12:c5:d5:67:89:63:8a:fd:
         22:63:5f:31:58:7b:80:8b:ad:10:2b:9a:b0:9c:f3:77:8b:3e:
         3d:f6:73:c6:e1:ff:13:ab:5b:c9:0a:6d:5a:b9:c9:7f:e1:99:
         ed:6e:1f:b3:78:65:5c:65:24:1c:40:01:d0:c5:36:76:5c:73:
         35:07:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:09 2025 by rpki-client