Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          Nyyo7Lh670csBWSBaHs+OMoYXrKRPInlfqlAtWu1a60=
Subject key identifier:   C8:03:E2:43:FD:1A:E3:FE:1F:B9:35:51:26:F0:99:69:9B:09:C8:F3
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       0199FB0ED147209F084C5D322042AE0BA567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          173E
Signing time:             Sun 19 Oct 2025 06:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:16 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: J2u-WNebQOND5pQrDIUacy8j8l8.roa (hash: Vvd0TjXjR9FhkBvtO2YJqbWdHXAU/GB3ZQoXK3zVnls=)
                          12: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          13: V-iBWNvDzOjE3oj3ZsxRXOFIkLI.roa (hash: bJv9u1JtLOAJLodQfH0YKSj356adakaFHXlAlJZDi/w=)
                          14: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          15: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: WN5u2uWAEzrxdlw6eTA1e0B73NHuiWwv+EDKpJQ7I9U=)
                          20: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          21: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          22: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          23: qlRuFgW9QpSZ-B-QqBWtqwtHSbQ.roa (hash: NvSiolrhWigq47yPhLr31U+7NECb9us+yowLt16g6Mw=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          26: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          27: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          28: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          29: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:d1:47:20:9f:08:4c:5d:32:20:42:ae:0b:a5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Oct 19 06:01:16 2025 GMT
            Not After : Oct 20 06:01:16 2025 GMT
        Subject: CN=c803e243fd1ae3fe1fb9355126f099699b09c8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:f4:ac:22:14:f7:5a:5d:83:06:a6:27:1c:
                    c7:8b:d9:38:8b:1c:a6:97:9f:c4:c4:84:4d:af:73:
                    a5:3c:9b:6a:52:63:b1:24:3b:72:2e:99:2d:eb:46:
                    91:72:b5:ec:ea:71:5e:40:e7:83:2c:d4:ff:3b:c0:
                    bf:52:59:6b:ac:4e:1f:a3:23:65:76:77:54:0f:2d:
                    e6:ac:00:e2:42:9f:2a:65:fb:10:dc:c8:61:6c:87:
                    31:28:30:d8:5e:37:83:fa:bc:7b:35:12:4e:de:0f:
                    2e:68:76:4f:3b:e6:7b:0e:5c:be:67:10:d6:48:0e:
                    7d:fc:a7:af:ac:df:09:bc:b4:ba:a1:ac:39:f7:b9:
                    6d:94:5b:f3:72:b1:d6:77:d1:84:2b:82:bc:9e:43:
                    39:dc:df:34:c1:8b:2a:92:64:3a:61:e8:cf:bd:a3:
                    73:a3:82:77:ad:e7:b5:bf:c6:ef:a9:4e:a2:ba:d1:
                    f1:b3:32:7e:fc:b0:6e:5c:32:44:b0:a5:ae:98:ce:
                    ac:67:3d:d5:01:98:ba:08:fd:62:ca:5d:98:75:3a:
                    07:51:0d:8e:39:9a:45:b2:a1:0b:15:45:96:72:02:
                    ed:5f:5b:41:a3:5b:a8:04:d7:13:cf:da:8e:95:fc:
                    c1:2d:e0:07:a9:ca:a8:47:91:66:ff:37:98:00:d9:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:03:E2:43:FD:1A:E3:FE:1F:B9:35:51:26:F0:99:69:9B:09:C8:F3
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:43:c3:d7:30:c3:40:54:73:76:00:02:9c:80:c4:84:a7:
         bb:c4:81:ec:4b:03:90:11:56:9a:41:8c:2a:e2:51:f5:80:ff:
         95:48:33:f4:b9:34:e8:3c:09:06:85:e9:33:94:01:ba:65:d6:
         2e:cb:fc:6a:f9:a6:56:66:7c:33:57:60:28:91:cc:ae:57:34:
         26:82:bd:72:e1:28:ca:35:17:b0:e8:b9:09:0d:c1:ce:6f:c8:
         5f:a7:92:9a:fb:38:51:86:98:a5:13:0a:c1:ea:75:43:94:74:
         0b:6d:03:f9:d8:d3:13:23:1f:64:cd:6b:ec:e6:99:c7:92:78:
         71:ef:41:dd:ce:3b:bb:65:db:2a:5b:d9:d8:06:a5:32:64:28:
         9b:30:05:c4:e0:db:f5:9a:35:df:d5:e7:b7:51:64:28:a8:cd:
         da:32:33:43:90:65:3e:cf:c0:7a:63:1b:b0:47:f6:03:bd:55:
         29:7f:e7:c1:52:c6:e4:fb:90:7d:02:b4:82:e9:5c:45:97:99:
         be:c7:c7:b4:98:3b:d9:72:5c:b8:e4:ff:c6:33:5d:4e:64:9f:
         0f:61:6d:c7:30:9f:65:bf:36:34:c6:63:fe:af:20:e2:d5:91:
         15:ff:47:8b:2d:a2:fc:76:08:53:c1:d6:ea:8b:c6:5b:d7:16:
         1d:af:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:17 2025 by rpki-client