Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          J6v/DSqwjZlbXyTZRTQSM4iK8S50WguPQ0mMsBfQ5lA=
Subject key identifier:   04:9C:E8:CE:D8:91:B0:5A:28:DA:91:71:26:AF:BD:17:54:52:10:66
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       0197BB903B4A5B81D25CFAD0F5B10719D2B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          160F
Signing time:             Sun 29 Jun 2025 12:01:21 +0000
Manifest this update:     Sun 29 Jun 2025 12:01:21 +0000
Manifest next update:     Mon 30 Jun 2025 12:01:21 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: PfJVswT7K3Dip+1zLiZtDfq2SVOSGSf79t5IwZ241Ec=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:90:3b:4a:5b:81:d2:5c:fa:d0:f5:b1:07:19:d2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jun 29 12:01:21 2025 GMT
            Not After : Jun 30 12:01:21 2025 GMT
        Subject: CN=049ce8ced891b05a28da917126afbd1754521066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:de:0c:e3:85:bf:a7:02:5a:1c:a7:38:c8:
                    1b:55:cb:a4:ab:24:dd:57:28:26:99:ff:5d:3c:09:
                    eb:63:d7:e5:a8:9a:4a:cb:fd:4f:b8:5a:09:ed:c3:
                    0e:21:ca:b2:1d:dd:88:1b:1c:40:8a:b5:bb:e2:a9:
                    12:3e:d1:e2:5e:da:c5:01:66:fc:55:af:86:3a:81:
                    62:cc:4a:a4:2f:3a:a8:d7:21:ac:86:b6:14:74:a2:
                    47:f2:37:39:f2:0b:6d:0e:b6:3b:e5:59:2a:e3:fc:
                    c6:7c:3c:51:32:37:75:9d:70:d4:94:a5:18:9b:50:
                    f0:4f:76:74:1d:12:c5:4d:9f:cd:d8:c5:30:6e:22:
                    61:4e:75:ac:f3:a5:11:dd:9e:64:37:7e:a6:33:c1:
                    f8:4d:8b:76:bc:20:dd:88:92:9f:34:46:e9:63:5b:
                    23:66:a7:90:79:d7:34:a6:42:f2:2a:c4:25:f8:69:
                    26:c6:ee:3b:68:6b:1e:f7:d8:5d:08:d4:ce:fa:fb:
                    43:0e:5c:b9:b0:09:d9:14:59:a9:79:8b:3b:44:5e:
                    ad:cc:f4:3e:5e:9a:ad:35:5a:59:5c:1e:b9:ce:85:
                    a8:b9:15:24:8f:37:8b:19:30:fe:66:ad:1d:99:71:
                    ca:1b:3f:28:61:06:cb:ae:c1:a1:7b:b5:24:c0:38:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9C:E8:CE:D8:91:B0:5A:28:DA:91:71:26:AF:BD:17:54:52:10:66
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:64:88:da:54:98:0c:d4:f1:67:fb:a5:59:dd:f9:2f:56:c5:
         b1:6d:b4:71:a5:4a:48:7f:ad:11:49:ef:8c:f8:d7:fa:51:bb:
         34:91:8c:36:24:8d:61:bb:18:86:0c:24:48:86:67:50:97:bb:
         2e:2a:72:99:ae:e4:f9:f6:44:5d:22:16:fa:37:60:5f:c0:ca:
         a6:f9:05:05:02:26:01:04:a1:d1:f7:58:b6:21:f9:2a:d0:10:
         13:20:2f:bf:e5:76:73:ea:05:8b:cf:49:82:8e:82:09:90:58:
         14:06:55:84:9d:21:e3:fa:e7:62:1d:5f:86:84:c7:c7:89:39:
         71:fa:f7:9c:b2:8f:d6:8c:44:26:bb:c8:c9:84:dc:0c:fc:e7:
         07:42:0a:c8:cb:ba:15:01:2b:f9:7d:43:16:78:24:0b:00:e9:
         88:91:85:16:b7:34:8d:9c:62:75:fd:ed:4e:18:1e:dd:51:b1:
         a3:8c:07:a1:1b:3f:94:6e:51:76:c6:20:1d:34:db:b9:30:07:
         c6:3a:d6:0b:93:3b:a3:ad:d7:d7:ea:d7:95:c3:4b:25:46:7d:
         56:5c:2e:c1:c4:28:9c:b6:42:23:c5:d7:54:93:c9:1b:05:5e:
         81:b8:5f:c2:d3:41:8f:bf:83:6f:d8:b4:07:7e:fc:59:93:35:
         9a:81:57:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7kDtKW4HSXPrQ9bEHGdK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjUwNjI5MTIwMTIxWhcNMjUwNjMwMTIwMTIxWjAzMTEwLwYDVQQD
EygwNDljZThjZWQ4OTFiMDVhMjhkYTkxNzEyNmFmYmQxNzU0NTIxMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KDeDOOFv6cCWhynOMgbVcukqyTd
Vygmmf9dPAnrY9flqJpKy/1PuFoJ7cMOIcqyHd2IGxxAirW74qkSPtHiXtrFAWb8
Va+GOoFizEqkLzqo1yGshrYUdKJH8jc58gttDrY75Vkq4/zGfDxRMjd1nXDUlKUY
m1DwT3Z0HRLFTZ/N2MUwbiJhTnWs86UR3Z5kN36mM8H4TYt2vCDdiJKfNEbpY1sj
ZqeQedc0pkLyKsQl+Gkmxu47aGse99hdCNTO+vtDDly5sAnZFFmpeYs7RF6tzPQ+
XpqtNVpZXB65zoWouRUkjzeLGTD+Zq0dmXHKGz8oYQbLrsGhe7UkwDi4/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASc6M7YkbBaKNqRcSavvRdUUhBmMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmSI2lSY
DNTxZ/ulWd35L1bFsW20caVKSH+tEUnvjPjX+lG7NJGMNiSNYbsYhgwkSIZnUJe7
Lipyma7k+fZEXSIW+jdgX8DKpvkFBQImAQSh0fdYtiH5KtAQEyAvv+V2c+oFi89J
go6CCZBYFAZVhJ0h4/rnYh1fhoTHx4k5cfr3nLKP1oxEJrvIyYTcDPznB0IKyMu6
FQEr+X1DFngkCwDpiJGFFrc0jZxidf3tThge3VGxo4wHoRs/lG5RdsYgHTTbuTAH
xjrWC5M7o63X1+rXlcNLJUZ9VlwuwcQonLZCI8XXVJPJGwVegbhfwtNBj7+Db9i0
B378WZM1moFXxA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:50:35 2025 by rpki-client