Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          a+2YsdsqTCQlSBYIhMCtIboYO7E7Ko873ilD8YLWa0c=
Subject key identifier:   BC:31:12:18:C4:44:2C:33:F5:0D:0D:4D:B2:8E:B0:6D:9C:9F:21:4C
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       0197B77C4EBCFBF6B6973198EEB17C9684D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          160F
Signing time:             Sat 28 Jun 2025 17:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:06 +0000
Files and hashes:         1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: NdI5j4r6/IGiNG47Ro5hHgrU0iVDU30onsnM9BkLmUc=)
                          2: 3bnDZUsDXnEjZmLC2l6TNlR44q0.roa (hash: wvyAIrwBTPizl931rTr7kAFeltcDxlBFhYT3hCElsC8=)
                          3: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
                          4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
                          5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
                          6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
                          7: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=)
                          8: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
                          9: JXrXWWEdrlOAxsLEb215YsP36OI.roa (hash: LxUCqn0JmTO3q5jDUwaHYrVbupf5Tpjdv87Nft/gs/M=)
                          10: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
                          11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
                          12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
                          13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
                          14: TKWYs3n3hIoN-hoFqew_mEdXrIo.roa (hash: USDKgLhBpQiNnUXhTAkFdSI2pQG1VTBMCqyXVi79H/o=)
                          15: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
                          16: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
                          17: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
                          18: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
                          19: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
                          20: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
                          21: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
                          22: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
                          23: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
                          24: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:4e:bc:fb:f6:b6:97:31:98:ee:b1:7c:96:84:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Jun 28 17:01:06 2025 GMT
            Not After : Jun 29 17:01:06 2025 GMT
        Subject: CN=bc311218c4442c33f50d0d4db28eb06d9c9f214c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:d1:ca:02:a7:ec:a5:7f:2a:0e:0b:95:2f:
                    3b:86:5e:e6:54:94:7d:91:87:e7:2c:83:0b:be:a5:
                    ee:ef:5f:d0:b8:29:60:50:61:02:23:d5:83:74:20:
                    8e:82:6c:c4:9f:33:b0:e8:6d:29:71:73:e6:8e:84:
                    68:cd:34:f7:61:aa:de:23:06:ae:d4:f7:c5:94:98:
                    a5:92:43:89:07:d7:08:66:ec:7c:5a:1d:2d:1f:e0:
                    f5:ef:0d:f3:cb:18:0f:94:02:7d:da:9e:4e:19:1d:
                    db:a9:8d:a7:aa:4e:35:27:9d:09:da:0c:47:8d:ee:
                    d4:f5:d1:81:1f:ce:76:40:c1:77:02:5c:6e:cf:eb:
                    ff:55:c2:f6:6e:49:7a:94:dd:1c:80:88:ef:ba:58:
                    e8:17:3f:12:86:1c:0b:b8:a0:30:b9:6b:9a:af:8c:
                    04:73:99:b8:1a:00:dc:93:5d:67:4d:a1:ae:6e:5a:
                    46:3a:73:0d:48:24:be:73:03:b3:19:14:c9:c6:d5:
                    53:1d:2d:bc:1d:d8:03:8d:73:a4:49:e4:87:84:b9:
                    f7:3a:0b:b2:b7:b3:ba:07:26:ff:80:31:6f:1f:49:
                    99:69:79:61:28:fb:20:d8:d0:fa:8b:5d:e1:a7:50:
                    a2:1d:b6:53:53:df:09:d0:13:81:08:50:87:fb:14:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:12:18:C4:44:2C:33:F5:0D:0D:4D:B2:8E:B0:6D:9C:9F:21:4C
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:c0:c6:89:9b:85:13:d1:fb:f5:7a:79:b5:17:41:62:74:
         d7:77:49:5f:15:89:b1:20:ab:ae:23:94:29:04:fd:76:c0:9a:
         2b:ba:7c:7d:1e:80:17:29:ca:ea:17:d1:10:2c:78:64:cc:da:
         29:fd:6d:e1:fb:93:10:5c:5f:07:10:ee:92:61:4f:ab:a5:1a:
         9d:39:7a:a5:8b:22:56:3a:00:1b:1c:39:41:f4:f2:d7:b2:f0:
         ce:a5:df:7e:33:6e:4e:aa:4a:4b:dd:03:96:cb:fb:27:4f:fa:
         4f:5d:8d:07:1d:0e:d9:33:3e:22:c7:62:35:e5:d1:e1:a6:ed:
         6d:6b:01:48:1b:86:51:33:da:3a:e2:3c:ae:5a:99:9f:2a:fb:
         b0:bb:40:d5:8c:25:69:90:79:a9:7f:0d:45:e0:7b:4c:13:70:
         9e:ba:86:1b:35:21:70:42:9a:3b:d9:58:ee:13:27:3a:11:05:
         c5:ae:a8:47:b5:f9:ad:9a:58:eb:c6:87:04:04:43:7b:98:9b:
         af:d8:6d:b3:50:6c:b0:e7:13:d6:91:4e:12:f8:a4:c6:c8:33:
         09:78:7e:4b:39:c6:a8:5d:f2:0d:d9:e1:ca:7a:49:5e:af:94:
         0d:cf:d8:a7:b9:6c:16:8c:02:d5:e9:bd:4d:33:cf:16:e3:27:
         87:e5:da:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fE68+/a2lzGY7rF8loTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjUwNjI4MTcwMTA2WhcNMjUwNjI5MTcwMTA2WjAzMTEwLwYDVQQD
EyhiYzMxMTIxOGM0NDQyYzMzZjUwZDBkNGRiMjhlYjA2ZDljOWYyMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjjRygKn7KV/Kg4LlS87hl7mVJR9
kYfnLIMLvqXu71/QuClgUGECI9WDdCCOgmzEnzOw6G0pcXPmjoRozTT3YareIwau
1PfFlJilkkOJB9cIZux8Wh0tH+D17w3zyxgPlAJ92p5OGR3bqY2nqk41J50J2gxH
je7U9dGBH852QMF3Alxuz+v/VcL2bkl6lN0cgIjvuljoFz8ShhwLuKAwuWuar4wE
c5m4GgDck11nTaGublpGOnMNSCS+cwOzGRTJxtVTHS28HdgDjXOkSeSHhLn3Oguy
t7O6Byb/gDFvH0mZaXlhKPsg2ND6i13hp1CiHbZTU98J0BOBCFCH+xQETQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwxEhjERCwz9Q0NTbKOsG2cnyFMMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy7Axomb
hRPR+/V6ebUXQWJ013dJXxWJsSCrriOUKQT9dsCaK7p8fR6AFynK6hfRECx4ZMza
Kf1t4fuTEFxfBxDukmFPq6UanTl6pYsiVjoAGxw5QfTy17LwzqXffjNuTqpKS90D
lsv7J0/6T12NBx0O2TM+IsdiNeXR4abtbWsBSBuGUTPaOuI8rlqZnyr7sLtA1Ywl
aZB5qX8NReB7TBNwnrqGGzUhcEKaO9lY7hMnOhEFxa6oR7X5rZpY68aHBARDe5ib
r9hts1BssOcT1pFOEvikxsgzCXh+SznGqF3yDdnhynpJXq+UDc/Yp7lsFowC1em9
TTPPFuMnh+XaXg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:33 2025 by rpki-client