Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File:                     dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier:          1+hXK8YUkHtZ+Cme3YCSJoTginovf3jv3+C7F37K8So=
Subject key identifier:   6C:0E:7F:30:FB:75:22:AC:04:A7:28:1C:E1:F5:E0:7E:07:A4:68:49
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       0198D66154A45FDD0110AC83134D61F84C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number:          0E72
Signing time:             Sat 23 Aug 2025 10:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:39 +0000
Files and hashes:         1: 0vKKa1d1-a3nsAZsZCo839Z0MBs.roa (hash: nF1172I6GzWR4fsS//xQZxKSKhBW9Jwp0lhMkf3VEHw=)
                          2: 1YkuTSmaNeM99AT_szUK5oLsJV0.roa (hash: 6qUnLKrysaF5PnvpHmoDTCMWTFxOhfgj1mqiBjOTe24=)
                          3: 1nfBmmG7KbbR8DnKH7lP1KuhNh8.roa (hash: T0sycLT3/UxmIjbYQ+bOKStsPPPIcNFmp6OwoDtRLKQ=)
                          4: 2pl2Sl-diunsZv-X1xDfcacZESQ.roa (hash: SGZLc6KSJvJiXyci/DBhSPsrTj4/6Xpxbx5tcaKgogE=)
                          5: 31A6_ehvBKsfGVDtFooQhLXH0iM.roa (hash: dsMXP7FTcH0rSBZ7d/sBuVAuPoqLFB5tU5E0bIntVYg=)
                          6: 3adlXu9UdiqbVK8KXPmNPBFbva4.roa (hash: EJVXWOHEAMEc47CpVV43468HlejdrMkqfGDd8fXYTdo=)
                          7: 5duPmqwXQoarjhRREa9M12q0LMI.roa (hash: zmiFXyZAg+aBE4YlbQqa7EOu9c6/Mmqa7UXhDEeFpq4=)
                          8: 60eIn0VN45RIj-vR-y3bpL4yCdM.roa (hash: 72pNS84vVLj1UnJZFUVixKjT4YU2nH077D/faDBa9bU=)
                          9: 7JXxNfBFM3BEqtldsXmEKamRaOk.roa (hash: jvrGG3m259+/aKJ+QVXqTQP0zBO8rA6AZKOWOn1grpM=)
                          10: 9TaqhsU24aQ2AxAQwMy4XQKH6LU.roa (hash: WgoS/nhvjW9XMI8XzrVgZor+FdLw77EJZ11j3yQR76E=)
                          11: A2kOd83XlurKeug3oOCuPMQWoqM.roa (hash: TkzZouTi2vryIZ7xJqjRBCl1ZZQ9vf4xqv971+/fZVo=)
                          12: Au61mZI-htttLesl4yy0MLLWdgg.roa (hash: +tDBV4VgluoM9FI1HSD304mwdSWIN3f6hp8YtvJ9X6w=)
                          13: Avsyu6b6NVxYkf6X_q_nnw7ehoc.roa (hash: 4zpQXnbZi1DFLcalMENFIs49gI1fkeakU+6rA+Vt+Zk=)
                          14: BuqjNgBweqNLnNC3y6l25ZNe9lE.roa (hash: 3IwpkqYoqPWFY8mIBH4Ql9MvV+Y6c7/vsfg9Jwd/Cp8=)
                          15: CBiODbhkfA8pquq1a462Y8zBxfk.roa (hash: tqoKmW2W4/hm6OTTGtYbwqEY7og1wM0EuBkSzNxx7Lw=)
                          16: CFVCvABZ4JeVnMfUGEdvXaPGi6c.roa (hash: qdyBV98y+dN9cZyWuQBlSwusoRHtNOg4mywQWrk0FVQ=)
                          17: DlqdIQI6FVQl-ro8neXTyjOh5dE.roa (hash: lZ3g7pVM/XY8ky+nHkBqbreA/7Px6G51zVJ1/JDPng0=)
                          18: EsuY095TVdQvItL4nhCZCNhOgbU.roa (hash: B2Hs9XAAe/G//v9MK7Gd6LTWKG9tnDW4StJm3GtXHag=)
                          19: FcC6p_qeAbtQsZOZCnuCOvaQtfw.roa (hash: Jb9R1aDX4sFzxS0p1WW5Ea6+8DWY+rsM+UP/OKo1sOU=)
                          20: GQoZ4pQGFFvUB7jxlMg3uA-2HoI.roa (hash: JKfsYMUnPWxZ+hnIELajWpHydkFj3Gv1UtrfFLWfQLI=)
                          21: GYNpjCcZsLVqMoTSMZuwEaEQM7A.roa (hash: 8PbLQRFLQ7epoBYFX4wCtzZLiRBCr3C9yNo1Gjt4uys=)
                          22: IWU0yN5lxfh4aUxaRA-DioY_p9A.roa (hash: lro7824MfGW0EN5ZSTnDw/XV8uUIgOJ725CTgVE4t40=)
                          23: JdYxNE98T8p9jDuR3RxYieve6xw.roa (hash: 0JpBtNnlzhZiW7YO5MZAdbbRlaPCwL/c25a0zEVC4Is=)
                          24: Jh89lS-7cJJWx8zvvkz4Py-QvjA.roa (hash: IpIfcWNQZBdZ9PxdPrzjdBDVJEsfhwVsQP6UVO83urM=)
                          25: KFcp7LdjVy35SahWFoUS7kgm_jY.roa (hash: qBkHofmKdbWf5SOainG+rxowFZlm817tFXm74T4JNR8=)
                          26: OCw1udSAReLAsFz_erSWBmdqyM4.roa (hash: 5eUZkP4P6CTElC5OVGVkkPU8IahekeC5ufPO615Qa9U=)
                          27: PROal0FixJZ3W2ACc_DxYEXQlL8.roa (hash: LtHnlleM7ot8LBUleBsLI+QVnc77DijWTom4oe0lyBk=)
                          28: QD8rfcXrFLBv5ho4olBdPC1p818.roa (hash: dkERnkYt+qFsFa7JHkV0epWToLTcYSQMGJn1mguBlCM=)
                          29: QnP3rjSXAya4q111ORTc4fWOKy4.roa (hash: rjVxk7JBDVCRVwFh1RMiJlF4usn4gdiKDrFhNu7yCVQ=)
                          30: Taew90LrITUNXWEUlG92GSZizj4.roa (hash: tCoLpi3SKQ5YEAOD+WHKJDrZxFw4R47l6+pDVHgYeLI=)
                          31: VV03O10Ak9GphsezqITF8UBndo4.roa (hash: /Uvf5KDYlZcfuz0KI0o0tgIwygpPPgdM7QOdmxpaBwY=)
                          32: WGJ99XGaJh7skBGQoXvYDlpBLUg.roa (hash: ByZ7aX7sT5x1n3O18fpW4i1dWSQUUItWNkg4JqwxdJg=)
                          33: Y56Gciif-2amsx2dXrP9fHRusqQ.roa (hash: fDWZnk5W7B7Ljpur47rgBYvk4mpvoSPiiS1+UZWUXFA=)
                          34: aQakZoVpblIF2l8ftAcQYXpdYPs.roa (hash: Qz6LkCub4Rva7m+YCvP3MwxbyfAomWKSd3klSr+E1Ag=)
                          35: akMGCQIi3m5Z6oQfmYWwXm6Sr6E.roa (hash: hIvO4f0efFyMLQwXwU2X9ARgI00goXkJDlPknTYgoNk=)
                          36: ax4thkGoEPtvtGu_YZxYj9LFa28.roa (hash: eWFKhN+RnKTUUxtCYQyuPYtjJoxT6IBR2XInsRv4m7c=)
                          37: beZ7lH8hrnPfpblkYum9nSpHi_k.roa (hash: 0beIcur3K2WF3b2cBEFEvhkfim8wSnu7ud2d6583fXU=)
                          38: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: 2D5hIgNsNmR32gTBFGPWskL6Oab5MloXs63o61+rl8A=)
                          39: ex9C5z6uA5zA8S2hqTtDuAiYJso.roa (hash: Ya+WKl/Tb6XekHAnMga0cVZx1aw07XaD7ue33i5ENiI=)
                          40: gWcMmmdsPAMAIxAc2B4OhrNWv5g.roa (hash: IXbiRdiOEMX2uMKpJ9X6SWj6zCiLAW+kXNJrRmgozWw=)
                          41: iyXEZLPTvQZGB7JlA08fIx42APM.roa (hash: m2lSKMzTmPpQ92wJ50iZbM3YMPJEh5hhfuRN69m7pJM=)
                          42: k9HJTkafgF--72589k90a4lZbRo.roa (hash: RkTGERNMYFKpgq9NhwcvcVDU4yuwFnnQ3yyw3oDq0VI=)
                          43: l5eVEzNjzW3_os8yZlGEjZfz_cE.roa (hash: BVR/Q6GqH0ZQNXkAgvPrEuEB4GMZxu+FJ12HAakU494=)
                          44: lVqcNhHZhJJM3cni05QJsqrmC6o.roa (hash: VwllMkwnryfmfdw6ZledmJiyv0+FJYJWLryed/wV+2E=)
                          45: l_DVOUIWZeQzN_ud687FQm9N3XM.roa (hash: w8Ed2YFV5Z6Tfw1wykkzmpAQiiRwBTRKZzDMXY+18/g=)
                          46: nnK9sBNz8F6oqIJNiEqdyUKpxBU.roa (hash: 4pYw53tp6LoTRJOiuUYEH+f4SmiKvacrxPCRdUZzbtg=)
                          47: pCndi1ZXV1mC4ZG8G28b0EXavY4.roa (hash: QIh9bllo3i2ecy+DeV6KBQsP3Ac4e7xnH/vJAvg06/0=)
                          48: pIiqmAhh4Efmjii00YcovJnqa0s.roa (hash: OMG9mB1P/OPHsZ0mJOPrtZjUwn7+m8UALiq+yKbfM8U=)
                          49: pwPsYJfs2vnUf15_MeMU_hA-6CU.roa (hash: smjjAOw4zvZQ0c4TXCjwjpB3rI9MVKm+DRNb4qequDk=)
                          50: ttPO6pngYqPTncPu2LyKCZ2Sbqg.roa (hash: xBWaSxh+oKftAiFCVq8fy5M0vq5kmp3YUxZh8YO1XGg=)
                          51: vXaInH9GMVRsh2fS9hIvaiSoFdA.roa (hash: a0cNwrBuY/oV0A/g5UU/CxyDLathCf+t22Rqy9aezE4=)
                          52: wr1QjjbaIx8zS-gf7sfmtC6EaUg.roa (hash: Ku8TT9Iv1vaF97HhehSBh3VCqIIIMAGFRU8uS6/XagY=)
                          53: xxVCA8uITxzYzKaLDC0g-YxfTzo.roa (hash: Jpxudfggo0Vzfm7+EORSxKBJSTHID/1Yzgtr62f5yI8=)
                          54: yg8g1KIBeXcOZoIOeFDLKsb2Ys4.roa (hash: bXqIK7YAgTX1XR2ZVmmqzCL+IfHFOCwdW0H3gNQ2jXk=)
                          55: z_ymd7tHSlm_rmTAykuJ944SJZU.roa (hash: arBCwgxjD2OcevnfTJJCzPi43dKp3HfsbnMHINjxg+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:54:a4:5f:dd:01:10:ac:83:13:4d:61:f8:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Aug 23 10:02:39 2025 GMT
            Not After : Aug 24 10:02:39 2025 GMT
        Subject: CN=6c0e7f30fb7522ac04a7281ce1f5e07e07a46849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:c4:1b:aa:44:fe:9d:72:b2:8a:19:c5:02:
                    17:e5:49:7e:fd:e8:2c:fc:3b:82:c4:f0:4a:53:77:
                    74:9f:21:0d:2c:1b:9c:ed:d3:5f:c1:9a:2a:8f:2e:
                    44:1a:6a:ff:20:60:94:28:b5:e9:55:0a:20:4c:ca:
                    97:cc:6a:79:eb:be:12:f6:f0:41:2c:59:97:51:4c:
                    b8:ab:63:6d:7b:44:73:d2:43:4c:58:a8:e6:b9:21:
                    b3:ae:0d:a9:6a:a5:e1:a4:f3:aa:0d:c2:05:c6:c4:
                    dc:7a:fa:49:d4:a0:1c:0d:79:1a:8d:05:7d:88:68:
                    5e:5f:8c:0b:a7:7c:83:a9:32:71:88:2c:15:ed:4b:
                    e2:6e:aa:44:b4:bc:ff:bf:61:8f:f2:c5:c7:0c:0e:
                    e0:41:cc:69:bb:e3:19:bc:30:e0:e7:6f:08:44:5d:
                    76:94:9d:78:ba:7c:29:f6:6a:ed:64:bd:6a:6d:02:
                    c7:69:16:45:42:ca:89:66:e2:b9:16:2d:05:4b:4d:
                    72:80:6b:f8:11:d2:00:cd:f3:20:48:3b:8b:4d:c6:
                    ad:35:91:5a:c3:49:41:eb:8d:92:0e:18:cc:0c:c1:
                    bf:e5:2e:a4:1a:32:67:45:73:e1:c0:77:9a:d2:f2:
                    8b:a8:f7:98:95:a0:fc:38:26:5b:e0:31:de:8c:20:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:7F:30:FB:75:22:AC:04:A7:28:1C:E1:F5:E0:7E:07:A4:68:49
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:d7:cc:9e:82:cd:c6:dc:fb:2a:32:e6:7d:40:62:32:c0:
         36:63:a4:65:80:58:d8:66:a8:e5:ff:47:73:74:19:6d:59:80:
         d7:76:55:04:ba:a4:25:ce:fd:aa:99:1d:3c:01:26:19:6a:ca:
         72:1d:54:ca:44:52:cd:b5:2b:b2:ce:07:18:f2:de:c4:fd:3e:
         83:d0:cd:17:16:99:cf:9b:29:3b:16:b7:cf:30:b1:90:5b:16:
         4b:16:47:b6:6b:1f:68:33:87:7a:fa:8c:76:ba:d3:15:60:f5:
         3f:29:a5:c6:68:61:29:a4:3b:b4:9f:a8:95:69:c2:cb:53:f9:
         43:b5:2f:dc:19:8e:12:c4:be:66:ac:e7:8b:66:2b:63:50:de:
         dc:b3:e7:f0:56:6b:14:f5:b3:5f:f0:b7:10:2e:9f:33:49:ab:
         2e:f5:e4:2e:d5:a1:93:dc:7d:db:cf:71:b4:45:2f:32:dc:2d:
         fa:94:43:29:32:82:e9:eb:33:ed:d9:18:db:ac:3c:17:f5:b1:
         aa:43:16:c8:f8:c8:ab:bd:1c:84:eb:83:bd:07:b3:18:67:25:
         b4:96:c7:79:93:ce:2c:c8:26:ac:8d:21:37:3f:8f:6c:f9:bf:
         0f:83:44:ce:e9:c9:01:58:25:7f:5e:27:e0:5a:71:f2:3c:47:
         c3:40:29:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYVSkX90BEKyDE01h+EwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwODIzMTAwMjM5WhcNMjUwODI0MTAwMjM5WjAzMTEwLwYDVQQD
Eyg2YzBlN2YzMGZiNzUyMmFjMDRhNzI4MWNlMWY1ZTA3ZTA3YTQ2ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyDEG6pE/p1ysooZxQIX5Ul+/egs
/DuCxPBKU3d0nyENLBuc7dNfwZoqjy5EGmr/IGCUKLXpVQogTMqXzGp5674S9vBB
LFmXUUy4q2Nte0Rz0kNMWKjmuSGzrg2paqXhpPOqDcIFxsTcevpJ1KAcDXkajQV9
iGheX4wLp3yDqTJxiCwV7UvibqpEtLz/v2GP8sXHDA7gQcxpu+MZvDDg528IRF12
lJ14unwp9mrtZL1qbQLHaRZFQsqJZuK5Fi0FS01ygGv4EdIAzfMgSDuLTcatNZFa
w0lB642SDhjMDMG/5S6kGjJnRXPhwHea0vKLqPeYlaD8OCZb4DHejCCiNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwOfzD7dSKsBKcoHOH14H4HpGhJMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMPXzJ6C
zcbc+yoy5n1AYjLANmOkZYBY2Gao5f9Hc3QZbVmA13ZVBLqkJc79qpkdPAEmGWrK
ch1UykRSzbUrss4HGPLexP0+g9DNFxaZz5spOxa3zzCxkFsWSxZHtmsfaDOHevqM
drrTFWD1PymlxmhhKaQ7tJ+olWnCy1P5Q7Uv3BmOEsS+Zqzni2YrY1De3LPn8FZr
FPWzX/C3EC6fM0mrLvXkLtWhk9x9289xtEUvMtwt+pRDKTKC6esz7dkY26w8F/Wx
qkMWyPjIq70chOuDvQezGGcltJbHeZPOLMgmrI0hNz+PbPm/D4NEzunJAVglf14n
4Fpx8jxHw0ApWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:12 2025 by rpki-client