Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          hZcZu7XQRW1Nv9F/jN0fdqQtZw3R8T1cVHNzHPGo8ws=
Subject key identifier:   BD:EC:A2:10:A6:09:69:7F:B1:82:9D:9E:A3:47:85:E4:48:B8:34:16
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       0198350330573580CFFAE3FEC7529A0054E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0A1D
Signing time:             Wed 23 Jul 2025 02:00:57 +0000
Manifest this update:     Wed 23 Jul 2025 02:00:57 +0000
Manifest next update:     Thu 24 Jul 2025 02:00:57 +0000
Files and hashes:         1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=)
                          2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=)
                          3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=)
                          4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=)
                          5: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=)
                          6: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=)
                          7: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=)
                          8: CyAx1lcKD4wc_amccZ1znyVkKIY.roa (hash: Xo4DDTOMDsU3unzlvdlmOXck+6K2PDfwqs5xU35c1bQ=)
                          9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=)
                          10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=)
                          11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=)
                          12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=)
                          13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=)
                          14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=)
                          15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=)
                          16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=)
                          17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=)
                          18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=)
                          19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=)
                          20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=)
                          21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=)
                          22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=)
                          23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=)
                          24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=)
                          25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=)
                          26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=)
                          27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=)
                          28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: t6mtjevyftK/5Cu+h860ulkHX/Nj5WkKAZiH1+j08/Q=)
                          29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=)
                          30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=)
                          31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=)
                          32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=)
                          33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=)
                          34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=)
                          35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=)
                          36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=)
                          37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=)
                          38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=)
                          39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=)
                          40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=)
                          41: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=)
                          42: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=)
                          43: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=)
                          44: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=)
                          45: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=)
                          46: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=)
                          47: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=)
                          48: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=)
                          49: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:03:30:57:35:80:cf:fa:e3:fe:c7:52:9a:00:54:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jul 23 02:00:57 2025 GMT
            Not After : Jul 24 02:00:57 2025 GMT
        Subject: CN=bdeca210a609697fb1829d9ea34785e448b83416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:1a:ae:ed:da:c5:92:78:6f:22:bd:c7:8e:
                    46:7e:93:ad:e7:90:9d:47:0b:9b:fc:16:3b:cb:a7:
                    b0:71:76:f7:71:b7:81:c4:a9:3a:ad:54:3a:25:47:
                    06:6c:5f:2f:74:31:c4:be:f1:e0:bc:cd:e1:0a:46:
                    93:81:c8:43:99:04:ff:a0:66:34:b2:a9:73:95:bc:
                    90:a4:1b:87:27:21:f1:8f:51:8a:7a:1c:30:5d:c2:
                    e1:d7:28:3a:6b:5d:fe:45:36:fa:cc:cb:91:36:60:
                    08:87:d9:4a:eb:22:a2:17:e2:d4:1c:d0:0c:67:17:
                    47:81:65:89:2e:ae:db:42:33:ff:45:1a:c7:d2:c6:
                    38:46:7b:89:02:fd:53:4b:ae:9e:96:a0:94:ae:08:
                    f9:2f:65:82:48:2f:09:6d:2d:bb:59:d7:67:a3:c4:
                    7a:3d:e3:5f:f5:f7:e9:83:1e:6e:ef:7f:c4:3f:2c:
                    ea:ca:77:2e:5b:a0:cf:d5:78:85:84:d7:1c:c7:1f:
                    86:68:fc:88:17:02:6e:eb:b7:79:a4:28:8f:1b:8c:
                    08:8f:0a:ad:d9:00:66:f1:f2:45:63:0c:ff:09:2b:
                    85:98:b4:8f:29:e7:58:54:71:b7:7f:06:92:c0:0c:
                    9c:a9:9c:63:78:a3:ef:61:a2:c6:03:6f:ae:b1:0a:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EC:A2:10:A6:09:69:7F:B1:82:9D:9E:A3:47:85:E4:48:B8:34:16
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:22:ce:ce:e8:c2:41:62:3e:84:a8:26:3c:73:42:9c:df:f4:
         be:12:bb:54:85:ec:dc:55:b1:8f:da:3b:9b:92:c9:ae:09:ca:
         70:a7:8e:64:6a:9d:53:de:e8:e7:d5:a8:c5:35:25:2b:32:8e:
         f0:11:76:29:74:e0:2c:d7:08:c5:f4:ea:de:b6:d4:30:49:11:
         c2:ec:76:da:50:20:b6:44:5b:7a:79:40:a0:f7:0f:f9:2e:c3:
         96:f8:c1:c8:0d:a2:aa:7a:58:07:68:b7:65:49:c4:ca:22:a8:
         c8:86:9c:45:16:fa:23:ea:2b:1c:d6:bc:ce:4b:90:cb:24:c4:
         50:18:54:92:43:c1:97:1b:bb:01:34:26:58:d8:3c:0e:3c:9d:
         89:f2:ac:bc:b1:06:7b:c0:2b:a1:d6:eb:d7:9c:c5:5a:96:c3:
         46:70:d7:9e:ce:a8:e5:b1:36:85:f7:67:88:c1:bd:6e:15:e4:
         8b:8d:4f:0d:e4:5d:dd:37:8b:94:05:04:c5:a2:bd:2e:88:76:
         05:69:0e:74:2d:1e:02:ee:a5:f7:f4:d7:fb:06:81:f3:8f:84:
         2e:c2:89:e5:c0:9f:ca:52:f0:4d:24:b9:27:0d:18:55:67:80:
         23:97:2a:0a:e9:e5:01:43:42:e3:b6:1a:63:bb:78:7d:09:59:
         74:b8:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----