Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          D6NC03tVfQjs+0we1synos7mC5vb8xpkzctNCaymXGk=
Subject key identifier:   30:EE:37:C4:51:6D:76:8C:7B:E4:67:DF:F9:77:B8:A5:D6:1F:21:40
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019826A261315E788B0F5399A6EE4A7B1333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0DF8
Signing time:             Sun 20 Jul 2025 07:00:32 +0000
Manifest this update:     Sun 20 Jul 2025 07:00:32 +0000
Manifest next update:     Mon 21 Jul 2025 07:00:32 +0000
Files and hashes:         1: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (hash: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          7: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          8: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: vphKsbfnSXFEomnT6HuuJ+cOOUvo3iZxlDSzodYoVkg=)
                          9: 5-NSO-oosPy2Fnqe9ZLLQ4qlSEk.roa (hash: 59DVuXqICUgWxnrab+B36HpZ0Fh3PgDU9mH3qJl2eMU=)
                          10: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          11: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          12: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          17: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          18: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          19: P5V0GP5ZMydG1nYgWvLs9BuCo90.roa (hash: LmLash0GSRhmVjwmeJKJ3oRTiu/hMeCsFLYSoJD6Uw0=)
                          20: Qc9ZFwkB4-cyHF3LSkCBWzHVWOI.roa (hash: RT6UiXG2/uWjcKF8JDD2niojE/xCiHwIen62OA697RU=)
                          21: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UOw4kvzOzwctaQndLqAt1sv8qe4.roa (hash: qXueiBufxOI0tBPQ2snloT38d2A++KUpGiJMOc1dDIg=)
                          24: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          25: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          26: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          27: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          28: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          29: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          30: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          31: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          32: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          33: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          34: pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa (hash: qsBg1yiXic0iCFhK8ObPAn7qxsbHG/jIDP3l2pslZB8=)
                          35: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          36: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          37: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          38: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: taU9TJjVT1bBJe-vWZ2x7cMNlU4.roa (hash: knkAZrjI/4bDSM14TYUSeabSKbYf5IXyvKCcdNOZZeQ=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          43: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 06:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:a2:61:31:5e:78:8b:0f:53:99:a6:ee:4a:7b:13:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jul 20 07:00:32 2025 GMT
            Not After : Jul 21 07:00:32 2025 GMT
        Subject: CN=30ee37c4516d768c7be467dff977b8a5d61f2140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:f0:c0:be:8c:b2:76:24:61:6c:67:1d:c2:
                    9f:c3:10:a5:09:34:4f:bc:85:34:62:7e:2e:88:12:
                    82:37:cc:90:10:bf:06:30:ff:64:a3:9d:c3:68:f4:
                    76:ef:c1:30:ad:02:d4:8c:54:50:82:04:51:64:ae:
                    5b:4c:b7:9a:54:60:22:56:48:62:09:64:a3:c3:21:
                    88:2d:21:fd:6c:d7:f7:3a:71:0e:5c:63:49:2f:ea:
                    f7:1a:dd:b4:c1:c0:b4:26:5b:ad:51:33:b0:b6:68:
                    67:0c:ab:79:14:ad:ae:32:0f:26:a3:45:dd:a7:d3:
                    ff:c3:d7:75:ee:36:fd:be:a9:35:d0:19:01:95:dc:
                    d9:5e:a4:eb:c6:60:18:21:7c:d5:86:ba:c2:73:9b:
                    16:f2:70:76:79:e8:0f:ac:83:e3:d4:1e:2e:c7:a2:
                    33:ac:9b:ba:4a:ec:60:1e:1b:5f:f4:7a:01:13:71:
                    ce:4f:67:89:0a:20:1c:11:5e:53:ff:41:46:ea:f9:
                    1c:5c:6e:fd:6d:30:65:b5:1d:ca:f7:98:05:03:7f:
                    37:3c:c0:3d:d5:d8:ab:83:36:f9:59:6d:48:fc:99:
                    5e:47:89:00:c0:38:17:8a:7c:e8:6e:10:4d:3f:4d:
                    03:f5:48:b1:8b:b5:ce:07:bf:e8:ba:94:b9:75:b4:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EE:37:C4:51:6D:76:8C:7B:E4:67:DF:F9:77:B8:A5:D6:1F:21:40
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:07:f2:a7:dc:80:fa:4f:46:ac:67:6e:5a:c0:eb:8a:62:51:
         1a:ac:ff:0c:34:7b:c6:d2:60:84:f5:6d:2d:6f:ad:f4:6a:1e:
         e3:5c:31:5f:57:b4:37:32:d2:63:d4:59:df:8a:94:ad:32:4a:
         ed:96:27:07:7b:e3:49:f1:2d:cb:da:03:b1:be:48:b6:bf:8d:
         41:a8:e9:1f:37:4c:e3:5d:23:97:d1:69:d2:f9:d2:10:70:09:
         f9:30:4e:2b:b9:ac:65:85:ad:89:0b:74:cf:66:26:38:83:da:
         f1:f8:3a:e4:4b:f5:9a:b8:48:87:d5:61:8e:fb:e6:9a:e9:b6:
         0c:7b:2a:db:5e:67:bb:2f:f0:09:f9:b7:eb:65:5b:d3:a7:76:
         f0:8b:c9:44:a3:5c:27:5d:f3:7e:90:b8:ab:8b:cf:01:9c:6a:
         f8:06:26:24:7c:84:47:fa:c8:07:58:3f:94:c5:28:cd:64:8b:
         4b:bc:fd:92:75:e1:09:0d:5c:94:60:44:08:70:f7:37:91:da:
         91:b9:76:8b:6c:0d:c6:b8:9f:a6:fb:da:9a:14:51:d6:32:a6:
         7c:4c:01:9a:89:f7:aa:9a:15:80:5d:7d:aa:35:ed:64:ac:3f:
         4b:7c:43:94:22:78:c3:10:9f:2d:69:26:66:6c:37:23:5f:41:
         68:86:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----