Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
File:                     SmRMEVaFGAPzet7sCHbM-YnVrvA.mft (raw, json)
Hash identifier:          sDL/LesDOstQzN/R3XEUrsemms42rHwdCI9MTgd0c1U=
Subject key identifier:   11:38:23:91:01:C8:A7:2B:B7:E6:F6:3F:D5:FB:DD:2B:1E:B9:9A:3C
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       019836843BEA10041C8202273A0FC07FA6C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
Manifest number:          163B
Signing time:             Wed 23 Jul 2025 09:01:32 +0000
Manifest this update:     Wed 23 Jul 2025 09:01:32 +0000
Manifest next update:     Thu 24 Jul 2025 09:01:32 +0000
Files and hashes:         1: 0v_RTqodXg7uts804DO8DlpFX78.roa (hash: y+krhTMUMJ5yn5MwcvgMpKhAmzkKLIME0VMymZPp5pE=)
                          2: 4KH-y6QREzE4LeyWTu5_77D181o.roa (hash: Neqwl6/04QwN4l0XrwEVz0se3RRDdMOSG5N6v2wvO78=)
                          3: 7d96aB4yIJcpf3t7AK7rOEfEuXU.roa (hash: YVUOaQ7gZo0Ot14nzNA+Iid5DHh0RdoEeVU8ZU55+sA=)
                          4: 9HdbHzZ27Vd3tlQStmluQMdFsxg.roa (hash: Kkqk35e6lllQPlKYLd1+lhlbXoHZPI4IQZ6jvHb2ESk=)
                          5: A0eYVFt37M7Hyne3tP9cnDQAFbM.roa (hash: x1bt24/7R0r3PGwDd5P6QSqq89KK6VkGoa5LmfUrjA0=)
                          6: B-HvPcMNkORIEsyHin-5Ucm45so.roa (hash: QH08oAPROflXQtq3pjVDZyI9xtgTK2UfOm1DEys9OhE=)
                          7: FhEZUb-g8tz0dmvk1v5GsrCRk84.roa (hash: HgfA9zucPguD1AxEbybavmC0DMPH66TlawClBCpe9FE=)
                          8: G69JKrBdDzPKZ3vnbDuuWA1tb7I.roa (hash: 6v8iJzBQxu1EBH72GEHMAvN+9lMnUKlEbyIa+l9gXGI=)
                          9: H4FvMRollmXHX1HLPKkKwpukncU.roa (hash: h2xTWOZ2JED1huxeyfzhrD1jjW++qapkXmS/QsPC0TM=)
                          10: I8BSHZjJe4fRK_pUy0SQfbwHviY.roa (hash: owvOqrLDeUoNT6uZ5W/6Ts90NCtLLVm8pkgG0HtL5JY=)
                          11: INENFus9WqXWtpOeaFhh1OQTHRg.roa (hash: UQ8ya8gJ+M8V393h6OpqNyf/HVYXH6ODYAUSl4pAhYA=)
                          12: IPdBRl0ekj3fZtV-aqYG0wF3csc.roa (hash: YdT5DEuAY9nQ03V75nwU5Qvhsos7OjQYU5mlCXpV4eo=)
                          13: IQdyXm10YIvxpQ3vSn-LIRr7Tug.roa (hash: 1o3qWwAApVqGDQZX3XomOg7J1VOuy+P2D6qgrlUjgOM=)
                          14: KlXP61wGSf-pkp0VnUHJdMFJoT0.roa (hash: ME21anJjxNOFhXR1wF7FD1dWOc2tT2Q1ZM7bSJeQB80=)
                          15: KvOJHKAeGDCeKLkhq9pdSk6taCI.roa (hash: Utpb4p6sMigitDFrU3vkuJ9LNtTzlJoCBSnn2mdzHV0=)
                          16: MjtJWGzm5_f2mFBP8I4N32iTc-4.roa (hash: aJwLirgkbC/JPwSdOE8hrKkslYd0mnJVTACDtqwDsTU=)
                          17: NBAGDYPUnvorO2q1yfBImzh7D6w.roa (hash: QnH1bhgeIDfkHQTP+dUysIWRvONxxhMwrYv0/dcYFz0=)
                          18: NlTNyrWPdL5vOt3EGOf2-nBw1DQ.roa (hash: ttRkNbClIFmBa+I1Ta8+zVuctuQ/7uS20NKV7LYulFI=)
                          19: NyUq0rHsT91G7RkHUT-LWQ7PPSg.roa (hash: T0QRKwpRKCboBN8QOjnL0H+oqbdiRAZQLY2yjOk7Fio=)
                          20: OnJJI-UcryEC3I5kYOeKYPOGl7A.roa (hash: j0CqJNVWt12tK61vQ9wyqHc91rd5hkC5twzuHb3o6Z4=)
                          21: P-3WPsxzJjEfo1fblfP6RKJSuMk.roa (hash: 9S6Tg0GaCIXSokwyy2tq+kgbf5yA9aYiTlT4v7uY+9c=)
                          22: R3eyxC5MHgP9DZIjq3TQ_al5Q5w.roa (hash: 0AIz8WCbcmrBhbx3W2meQYXWJcwFyXjOFoI5n5QWbtU=)
                          23: RRF0BWArThGFUtcgB-Rqqa21Q_M.roa (hash: Tluv64ZgR6YwKTB2F70qHzzv+8hIQNsglXWcD11honc=)
                          24: RgjfGOiIOGhb6lg8ZO0jej276JE.roa (hash: 0wjqoo1DYJfFxcDdCs330fRKCDC9d/Cj22mlZ4GDf/E=)
                          25: SGUSmUbykBNQca489rTDr5H7TUw.roa (hash: sHwxwvrHUWm6wMY6yXM0WuSJ3XhvZLBBAlnjJ4BZgaU=)
                          26: SgVz4Rhh2Ype3A59WGbt5jdH2m8.roa (hash: +xIisR5vxXG2z9EPwn6u9uPIg7+bwDVFkwKXElUiUts=)
                          27: SmRMEVaFGAPzet7sCHbM-YnVrvA.crl (hash: d96gbd8qg3lLx56DQQRTfbXAWR3dkJ5G602aYZrq8/4=)
                          28: TRECTuZaimFnG4pglvpHe58bwuE.roa (hash: t9cM2WOMQCuoJ1uhCsS6FdzzKHKaQ2I8gJTVvzG0yxM=)
                          29: WKySn7XdjeuNNZEp6xruqyreXbE.roa (hash: vqnAHunN4IDq5O1yObfv2D22QaI1DnObaKUwy2tS29c=)
                          30: XH3gTwRRyfVFNyTqOOY3Pn1Soo4.roa (hash: 0DFR9fZPWn7s4wVKq2sl4VDe/1kG/0fqQ3Yy0F8vnsc=)
                          31: XnUGRcKQ1QjwVPMHWlTU3ttR-1Q.roa (hash: x9C1r40DphD4ncetArBuOXIje8ycmsCbdCyI1Ndy7ks=)
                          32: YKUl3tkS9m8YLLcw0AZ1bvpFPXw.roa (hash: 79y53z5o9XdogxOi0yLDNYi3RG7BP5zSnNpGbs32iuE=)
                          33: Zt6LHMTfLR59IJjYMO4sjFCKZOk.roa (hash: KMPWjVV+IX/YuLVJb8fP0p9dBoY/PwezciceUfVHcII=)
                          34: _hukbR93J254DMJnWRshzd_9XrE.roa (hash: dq+JoTZvaafPqz+HU6kp+DfcclBouMWGtMG/1Mq5b+I=)
                          35: aKk7eVYzVveE3UsbN47EfRGODKw.roa (hash: bTMl5+kG1FU9bagaR/GwsnR/LJRUAYF48oD6z7F3xyg=)
                          36: cv52lnCd4OYEq3ChwVPuByt4EO4.roa (hash: Y6tX9RqJ28Ihc1ndH1vV880Oy2R/oaI4x6kTnzu/ycg=)
                          37: fTdBXzX_wjVsaCcMmc4AAQ6qlo4.roa (hash: YJPgDmA6+lWa70RWmr2Z2Yx5naS+Coy9SWZAG40kkJc=)
                          38: h4MHbt8rKPdvE6pCQSer3G6MnTc.roa (hash: e70Hy1ZWtxV0aKC4XEmDEQ1J5rWwDvs4dhPGTZIpvgc=)
                          39: hi43TFpwTUa1bPTZUPSrgm6ZR0Y.roa (hash: uyoQYVM2fn2Ho94tHrlyaVhbjVElvndeIP7l0BHoDz0=)
                          40: jhl7y3sjFqu5uIbMLXHfKsNFdx4.roa (hash: mcdHes63xQ4mXYFPj11J8KDqcbki1pWoOvlCMQmkfxA=)
                          41: kL4zPBMybJxQYl9_8Kt5EkZ8aFg.roa (hash: MYkciW/HAYtdagBM93kAsR9eBHWWpyUXvGcFUS0gkdI=)
                          42: mMDxK0WxFJ6maCrg4OEHyDDdyRA.roa (hash: j/wglFh+8XuVLWXZyOV3IHQbOCogUlGy3GWIuKkD70o=)
                          43: mNNzWKNLR2mS3EBf98lw7fJ0Vpw.roa (hash: xtfUuEn1+EtPD4+a7supLhoEKiAn2RSR2EUKwPfE0XY=)
                          44: n2RHtL-CU9otjO1yQwBptv89dVs.roa (hash: cDXkL76j5pmJaZo4nD5IUqXbLLMgJaocy5vsopbqkYo=)
                          45: n5ExxW7AlKYh8Zobqyue2WEan98.roa (hash: 53bKldCzLO+N7tn60ehAZ5PROGRcKw9uwit5PGEVVvo=)
                          46: piBUrLE00RKW5_XyaVZB2W7Ph_I.roa (hash: hjEqDcW3jaeavPYcEgUuV3jVxdcO3aqYh7/dD8xfdNc=)
                          47: qlY6buwvfS8BnPFLAQXRyVhx_l4.roa (hash: bx/hWa3x57JwzWRJdOeX096KavRo16EGex+VEF6HwmQ=)
                          48: s5nOHH7O_Iy35NadNlKWRTHv234.roa (hash: Zqo89mKPMWCA1LhQsk+V9v8ft2unhkmQL40GMLvzCkw=)
                          49: sQcj_duo5Cg8Xfz-ES3oPTUOi28.roa (hash: UBRg0OFo+PF18+ZgKxelM+L0bmaiqfhjolhWTmBXih0=)
                          50: tHpRTBuaFH5QWf2yxdfZP_yIVK4.roa (hash: FIYygeHNRAHFoaxV2xTCdULSPAEV/6fM5bXp6Z4QEEo=)
                          51: uqoQ-8UD9FCwIAXYqwnRKnPFPg4.roa (hash: mL5tPrwEO0f7YBN34MFrBQ2Qu7yG1DPUrXis6eR0Yjo=)
                          52: wpUmu-Xo2ip46WIEDVpmSlqYSmU.roa (hash: LP/oQP8iUFbd2UyMIKESE/MB+dwqGm6E999guHOpv0w=)
                          53: xli88av7B6kw_A3aRMP1ILsAyFQ.roa (hash: Z3gErDqytP3YBgryDBSj/BDdq4jReFxtEbdskVpyY9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:84:3b:ea:10:04:1c:82:02:27:3a:0f:c0:7f:a6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jul 23 09:01:32 2025 GMT
            Not After : Jul 24 09:01:32 2025 GMT
        Subject: CN=1138239101c8a72bb7e6f63fd5fbdd2b1eb99a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:e5:a4:a9:84:47:96:3d:4e:9e:bc:76:16:
                    f8:f5:9d:76:e0:66:6c:ba:46:85:88:85:e6:3c:cc:
                    be:56:01:db:d3:bb:82:d5:22:bc:f0:af:64:9e:16:
                    d4:68:1f:ca:bb:dc:8f:71:3a:d7:aa:61:23:d7:f6:
                    1f:32:7f:71:3c:85:ba:64:48:32:42:66:bb:06:06:
                    a2:21:d2:94:63:f4:9d:af:2f:95:3f:1f:a5:ff:30:
                    e0:f1:f2:e4:40:6e:eb:15:2e:b8:be:96:dc:d8:55:
                    e1:7d:c9:20:e7:ea:f8:b0:a1:74:60:b8:19:5d:68:
                    cd:14:9d:79:f2:79:c3:43:7d:27:d5:30:dd:6b:c1:
                    1c:e1:c9:82:19:fc:87:0a:c8:27:cf:d0:61:54:00:
                    ea:90:2c:74:81:4d:97:1d:6f:58:7f:87:75:21:fe:
                    88:2e:6f:db:f5:e8:91:73:7c:b6:54:df:1b:0e:48:
                    65:33:c5:f0:56:da:82:8c:f2:45:92:73:2b:1e:41:
                    d1:75:ba:c0:71:94:3a:77:47:33:6a:38:50:1c:59:
                    ca:71:e1:a1:50:1b:81:40:53:71:a5:3a:8e:a5:9a:
                    93:48:ba:ae:b4:06:d5:2e:42:15:5c:ed:5c:4d:f8:
                    d6:ad:e8:26:0b:04:ec:79:d7:3f:ed:f3:ca:d0:32:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:38:23:91:01:C8:A7:2B:B7:E6:F6:3F:D5:FB:DD:2B:1E:B9:9A:3C
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f2:aa:59:5d:f6:cd:97:9d:9d:26:1a:9b:7a:8b:a4:2c:bd:
         cf:74:40:7e:4d:25:19:6b:d1:4b:82:15:c2:5e:11:06:45:61:
         45:2a:40:45:72:6a:66:fb:0f:bf:bb:98:65:6d:92:af:a0:23:
         0d:be:19:27:84:67:2e:6c:ea:66:36:f4:6f:82:60:50:45:1d:
         d2:5e:e6:d3:b9:b2:4e:37:f3:d1:d9:0f:a3:8e:58:ef:69:03:
         d9:e7:d7:39:e2:9d:a4:28:f6:5a:6e:36:a3:f4:72:c0:60:18:
         56:f0:ef:83:e5:4b:91:65:97:5f:86:44:c1:aa:9a:5d:ec:e3:
         e9:76:8d:09:0b:13:f7:59:9a:41:b8:c3:1c:d8:04:68:e4:69:
         ea:a1:ba:6c:ee:fa:c9:ca:ce:9a:75:21:98:73:ec:9b:2e:e0:
         66:55:88:aa:22:67:7a:0a:cd:23:10:0f:ca:3f:2e:1f:00:45:
         6b:9f:5c:b8:5b:a3:5b:70:e2:f8:5f:c2:ef:8c:44:70:cb:57:
         44:db:24:93:a3:a8:cc:65:4b:01:9c:e8:2a:31:9f:77:fe:c4:
         7a:33:1f:22:02:7b:10:a7:d7:81:64:83:e8:94:22:1d:db:9d:
         b2:9d:c1:f5:8c:fa:66:2c:35:2b:43:7a:20:80:be:cb:7d:0a:
         3f:57:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:09:06 2025 by rpki-client