Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
File:                     Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft (raw, json)
Hash identifier:          LWQU6WIGcseI5KTioMRS2yX8I/b6wixIxdq4G+EQH8Y=
Subject key identifier:   EC:AF:A6:2C:05:3F:B7:E5:1D:EC:E2:5A:9B:1A:8A:4D:A8:30:EE:75
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Certificate issuer:       /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial:       019929A10CF2F7AD0788D054F3FC466ECECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
Manifest number:          04EA
Signing time:             Mon 08 Sep 2025 14:00:44 +0000
Manifest this update:     Mon 08 Sep 2025 14:00:44 +0000
Manifest next update:     Tue 09 Sep 2025 14:00:44 +0000
Files and hashes:         1: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (hash: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=)
                          2: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (hash: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=)
                          3: 85XHTZF8_OOGgOk-mVWKWLc6lIY.roa (hash: b0pu/O6201+Sp/Sf6rtT9fuAu2Go+sAcXF6QddYqSIs=)
                          4: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (hash: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=)
                          5: A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa (hash: lggmut1+AIhHUFw/pa+hugHmAOGvNZ/jcOZNrQeZgUk=)
                          6: CLpkAB9SkASnLi0bcVjlvibT8q0.roa (hash: h9ZbpSD1UKLYDhyFqL5vdv53fTWYJR5sayvIQP/wamo=)
                          7: DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa (hash: p48aM9J6UtUtpZTM/841RmdWu2zT9B6GH0dk1pfPpo4=)
                          8: EdGVjEh6znEiY0xnI6tnnsDmccQ.roa (hash: y+5pZPNAYlJ/z27zBdh0E8geOyw/SZCW+6NOeA97S5U=)
                          9: GXU9CZoWeYqYaMLcXtU452RLGzE.roa (hash: Ug+ep/scaRMIVKYjt/kb3DXC95IqSzR3jdE/0W22yWQ=)
                          10: KC1VRLfkRjJaTRJkoqJn0hRlI84.roa (hash: tQWG0ggjDXD3kpeWao/i+euRv960YKPeRVxpWQ6SB8g=)
                          11: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (hash: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=)
                          12: Ukci9Bg7j4Bn7kCrXEDt1C9dNSA.roa (hash: H+c80Rb+WwbpGiMbg43g9GvHTmvViqW1xacKDSZEpQI=)
                          13: Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa (hash: QTVqmpZONM6esupsMvufy9vRDscEqFkzSQftaVkJdcs=)
                          14: VN-x3if2JfSigyOSHLCs6UizS4M.roa (hash: mr97YYgeFYA7EPEZZwoik/VjswtT3aAYQjI6+eLZYiU=)
                          15: VWObvOSvF1AXNIIRn3xBmcVBaCA.roa (hash: k2TM3+amiq1VQwMqtDCgTlWYgVGq94+g2GBovKDeCf0=)
                          16: WGYEguUavpCm1up5aoWx17M7VF8.roa (hash: 7LrFDAvn49AXPONunh9HIMSmPEiDJLlOh62u/CVqUuI=)
                          17: XAF2nAYop71Hh8Tb7_HOyi66maI.roa (hash: tdAuUgyz5suYZW0ncsFGdtTO9JJGRHO3a39OyKfTCvk=)
                          18: YexbZ9XFgQhT1vp8sk3sQqqQe9U.roa (hash: r5CG/fT/2a1FFiFHEfz9mv1/F2o6C2NocnaCA9Rt8TE=)
                          19: ZFOXIg0OEPtnBjfbywrEG5iZOIo.roa (hash: Ryy+wPPRhz6QBXpj3jwSi5cqGdl/f+SrE3JOHaH2kp0=)
                          20: Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl (hash: QiJ0aIynEHsKJRMu0LZO1QN4Y+uQEuPSX7YPsV/MayA=)
                          21: Zh-8f0tKdwJJmTErbAZbBlAu2-k.roa (hash: Krjl31rGf1mkJQ9LvksqzyPEEMfTl0Ol/mUhHx32Z6c=)
                          22: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (hash: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=)
                          23: ajJXa8aIvHOlVBnzgPL8HsXSKPc.roa (hash: 2OyoDakgfS4OIoQoPgsoG8SlZKCjA3/3esWcjB+/eQ0=)
                          24: bSQ2KJkghyGNH1xM4L0qwKLgqKc.roa (hash: ferYAqATun5kAev+OYfREU8H5PWvsH+O2JxdN9vsL3s=)
                          25: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (hash: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=)
                          26: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (hash: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=)
                          27: g9H2LktE3c6-Sqs72dXiG041h9c.roa (hash: sGtady+29HwzEbBTNubgrQ0Nflo2I8avNRSZW2kEUiA=)
                          28: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (hash: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=)
                          29: ga0KLDUpKphpd5uhD-u7xvCdgo8.roa (hash: iNvTkN67twKCRuI+xwjBz8piFCF9xnDfvAKVgLU20KI=)
                          30: hIsb24dWsZ8VsBWOEEjl3fdkCsE.roa (hash: A4XAyp6Fewl0t4Uxa5BTFhXjIGGvivyuEJQWo21WUn8=)
                          31: jJAMNmAh3_heXLx-3lZjlbb0rT4.roa (hash: +kN7wYZliIZDgA9ImlLry1J0Pp3xcHDSqBUjZROOAlE=)
                          32: jrev2CCg204y6thtVMgx8NoOHvc.roa (hash: XInUBJm/rNM3kh1KQHkzlYycOkqI3p4/VV8cWm6nGSY=)
                          33: lN-t97gLRpuQiIuZBao3sqyhivU.roa (hash: +mDT0U1tA2WAtk/Z2ZEI8eZRiQJYovhUI82zz7zEdzc=)
                          34: mKJqEI739B0iTvnzxCUb3biwris.roa (hash: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=)
                          35: o9UTDerj5SkBNPSC_40DCs_7wyc.roa (hash: 7gqSvQN7VD6wF2cIvKTOi/nKnwSyMGxTZqKG6dEtTe0=)
                          36: pCE1baMGsmwCYXSEoEEcUwBkH8o.roa (hash: GsYlVdD3sX0x5By8y8crNFzjEYXJ2ZK0i/TeckVJ2AY=)
                          37: tQlk1mJ3Q57dUylH0cWwEXNsNO4.roa (hash: 88L8h3QT3LZj5nAWKf1psRrxbrTm+VcpE0c7xWTV8YA=)
                          38: uwJjJYOZ_7DUuDF8wU2KZg0dlOo.roa (hash: cA4rHQb9J7DcEiVd1KVksPey2LgBKIyPGl4x9ht8hg0=)
                          39: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (hash: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=)
                          40: xRsccpvpSiiTwttx3dpa06OlRpg.roa (hash: orBoyMh9VeDFLJFJ4WX7x0O+gFyLVR8gpkTZp4d5t+w=)
                          41: xtacYUrWT0gTPxdT4fe0TiG1Tsc.roa (hash: yMQPsqMg7sD3m/fFaAS+z0fJHNjAt10OD8IjX7c29Jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:29:a1:0c:f2:f7:ad:07:88:d0:54:f3:fc:46:6e:ce:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
        Validity
            Not Before: Sep  8 14:00:44 2025 GMT
            Not After : Sep  9 14:00:44 2025 GMT
        Subject: CN=ecafa62c053fb7e51dece25a9b1a8a4da830ee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:66:f3:9c:13:ed:2e:13:af:c4:2d:c3:73:
                    48:da:dd:ee:ac:ba:7e:51:88:fd:75:49:96:6f:99:
                    c1:47:ed:47:a4:73:99:3e:55:aa:65:03:c2:01:58:
                    32:a4:6b:b0:78:7a:76:72:36:a7:62:4f:88:55:fc:
                    85:a3:8b:c4:fd:24:c7:59:26:10:bf:64:ac:ce:11:
                    a0:01:7b:99:2d:f1:f1:39:7e:e1:10:0e:94:64:78:
                    a8:65:1a:dc:27:e0:b1:74:12:88:c3:a1:fd:fb:6b:
                    9d:4d:ae:c0:2f:ae:1f:28:7d:db:01:fe:eb:5f:02:
                    90:d8:3a:26:b4:67:5f:8a:60:0a:73:28:87:d7:ab:
                    2a:c3:4c:4a:9a:f4:11:59:80:61:0b:1f:87:20:88:
                    d7:55:fc:54:20:a2:d5:d5:f2:6b:e7:a1:72:c3:08:
                    b3:6f:45:a7:45:8e:ea:7f:77:25:26:d6:d4:e8:6f:
                    17:e9:c0:1c:3b:2e:e7:d1:7a:88:48:bd:bc:76:02:
                    69:72:02:df:e8:54:d7:70:fa:f2:ff:9f:e1:37:ee:
                    ec:c3:ed:d8:d7:b4:28:c6:28:72:86:35:22:aa:83:
                    2b:35:63:c3:d0:c3:55:e2:64:a8:6d:ce:e2:46:7a:
                    6a:05:90:87:f7:87:52:cf:9c:19:a7:55:46:bd:ee:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AF:A6:2C:05:3F:B7:E5:1D:EC:E2:5A:9B:1A:8A:4D:A8:30:EE:75
            X509v3 Authority Key Identifier:
                keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:78:6e:fd:54:99:e9:32:53:d7:32:5b:52:20:32:fc:94:
         19:2a:d2:de:41:1c:2e:e4:07:c5:19:45:9a:4d:74:f2:b7:d2:
         95:d8:ca:25:c4:a6:96:ac:1a:cd:1b:c5:96:90:5a:fe:3d:d2:
         91:a7:1c:35:ff:17:a1:93:d9:06:40:27:ba:17:c8:30:cd:20:
         92:9e:bb:1d:96:44:f0:03:8e:fa:91:92:66:e8:35:43:1d:72:
         ba:c9:f9:8e:a5:0c:2c:4a:23:76:b0:c5:6c:f1:a6:35:d0:c7:
         08:47:b8:f5:f3:20:f0:0f:31:b5:62:07:4f:bd:6f:1d:50:98:
         0c:12:99:7f:4b:38:f9:44:54:fa:76:63:b3:f6:04:43:00:3f:
         2b:46:7b:19:59:d1:88:6a:c7:60:53:52:39:68:e6:7d:78:c4:
         86:d6:43:3a:67:b5:aa:5b:db:e0:86:a8:8c:ad:be:45:77:89:
         7b:13:32:d9:0c:93:6b:86:87:05:f5:1c:68:d4:55:b0:b8:62:
         47:2a:e8:6f:db:d9:d9:b5:d3:1f:2f:4c:43:5c:bb:72:aa:30:
         dd:d0:12:ce:15:aa:f9:4c:c5:8f:b0:9d:cd:5d:69:69:12:ae:
         f7:c7:3a:25:50:6f:44:ac:32:3e:21:21:09:6c:be:e3:92:0d:
         2c:e8:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----