Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          CumPIly6F/MqKtoSsyi0TgcvNh1pZflfn0MYvH2ArqQ=
Subject key identifier:   B5:33:94:2E:AF:4C:8C:6E:F4:7F:4A:EC:88:30:47:D7:1F:56:E9:37
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       01991EB00D54154FAB01FE5A7FD5EE6EDD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0A96
Signing time:             Sat 06 Sep 2025 11:01:18 +0000
Manifest this update:     Sat 06 Sep 2025 11:01:18 +0000
Manifest next update:     Sun 07 Sep 2025 11:01:18 +0000
Files and hashes:         1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=)
                          2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=)
                          3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=)
                          4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=)
                          5: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=)
                          6: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=)
                          7: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=)
                          8: CyAx1lcKD4wc_amccZ1znyVkKIY.roa (hash: Xo4DDTOMDsU3unzlvdlmOXck+6K2PDfwqs5xU35c1bQ=)
                          9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=)
                          10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=)
                          11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=)
                          12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=)
                          13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=)
                          14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=)
                          15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=)
                          16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=)
                          17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=)
                          18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=)
                          19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=)
                          20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=)
                          21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=)
                          22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=)
                          23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=)
                          24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=)
                          25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=)
                          26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=)
                          27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=)
                          28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: dGHVSZJhoeTDECsFCC4LJ/zDcIIwbFSmydZdLORMMag=)
                          29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=)
                          30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=)
                          31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=)
                          32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=)
                          33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=)
                          34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=)
                          35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=)
                          36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=)
                          37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=)
                          38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=)
                          39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=)
                          40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=)
                          41: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=)
                          42: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=)
                          43: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=)
                          44: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=)
                          45: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=)
                          46: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=)
                          47: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=)
                          48: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=)
                          49: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:b0:0d:54:15:4f:ab:01:fe:5a:7f:d5:ee:6e:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Sep  6 11:01:18 2025 GMT
            Not After : Sep  7 11:01:18 2025 GMT
        Subject: CN=b533942eaf4c8c6ef47f4aec883047d71f56e937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:eb:09:33:b8:fc:85:43:08:72:f3:d2:28:
                    e7:31:ee:85:a4:8a:39:90:0c:04:76:ec:d6:6d:ab:
                    91:3a:db:3b:ac:2f:a7:73:a4:14:4f:0e:77:76:2e:
                    35:a0:47:f2:b6:eb:31:f7:b6:6f:dc:de:4e:1f:d4:
                    ad:3f:a2:6a:ff:3d:69:bb:48:44:dd:e5:3f:95:76:
                    08:a4:3e:35:93:29:12:8a:1b:53:dc:6d:13:f0:59:
                    13:16:12:45:d1:f1:ed:d5:72:df:6e:51:61:29:4f:
                    40:e0:e2:74:68:b3:c2:73:9c:83:7a:83:ce:cb:04:
                    60:9b:fe:3e:b8:49:64:14:05:d2:8c:70:68:2e:fe:
                    d2:f7:44:6e:53:69:0c:cd:b2:00:3e:77:6b:f9:30:
                    10:24:66:84:77:2a:fa:46:c0:78:c2:e4:28:83:9e:
                    17:bf:27:2a:73:d4:4c:3a:71:db:48:4a:14:fc:4e:
                    d5:50:6f:ff:0b:1a:2a:a0:5c:01:e3:59:6c:26:ac:
                    c2:53:64:00:51:34:27:bc:b7:62:b2:4a:3c:0e:ba:
                    53:bd:11:95:6a:32:7c:15:49:ba:c7:bf:4a:5e:ea:
                    cf:fb:6e:19:59:30:9c:0c:af:8a:bc:8b:7b:f2:50:
                    43:31:5f:a8:51:49:6a:f2:eb:d9:ac:ca:47:75:78:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:33:94:2E:AF:4C:8C:6E:F4:7F:4A:EC:88:30:47:D7:1F:56:E9:37
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:06:6d:ab:2e:0b:9e:e7:14:26:2b:73:e9:da:81:15:22:0a:
         76:63:48:72:b7:ec:1b:48:12:a4:f8:db:ef:25:30:1a:5c:62:
         1e:c4:54:2e:83:f3:d0:c9:90:23:35:0f:53:08:53:16:e4:cb:
         c8:c6:e0:4a:db:99:5c:3d:fb:76:87:84:a5:45:b8:da:d5:d1:
         25:5a:41:35:18:f6:11:42:fa:a0:74:96:ca:ed:e9:60:d1:9f:
         6d:de:67:c4:9e:96:f4:57:9e:d4:4a:64:42:a2:2d:d9:59:91:
         94:80:ab:7f:58:8d:36:ca:3a:94:67:24:cb:39:e3:57:a2:46:
         d1:44:c5:29:d5:2c:b5:00:79:43:9a:0a:a8:eb:7a:e3:53:fc:
         9f:a7:43:21:32:4c:9d:ad:e0:93:c0:00:43:e2:79:e9:85:cb:
         72:93:7d:e4:d5:35:d3:eb:ab:d0:ba:95:7d:d2:ab:f0:cf:01:
         03:8f:85:d6:51:ff:8e:3f:f2:1e:cd:62:b5:f6:53:2f:0d:7a:
         79:09:a9:e7:2b:77:ac:3c:ee:b0:22:2c:80:4b:9b:4f:d8:ba:
         4a:1a:1f:e1:a2:12:5c:fa:77:2d:9e:28:0d:22:a4:2c:b2:aa:
         b7:30:e3:8d:fd:ed:d1:c8:c0:98:62:59:2e:ca:df:9a:69:40:
         e5:8d:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----