Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          XI5CKhKwTo4VPrxJsOM9g1uy9pUjd/FWMNzzakMuCVA=
Subject key identifier:   70:03:C4:07:49:AF:F1:78:7A:93:73:C3:BE:C0:46:D0:0C:E3:FA:91
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019DE28ED71813969394CB4C631754FEB7D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0D10
Signing time:             Fri 01 May 2026 08:01:45 +0000
Manifest this update:     Fri 01 May 2026 08:01:45 +0000
Manifest next update:     Sat 02 May 2026 08:01:45 +0000
Files and hashes:         1: 0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa (hash: oJFIU8Cu0N2S9/wG/IfXoDuZ2TzeSG92c58fXMAz65w=)
                          2: 1WFcAkubK0j9tuvoOEpKw8rrMZc.roa (hash: US4FVafwO24GeaH/vI2owb0qrhh125+5+tzixj9zkLg=)
                          3: 4YDvutSU0UmPrwnDFoLiKufwEY8.roa (hash: zJVa6p9/6hu2WbxRpiJdGV1n058lDV+uyqxwOAwNowA=)
                          4: 4hgz4QMM31Dnzsk16v76ApMHw1Q.roa (hash: uTIYHBVMNL1a8dqc59Xavlk6v2XFQUwkIp5IXWbQIxQ=)
                          5: 6CzQRMn6GnwsVxYiA_23IYKMeoo.roa (hash: yTq5lptLiZc3PV2A2cnpwYQvB925u7nVJPs/y3zGz+4=)
                          6: 7H2mFDg6qfXpVYnxbXn0fEFWELs.roa (hash: J9Hxga4uilgUHWboi+rXmCtEsrXocnGU8yxF/NAwyo4=)
                          7: 7xz9ZtbXj7qhOrWl1asjKBlzz1o.roa (hash: al7m3r3hlQECrtwI9lRqdu9jwLTy7M0zSKzMUXGbBvQ=)
                          8: 8c8fo4MttyJv5SLRbDdRYu1xnic.roa (hash: 1vjbMqaT77+AxTSiKxSoxcqnrNY36Cpct9YPE7m/ttQ=)
                          9: 8cSFy7Ko1nag59SAcofvgS4Nnmg.roa (hash: IveoawDTw5t/FsiNYzrV2ir2XqSXTfIr+SxjBonLcNI=)
                          10: 93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa (hash: AJlYL2EFP/0kQaoDXjXnYGJqco+B4D+CiQvUKCb/WIw=)
                          11: 9w8n7TtHePHsLOfepkD5dQlDWpY.roa (hash: QNQ16n2FmGQi82u0p2e9PUzGlGzw6yfmOHXwlBjHsbQ=)
                          12: DPy9szbNMOQKof88htrB5gYXHg8.roa (hash: KpMcLwZt2U9k9KODAobx45vqz6G1VYYTX/rJeTqqTFA=)
                          13: HcULhPVBvVigoye4t6FA-KQWO9w.roa (hash: hAIwfnXvBlSldAfdYYWFGxIbO3wQO108WhCVpchVN6Y=)
                          14: LwRV0I5aAABSv2rkP0tPW4FRNzs.roa (hash: koEQn+aNjm6TSUwuZfgQBvNwwQjzXH0iVoRIHsH/lmI=)
                          15: Om-Yq1ZGRM1IIUjBT3G8r_WH3vI.roa (hash: NbN2DC3J+/IORMxUWXp73u1pYhmDVgIteGSJjaWkIyM=)
                          16: OwtGWChxCNtRyJj6ElbibxId-aQ.roa (hash: ka/36kkAkjg2s/fwE4e37YvaQAs87ErAmYuEuoZciXg=)
                          17: PCm2Il224mWbxHMgp2-whFWp5Y8.roa (hash: li5I0uPh7E9cKNVsRWXspiiKnjbCYQjxIQb8POSntgc=)
                          18: PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa (hash: UsJVbDBJ3BYi/wLg7BLlATz/hycpIsDhQ1LAnNbDRWA=)
                          19: QJmnWjrF5SckYqXHMQVWx6L7kxc.roa (hash: ZzvvSvqGh3FCeEYQX83Fju97+ka1cm0UIM/Bcb7Vjew=)
                          20: RUng57NMoW7ac1B2TzLtvUsBHXs.roa (hash: bXdd060UNM819brDZVY/MNr90jZYyXFvlUoD/+9CalA=)
                          21: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: dIU9V8nMA5D3etuiCn+/d6XzAi2lID6/XfwsI6RrcIY=)
                          22: TDJgGMkZLrZ81GbvZCeAhhBMKFY.roa (hash: 6e5HzejThUKP+KfqmBRD2KB/4LGOct53fiIiefsSVx0=)
                          23: Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa (hash: H+8IU6Ec/C7W0gUzGWdPCX/2d2iav4ezOCEab5gRvr0=)
                          24: W_BCOjmAdkWfODZ7bvZ_1VEo820.roa (hash: aAqSVSwbC6esRzER14YmpKx6m+Lo1g184jMJRY9Bonc=)
                          25: Wx6ujnx5V9SmWdGZ7fl6JX-A-ik.roa (hash: myAFROxX49mA8li5Tx07MgNtYqh4WpPg6VTHZGCCys8=)
                          26: Y9-xxrcFnsxDZauuv568t-PFy6A.roa (hash: xIyIZR1hVpjqPtioz/biAZM6H7ey8FMbjIcIVI3aaQQ=)
                          27: _F5w43RHV6dx3R_wQAV5wzUAHzc.roa (hash: BxgPa91m82H9cRlL0aKlQX+98I+Jq5YFGlS8SucX+mo=)
                          28: _IfucW-In1l5Fz3tjcTrBT7FS9I.roa (hash: 0d3RCOf/PgnlqbIN8XSmRiR9HJQfbIKvyOIHy7stdzo=)
                          29: djSIdX2gTX0MCxSL5llsn6i5hhM.roa (hash: fcqxImDjDHGTSuae1yCoZlPJZwU1d5hw+ezJF6PZbRg=)
                          30: eIpleKuOfZq1bPfCT2L77KdKRYg.roa (hash: czjz3eTpWUJaPaJtmnQVcyeyF+Dq4AtmQioUJnZMjK8=)
                          31: eSFc-jrx02A_dWByF1qGRiDKKWw.roa (hash: I6Kx+g6HRJvl92E2ZUTTlvthedWJjMU1Cjwr0YGI0s8=)
                          32: e_F7Xbi0XqAy8Omhy8vQyDQa9No.roa (hash: oE2eMUbGUqjLN7domDF+Is0SbYEsjgkb9FJzi5XwtZw=)
                          33: eiaI1-hJNAgrmp0gE_umAxWn1sI.roa (hash: 0+nXI30Kx9KhbtXb4L+JY50O7XiXe8UjeNblohyYrj0=)
                          34: epL-6pVwzhIEf7qPG0idZwvRAaU.roa (hash: PUOL+WHkVofoMPu8K9ZuIn3mIvtNQi0EbJERGXzRSaU=)
                          35: epUEByvctUQFdD6x8uykLVw28K4.roa (hash: mbKHV+YI3RW2KrL8/aMhBlFmfvhswGZcacqDnNW/6l8=)
                          36: g5P1CePj7Ig3Woj5axzABAMb-Fs.roa (hash: /SHldXpCq9rbN+oRz89QqyP1fUqetjOkr2DsYsUd4t8=)
                          37: h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa (hash: VkUy1q7rwk/bJY0kmudHR01ERlqKVDpha+69blCqd7w=)
                          38: lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa (hash: MgQdaG1666kHidH2vRjUNtiAJVGqpfkJRhC7xtWbkDs=)
                          39: ljJZC2hEpJ5Azrtf0iqlzINfN74.roa (hash: 5Q5VXrZNXtx66LR6yEa6nurEugsz3hLaJZcfv1xig+w=)
                          40: oBbHZskBgePxfPA6yXAa9qsZaJ4.roa (hash: HMrh2dCkL1N2+YwCmiHFoho2RWsT9N7Z2PNHtiVeXho=)
                          41: ou98WwPXDlrEW3eM0KZKlXxPjU0.roa (hash: e6aNXSypQBdMmCLoYi3x6Uu9rY0X9chBD/3LiPy1/5c=)
                          42: pcwBdWeogQWKGBKaJvlkeUygt1Y.roa (hash: FyjOSrsEYcBQx6MNH4viXYO5bDrfzFXdgEpostcNkrE=)
                          43: qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa (hash: 53AqSfnCOo667DHb8w2oqtwcLknCSxXAHJeADmD+v3g=)
                          44: sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa (hash: DgS24JG1c/l8UCWAl1zW8utqR4YjdbEUYY2s38b7VVE=)
                          45: siv7eihEdKW_ap7AUDG7_39jUmI.roa (hash: WFYLo+dkgFW4+MbeoyoZaYOFmKk3TOwdJdQSzSoQ9SE=)
                          46: tbVX_nBTaE5VNov1rsfXFt2f7SU.roa (hash: rfYnZjKJQ0wuXUnU3TmEpEijE4Fpnxn/YL0Ur1YiogQ=)
                          47: urL4Mc4DykB_e6TYmMEoYhi2954.roa (hash: gfx7b8/If2mHd3qPOzceO0clF1lE+PE3Ji80UoFnGp0=)
                          48: v28XBIDcOIWawnqoBUd5lqyUYxk.roa (hash: WxydDKnqf++ZAuoc5GMUeeHtdm5DstgCBzp6r96AGOg=)
                          49: xRZUDhx7ihJfUObQvwoPd_wjCIE.roa (hash: CaizEiyOxtBDcQtuUG7hvPJywCQ5SLbLXz2o0r0E2ec=)
                          50: ySNwW6swWEy9g206lS3TF8Hot7Y.roa (hash: 2G2m7gXWJPeDJ1CaSCcPPIj5TE8F3VNFo+mX4zQe6WU=)
                          51: za88ND0OSXOKBDkHlXDSgAc0j-o.roa (hash: 3SNDrnhjIHUyQtYp1P1Obkb/xEBrgav3aCIr/q2YN6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 May 2026 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e2:8e:d7:18:13:96:93:94:cb:4c:63:17:54:fe:b7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: May  1 08:01:45 2026 GMT
            Not After : May  2 08:01:45 2026 GMT
        Subject: CN=7003c40749aff1787a9373c3bec046d00ce3fa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:28:20:3e:60:0f:21:d1:56:33:b3:d3:4c:
                    f4:a7:08:74:55:92:58:28:36:7d:8d:ac:45:df:59:
                    90:5a:3c:9b:ff:c4:98:f8:dc:45:49:f4:35:c7:c0:
                    f5:ef:c3:4c:03:c5:2f:ce:2c:de:73:5c:7e:8c:9b:
                    da:81:d3:a0:3a:98:cb:a7:f8:71:12:79:7d:49:49:
                    95:de:f7:22:d7:48:1c:04:cf:ac:d0:21:49:22:f0:
                    b2:b0:c3:f6:58:68:64:98:da:b3:55:0b:a9:d9:ff:
                    6a:8b:24:4f:81:f6:1e:91:98:48:25:c3:5f:3c:6d:
                    a0:0d:65:6f:cb:1c:8e:29:b4:9e:bb:ef:2f:d7:57:
                    b4:4e:f9:56:43:fc:97:96:d8:db:89:20:7f:e1:3c:
                    88:4a:30:93:60:f1:8f:d4:94:27:e5:e1:19:86:3c:
                    65:31:fc:ad:d3:aa:18:9c:97:8c:74:6d:a8:96:9a:
                    d0:fc:14:25:d3:55:14:a6:cb:4b:6b:ab:26:2f:df:
                    01:a0:90:86:96:08:b7:fd:1b:53:27:80:fd:9b:c5:
                    97:95:e7:72:af:0b:2d:79:91:3a:35:9a:f7:f5:68:
                    86:7d:db:99:52:10:ab:90:1c:67:0c:15:a0:71:2f:
                    0c:35:8c:1d:6f:8e:7b:08:06:8e:51:30:8b:15:ef:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:03:C4:07:49:AF:F1:78:7A:93:73:C3:BE:C0:46:D0:0C:E3:FA:91
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:51:28:52:3e:a7:a5:ba:24:ed:5c:88:a1:a6:aa:e6:43:4a:
         89:00:66:d6:46:fd:36:2b:27:ba:67:b1:74:03:88:92:e5:b2:
         aa:e9:56:5b:fc:6a:1e:15:55:45:79:e8:5a:ae:7a:80:a6:01:
         49:55:41:37:0c:2b:35:43:3d:2f:af:29:b3:0f:cc:f7:58:44:
         30:59:b6:ef:56:7a:e4:a6:e3:95:fd:3f:3c:15:3c:09:89:13:
         de:6c:22:eb:2f:9c:aa:8c:21:0d:3c:8d:24:4c:e4:11:af:25:
         d7:d3:49:91:44:f3:04:fe:7e:dc:71:c7:bc:55:22:65:b0:59:
         05:32:d7:4c:5c:59:0f:2b:72:0b:d6:80:29:0f:20:ae:0d:da:
         32:eb:ec:6a:0c:a8:52:36:42:a5:be:0a:e3:55:c6:1f:7d:a6:
         9a:56:6b:2f:a3:87:12:76:24:1d:d5:ab:04:fd:93:2b:bf:e3:
         52:eb:da:3d:31:2d:ba:3a:a6:17:cb:26:63:11:14:aa:37:89:
         be:47:f8:38:28:7d:bd:1b:e7:36:f2:eb:16:9c:ac:d5:39:94:
         f5:ca:d4:cb:17:ac:34:b1:af:7f:9b:c8:a8:34:69:81:d7:7c:
         c8:a0:e7:fa:df:40:9d:1b:94:b7:a9:e4:09:9b:ed:c5:03:6a:
         8e:1f:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----