Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          SoPWC8NDORNtNdQ42qYVQF+W6C9lVcK5inybhpuHRvE=
Subject key identifier:   56:5A:29:90:8F:63:A3:3B:A6:15:16:60:CD:3A:A5:88:4B:DE:24:3C
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019A05FFFA9BB0F49B8003043E75C800711C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0F06
Signing time:             Tue 21 Oct 2025 09:00:53 +0000
Manifest this update:     Tue 21 Oct 2025 09:00:53 +0000
Manifest next update:     Wed 22 Oct 2025 09:00:53 +0000
Files and hashes:         1: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (hash: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          7: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          8: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: C3o5ltg8qLL28xxIxGM3g3M6kN/VmoyGSqBUx0hkluY=)
                          9: 50HOfDq4SZhogdts0dPqVM4XTCw.roa (hash: gq9zrZ+BK3Nboc7ESH3T2C8md6IL3SSl/lnd4DTZjZM=)
                          10: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          11: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          12: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          17: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          18: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          19: Px5iLrMfAnahYW8d7Kf4sP5MQ7c.roa (hash: /X5EutEm7vdfoKklrEHO/rbL7vz/kb7MtLIMtv6Btbs=)
                          20: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          21: Sn2yq569peqmbe3S0107RFaZbdU.roa (hash: v0CID4ljSSDt03Znz3l7eRbQ/C/Uw7lcLaMg7wkGl0Y=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UOw4kvzOzwctaQndLqAt1sv8qe4.roa (hash: qXueiBufxOI0tBPQ2snloT38d2A++KUpGiJMOc1dDIg=)
                          24: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          25: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          26: ZD6IQx0QGy15hp-snS4osazDoS4.roa (hash: Udr1AeGDcu95NbGnNGzt1ymxEOmuOSiOTJK7SDovbcQ=)
                          27: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          28: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          29: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          30: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          31: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          32: iF9-NKAWtTux6MwMaI6QJdJJltI.roa (hash: xbmH6KKP+n2z6UfbQYpzZpWwVeqplqlQYplIkYXDK08=)
                          33: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          34: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          35: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          36: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          37: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          38: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          39: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          40: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: vEoakUYlpmTQIaLwpaXyp7_1UqE.roa (hash: eiYLucoZ9zchXIwhszUzBZ15EUScjN1eZIZfgJxOdfo=)
                          43: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          44: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 07:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:05:ff:fa:9b:b0:f4:9b:80:03:04:3e:75:c8:00:71:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Oct 21 09:00:53 2025 GMT
            Not After : Oct 22 09:00:53 2025 GMT
        Subject: CN=565a29908f63a33ba6151660cd3aa5884bde243c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:98:5e:0a:7c:be:5c:0c:da:35:42:0c:31:
                    66:9b:84:e4:7e:40:96:a6:76:91:47:93:56:ae:10:
                    93:34:ac:81:07:73:61:b9:b6:07:57:10:76:42:a3:
                    81:a9:0a:7e:b8:74:d7:b2:a7:6d:e5:7a:fe:13:aa:
                    5d:09:19:bd:ce:e6:49:3c:5d:2f:1a:b1:66:8b:19:
                    6c:8e:01:06:5d:79:20:69:a6:a8:15:47:75:43:d4:
                    8a:23:d3:79:bc:5d:e1:4e:a0:21:93:cf:17:0e:c4:
                    0d:f5:0b:cb:6b:54:2b:eb:f5:24:ca:ff:72:f5:0a:
                    ba:2f:01:79:33:ba:03:27:0d:f4:28:3a:9d:c2:56:
                    1c:4f:50:4e:c5:af:a4:a2:7a:08:f6:72:66:9d:67:
                    b0:27:17:a5:91:90:cd:9c:81:50:71:69:b0:3e:00:
                    58:d8:43:74:73:d1:bd:a7:09:3a:d0:18:15:2f:46:
                    6f:9a:04:52:85:2c:ae:df:50:3f:15:02:f1:7f:89:
                    e7:44:5e:48:c3:11:b1:29:ee:82:7a:6a:cb:68:2e:
                    2a:5e:ae:1a:9c:68:6f:ed:9b:6d:09:0e:88:dd:dd:
                    4d:5f:ba:13:3c:a2:5f:69:12:e0:16:bf:23:6d:65:
                    db:5e:02:69:47:3e:b8:86:eb:99:55:68:77:fa:86:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5A:29:90:8F:63:A3:3B:A6:15:16:60:CD:3A:A5:88:4B:DE:24:3C
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:49:72:ca:2e:58:da:bf:0d:3a:f9:ef:9e:32:7a:75:07:
         5a:1a:49:02:63:0b:86:ad:fe:92:ee:b8:ab:6c:ef:ef:2e:9e:
         81:68:46:91:08:db:25:d1:73:ee:b6:35:45:ee:53:ba:25:46:
         d5:4f:32:52:01:14:c9:d9:aa:c9:1b:eb:59:dd:9f:59:95:80:
         1d:a7:dc:7a:64:ca:fe:dc:76:e2:6e:66:19:37:3a:78:c4:c0:
         61:9b:88:0a:85:6d:ba:c1:c8:a0:53:41:60:a2:e0:0a:9f:23:
         aa:ca:69:86:87:f9:72:a3:b3:14:b8:81:7f:d7:97:73:c1:aa:
         1e:ca:e7:e2:08:ff:c8:73:a8:3d:f9:e3:8d:05:7b:05:dd:19:
         8c:2b:f9:fc:c6:fd:94:0d:83:8b:8d:a3:72:57:e3:8c:2a:2c:
         f7:a3:e0:fe:07:cd:ae:0e:7a:92:07:a2:e3:8e:1e:1e:43:05:
         c4:68:ac:61:25:32:46:6a:0b:f4:c6:20:ce:b8:e3:9b:74:ad:
         68:75:a7:ac:25:2f:99:a9:d6:90:ee:02:af:7a:a3:0e:66:ad:
         0a:fc:8c:1e:05:bf:7d:d2:63:87:9c:7c:ed:8e:5c:38:d4:64:
         7c:da:39:7a:c5:0f:31:c5:66:c0:72:37:c2:03:78:b8:82:36:
         c5:fa:41:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoF//qbsPSbgAMEPnXIAHEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUxMDIxMDkwMDUzWhcNMjUxMDIyMDkwMDUzWjAzMTEwLwYDVQQD
Eyg1NjVhMjk5MDhmNjNhMzNiYTYxNTE2NjBjZDNhYTU4ODRiZGUyNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9eYXgp8vlwM2jVCDDFmm4TkfkCW
pnaRR5NWrhCTNKyBB3NhubYHVxB2QqOBqQp+uHTXsqdt5Xr+E6pdCRm9zuZJPF0v
GrFmixlsjgEGXXkgaaaoFUd1Q9SKI9N5vF3hTqAhk88XDsQN9QvLa1Qr6/Ukyv9y
9Qq6LwF5M7oDJw30KDqdwlYcT1BOxa+konoI9nJmnWewJxelkZDNnIFQcWmwPgBY
2EN0c9G9pwk60BgVL0ZvmgRShSyu31A/FQLxf4nnRF5IwxGxKe6CemrLaC4qXq4a
nGhv7ZttCQ6I3d1NX7oTPKJfaRLgFr8jbWXbXgJpRz64huuZVWh3+oZASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZaKZCPY6M7phUWYM06pYhL3iQ8MB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6ZJcsou
WNq/DTr5754yenUHWhpJAmMLhq3+ku64q2zv7y6egWhGkQjbJdFz7rY1Re5TuiVG
1U8yUgEUydmqyRvrWd2fWZWAHafcemTK/tx24m5mGTc6eMTAYZuICoVtusHIoFNB
YKLgCp8jqspphof5cqOzFLiBf9eXc8GqHsrn4gj/yHOoPfnjjQV7Bd0ZjCv5/Mb9
lA2Di42jclfjjCos96Pg/gfNrg56kgei444eHkMFxGisYSUyRmoL9MYgzrjjm3St
aHWnrCUvmanWkO4Cr3qjDmatCvyMHgW/fdJjh5x87Y5cONRkfNo5esUPMcVmwHI3
wgN4uII2xfpByg==
-----END CERTIFICATE-----