Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          GFSPyUx60Wyf4NsbSf3w5eOm1EVsnt+GlW2gq57JuN8=
Subject key identifier:   65:AA:44:AF:C4:1C:46:D7:13:E6:D5:EA:E6:E7:5B:AE:AD:F0:D2:13
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       01973BE355CD9238E5BF3C212ED740D2EA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0D7C
Signing time:             Wed 04 Jun 2025 17:00:43 +0000
Manifest this update:     Wed 04 Jun 2025 17:00:43 +0000
Manifest next update:     Thu 05 Jun 2025 17:00:43 +0000
Files and hashes:         1: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          2: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          3: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          4: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          5: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          6: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          7: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: W7EvMbBdlPL8chpUVTydXuZrMxtZwAa050nlaLx26CM=)
                          8: 5-NSO-oosPy2Fnqe9ZLLQ4qlSEk.roa (hash: 59DVuXqICUgWxnrab+B36HpZ0Fh3PgDU9mH3qJl2eMU=)
                          9: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          10: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          11: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          12: FXvAAn7NyKXWEzgCbrbFrRIu1ms.roa (hash: S/6mYweNk47GZ2xByXqahBCGNFochLn/uagsQ44CW5c=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          17: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          18: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          19: P5V0GP5ZMydG1nYgWvLs9BuCo90.roa (hash: LmLash0GSRhmVjwmeJKJ3oRTiu/hMeCsFLYSoJD6Uw0=)
                          20: Qc9ZFwkB4-cyHF3LSkCBWzHVWOI.roa (hash: RT6UiXG2/uWjcKF8JDD2niojE/xCiHwIen62OA697RU=)
                          21: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          24: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          25: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          26: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          27: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          28: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          29: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          30: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          31: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          32: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          33: pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa (hash: qsBg1yiXic0iCFhK8ObPAn7qxsbHG/jIDP3l2pslZB8=)
                          34: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          35: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          36: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          37: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          38: saU4g4MCrfwSof0kHf4WCgLZKmI.roa (hash: jGOXwi/t0u47bHN8xI/HtzKORgrHC2xW5BY0lDPilgQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: taU9TJjVT1bBJe-vWZ2x7cMNlU4.roa (hash: knkAZrjI/4bDSM14TYUSeabSKbYf5IXyvKCcdNOZZeQ=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          43: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3b:e3:55:cd:92:38:e5:bf:3c:21:2e:d7:40:d2:ea:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jun  4 17:00:43 2025 GMT
            Not After : Jun  5 17:00:43 2025 GMT
        Subject: CN=65aa44afc41c46d713e6d5eae6e75baeadf0d213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:6a:da:be:ce:07:d2:be:d4:b5:e2:ba:21:
                    2f:92:1e:27:5c:9b:96:87:f3:51:a2:09:59:58:7c:
                    cd:80:d4:c9:49:5e:5c:3d:cb:78:5d:0f:18:cf:f0:
                    49:08:22:a4:34:33:dc:30:e1:23:0c:47:41:1c:d0:
                    f5:92:a0:5d:5d:b6:f2:ef:40:1d:76:1c:21:98:7e:
                    59:2b:d3:b1:af:bb:4c:99:2b:0b:0a:1d:d0:5f:13:
                    2a:98:cf:82:d1:f0:04:86:e3:08:a1:4e:6b:bd:b3:
                    9f:60:7d:f4:b3:0d:c0:6c:7c:a4:c2:a8:42:2a:b9:
                    25:c3:78:c4:a2:01:3e:24:d0:7f:c3:13:04:4f:5f:
                    10:b1:98:80:e2:63:5e:cf:98:26:66:f6:19:03:a4:
                    19:cb:83:3e:3c:cd:40:0f:f1:14:a8:f6:72:cf:0d:
                    25:d9:bc:68:34:6c:db:52:c5:4e:05:a3:32:66:8d:
                    75:25:c7:6d:b8:88:4e:5f:da:29:5e:6f:b7:1e:9e:
                    65:8a:f9:57:5c:91:3f:76:d1:ae:83:2a:16:0f:bb:
                    90:c1:74:e3:23:a4:34:c3:60:8e:f7:b6:34:24:86:
                    88:c1:bc:22:ac:6e:0c:7e:b1:47:e1:92:81:5b:bf:
                    ff:e4:62:34:6d:98:5d:01:48:8d:7b:85:49:39:6b:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:44:AF:C4:1C:46:D7:13:E6:D5:EA:E6:E7:5B:AE:AD:F0:D2:13
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:13:74:3a:4e:5a:1e:17:31:99:36:90:72:8e:d7:bb:fb:6f:
         d0:90:de:6f:06:9a:55:1f:b9:9a:d6:78:97:ee:78:30:84:38:
         40:57:1e:48:8e:2b:b3:a8:3d:da:bb:d0:dd:74:42:7e:40:c9:
         23:07:dd:24:7c:72:1c:32:9e:cf:20:1a:2e:c2:37:b9:3c:8a:
         2f:d5:38:25:c8:e8:68:4e:24:8a:37:ef:c5:1c:4d:2d:cf:c5:
         ea:2f:b8:da:27:5b:bf:ca:62:ff:53:20:69:38:f6:e5:83:85:
         03:be:1c:11:dd:1d:5d:2b:e0:98:2d:90:39:4c:69:f9:db:00:
         dc:6e:37:7e:5a:52:c7:3b:37:35:b1:e3:40:e6:13:48:ef:1b:
         2a:53:f5:b5:89:9d:29:74:fa:33:b2:f9:7d:93:f0:b3:d2:43:
         59:a7:7b:47:64:c8:de:ac:d1:82:71:80:b4:c4:2c:40:b5:35:
         ab:7c:8b:64:1f:f0:e4:74:2c:33:80:ec:00:d7:7f:bf:75:1b:
         20:77:a8:22:21:e3:24:da:85:cf:92:8d:9c:74:1b:e0:8a:5e:
         8d:44:46:99:20:04:68:07:da:b1:a7:72:87:58:00:02:11:24:
         ef:81:ba:dd:4e:98:7b:c9:12:15:5d:1f:7e:51:d0:52:82:a8:
         cf:49:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----