Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          B6QotW4YUfzBiqoklrwCYl42HZbHAEB3kD3IU2DQQDs=
Subject key identifier:   22:74:97:B7:4E:0D:15:A4:73:73:5D:2B:55:01:6A:0C:1D:1A:4C:B7
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       01991688D3F6A443A54B7085F72CB2709DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0E7F
Signing time:             Thu 04 Sep 2025 21:01:29 +0000
Manifest this update:     Thu 04 Sep 2025 21:01:29 +0000
Manifest next update:     Fri 05 Sep 2025 21:01:29 +0000
Files and hashes:         1: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (hash: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 1xqweFZ_QWczhc7b_BrdNle8oG4.roa (hash: XEAwcK/OrzhM5yCQRB7MZjAAt4z2W4juPx+amgk1yRE=)
                          7: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          8: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          9: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: 6k2laSCuNyYZ7X+k1VbKvsuKzH70o1U1RFzDgdte5F0=)
                          10: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          11: 63L7NXlhLUEKsMWDsI9QqTsSSOk.roa (hash: Hht6QuQ7E30AyisXVASO258qO5oiAT6wocq+1VFasaI=)
                          12: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          13: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          14: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          15: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          16: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          17: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          18: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          19: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          20: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          21: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          22: UOw4kvzOzwctaQndLqAt1sv8qe4.roa (hash: qXueiBufxOI0tBPQ2snloT38d2A++KUpGiJMOc1dDIg=)
                          23: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          24: WnJdU5EuKJJiQLi2ThTTX1z2ME4.roa (hash: o18q2/VBD3/VXv1QOelJTDXH7ACCLyKb+ekuDcYd7kQ=)
                          25: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          26: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          27: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          28: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          29: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          30: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          31: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          32: ngsJ7Yl8sCiuTC4QItqWzg7itrI.roa (hash: UN6UoP3GwCiAeYx4upXvVQn1hk1aL2yEM2V/Zoie9XM=)
                          33: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          34: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          35: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          36: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          37: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          38: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: taU9TJjVT1bBJe-vWZ2x7cMNlU4.roa (hash: knkAZrjI/4bDSM14TYUSeabSKbYf5IXyvKCcdNOZZeQ=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          43: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:88:d3:f6:a4:43:a5:4b:70:85:f7:2c:b2:70:9d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Sep  4 21:01:29 2025 GMT
            Not After : Sep  5 21:01:29 2025 GMT
        Subject: CN=227497b74e0d15a473735d2b55016a0c1d1a4cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:4f:75:8d:99:89:87:05:8e:1b:6b:ff:df:
                    ab:bd:10:e9:4f:8c:b1:dc:aa:7d:e2:96:aa:dc:91:
                    f1:3d:15:88:7c:da:49:10:99:88:be:fc:dc:0d:bd:
                    e7:0c:e3:52:fd:21:b9:e2:ed:9c:39:38:4c:27:3e:
                    0c:37:6e:a9:95:e8:bb:e6:ec:df:74:e8:75:49:3d:
                    a7:c3:a7:85:a5:91:31:fc:68:ed:e2:39:d6:e8:d4:
                    e5:c4:dc:bc:39:5a:13:79:f9:ab:a1:95:95:29:53:
                    48:50:a7:85:1d:de:7a:51:97:e7:dc:5c:02:ca:40:
                    ad:ef:a1:dd:59:a9:9e:a5:4b:89:a7:cf:99:a1:5c:
                    35:d1:15:37:cb:58:e0:79:61:af:38:15:e3:7c:24:
                    af:b9:e0:69:0f:61:35:fa:aa:87:6c:fb:09:b5:e5:
                    23:b5:7a:19:1a:26:f7:7a:8c:7a:dc:2a:88:ea:62:
                    47:20:80:f0:84:84:68:30:66:27:a2:0c:1e:fe:3c:
                    4c:52:98:3c:53:ee:1a:42:6f:6d:4f:a3:68:0a:2f:
                    13:17:0a:1d:d7:8b:da:6a:30:b3:08:17:a2:41:6f:
                    16:94:9d:be:30:fa:2d:bb:ea:da:14:b3:7a:2e:d5:
                    b9:85:26:a7:0e:77:0f:4d:9a:a4:dd:c6:b1:94:23:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:74:97:B7:4E:0D:15:A4:73:73:5D:2B:55:01:6A:0C:1D:1A:4C:B7
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:22:29:9c:5c:ac:fc:21:50:1e:28:41:8d:db:6f:7c:7b:
         73:16:b7:da:23:c1:83:01:65:d8:6e:6e:9f:ce:26:8f:c1:07:
         5b:bb:25:89:82:17:f0:6a:9b:d1:f3:01:92:3d:0f:5f:37:30:
         45:bb:77:a5:aa:2e:e0:18:53:1a:47:eb:f4:26:ed:b8:f6:c6:
         e1:ef:6a:7b:c0:64:25:e5:bc:ee:4e:02:5a:02:0f:73:56:9f:
         60:6b:6e:0e:bd:23:94:d4:2b:bb:62:2c:a6:58:f5:f6:69:1e:
         f2:c8:5c:f6:66:44:96:f5:2d:66:d7:bc:65:8c:01:4e:f6:ee:
         fa:a4:7f:93:ba:bb:3d:10:ce:81:ed:50:32:50:9c:e4:60:b0:
         dd:39:bd:e1:e9:e2:c1:59:d6:1e:ca:c1:f0:0a:73:32:8d:0e:
         b8:57:d3:f6:7f:4c:6e:85:4c:62:12:5d:02:29:89:64:17:5d:
         a0:fb:85:f1:b0:bc:f8:3e:50:4a:1f:4d:53:56:13:21:fc:de:
         97:35:91:e3:60:c3:a3:d0:a4:98:ba:52:6f:bf:1e:08:c2:d2:
         1d:d4:07:6a:94:25:c0:9d:4b:b2:6e:55:35:72:ac:e5:be:db:
         24:6a:b6:29:e0:27:cb:1e:f6:b9:03:ab:b3:27:eb:ee:e5:3d:
         3d:8d:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----