Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          RxuQmp4kYCvxJGDJhBew5PinTZmeq1ELCRa3hkWFRkk=
Subject key identifier:   62:E2:2C:2D:6C:7A:CE:A4:D9:CB:B2:59:33:17:5F:B1:BA:31:A3:8A
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019D2583982AA5898644D605B18E53F08FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          10C4
Signing time:             Wed 25 Mar 2026 15:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:14 +0000
Files and hashes:         1: 0wJmdEsIc6piCPouXDNhCCpeSRQ.roa (hash: WR/b5AIQMqRHnWFbdkMYzAfrUMySKK0esBYcUMp0I1M=)
                          2: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (hash: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0=)
                          3: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (hash: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o=)
                          4: 3icWZ0l13CoXwoj1OeRHgYert90.roa (hash: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk=)
                          5: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: VHvi/iKyuxxKUy3AshO7h5KTFWbharTA1RS/hfeHsPU=)
                          6: B3yLGefLT397xZdjHJwz631sCBE.roa (hash: P6wNlsDfWCADEkpFOrgZZ2Ab/AJtAHaxxAaBB273BL4=)
                          7: CYqAHaNWukk-ByTGpHKXz3QjQas.roa (hash: wiU3rtjJU2K2wdSE2doiy1m3e5+T4eVxinx3u0FFHbQ=)
                          8: CjAdakK4jK3bzKfmCY1veFE0mhI.roa (hash: Z5oJMwQkoJMOahrr4QbJ28O5skdvLzLVhMGsjLOYb1g=)
                          9: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (hash: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw=)
                          10: ElgFDiuFJ69k81EViaoKdimWii0.roa (hash: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=)
                          11: HbjKNiw4d3SEg0dTumigj0PGsTM.roa (hash: nW4tvMSwJMcIQf6OvnWLF1rZzRY1A2YzlXfxp1Y/+GE=)
                          12: KO3mbecsHziWft5oSlk1_j2d34M.roa (hash: f8pLS1dd6igj0miudYVCW/atCJnG106OYVdNd0IpsmE=)
                          13: LtoQvzCaMW0D-GhISv0hO8NnPOs.roa (hash: NcaX+GMamiFW/3NMIXtO3ttNk67Gbq5SGUiAVxBO82M=)
                          14: Mt4AQ66nGpX52iVTjG_QPgMc6j0.roa (hash: Nn/pGbRWzSFMrKeCQn+bGQau+a99ydSdqv5kVOvZ67Y=)
                          15: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (hash: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI=)
                          16: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (hash: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc=)
                          17: QihhibEPB5qBqDDL6gcnigScDv4.roa (hash: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA=)
                          18: QkwhGPSuc7rlqlghZY18xAA7lM0.roa (hash: nAcfbt2ttDYq5SWZx/GAjI41TdBLCEtgGu5tjf8Jj2A=)
                          19: UETzsQ14kEiR9ZLBzc1Rs6TQ7y4.roa (hash: mJed5UC6Bhm9fWUs4Xbxi43CN/6iMd2evk2vhZxj36Q=)
                          20: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (hash: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ=)
                          21: VTvixWkQMb81xqq15q9rkLGzQns.roa (hash: ryhXeNesoIfEURs7jvSEodrx0dn3DmlePOw6kt2lyr8=)
                          22: XnT8EkhkZ4ckaqupDpvRmKmadIU.roa (hash: LOQvwDLJiJLfGtgfx8v+cSvzCjMCe4xzGPCXgXKQfOA=)
                          23: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (hash: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg=)
                          24: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (hash: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo=)
                          25: c219QE8Kcog9UvMKST6A1X7Uzw4.roa (hash: a1rqIUue8AkZGET3xy9zr5OLEkOjTEfxL6rRJ8ZMXeY=)
                          26: cIdwaFMnaN_nODeJi4PVUhETURc.roa (hash: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE=)
                          27: duHlauWDxyB55t783Auf0OjNQSo.roa (hash: Ir+MKAjO46cZx7B3mNkleV8ECfCdxsl+P9B/SC4lcqo=)
                          28: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (hash: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=)
                          29: gHMPiXlYiR1x4sp7jOG4nP5jGK0.roa (hash: 5XQJ6M+b3MHT2W1uXJ+885106HdpcwsdlORrc/CZ+DA=)
                          30: iAuw5JQ3mAXjxY6QWG9RY3yTA-Q.roa (hash: UOg7kVgDqAJH5jfqy325Mwl+Vg9DYyHjwnI/jC5MC+Y=)
                          31: iBGEz-tej_FAq47hFEt3LXiPlAU.roa (hash: ZRiJC5SNia2u87xjZ0fDw27CPe3Mlgd/yd0/2xGYRfk=)
                          32: iYbozmAhuZXekfOxptVTlOnvYkY.roa (hash: /WhAE5gig6ZNzm82pZ7dm3ZCXNI4YTK2pP/V1Kuxu6Q=)
                          33: ikDfAfW-xsNgatn_b62wDmF7okY.roa (hash: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0=)
                          34: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (hash: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I=)
                          35: n7USEOktH5zuMAuITWQF7AXRczQ.roa (hash: ikLG4Fs9JJDgwb3XKOBoWhu8ubnMCzT/Buk9vuX9UaM=)
                          36: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (hash: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc=)
                          37: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (hash: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s=)
                          38: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (hash: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg=)
                          39: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (hash: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4=)
                          40: uzgAI7hlsT6K2Lvcaksi6ldtZag.roa (hash: dI/B0kk5Noti3Cu9uZ1OWU7GUEx5+dx7Iuukl1B+l+U=)
                          41: xIdot6FAjw7dfRg6u_ByXcj3lDM.roa (hash: 8+XjLrCilLhi21bpw8d0FOgL/oy8JtzB6AjiHlyT9fw=)
                          42: xXH0TOzedy66ElcG97fd78bjZKs.roa (hash: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:98:2a:a5:89:86:44:d6:05:b1:8e:53:f0:8f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Mar 25 15:01:14 2026 GMT
            Not After : Mar 26 15:01:14 2026 GMT
        Subject: CN=62e22c2d6c7acea4d9cbb25933175fb1ba31a38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:79:2e:c3:26:aa:56:4f:e1:60:c9:13:b0:
                    7e:30:a7:b0:e6:b9:c4:84:a8:38:67:2c:5f:ba:74:
                    a3:67:0f:1f:3e:32:85:0d:8f:87:b6:0a:1a:0c:7d:
                    78:f3:d3:59:8f:ca:46:66:6d:00:0e:d1:fd:61:8f:
                    8a:47:7a:bc:a8:d5:72:fc:af:a6:e7:fe:4a:83:97:
                    ac:92:b9:23:dc:80:c9:0e:af:58:8c:b9:fc:ed:f7:
                    fe:ec:39:dd:66:e3:72:76:fb:47:77:24:a8:ee:e2:
                    b1:8c:11:31:d2:c0:93:5f:26:53:b5:8b:14:81:b9:
                    f3:fa:f4:8d:cc:e2:be:6f:49:cd:e8:90:06:b0:77:
                    05:51:e9:0d:3f:b1:58:41:fa:87:d7:a4:c5:a8:1f:
                    a5:85:d2:3d:60:a1:cd:40:e3:c8:1b:00:31:91:cf:
                    ba:c8:12:6b:d5:3c:ba:fb:80:ec:88:08:f2:fe:d5:
                    33:5d:8c:fd:ff:d3:38:6a:fd:fc:f4:fc:e4:ad:06:
                    70:f0:e9:62:9f:a1:7b:d8:3f:cd:23:8f:82:b9:01:
                    35:30:07:b3:eb:e3:f2:74:f5:a9:58:99:45:94:bc:
                    4c:d9:ea:16:e3:7e:8f:43:c5:4d:73:76:3a:c7:74:
                    46:65:4c:2a:2f:b4:45:e9:21:8c:ff:32:36:a6:63:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E2:2C:2D:6C:7A:CE:A4:D9:CB:B2:59:33:17:5F:B1:BA:31:A3:8A
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:28:9a:a5:16:38:4d:9c:9f:f3:a8:3c:71:2d:b7:29:e0:
         ff:65:cb:ad:6d:8c:be:a3:97:1a:4d:ca:e1:2a:4b:a2:43:ac:
         9b:9b:1c:c7:b8:42:7d:5c:f7:15:53:0f:61:99:97:50:df:f3:
         c0:2d:d5:74:1e:9b:88:ea:63:b6:86:68:f5:b9:65:88:18:48:
         c7:24:6d:e2:31:38:1b:b4:4f:37:55:6d:a8:4c:72:a3:c2:d0:
         05:59:0c:94:9b:f1:a7:b6:29:d6:e4:4d:4e:7b:af:c4:08:08:
         00:bb:1b:f7:31:0c:dd:16:3c:29:8d:b6:fd:6c:0d:33:29:13:
         bd:bc:d8:9d:55:b6:e3:15:02:46:2b:45:e8:0f:3f:74:ac:df:
         f7:37:bb:53:2e:86:55:1c:c0:59:a0:df:48:63:52:fb:2c:a3:
         ae:65:33:da:2f:b1:29:4f:4f:58:f1:9a:6c:64:5b:7a:9a:35:
         be:85:97:14:d6:b8:73:06:e7:6c:e6:f2:06:06:8e:6f:d5:69:
         a2:86:4b:e7:e6:12:f7:7c:3c:19:dc:b5:f7:1c:26:cd:01:b5:
         cc:c0:cb:0f:a1:cb:45:b2:c5:62:e0:63:b4:79:92:69:5c:d7:
         0e:51:30:e5:ce:da:e2:93:ae:fd:42:3c:0d:fe:25:d3:4d:46:
         a0:ab:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----