Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          KJm20GEEhgktM7nyx57FvNest5IOdBwdOd6RXt0mNGY=
Subject key identifier:   21:A0:8D:3A:34:CB:25:93:1D:3B:02:49:C9:D4:3D:4B:67:6F:40:4E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       0196ABE7F1CCD43ADF90DB8B0CCAB178B95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0D30
Signing time:             Wed 07 May 2025 18:00:26 +0000
Manifest this update:     Wed 07 May 2025 18:00:26 +0000
Manifest next update:     Thu 08 May 2025 18:00:26 +0000
Files and hashes:         1: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          2: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          3: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          4: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          5: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          6: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          7: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: DjhU2sFcpASNuQ1yrks8D38FSBDRgS5NK3rwyKFGYng=)
                          8: 5-NSO-oosPy2Fnqe9ZLLQ4qlSEk.roa (hash: 59DVuXqICUgWxnrab+B36HpZ0Fh3PgDU9mH3qJl2eMU=)
                          9: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          10: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          11: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          12: FXvAAn7NyKXWEzgCbrbFrRIu1ms.roa (hash: S/6mYweNk47GZ2xByXqahBCGNFochLn/uagsQ44CW5c=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: GgIYtuXJ-zjknMgyNDkHTlDx41c.roa (hash: Hyukwf9ipmgSsenYKUlXQhXLYy0p6+OjpRcBgtIMSe8=)
                          16: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          17: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          18: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          19: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          20: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          21: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          22: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          23: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          24: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          25: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          26: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          27: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          28: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          29: k4ZQo6Jn42inlw4N2vyQhiUQgN4.roa (hash: a/nxe8zHcSTGUGGJ2JtCbi9pShuWfUe2/C70xRJTj8s=)
                          30: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          31: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          32: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          33: pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa (hash: qsBg1yiXic0iCFhK8ObPAn7qxsbHG/jIDP3l2pslZB8=)
                          34: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          35: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          36: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          37: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          38: saU4g4MCrfwSof0kHf4WCgLZKmI.roa (hash: jGOXwi/t0u47bHN8xI/HtzKORgrHC2xW5BY0lDPilgQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: taU9TJjVT1bBJe-vWZ2x7cMNlU4.roa (hash: knkAZrjI/4bDSM14TYUSeabSKbYf5IXyvKCcdNOZZeQ=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          43: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e7:f1:cc:d4:3a:df:90:db:8b:0c:ca:b1:78:b9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: May  7 18:00:26 2025 GMT
            Not After : May  8 18:00:26 2025 GMT
        Subject: CN=21a08d3a34cb25931d3b0249c9d43d4b676f404e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:43:56:8f:da:e3:a1:c0:90:5a:dc:be:26:
                    da:2c:fa:a2:17:a4:08:f3:a3:f3:c6:7f:c4:19:a1:
                    7c:35:90:99:32:f9:93:c7:45:e4:61:88:96:21:5b:
                    54:03:b3:a4:77:b1:97:18:32:20:a4:54:2a:4f:69:
                    11:6a:94:ca:bb:28:9a:74:e8:3a:f4:6e:f5:94:af:
                    a5:8a:0b:b5:99:30:04:2e:9f:fe:45:78:b5:cf:b5:
                    b6:df:73:f9:61:35:f1:c8:0d:54:e4:ac:bc:c8:14:
                    86:6f:4d:fe:0d:ea:c1:cc:ac:c9:04:9c:c1:5c:8e:
                    d2:7f:4e:9d:7d:00:af:93:ba:76:3a:5e:a4:6c:63:
                    46:bc:d4:b8:3c:73:d0:aa:4f:4c:db:e7:7c:ad:d9:
                    a2:4e:17:3f:35:b7:fc:6c:03:ed:be:04:07:79:35:
                    59:0d:84:0c:71:67:e2:7d:74:8d:7e:aa:be:c7:51:
                    81:0f:9f:5e:c1:4b:d9:a8:62:e2:c9:40:85:d5:ca:
                    cb:f9:5c:ef:b3:17:1c:eb:28:3d:13:73:48:11:8d:
                    b7:1a:38:f2:bf:5d:5d:c7:6d:5c:7f:d4:b1:68:77:
                    dd:53:f8:ff:63:3e:07:e2:e2:14:da:c0:22:17:3c:
                    61:67:46:89:57:20:fa:91:bf:c4:ea:22:61:07:24:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:8D:3A:34:CB:25:93:1D:3B:02:49:C9:D4:3D:4B:67:6F:40:4E
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:34:e4:e3:3c:7a:33:3f:8e:e5:2f:64:26:ad:49:a1:2d:ef:
         bd:d8:4d:6d:ca:94:e7:87:3c:56:b5:6c:c6:ec:08:8a:74:55:
         2a:a3:23:cb:da:cf:7c:f0:fe:45:aa:88:02:23:cd:58:f9:cb:
         54:f3:60:87:13:2b:76:f5:b9:5a:f0:c0:47:31:d2:70:aa:36:
         2c:ef:27:0a:f1:23:36:79:31:b4:1b:8e:2c:23:cd:c5:89:18:
         be:6b:0d:c1:bd:dc:dd:15:18:61:23:65:0c:57:d8:2d:0b:1d:
         3a:7c:97:bb:27:18:13:91:c6:35:0f:3f:78:0c:95:3f:7d:59:
         f3:e1:16:a5:93:1e:71:09:fd:30:89:42:6e:b2:34:1c:d8:c1:
         c2:e7:c8:b2:ca:45:56:25:e4:0f:e0:3d:ab:cc:cb:fb:fd:7d:
         69:bb:94:96:5f:7d:5b:1c:ab:ec:71:a6:d8:72:c8:09:9b:dc:
         3f:22:8e:87:8e:f4:34:65:ec:d7:56:a6:83:99:58:40:71:04:
         95:ef:fc:d9:cb:d3:42:5d:b6:87:ce:fc:1f:5d:8d:5d:67:b7:
         40:fb:9d:9e:db:a5:57:2d:38:21:eb:12:c5:e0:fd:c8:c4:08:
         53:72:b5:06:54:85:ed:89:ce:cc:0d:00:85:79:ac:cd:93:33:
         d7:d8:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----