Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          PBeECE8FnY4qYI88Nqdqr9AvPzltQ5AEB7GjjqiQHxY=
Subject key identifier:   DF:EB:EF:40:C4:98:61:AD:CC:2B:3F:60:75:6A:4C:E1:4D:93:64:9B
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       0199FC582BC7515C80CCB2F4690DD42A5959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0F01
Signing time:             Sun 19 Oct 2025 12:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:00 +0000
Files and hashes:         1: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (hash: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          7: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          8: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: FoIJZND/fsVvkRIMxSyqX/ARbzN056helZKkSzScuvg=)
                          9: 50HOfDq4SZhogdts0dPqVM4XTCw.roa (hash: gq9zrZ+BK3Nboc7ESH3T2C8md6IL3SSl/lnd4DTZjZM=)
                          10: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          11: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          12: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          17: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          18: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          19: Px5iLrMfAnahYW8d7Kf4sP5MQ7c.roa (hash: /X5EutEm7vdfoKklrEHO/rbL7vz/kb7MtLIMtv6Btbs=)
                          20: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          21: Sn2yq569peqmbe3S0107RFaZbdU.roa (hash: v0CID4ljSSDt03Znz3l7eRbQ/C/Uw7lcLaMg7wkGl0Y=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UOw4kvzOzwctaQndLqAt1sv8qe4.roa (hash: qXueiBufxOI0tBPQ2snloT38d2A++KUpGiJMOc1dDIg=)
                          24: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          25: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          26: ZD6IQx0QGy15hp-snS4osazDoS4.roa (hash: Udr1AeGDcu95NbGnNGzt1ymxEOmuOSiOTJK7SDovbcQ=)
                          27: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          28: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          29: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          30: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          31: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          32: iF9-NKAWtTux6MwMaI6QJdJJltI.roa (hash: xbmH6KKP+n2z6UfbQYpzZpWwVeqplqlQYplIkYXDK08=)
                          33: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          34: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          35: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          36: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          37: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          38: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          39: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          40: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: vEoakUYlpmTQIaLwpaXyp7_1UqE.roa (hash: eiYLucoZ9zchXIwhszUzBZ15EUScjN1eZIZfgJxOdfo=)
                          43: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          44: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2b:c7:51:5c:80:cc:b2:f4:69:0d:d4:2a:59:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Oct 19 12:01:00 2025 GMT
            Not After : Oct 20 12:01:00 2025 GMT
        Subject: CN=dfebef40c49861adcc2b3f60756a4ce14d93649b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b2:5c:9b:d7:a6:aa:6c:64:d7:55:aa:a8:31:
                    75:98:80:cf:33:93:c8:d1:96:a3:33:7d:b4:ee:1d:
                    d0:6f:fd:25:df:f6:1f:29:5d:e5:92:b6:79:6f:ec:
                    1a:2f:7b:ba:45:36:1a:d1:b2:76:bc:20:a3:68:9c:
                    39:8c:b6:79:14:97:4a:5b:27:00:9f:ba:8b:6e:c3:
                    fe:31:7a:a8:d4:e3:64:18:f7:60:57:e1:a6:70:30:
                    1f:96:1b:44:11:98:f5:0d:cf:74:e5:7b:9c:32:15:
                    0b:f7:e3:e8:04:2b:f8:da:c3:fa:dd:52:79:15:ac:
                    8a:11:01:0d:17:4d:e1:f6:d1:42:d4:21:bf:8b:24:
                    79:70:0f:80:86:73:59:71:19:2a:55:90:f8:44:21:
                    73:b3:92:b8:a4:ec:b2:b1:ff:00:c2:7e:73:23:6c:
                    23:d1:d7:0b:6b:8d:33:31:45:5f:f6:4c:61:a3:f0:
                    f8:aa:86:59:4f:a2:d9:1d:3e:1a:e0:40:5e:9d:f3:
                    54:b3:cb:d2:d5:85:fa:68:3b:a9:e8:9c:da:ac:02:
                    0c:5c:06:3d:63:31:1c:1d:2d:6e:1b:f5:ad:12:a0:
                    d6:fb:f2:57:ff:1d:73:d2:ea:4c:6f:bb:bd:e5:96:
                    16:75:01:bd:50:5e:81:71:79:f6:80:ca:09:26:97:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EB:EF:40:C4:98:61:AD:CC:2B:3F:60:75:6A:4C:E1:4D:93:64:9B
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f0:0f:e6:37:50:7a:a5:cc:41:91:67:93:34:d0:9d:97:e3:
         3f:0b:04:89:80:1b:37:e2:0c:c2:e4:c6:a7:10:9a:8b:01:46:
         c1:cb:23:5b:bc:4f:d0:35:b9:ed:17:36:38:17:a9:e9:7c:24:
         e5:9f:b5:cc:ab:c0:0f:14:5a:db:e5:7d:72:2a:47:8b:4c:15:
         48:31:31:3b:66:ec:d7:f6:e7:77:f7:ed:77:ea:e6:44:4f:09:
         ce:c3:e3:c5:b1:b6:87:97:cf:e5:d2:d1:31:fa:fc:88:b4:99:
         2a:78:e8:8d:bc:a9:e3:6a:ed:fe:ae:b0:51:32:fa:0b:26:42:
         7b:77:c9:37:fe:94:33:b6:75:ff:c5:eb:ef:87:25:02:d9:2a:
         cc:e8:b3:96:7f:5b:c6:28:33:69:37:97:16:d9:2a:bc:1f:79:
         2e:d0:48:4a:fa:c3:25:01:e3:92:eb:64:9a:15:27:53:c1:7e:
         ff:3a:13:7c:46:f0:92:ca:ab:fe:ef:60:a3:b7:79:ea:0b:d8:
         66:d3:98:38:2f:62:2f:56:e4:75:2a:8b:ad:e7:89:cd:59:91:
         e1:11:bf:5a:e3:9c:cf:5c:88:db:2c:df:e9:fd:ed:23:43:b2:
         c2:47:d7:97:2a:f1:0a:99:ab:c1:41:fc:dc:f7:6a:98:a0:fe:
         40:6e:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----