Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          0MEmfxuZ7jWobVHSZ0DCaxOHnIpiWybEnK+4LBcNCZA=
Subject key identifier:   89:03:07:BB:01:56:A0:5E:63:AE:31:09:3A:6F:8D:D0:B7:EB:A6:D9
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       0197B77C3DA16CF05C77313A140709CE6CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0DBE
Signing time:             Sat 28 Jun 2025 17:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:02 +0000
Files and hashes:         1: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          2: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          3: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          4: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          5: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          6: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          7: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: P5eJAv3KZ+qQGqt2Y/0h8wwebHHGgYDu+5XtHiEe6PU=)
                          8: 5-NSO-oosPy2Fnqe9ZLLQ4qlSEk.roa (hash: 59DVuXqICUgWxnrab+B36HpZ0Fh3PgDU9mH3qJl2eMU=)
                          9: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          10: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          11: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          12: FXvAAn7NyKXWEzgCbrbFrRIu1ms.roa (hash: S/6mYweNk47GZ2xByXqahBCGNFochLn/uagsQ44CW5c=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          17: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          18: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          19: P5V0GP5ZMydG1nYgWvLs9BuCo90.roa (hash: LmLash0GSRhmVjwmeJKJ3oRTiu/hMeCsFLYSoJD6Uw0=)
                          20: Qc9ZFwkB4-cyHF3LSkCBWzHVWOI.roa (hash: RT6UiXG2/uWjcKF8JDD2niojE/xCiHwIen62OA697RU=)
                          21: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UOw4kvzOzwctaQndLqAt1sv8qe4.roa (hash: qXueiBufxOI0tBPQ2snloT38d2A++KUpGiJMOc1dDIg=)
                          24: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          25: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          26: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          27: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          28: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          29: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          30: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          31: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          32: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          33: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          34: pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa (hash: qsBg1yiXic0iCFhK8ObPAn7qxsbHG/jIDP3l2pslZB8=)
                          35: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          36: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          37: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          38: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          39: saU4g4MCrfwSof0kHf4WCgLZKmI.roa (hash: jGOXwi/t0u47bHN8xI/HtzKORgrHC2xW5BY0lDPilgQ=)
                          40: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          41: taU9TJjVT1bBJe-vWZ2x7cMNlU4.roa (hash: knkAZrjI/4bDSM14TYUSeabSKbYf5IXyvKCcdNOZZeQ=)
                          42: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          43: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          44: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:3d:a1:6c:f0:5c:77:31:3a:14:07:09:ce:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jun 28 17:01:02 2025 GMT
            Not After : Jun 29 17:01:02 2025 GMT
        Subject: CN=890307bb0156a05e63ae31093a6f8dd0b7eba6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:a5:73:68:df:24:f0:3d:9e:e9:94:49:e2:
                    84:46:e3:54:12:eb:e2:e3:8f:75:7f:1b:76:d9:3a:
                    4e:d1:aa:8a:0a:17:af:7a:62:44:e1:f2:db:52:e8:
                    8d:bc:53:0e:a4:48:e1:78:33:e7:7a:0c:2f:68:c9:
                    e6:4b:fe:80:56:26:54:0f:90:f3:ef:05:dc:20:61:
                    ac:17:55:08:c8:86:17:f2:1d:49:39:ed:03:bc:6e:
                    ca:a7:56:ba:66:fe:f2:45:8e:3c:fb:7a:44:39:44:
                    e5:d3:05:56:02:5e:e6:b0:0d:10:1c:b8:55:74:01:
                    41:97:76:7a:af:c8:60:63:a2:76:16:52:7d:dd:96:
                    2c:32:a9:37:dd:e3:7a:78:98:ef:a2:a4:17:0c:ab:
                    1e:f8:e6:d3:77:e6:f5:9c:e5:8e:49:54:8c:30:cc:
                    34:ec:c0:89:81:e5:86:55:c1:fe:b7:9a:08:05:43:
                    68:2a:6c:79:86:1f:14:19:60:ce:e4:9c:b2:96:70:
                    41:16:c3:90:05:54:99:c0:63:2c:ff:ea:38:c9:9f:
                    5e:48:c9:47:b9:03:9f:58:75:bd:b9:f2:e9:a2:9c:
                    6f:a4:26:61:3e:5b:9b:42:45:2a:d8:af:58:3b:3d:
                    6c:11:4c:a4:e1:ed:6b:57:41:eb:ab:6b:51:a3:bb:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:03:07:BB:01:56:A0:5E:63:AE:31:09:3A:6F:8D:D0:B7:EB:A6:D9
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:21:e5:2a:c2:8d:12:c2:a8:57:da:9f:ad:12:ec:6f:38:
         b2:a5:5c:b4:19:d5:e3:8f:cb:12:31:67:40:0e:d1:e4:53:de:
         61:0e:01:cd:ec:10:22:c2:5b:b2:cd:47:78:3d:89:2d:81:48:
         60:f5:64:a8:4c:79:8f:a7:91:c8:c9:52:6a:6c:0a:53:05:d5:
         ca:92:b4:d8:36:1f:7d:d1:49:a8:b8:d8:f9:c9:eb:c1:34:dd:
         73:f7:14:0c:b5:3b:49:4e:be:1e:12:9b:cd:4f:b8:42:c0:de:
         17:58:2a:89:20:8e:0e:55:ef:a5:68:2c:4f:ad:7d:31:06:5d:
         88:c5:ae:e7:d9:d9:93:72:13:55:2c:26:03:6b:ce:83:50:89:
         ce:9e:17:fd:6c:0e:7f:e3:72:b4:86:c4:86:11:3f:24:a4:e4:
         c2:23:b7:4a:84:1a:c3:00:95:4e:19:09:c2:b7:9e:8d:55:67:
         70:f2:5f:e8:e9:20:25:91:f5:8a:9b:6e:af:6e:23:17:6c:84:
         18:fe:af:a8:c3:b9:fd:5a:25:ca:2b:df:33:bd:69:8c:b0:0e:
         70:3a:e6:17:23:b1:aa:e1:5d:99:5a:d4:c1:c1:e7:90:06:17:
         6b:44:2e:db:09:67:ab:21:aa:81:41:3a:dd:00:ac:07:31:01:
         52:59:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----