Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
File:                     SmRMEVaFGAPzet7sCHbM-YnVrvA.mft (raw, json)
Hash identifier:          /cUYFHePZ2NSSg6Js1+iXea0MnzZ1lqgET9u5lW/Oxc=
Subject key identifier:   D3:0C:17:D6:D1:61:E3:AF:98:2D:B7:4F:86:0F:27:DA:28:02:85:20
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       0198D4DFD5E1E07787EED67C24198511FC21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
Manifest number:          168D
Signing time:             Sat 23 Aug 2025 03:01:35 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:35 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:35 +0000
Files and hashes:         1: 0v_RTqodXg7uts804DO8DlpFX78.roa (hash: y+krhTMUMJ5yn5MwcvgMpKhAmzkKLIME0VMymZPp5pE=)
                          2: 4KH-y6QREzE4LeyWTu5_77D181o.roa (hash: Neqwl6/04QwN4l0XrwEVz0se3RRDdMOSG5N6v2wvO78=)
                          3: 7d96aB4yIJcpf3t7AK7rOEfEuXU.roa (hash: YVUOaQ7gZo0Ot14nzNA+Iid5DHh0RdoEeVU8ZU55+sA=)
                          4: 9HdbHzZ27Vd3tlQStmluQMdFsxg.roa (hash: Kkqk35e6lllQPlKYLd1+lhlbXoHZPI4IQZ6jvHb2ESk=)
                          5: A0eYVFt37M7Hyne3tP9cnDQAFbM.roa (hash: x1bt24/7R0r3PGwDd5P6QSqq89KK6VkGoa5LmfUrjA0=)
                          6: B-HvPcMNkORIEsyHin-5Ucm45so.roa (hash: QH08oAPROflXQtq3pjVDZyI9xtgTK2UfOm1DEys9OhE=)
                          7: FhEZUb-g8tz0dmvk1v5GsrCRk84.roa (hash: HgfA9zucPguD1AxEbybavmC0DMPH66TlawClBCpe9FE=)
                          8: G69JKrBdDzPKZ3vnbDuuWA1tb7I.roa (hash: 6v8iJzBQxu1EBH72GEHMAvN+9lMnUKlEbyIa+l9gXGI=)
                          9: H4FvMRollmXHX1HLPKkKwpukncU.roa (hash: h2xTWOZ2JED1huxeyfzhrD1jjW++qapkXmS/QsPC0TM=)
                          10: I8BSHZjJe4fRK_pUy0SQfbwHviY.roa (hash: owvOqrLDeUoNT6uZ5W/6Ts90NCtLLVm8pkgG0HtL5JY=)
                          11: INENFus9WqXWtpOeaFhh1OQTHRg.roa (hash: UQ8ya8gJ+M8V393h6OpqNyf/HVYXH6ODYAUSl4pAhYA=)
                          12: IPdBRl0ekj3fZtV-aqYG0wF3csc.roa (hash: YdT5DEuAY9nQ03V75nwU5Qvhsos7OjQYU5mlCXpV4eo=)
                          13: IQdyXm10YIvxpQ3vSn-LIRr7Tug.roa (hash: 1o3qWwAApVqGDQZX3XomOg7J1VOuy+P2D6qgrlUjgOM=)
                          14: KlXP61wGSf-pkp0VnUHJdMFJoT0.roa (hash: ME21anJjxNOFhXR1wF7FD1dWOc2tT2Q1ZM7bSJeQB80=)
                          15: KvOJHKAeGDCeKLkhq9pdSk6taCI.roa (hash: Utpb4p6sMigitDFrU3vkuJ9LNtTzlJoCBSnn2mdzHV0=)
                          16: MjtJWGzm5_f2mFBP8I4N32iTc-4.roa (hash: aJwLirgkbC/JPwSdOE8hrKkslYd0mnJVTACDtqwDsTU=)
                          17: NBAGDYPUnvorO2q1yfBImzh7D6w.roa (hash: QnH1bhgeIDfkHQTP+dUysIWRvONxxhMwrYv0/dcYFz0=)
                          18: NlTNyrWPdL5vOt3EGOf2-nBw1DQ.roa (hash: ttRkNbClIFmBa+I1Ta8+zVuctuQ/7uS20NKV7LYulFI=)
                          19: NyUq0rHsT91G7RkHUT-LWQ7PPSg.roa (hash: T0QRKwpRKCboBN8QOjnL0H+oqbdiRAZQLY2yjOk7Fio=)
                          20: OnJJI-UcryEC3I5kYOeKYPOGl7A.roa (hash: j0CqJNVWt12tK61vQ9wyqHc91rd5hkC5twzuHb3o6Z4=)
                          21: P-3WPsxzJjEfo1fblfP6RKJSuMk.roa (hash: 9S6Tg0GaCIXSokwyy2tq+kgbf5yA9aYiTlT4v7uY+9c=)
                          22: R3eyxC5MHgP9DZIjq3TQ_al5Q5w.roa (hash: 0AIz8WCbcmrBhbx3W2meQYXWJcwFyXjOFoI5n5QWbtU=)
                          23: RRF0BWArThGFUtcgB-Rqqa21Q_M.roa (hash: Tluv64ZgR6YwKTB2F70qHzzv+8hIQNsglXWcD11honc=)
                          24: RgjfGOiIOGhb6lg8ZO0jej276JE.roa (hash: 0wjqoo1DYJfFxcDdCs330fRKCDC9d/Cj22mlZ4GDf/E=)
                          25: SGUSmUbykBNQca489rTDr5H7TUw.roa (hash: sHwxwvrHUWm6wMY6yXM0WuSJ3XhvZLBBAlnjJ4BZgaU=)
                          26: SgVz4Rhh2Ype3A59WGbt5jdH2m8.roa (hash: +xIisR5vxXG2z9EPwn6u9uPIg7+bwDVFkwKXElUiUts=)
                          27: SmRMEVaFGAPzet7sCHbM-YnVrvA.crl (hash: YhiXzY39bIe+vyW/vpMgU3UgK7o6rknUTRMqOmWfkpo=)
                          28: TRECTuZaimFnG4pglvpHe58bwuE.roa (hash: t9cM2WOMQCuoJ1uhCsS6FdzzKHKaQ2I8gJTVvzG0yxM=)
                          29: WKySn7XdjeuNNZEp6xruqyreXbE.roa (hash: vqnAHunN4IDq5O1yObfv2D22QaI1DnObaKUwy2tS29c=)
                          30: XH3gTwRRyfVFNyTqOOY3Pn1Soo4.roa (hash: 0DFR9fZPWn7s4wVKq2sl4VDe/1kG/0fqQ3Yy0F8vnsc=)
                          31: XnUGRcKQ1QjwVPMHWlTU3ttR-1Q.roa (hash: x9C1r40DphD4ncetArBuOXIje8ycmsCbdCyI1Ndy7ks=)
                          32: YKUl3tkS9m8YLLcw0AZ1bvpFPXw.roa (hash: 79y53z5o9XdogxOi0yLDNYi3RG7BP5zSnNpGbs32iuE=)
                          33: Zt6LHMTfLR59IJjYMO4sjFCKZOk.roa (hash: KMPWjVV+IX/YuLVJb8fP0p9dBoY/PwezciceUfVHcII=)
                          34: _hukbR93J254DMJnWRshzd_9XrE.roa (hash: dq+JoTZvaafPqz+HU6kp+DfcclBouMWGtMG/1Mq5b+I=)
                          35: aKk7eVYzVveE3UsbN47EfRGODKw.roa (hash: bTMl5+kG1FU9bagaR/GwsnR/LJRUAYF48oD6z7F3xyg=)
                          36: cv52lnCd4OYEq3ChwVPuByt4EO4.roa (hash: Y6tX9RqJ28Ihc1ndH1vV880Oy2R/oaI4x6kTnzu/ycg=)
                          37: fTdBXzX_wjVsaCcMmc4AAQ6qlo4.roa (hash: YJPgDmA6+lWa70RWmr2Z2Yx5naS+Coy9SWZAG40kkJc=)
                          38: h4MHbt8rKPdvE6pCQSer3G6MnTc.roa (hash: e70Hy1ZWtxV0aKC4XEmDEQ1J5rWwDvs4dhPGTZIpvgc=)
                          39: hi43TFpwTUa1bPTZUPSrgm6ZR0Y.roa (hash: uyoQYVM2fn2Ho94tHrlyaVhbjVElvndeIP7l0BHoDz0=)
                          40: jhl7y3sjFqu5uIbMLXHfKsNFdx4.roa (hash: mcdHes63xQ4mXYFPj11J8KDqcbki1pWoOvlCMQmkfxA=)
                          41: kL4zPBMybJxQYl9_8Kt5EkZ8aFg.roa (hash: MYkciW/HAYtdagBM93kAsR9eBHWWpyUXvGcFUS0gkdI=)
                          42: mMDxK0WxFJ6maCrg4OEHyDDdyRA.roa (hash: j/wglFh+8XuVLWXZyOV3IHQbOCogUlGy3GWIuKkD70o=)
                          43: mNNzWKNLR2mS3EBf98lw7fJ0Vpw.roa (hash: xtfUuEn1+EtPD4+a7supLhoEKiAn2RSR2EUKwPfE0XY=)
                          44: n2RHtL-CU9otjO1yQwBptv89dVs.roa (hash: cDXkL76j5pmJaZo4nD5IUqXbLLMgJaocy5vsopbqkYo=)
                          45: n5ExxW7AlKYh8Zobqyue2WEan98.roa (hash: 53bKldCzLO+N7tn60ehAZ5PROGRcKw9uwit5PGEVVvo=)
                          46: piBUrLE00RKW5_XyaVZB2W7Ph_I.roa (hash: hjEqDcW3jaeavPYcEgUuV3jVxdcO3aqYh7/dD8xfdNc=)
                          47: qlY6buwvfS8BnPFLAQXRyVhx_l4.roa (hash: bx/hWa3x57JwzWRJdOeX096KavRo16EGex+VEF6HwmQ=)
                          48: s5nOHH7O_Iy35NadNlKWRTHv234.roa (hash: Zqo89mKPMWCA1LhQsk+V9v8ft2unhkmQL40GMLvzCkw=)
                          49: sQcj_duo5Cg8Xfz-ES3oPTUOi28.roa (hash: UBRg0OFo+PF18+ZgKxelM+L0bmaiqfhjolhWTmBXih0=)
                          50: tHpRTBuaFH5QWf2yxdfZP_yIVK4.roa (hash: FIYygeHNRAHFoaxV2xTCdULSPAEV/6fM5bXp6Z4QEEo=)
                          51: uqoQ-8UD9FCwIAXYqwnRKnPFPg4.roa (hash: mL5tPrwEO0f7YBN34MFrBQ2Qu7yG1DPUrXis6eR0Yjo=)
                          52: wpUmu-Xo2ip46WIEDVpmSlqYSmU.roa (hash: LP/oQP8iUFbd2UyMIKESE/MB+dwqGm6E999guHOpv0w=)
                          53: xli88av7B6kw_A3aRMP1ILsAyFQ.roa (hash: Z3gErDqytP3YBgryDBSj/BDdq4jReFxtEbdskVpyY9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:d5:e1:e0:77:87:ee:d6:7c:24:19:85:11:fc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Aug 23 03:01:35 2025 GMT
            Not After : Aug 24 03:01:35 2025 GMT
        Subject: CN=d30c17d6d161e3af982db74f860f27da28028520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:56:be:f8:1d:10:bb:1c:06:95:21:5f:86:
                    60:98:aa:f6:13:1d:ad:0a:1e:a2:cb:4b:69:7a:26:
                    18:84:81:48:d4:91:cc:cb:91:39:45:6b:00:cd:ad:
                    48:ba:c0:c1:c4:2c:48:0b:5f:9b:ff:51:7d:83:d2:
                    e1:e9:15:bb:97:df:73:aa:a7:12:1d:33:d5:55:1f:
                    35:11:05:ec:19:85:93:fb:f5:16:36:8c:6c:95:4f:
                    52:6f:bd:3b:ef:7a:f5:e5:ee:a3:62:9a:0f:a2:99:
                    03:f1:cc:51:2c:79:a7:ef:ee:ee:4f:e9:cc:8a:50:
                    c3:16:08:d5:f6:2f:45:35:d8:df:32:ba:b7:6b:ec:
                    a4:34:e8:60:3e:84:c3:b4:da:76:a7:3e:fb:e9:60:
                    ff:4c:7b:0e:2e:8a:e9:00:8b:75:22:0a:b3:70:dd:
                    9c:ba:39:e0:32:72:6f:a1:97:5e:d3:50:da:75:9d:
                    06:60:b2:b9:32:7e:56:bd:9c:a0:74:25:9f:f4:a6:
                    0c:1d:60:84:9c:97:a1:a4:3c:95:f6:0c:a8:37:3f:
                    41:02:26:f5:73:dd:9f:43:1a:df:7a:52:1d:3b:52:
                    5f:60:24:35:7d:64:60:a9:14:dc:e0:c8:83:db:0f:
                    62:cd:5f:84:2d:72:87:ee:59:6d:59:ac:ae:28:79:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0C:17:D6:D1:61:E3:AF:98:2D:B7:4F:86:0F:27:DA:28:02:85:20
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:10:22:92:df:28:5f:10:77:ac:a8:53:ac:9d:ea:a2:da:70:
         22:93:81:5b:ce:1b:d5:cf:de:1a:69:fd:f8:85:fb:79:fc:76:
         21:67:e7:fb:76:56:38:e4:ca:a7:da:08:b7:12:4d:91:6e:0c:
         98:ee:d5:c9:20:77:2e:5c:12:62:4b:c6:9a:1d:d8:37:cf:c9:
         50:62:30:39:d3:9c:79:dd:de:5a:15:3b:3d:9e:fd:54:82:c8:
         7d:7c:e3:98:c0:ce:4f:0c:2c:88:1a:a5:cf:e4:af:ec:36:09:
         01:6a:56:e8:5b:56:e5:09:f3:d7:74:2e:b3:e9:28:ec:0b:2d:
         bb:01:9c:ba:09:2e:55:67:54:3f:02:9a:a5:94:ad:75:90:ba:
         72:40:59:b6:ed:ac:97:77:08:d9:fa:eb:6f:c6:e9:01:6b:77:
         78:ea:ea:d1:c1:11:8c:83:a0:6c:85:a8:81:b3:fe:7d:3a:a3:
         06:4a:74:90:4a:6d:60:3a:51:ac:64:f8:f0:93:6b:0a:31:5d:
         f5:6b:49:7c:ec:88:6c:f0:a2:04:23:34:c1:e6:54:d7:80:c8:
         80:e6:0f:b9:7e:49:79:63:96:a0:d1:60:55:a6:7a:7a:d0:08:
         90:6e:51:e7:e6:3c:23:67:69:63:49:c3:48:23:b1:d5:6c:24:
         53:2b:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:49 2025 by rpki-client