Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
File:                     Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft (raw, json)
Hash identifier:          51jIamkqWMeAhYAm80eXzRwdXh14BxA5nlAouNf1BVM=
Subject key identifier:   04:13:70:FB:06:23:0E:8A:D7:9A:34:E4:EF:10:52:52:9A:0C:F0:E5
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Certificate issuer:       /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial:       019A4D73E1A9E6FF7FF8CB03E0B21680D03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
Manifest number:          0588
Signing time:             Tue 04 Nov 2025 06:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:31 +0000
Files and hashes:         1: 1-U24YoFDsuuShDi4ApdQTT5IMSA.roa (hash: K7cEqE02b+xI1XUlHvWHxRKeaptvlvGBOL9vBMLV1o0=)
                          2: 1-kr61b-3_aXUZGxRZ8mV21GduAM.roa (hash: bZePdsV0VqjTYXEQCQFQ/dqlJA0q1rB9sV9slhxQu28=)
                          3: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (hash: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=)
                          4: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (hash: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=)
                          5: 6JjcOlF8DdU3QX07enfBVMIO0O0.roa (hash: bhuGN65cpRG1XGiqxjwA42eizUIrwOxtQf9kuyW+gC8=)
                          6: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (hash: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=)
                          7: A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa (hash: lggmut1+AIhHUFw/pa+hugHmAOGvNZ/jcOZNrQeZgUk=)
                          8: CLpkAB9SkASnLi0bcVjlvibT8q0.roa (hash: h9ZbpSD1UKLYDhyFqL5vdv53fTWYJR5sayvIQP/wamo=)
                          9: CX8keGLrdosqe4W_mGK7ME2kJI0.roa (hash: 8z8eVUhqvsadG2EsnXVxt6qLvagafjl8IO1oXsZyue4=)
                          10: CpJEYKXvHCDQFtQCgGsEp7fv_3Q.roa (hash: nEK+P6U/6vWMdSdKNYPqcNqUWeOW83vnh2SCPWzPtIc=)
                          11: DfbsEZHRLHImXjiWsCLRkF7fAnc.roa (hash: ywnxliBraExWLIXgU/ffRgritJRKYZ329GHl9tLWUzE=)
                          12: DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa (hash: p48aM9J6UtUtpZTM/841RmdWu2zT9B6GH0dk1pfPpo4=)
                          13: EdGVjEh6znEiY0xnI6tnnsDmccQ.roa (hash: y+5pZPNAYlJ/z27zBdh0E8geOyw/SZCW+6NOeA97S5U=)
                          14: FJT0-DBU0kzt0H8iGqvrlGB9-8o.roa (hash: TM6cYGamkpxBVYOmKkZabC6I03zfhetjpjpkwmesO+A=)
                          15: GXU9CZoWeYqYaMLcXtU452RLGzE.roa (hash: Ug+ep/scaRMIVKYjt/kb3DXC95IqSzR3jdE/0W22yWQ=)
                          16: PBzJqoYZvI38HUyzCtwEiykxo6c.roa (hash: bJueb5VZoyXUoSnTOS154mRkgzXIiMtBR2Ee+RLA/JQ=)
                          17: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (hash: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=)
                          18: UPqBOeYmhujfo2CY7qUhMtsEoyE.roa (hash: T+TRzn+JO19WIMfdxOaxgv7wRr3VTOebZWicUCEgKtg=)
                          19: Ukci9Bg7j4Bn7kCrXEDt1C9dNSA.roa (hash: H+c80Rb+WwbpGiMbg43g9GvHTmvViqW1xacKDSZEpQI=)
                          20: Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa (hash: QTVqmpZONM6esupsMvufy9vRDscEqFkzSQftaVkJdcs=)
                          21: VN-x3if2JfSigyOSHLCs6UizS4M.roa (hash: mr97YYgeFYA7EPEZZwoik/VjswtT3aAYQjI6+eLZYiU=)
                          22: VOzWkHIaCC7eYl6t9F85nRa8bkg.roa (hash: xY2hAOApfRFWWqk0T1Awsm6MAg8hpqg0hVcxNyZScMs=)
                          23: WGYEguUavpCm1up5aoWx17M7VF8.roa (hash: 7LrFDAvn49AXPONunh9HIMSmPEiDJLlOh62u/CVqUuI=)
                          24: XAF2nAYop71Hh8Tb7_HOyi66maI.roa (hash: tdAuUgyz5suYZW0ncsFGdtTO9JJGRHO3a39OyKfTCvk=)
                          25: YexbZ9XFgQhT1vp8sk3sQqqQe9U.roa (hash: r5CG/fT/2a1FFiFHEfz9mv1/F2o6C2NocnaCA9Rt8TE=)
                          26: ZFOXIg0OEPtnBjfbywrEG5iZOIo.roa (hash: Ryy+wPPRhz6QBXpj3jwSi5cqGdl/f+SrE3JOHaH2kp0=)
                          27: Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl (hash: MKEZK/KqzOkVHk4MpxveFHtl5tgjS0CXTHXVfLdURO0=)
                          28: Zh-8f0tKdwJJmTErbAZbBlAu2-k.roa (hash: Krjl31rGf1mkJQ9LvksqzyPEEMfTl0Ol/mUhHx32Z6c=)
                          29: _KSBSbnssDLsI6gscQswNYm7HwA.roa (hash: IOXPssHU+sl18ogUhcRLFZi9HTW+/9dW6K9g3N1Dhec=)
                          30: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (hash: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=)
                          31: ajJXa8aIvHOlVBnzgPL8HsXSKPc.roa (hash: 2OyoDakgfS4OIoQoPgsoG8SlZKCjA3/3esWcjB+/eQ0=)
                          32: bSQ2KJkghyGNH1xM4L0qwKLgqKc.roa (hash: ferYAqATun5kAev+OYfREU8H5PWvsH+O2JxdN9vsL3s=)
                          33: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (hash: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=)
                          34: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (hash: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=)
                          35: g9H2LktE3c6-Sqs72dXiG041h9c.roa (hash: sGtady+29HwzEbBTNubgrQ0Nflo2I8avNRSZW2kEUiA=)
                          36: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (hash: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=)
                          37: ga0KLDUpKphpd5uhD-u7xvCdgo8.roa (hash: iNvTkN67twKCRuI+xwjBz8piFCF9xnDfvAKVgLU20KI=)
                          38: gllOCfFsTQcemrLHRb-zV9gVmho.roa (hash: 9RzLnOVgAKNO/hUN6YGP19RfQVnk3/TqoRi+W8u/WJ8=)
                          39: jJAMNmAh3_heXLx-3lZjlbb0rT4.roa (hash: +kN7wYZliIZDgA9ImlLry1J0Pp3xcHDSqBUjZROOAlE=)
                          40: mKJqEI739B0iTvnzxCUb3biwris.roa (hash: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=)
                          41: ns53C157yUD7oILiiLypNGR4EuY.roa (hash: ehzV7fbIvl4JsyuzhHGa70LFpVS03P5E0xTPY/SyGk4=)
                          42: o9UTDerj5SkBNPSC_40DCs_7wyc.roa (hash: 7gqSvQN7VD6wF2cIvKTOi/nKnwSyMGxTZqKG6dEtTe0=)
                          43: oTtVjHqYGznlsULhUnas1tjfT7A.roa (hash: hLuZXeT7a9+AwlaOWv5CG3uTZ+owaod/xzuANeUuUi0=)
                          44: pCE1baMGsmwCYXSEoEEcUwBkH8o.roa (hash: GsYlVdD3sX0x5By8y8crNFzjEYXJ2ZK0i/TeckVJ2AY=)
                          45: tQlk1mJ3Q57dUylH0cWwEXNsNO4.roa (hash: 88L8h3QT3LZj5nAWKf1psRrxbrTm+VcpE0c7xWTV8YA=)
                          46: uqltgQ4GaQj3KAcP-4IzqXukRPI.roa (hash: +tBlkh785UieWdejfykdVwHFPCpTtz9Tl/YZsmAJeHo=)
                          47: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (hash: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=)
                          48: xItQm9M65t0Kup8VbvqgXzDHNv4.roa (hash: qdEPInSTdeN4KqB+R7drOPfyO/mtlCvUcj5VqFYeK20=)
                          49: xRsccpvpSiiTwttx3dpa06OlRpg.roa (hash: orBoyMh9VeDFLJFJ4WX7x0O+gFyLVR8gpkTZp4d5t+w=)
                          50: xtacYUrWT0gTPxdT4fe0TiG1Tsc.roa (hash: yMQPsqMg7sD3m/fFaAS+z0fJHNjAt10OD8IjX7c29Jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:e1:a9:e6:ff:7f:f8:cb:03:e0:b2:16:80:d0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
        Validity
            Not Before: Nov  4 06:00:31 2025 GMT
            Not After : Nov  5 06:00:31 2025 GMT
        Subject: CN=041370fb06230e8ad79a34e4ef1052529a0cf0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:83:b9:5d:32:14:f7:97:05:79:22:cd:89:
                    4d:d3:c2:98:60:f8:62:92:19:90:4f:fc:bf:73:ce:
                    f3:40:be:83:fa:11:a9:fb:2b:07:5c:40:f1:5e:e7:
                    02:1f:a4:de:86:72:83:dd:9e:a5:61:c0:6a:b2:1f:
                    e7:9d:04:54:cb:3c:34:3f:4f:ee:9b:28:71:ac:ff:
                    6a:63:6d:e3:64:0f:df:4a:ae:46:22:50:aa:6a:54:
                    b5:02:e1:ed:d7:07:f6:5c:0b:3f:9e:13:a0:b4:dd:
                    50:1c:89:fc:7a:59:a6:0b:50:17:72:97:e9:fb:15:
                    06:3f:ea:71:f7:ab:54:db:ca:6d:02:05:fa:06:17:
                    42:14:31:8c:e4:e3:29:8f:f3:ba:f5:6f:8b:5a:94:
                    e1:ef:cd:38:89:51:85:80:b3:28:98:8e:d1:10:11:
                    b0:2c:33:3f:b2:d6:b9:3a:08:29:21:c1:b1:e0:62:
                    5b:f2:c7:8a:ba:d0:66:4a:b4:74:4c:b2:8e:6a:7d:
                    21:dc:61:2d:e1:59:d5:ea:b2:4f:c0:d8:70:94:2c:
                    10:04:8c:53:3c:d4:e6:00:3f:cf:35:ec:a1:22:73:
                    9f:c7:1f:cf:60:97:b8:05:57:53:f6:ed:b1:55:e3:
                    75:bb:44:64:d8:70:2b:ae:15:8c:f5:80:15:05:b4:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:13:70:FB:06:23:0E:8A:D7:9A:34:E4:EF:10:52:52:9A:0C:F0:E5
            X509v3 Authority Key Identifier:
                keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:2b:c9:89:b8:16:f0:e4:49:c7:85:25:c6:bd:f3:c9:b0:
         cd:7d:b3:16:30:69:e7:3f:67:0b:1f:8b:94:ba:be:77:85:fd:
         60:9a:37:2c:74:f7:de:ab:e0:14:44:07:4d:1e:8f:67:3d:c0:
         be:a5:46:e3:db:b1:31:98:75:c3:ce:da:0a:1c:c3:e1:43:44:
         03:a5:8c:57:93:a7:30:11:5c:9f:ea:c6:18:39:e9:41:81:27:
         8b:61:0e:74:80:a7:ca:e7:89:f8:88:91:1f:3a:c2:c5:98:89:
         80:37:f1:b6:bd:00:a3:ea:ec:e6:c3:08:01:c8:89:49:49:2d:
         e1:5b:85:6e:4d:3f:2c:db:7c:3b:f5:fe:26:94:ef:05:ea:a2:
         f3:41:3e:18:34:4c:e5:41:8d:ca:a6:fd:0b:36:96:1c:de:43:
         6e:01:79:e3:fe:21:cb:6c:85:09:16:5a:80:c6:69:29:83:7f:
         95:35:32:58:a9:51:52:91:fc:d2:09:da:7f:65:3b:2b:bf:0d:
         a6:93:46:d9:86:37:0f:8c:e1:17:be:2b:15:6b:56:e7:14:cd:
         b1:ee:92:25:1d:56:13:d7:00:94:9d:a4:eb:52:40:71:7a:ad:
         02:8b:11:9c:b6:02:41:05:1e:1d:43:df:ce:ff:db:3c:eb:58:
         a5:15:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----