Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          yO2AzJU++Q2rezyVzN64cSRIOL3X8KufhyUgC8ONPJs=
Subject key identifier:   C4:8C:DE:7F:21:51:A7:45:09:7E:E4:A6:7B:21:44:D3:FD:6E:41:3E
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019872CF6DEF4A76808B10B94FA3A7830A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0A3D
Signing time:             Mon 04 Aug 2025 02:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:53 +0000
Files and hashes:         1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=)
                          2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=)
                          3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=)
                          4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=)
                          5: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=)
                          6: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=)
                          7: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=)
                          8: CyAx1lcKD4wc_amccZ1znyVkKIY.roa (hash: Xo4DDTOMDsU3unzlvdlmOXck+6K2PDfwqs5xU35c1bQ=)
                          9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=)
                          10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=)
                          11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=)
                          12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=)
                          13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=)
                          14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=)
                          15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=)
                          16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=)
                          17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=)
                          18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=)
                          19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=)
                          20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=)
                          21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=)
                          22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=)
                          23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=)
                          24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=)
                          25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=)
                          26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=)
                          27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=)
                          28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: LbvTeSMB8rRIqPBk5SvOwmaZ/47PgOHixaNhQ7ntb+Q=)
                          29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=)
                          30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=)
                          31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=)
                          32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=)
                          33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=)
                          34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=)
                          35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=)
                          36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=)
                          37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=)
                          38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=)
                          39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=)
                          40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=)
                          41: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=)
                          42: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=)
                          43: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=)
                          44: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=)
                          45: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=)
                          46: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=)
                          47: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=)
                          48: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=)
                          49: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:6d:ef:4a:76:80:8b:10:b9:4f:a3:a7:83:0a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Aug  4 02:00:53 2025 GMT
            Not After : Aug  5 02:00:53 2025 GMT
        Subject: CN=c48cde7f2151a745097ee4a67b2144d3fd6e413e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:15:a8:c7:cf:87:80:62:be:1f:ee:5c:98:
                    de:f7:b7:c9:d0:b8:92:37:c3:a5:95:84:55:29:88:
                    03:89:f8:3f:98:1a:a9:28:d3:b4:e8:54:08:69:60:
                    7c:f1:cf:e9:ea:01:6c:d3:8d:3b:94:67:bc:a8:7c:
                    76:e1:39:87:2c:6e:c5:e0:92:8f:e7:b0:ce:9e:a8:
                    45:91:48:22:44:db:67:89:20:0b:b7:da:54:44:9d:
                    ae:cd:38:ed:4c:89:58:f4:24:d8:74:fb:e9:d5:5a:
                    8a:ca:62:77:5c:4c:91:be:39:f2:6d:4f:d4:45:2d:
                    61:5a:6e:9f:f2:f0:07:98:9c:d3:a1:93:b3:52:e6:
                    5b:91:ec:89:77:20:34:ef:f1:5f:57:fa:75:32:9e:
                    91:67:07:50:37:2c:a9:ac:2e:08:73:1f:36:88:84:
                    6a:3c:f5:56:e1:40:91:4e:34:04:68:1d:1a:f3:60:
                    25:f9:cb:d8:ae:cb:ca:db:09:09:b0:c0:27:cd:17:
                    70:f8:58:c9:30:dc:bd:e8:16:81:21:62:fe:0d:41:
                    89:1a:0d:60:eb:e7:0d:81:8e:7e:21:b3:5e:aa:81:
                    02:a0:29:48:2b:c2:d2:b4:31:44:91:a8:2e:d4:90:
                    78:d1:0b:c3:dc:f3:49:76:8d:d9:3d:21:ca:d7:d2:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:DE:7F:21:51:A7:45:09:7E:E4:A6:7B:21:44:D3:FD:6E:41:3E
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:dc:ef:30:20:46:53:8c:90:f7:aa:b7:cf:24:0a:cc:4d:
         c8:26:1f:98:d5:11:7e:80:2b:22:7e:8e:3b:a2:53:0f:fb:d4:
         22:9d:be:c0:ab:55:2c:7b:52:f3:96:0a:f8:a9:e0:4e:0a:8a:
         3a:a5:e1:fb:7a:28:af:09:0a:a4:00:bb:04:98:10:9f:af:b9:
         d9:ba:a5:40:ad:a0:9a:8a:90:65:a5:43:cf:27:53:65:d2:71:
         85:dc:e3:b3:b3:fb:67:88:a4:37:3a:8e:1a:67:29:ee:f4:97:
         52:9a:55:f8:1c:36:58:f1:45:f0:64:94:1e:f9:7e:0e:03:08:
         ac:13:cd:db:a0:5e:c6:02:93:1d:4c:5e:95:92:9c:a5:00:5a:
         9b:60:bf:bb:bf:93:43:2e:13:b4:12:33:f3:06:91:f4:6a:3b:
         c2:9a:e8:f7:b2:da:ab:43:50:e3:cf:2c:b5:a5:22:3a:ec:bf:
         d2:af:1a:64:33:52:20:12:ff:23:03:1b:4a:44:de:bf:cb:84:
         35:cd:be:be:aa:7e:1c:26:72:1f:6a:22:aa:92:13:03:e8:f4:
         a7:88:56:f5:12:8f:db:72:5c:8a:12:82:1b:89:50:5d:44:c4:
         70:e4:aa:08:e3:53:0a:16:65:18:58:18:89:45:e9:d2:00:ed:
         ee:1d:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----