Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          Md4vko+cljtJxn7kHvNq8o+KnOJdAFwADN+9woj/fsw=
Subject key identifier:   F3:31:B1:DD:0B:C4:BE:2B:1A:05:DA:DC:B0:16:1C:FB:AB:59:EF:9D
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       01967164C279FFCB648B380B5726111CE91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0D10
Signing time:             Sat 26 Apr 2025 09:19:10 +0000
Manifest this update:     Sat 26 Apr 2025 09:19:10 +0000
Manifest next update:     Sun 27 Apr 2025 09:19:10 +0000
Files and hashes:         1: 0E7QXtuR_fMR9P2D2O5MkyfPOvI.roa (hash: 87SAg2PzUg6LUGCgU9xJEB9PFeUhyISGbh+9jQ/u7u0=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          7: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          8: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: q1GX6K+UunGM1Gavca96jnb8iNaCZCQBl04tRfRKoto=)
                          9: 5-NSO-oosPy2Fnqe9ZLLQ4qlSEk.roa (hash: 59DVuXqICUgWxnrab+B36HpZ0Fh3PgDU9mH3qJl2eMU=)
                          10: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          11: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          12: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          13: FXvAAn7NyKXWEzgCbrbFrRIu1ms.roa (hash: S/6mYweNk47GZ2xByXqahBCGNFochLn/uagsQ44CW5c=)
                          14: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          15: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          16: GgIYtuXJ-zjknMgyNDkHTlDx41c.roa (hash: Hyukwf9ipmgSsenYKUlXQhXLYy0p6+OjpRcBgtIMSe8=)
                          17: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          18: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          19: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          20: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          21: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          22: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          23: WFf6Jerwqd2C-BFibPzm-Lka3eU.roa (hash: s9WRsSQBELE3Ty4pE3kuIdFgKdgljG6diDmFtITQwRw=)
                          24: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          25: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          26: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          27: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          28: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          29: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          30: h7xq6vRCrwgOMjQm9yAyg3Njtp4.roa (hash: xRgukB86bd2ruw2ODmsMqFssAfehWIdDjtfBQsNkruc=)
                          31: k4ZQo6Jn42inlw4N2vyQhiUQgN4.roa (hash: a/nxe8zHcSTGUGGJ2JtCbi9pShuWfUe2/C70xRJTj8s=)
                          32: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          33: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          34: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          35: pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa (hash: qsBg1yiXic0iCFhK8ObPAn7qxsbHG/jIDP3l2pslZB8=)
                          36: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          37: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          38: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          39: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          40: saU4g4MCrfwSof0kHf4WCgLZKmI.roa (hash: jGOXwi/t0u47bHN8xI/HtzKORgrHC2xW5BY0lDPilgQ=)
                          41: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          42: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          43: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          44: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
                          45: znH1xB-UwIcmPKY4qSurVwHtECk.roa (hash: Zu7FNMakIbfGP4tug6Www09X3z8LFVlsSJhCCf/Cwxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 09:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:64:c2:79:ff:cb:64:8b:38:0b:57:26:11:1c:e9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Apr 26 09:19:10 2025 GMT
            Not After : Apr 27 09:19:10 2025 GMT
        Subject: CN=f331b1dd0bc4be2b1a05dadcb0161cfbab59ef9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:f5:79:7a:6c:9e:0f:24:2a:52:a1:e3:17:
                    ca:58:65:79:98:97:16:d5:7d:7f:49:27:2c:53:b1:
                    46:2c:95:74:ff:6d:f3:22:21:b0:6f:c1:53:7c:e8:
                    4c:76:c3:17:63:62:ab:6b:a8:24:8a:23:4b:8d:ad:
                    d7:f0:b2:7f:95:4d:cb:83:ce:7b:59:69:17:c7:5e:
                    c4:e2:06:e7:22:7e:ab:b8:48:2b:11:79:ca:34:7b:
                    64:5d:e8:09:e9:76:25:29:46:db:83:85:8b:6e:83:
                    24:f2:60:c5:94:bc:ce:c6:c5:42:ea:77:95:b3:40:
                    2d:06:f3:12:bb:aa:e2:7c:36:30:e7:a4:44:13:0c:
                    2f:48:f2:cd:8e:b0:23:2a:50:e7:f5:3c:df:c2:58:
                    06:fe:3b:0a:c7:a7:75:82:c2:b4:cf:fa:28:6e:6f:
                    9e:76:62:56:5b:5c:bc:3b:ff:2d:b8:65:0b:7c:df:
                    48:c8:5b:ef:9a:40:fe:33:7e:b7:b7:5e:64:0a:e7:
                    ff:c0:1c:93:51:9c:96:ea:59:93:4f:1d:c6:4f:60:
                    23:03:87:18:60:71:cb:6f:c3:f5:53:98:99:a8:32:
                    6a:67:b3:2e:50:20:f9:a2:4d:cf:1b:6e:0e:10:10:
                    39:2d:72:27:33:6b:f9:eb:7c:62:37:93:1c:5e:4a:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:31:B1:DD:0B:C4:BE:2B:1A:05:DA:DC:B0:16:1C:FB:AB:59:EF:9D
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:01:fc:6c:7d:9c:af:21:c8:f4:09:a7:be:ee:af:de:d3:
         29:54:b4:63:cd:3a:05:e8:9e:7f:2f:30:73:45:94:4c:55:76:
         26:be:5f:28:9e:bb:94:dd:8d:d5:fa:5e:ca:9d:ef:e9:70:6f:
         60:6e:43:98:dc:2d:b9:b5:6e:e2:c6:da:34:ec:d1:54:c8:8a:
         3f:2d:6a:ec:08:97:f6:95:83:96:76:36:9a:91:c7:e9:e4:c5:
         50:cd:2e:34:4a:37:c5:3e:9e:db:0c:e3:6a:91:4d:3a:b8:db:
         ac:08:4a:3e:68:a0:9b:85:91:e3:93:ce:df:87:3a:a5:ae:28:
         cc:73:88:6a:bb:2b:08:c8:14:dc:6c:3a:85:9f:ab:d7:6c:d2:
         5d:53:1c:36:1b:6f:a3:fc:47:1b:07:57:60:90:b2:73:0c:30:
         b8:a5:80:1a:5c:0b:a9:ed:19:9d:45:2f:1b:33:8d:75:f5:1d:
         97:c9:1e:35:81:5e:a7:de:a6:ec:9d:5f:ee:17:fd:e3:11:c3:
         e5:a1:66:f2:8d:85:7d:52:04:1b:0d:57:1c:e6:02:79:6a:e3:
         e4:d8:4f:38:b5:78:40:7a:bf:4e:ba:84:8b:ad:c4:f8:09:0d:
         4c:e0:01:a8:6f:6d:1d:7c:ac:94:57:c3:72:41:2b:4f:33:d2:
         3d:d7:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----