Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          TtF3kHXHXrhL4bVo7BkODeN5QIPMMzlKZZQGd8oMgvU=
Subject key identifier:   7B:0A:A2:D1:7D:B4:67:FF:F3:69:2B:EB:BC:24:98:D3:D3:CB:AE:24
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       01976C2AECBA949751A1125ED8E706A8B9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0D95
Signing time:             Sat 14 Jun 2025 02:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:41 +0000
Files and hashes:         1: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          2: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          3: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          4: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          5: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          6: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          7: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: DeFK5FFTa+lvmPqYHbB//VYaBH2LWR1rRKNEqkX8I8s=)
                          8: 5-NSO-oosPy2Fnqe9ZLLQ4qlSEk.roa (hash: 59DVuXqICUgWxnrab+B36HpZ0Fh3PgDU9mH3qJl2eMU=)
                          9: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          10: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          11: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          12: FXvAAn7NyKXWEzgCbrbFrRIu1ms.roa (hash: S/6mYweNk47GZ2xByXqahBCGNFochLn/uagsQ44CW5c=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          15: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          16: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          17: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          18: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          19: P5V0GP5ZMydG1nYgWvLs9BuCo90.roa (hash: LmLash0GSRhmVjwmeJKJ3oRTiu/hMeCsFLYSoJD6Uw0=)
                          20: Qc9ZFwkB4-cyHF3LSkCBWzHVWOI.roa (hash: RT6UiXG2/uWjcKF8JDD2niojE/xCiHwIen62OA697RU=)
                          21: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          24: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          25: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          26: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          27: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          28: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          29: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          30: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          31: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          32: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          33: pKsbCWVqMsTQwWj8OzJ8BrvvQ_Y.roa (hash: qsBg1yiXic0iCFhK8ObPAn7qxsbHG/jIDP3l2pslZB8=)
                          34: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          35: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          36: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          37: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          38: saU4g4MCrfwSof0kHf4WCgLZKmI.roa (hash: jGOXwi/t0u47bHN8xI/HtzKORgrHC2xW5BY0lDPilgQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: taU9TJjVT1bBJe-vWZ2x7cMNlU4.roa (hash: knkAZrjI/4bDSM14TYUSeabSKbYf5IXyvKCcdNOZZeQ=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          43: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:ec:ba:94:97:51:a1:12:5e:d8:e7:06:a8:b9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jun 14 02:00:41 2025 GMT
            Not After : Jun 15 02:00:41 2025 GMT
        Subject: CN=7b0aa2d17db467fff3692bebbc2498d3d3cbae24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:6a:77:e4:c3:da:77:48:28:8d:2e:87:ac:
                    b3:fa:4b:8a:17:d7:e9:eb:de:b0:e0:1a:fc:4a:68:
                    61:6a:aa:b0:09:5f:f8:d3:58:2f:e7:9d:b1:a3:2a:
                    36:cf:8a:20:a3:00:e1:3a:f8:01:df:d4:a4:86:a9:
                    d0:da:a8:8b:43:ee:7e:43:d6:bc:5d:47:39:65:cd:
                    e5:27:76:a1:03:3f:73:7c:2f:ec:4a:44:69:fe:bc:
                    8f:77:45:2c:63:50:08:0d:d6:03:54:b7:75:4c:7b:
                    10:0a:44:a1:d8:53:f6:75:e5:01:b4:6c:11:b7:ea:
                    59:60:65:f3:6d:38:d4:02:39:d7:9a:dd:fe:5b:fb:
                    36:3e:fc:ed:d0:b9:90:ad:09:16:1a:73:1f:9b:92:
                    07:9c:fe:6b:ac:70:83:1e:bd:e8:58:e7:8f:8c:2b:
                    c6:50:76:a6:17:3a:b0:54:20:36:b6:6b:4a:21:d6:
                    01:f3:a7:37:5c:48:0d:e1:af:9e:82:22:f5:e6:fa:
                    2a:84:94:1b:f2:b9:56:64:f4:c9:91:43:92:58:46:
                    d4:6d:a5:18:67:17:cc:1b:22:c5:43:d5:5e:a3:e4:
                    c6:fe:a9:cf:09:06:a2:e5:eb:96:15:ab:80:c2:e2:
                    69:8a:4d:07:87:62:18:e6:3b:d3:cc:d4:f8:88:0c:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:A2:D1:7D:B4:67:FF:F3:69:2B:EB:BC:24:98:D3:D3:CB:AE:24
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9a:f7:45:f7:cd:4d:5e:02:a8:f3:31:44:0f:e9:27:c6:14:
         f4:0f:ef:72:50:a5:5b:9d:12:13:5e:21:2a:69:1d:f7:0e:58:
         ac:7a:7d:71:19:09:97:73:c5:2f:14:a6:7d:c5:f7:fd:2a:c3:
         4d:40:b2:72:50:26:68:31:ef:7d:23:73:e5:6d:a6:40:5d:d9:
         2a:c1:6c:9d:c4:60:2b:84:4b:37:d7:a8:cd:a2:1d:cc:c8:a0:
         61:56:0b:71:74:1d:b5:0e:f7:e2:bc:ca:ce:b9:82:05:0a:77:
         dd:74:c7:27:67:62:36:fc:61:d2:bd:37:19:e6:68:44:0f:ed:
         ef:02:fd:8b:1d:8a:48:2d:19:ac:33:74:3c:0d:96:0c:70:49:
         7a:df:d1:8c:bf:bf:07:c7:05:c2:46:d7:52:63:1e:14:f9:96:
         4f:bf:86:1d:f4:bf:75:58:57:f1:5a:d2:f0:3a:cf:53:bf:bb:
         d8:8f:a5:3a:1f:6c:3b:d4:c0:e2:a6:46:ff:eb:57:9a:4a:23:
         6a:80:b9:b7:24:ea:ca:46:82:f6:5d:8a:f5:e5:7c:dd:4a:d1:
         42:8b:43:36:f1:01:8c:10:e6:a6:e3:fb:3a:9b:21:b0:b2:ff:
         47:ea:4f:fc:ff:c8:41:2e:75:af:14:27:b6:20:be:d3:2a:33:
         43:6b:c5:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKuy6lJdRoRJe2OcGqLnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwNjE0MDIwMDQxWhcNMjUwNjE1MDIwMDQxWjAzMTEwLwYDVQQD
Eyg3YjBhYTJkMTdkYjQ2N2ZmZjM2OTJiZWJiYzI0OThkM2QzY2JhZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlFqd+TD2ndIKI0uh6yz+kuKF9fp
696w4Br8SmhhaqqwCV/401gv552xoyo2z4ogowDhOvgB39SkhqnQ2qiLQ+5+Q9a8
XUc5Zc3lJ3ahAz9zfC/sSkRp/ryPd0UsY1AIDdYDVLd1THsQCkSh2FP2deUBtGwR
t+pZYGXzbTjUAjnXmt3+W/s2Pvzt0LmQrQkWGnMfm5IHnP5rrHCDHr3oWOePjCvG
UHamFzqwVCA2tmtKIdYB86c3XEgN4a+egiL15voqhJQb8rlWZPTJkUOSWEbUbaUY
ZxfMGyLFQ9Veo+TG/qnPCQai5euWFauAwuJpik0Hh2IY5jvTzNT4iAzrIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsKotF9tGf/82kr67wkmNPTy64kMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpr3RffN
TV4CqPMxRA/pJ8YU9A/vclClW50SE14hKmkd9w5YrHp9cRkJl3PFLxSmfcX3/SrD
TUCyclAmaDHvfSNz5W2mQF3ZKsFsncRgK4RLN9eozaIdzMigYVYLcXQdtQ734rzK
zrmCBQp33XTHJ2diNvxh0r03GeZoRA/t7wL9ix2KSC0ZrDN0PA2WDHBJet/RjL+/
B8cFwkbXUmMeFPmWT7+GHfS/dVhX8VrS8DrPU7+72I+lOh9sO9TA4qZG/+tXmkoj
aoC5tyTqykaC9l2K9eV83UrRQotDNvEBjBDmpuP7OpshsLL/R+pP/P/IQS51rxQn
tiC+0yozQ2vFXQ==
-----END CERTIFICATE-----