Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          dYxaU2fnfe0ev0/F1f5qmLCCKsWYhE2ZkJlqf9LKYHc=
Subject key identifier:   39:AB:61:06:7B:4D:CB:2A:02:01:58:85:2C:01:A0:A6:63:61:A9:6C
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019874BDC792C081639DA2E70BA38381C350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          0E23
Signing time:             Mon 04 Aug 2025 11:00:51 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:51 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:51 +0000
Files and hashes:         1: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (hash: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=)
                          2: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (hash: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=)
                          3: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (hash: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=)
                          4: 1-NlVNzHmR7ezLCixvBjlAmuMUgU.roa (hash: dhBCcVXJmsc08tALnPt7J0Ke2pw+0DSH84PNhPMZN7M=)
                          5: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (hash: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=)
                          6: 42W7eeRN7Lof0xxxWQohUF_oSsg.roa (hash: 06FlekORrzXXAU3dPfIQlrH7/LGYHuOinkMHCPksNCw=)
                          7: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (hash: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=)
                          8: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: 7QPxZ4koOO4KNqNWy+Dh0z4rJ8eovL5HHMxXky8xKWI=)
                          9: 5-NSO-oosPy2Fnqe9ZLLQ4qlSEk.roa (hash: 59DVuXqICUgWxnrab+B36HpZ0Fh3PgDU9mH3qJl2eMU=)
                          10: 5DTtynG7fOj5jMWKNRwmXKjD6jM.roa (hash: M1J/0DqobsLG2XMew92HVhLPjqp3ZDCr6TVSeeDoDkg=)
                          11: 7H7Q-FOocYgdd8gjwkqS9TIXyuE.roa (hash: hB4ehFIw3sQcFQewTsTafsaL/HkQ04QQvxp4gJCaKHI=)
                          12: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (hash: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=)
                          13: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (hash: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=)
                          14: GEA7esFkrKkXqcM-dIEGwCpmj1c.roa (hash: iHNIjbSUp+ViDNDjpFX4X+jFvZkCAGdxOsPA53hoeyE=)
                          15: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (hash: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=)
                          16: Hb-5NLpM4XozrSV58LsyAHiY9bA.roa (hash: +CYGYfN0gBkxAw0V7LyKuTOq6F41KvgcfhVQzjVGGHk=)
                          17: Lb8djNXoSZhwFIwr5d8pY_pziKs.roa (hash: ou8Nda3D076hirw0pzDUHUSZD6JbAPRPG1UA4MG28eQ=)
                          18: NyMZjnNDLzk4QUehVPzVYOHMpC4.roa (hash: Rasz2A/ND7OPnV1X2uQVrnHWDlfHJJRbaLu/RpsvVbE=)
                          19: O7CxZy12v7upnoiIaFI8HeMQsj8.roa (hash: AzwNS7AbRap/u3ndDHWjw61RE7xP3cNc0hxhdpW9LSg=)
                          20: SbzKQ5ZuE5d10qtGejfj2ks01LQ.roa (hash: /IE77xZq/Zb+dfD/xh2uWpfIP/F+pigOIyzvCZv26Bk=)
                          21: Sdy8oCUY2C0bNyuh3nV66eZ7oIE.roa (hash: gBydc9aZa9lHHM+sXvipt84Svral4w1FpwfdMnCoIdY=)
                          22: TmnfGeDZcMHkeNSpz9aAiikcPEE.roa (hash: fajQM2JiS1bJ7qE76R8SN8MECL+JRFmrHjGZVJEufFg=)
                          23: UOw4kvzOzwctaQndLqAt1sv8qe4.roa (hash: qXueiBufxOI0tBPQ2snloT38d2A++KUpGiJMOc1dDIg=)
                          24: UXDQ4J_FzShlZ1P8I8pM9M2B-jw.roa (hash: ddc7RPjIiMGgshV21DWbFgdb0j+PcGTg42rLNH51TPE=)
                          25: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (hash: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=)
                          26: ZU_khK4df-wheiHw2cU4waMiDok.roa (hash: Uwj4BCcUx0V4mYpYhUPtJMS6R4lRMC37Jc+dw0XylHk=)
                          27: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (hash: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=)
                          28: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (hash: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=)
                          29: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (hash: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=)
                          30: dzvMmjRwUTnMr4DZ4MQqNwqOqlg.roa (hash: uLO1GP7nfhua/KOSdLN/3nZvOSj9VVaQYxmNm5g591s=)
                          31: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (hash: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=)
                          32: oIphIwTz9C6baOlHSb_0SqWgQCI.roa (hash: ir5vB+yl/lqoYCUd+DYXuo61KuDJbCK8OYXLFjAPMR8=)
                          33: olOddDwXZifpVeVkhqStcLfb7Eo.roa (hash: N5oS2Qxz8d7CRSP0W/y/qyoW+IceRyUXoixFOAoQ5T0=)
                          34: pL72vqVUAsI2OqPhIFXtCmcBsXs.roa (hash: VhYdpnCr8tUqW7UklGwuDlV0czIVlX+IJ54h3dKiBik=)
                          35: pS5Nq1EnJi25Ni8D7F2AsfCr3us.roa (hash: z8UYe9Iy4/xJP09QZfzYnqZgX4/AIGkREultrmYRO6o=)
                          36: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (hash: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=)
                          37: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (hash: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=)
                          38: sQg3UGUjfSkOEaCe0NpdgQ8KupU.roa (hash: jqsgW+BcZi6xfbzYG/MNs2T8deRU9aMmIbw2ivEOfVQ=)
                          39: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (hash: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=)
                          40: taU9TJjVT1bBJe-vWZ2x7cMNlU4.roa (hash: knkAZrjI/4bDSM14TYUSeabSKbYf5IXyvKCcdNOZZeQ=)
                          41: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (hash: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=)
                          42: wIGXGcBicrXxgGusmD3aNj3oQho.roa (hash: TvFbr+GWb4ZQjZUQHMxTbp2dH28I3lrx6V09FVQc6nA=)
                          43: wO1lQH1pcQt59Bkv3RYHwWhpV0A.roa (hash: Nh7v5I/DEBZkGeKvDuv1ebXyDnVsWlHD4l4/sRLwMbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:c7:92:c0:81:63:9d:a2:e7:0b:a3:83:81:c3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Aug  4 11:00:51 2025 GMT
            Not After : Aug  5 11:00:51 2025 GMT
        Subject: CN=39ab61067b4dcb2a020158852c01a0a66361a96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:ba:93:1f:ad:08:ea:df:24:7a:49:2e:66:
                    7b:d8:9d:d2:4a:fb:ca:7c:31:0c:a8:17:5c:32:84:
                    c3:dd:de:5e:7b:94:06:74:73:fa:8d:67:93:48:f4:
                    a7:a1:4c:03:46:e1:6f:ed:88:74:07:29:4c:97:3f:
                    49:50:46:14:65:52:04:40:6a:45:a5:69:0d:1e:21:
                    ac:8d:42:ff:71:dd:b8:58:37:fd:93:4f:94:c0:1f:
                    cb:ac:47:f2:c3:e2:94:da:1d:33:02:b1:f3:24:62:
                    de:57:16:88:e1:08:06:42:eb:86:7f:60:d3:83:02:
                    25:7d:81:9c:8c:23:d9:05:53:cd:c0:a3:ac:f3:03:
                    d0:d0:93:4b:c5:d8:12:45:0a:b4:63:d2:2c:2f:da:
                    d3:f7:52:4b:b0:33:f8:3f:4d:49:56:b5:a8:f7:42:
                    5b:5d:70:ec:30:a3:e5:64:c9:4b:03:79:05:88:63:
                    ec:10:7d:1d:7f:a1:83:a6:03:c7:80:d9:0e:c0:da:
                    58:a6:d2:6c:6e:f0:4e:f5:40:94:9a:05:82:0a:b2:
                    e3:85:32:67:ea:15:3d:da:6a:47:76:f2:02:92:8e:
                    9a:11:5a:75:31:b3:21:0a:24:39:dc:f2:f3:d3:60:
                    df:49:4f:da:26:90:2d:08:d3:06:e9:53:e5:bc:6a:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:61:06:7B:4D:CB:2A:02:01:58:85:2C:01:A0:A6:63:61:A9:6C
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:33:26:70:40:f9:e0:b0:1e:81:98:dd:ad:c8:a7:4a:73:30:
         5d:10:62:18:ed:4f:b9:a9:9f:a7:49:33:1e:10:6d:5a:ae:64:
         91:38:2b:31:3b:96:e3:f7:d4:06:89:13:4c:b2:28:19:b1:89:
         80:3a:96:7f:19:e1:ac:d7:de:6a:00:cb:50:b7:14:93:77:df:
         e2:04:f6:3d:b7:6c:8a:be:67:7b:f2:c0:78:d3:67:51:8d:b0:
         b3:41:d5:8c:15:6e:52:0b:9f:dd:d7:fb:78:75:b8:32:51:de:
         de:6e:84:a3:6b:1c:04:da:7d:03:49:cc:cb:5d:ef:14:2c:04:
         c1:b7:a0:f6:54:7e:97:27:93:63:01:52:62:8a:df:d3:84:7b:
         01:18:cf:cc:4b:dd:dc:97:d8:f6:b3:5e:79:2c:0d:66:ee:02:
         4a:05:0d:d3:1e:6e:e2:f9:83:56:63:a6:32:84:6b:e6:8d:9a:
         1e:f4:be:a3:ea:e5:01:b7:94:75:72:d5:8c:e5:9a:8b:36:07:
         00:34:91:a4:5e:b2:4a:00:cd:c7:cb:4d:89:ce:44:c4:9b:06:
         55:2e:cf:0e:e8:99:67:52:de:0e:32:70:95:ba:01:9f:e5:a7:
         4f:c3:61:29:7c:b4:ee:b3:28:ee:68:2c:83:84:df:ce:db:27:
         af:f9:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----