Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
File:                     SmRMEVaFGAPzet7sCHbM-YnVrvA.mft (raw, json)
Hash identifier:          5626t1Ph3JIOIRuqcScaQ9IuZZ7LG9iYbk3CBioAWFA=
Subject key identifier:   34:FF:3D:39:86:13:FA:23:AD:93:6D:46:7C:2D:B4:87:FD:41:44:67
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       019769CF2D2813A874F192C2545425B4A34E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
Manifest number:          15D1
Signing time:             Fri 13 Jun 2025 15:01:14 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:14 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:14 +0000
Files and hashes:         1: 0v_RTqodXg7uts804DO8DlpFX78.roa (hash: y+krhTMUMJ5yn5MwcvgMpKhAmzkKLIME0VMymZPp5pE=)
                          2: 4KH-y6QREzE4LeyWTu5_77D181o.roa (hash: Neqwl6/04QwN4l0XrwEVz0se3RRDdMOSG5N6v2wvO78=)
                          3: 7d96aB4yIJcpf3t7AK7rOEfEuXU.roa (hash: YVUOaQ7gZo0Ot14nzNA+Iid5DHh0RdoEeVU8ZU55+sA=)
                          4: 9HdbHzZ27Vd3tlQStmluQMdFsxg.roa (hash: Kkqk35e6lllQPlKYLd1+lhlbXoHZPI4IQZ6jvHb2ESk=)
                          5: A0eYVFt37M7Hyne3tP9cnDQAFbM.roa (hash: x1bt24/7R0r3PGwDd5P6QSqq89KK6VkGoa5LmfUrjA0=)
                          6: B-HvPcMNkORIEsyHin-5Ucm45so.roa (hash: QH08oAPROflXQtq3pjVDZyI9xtgTK2UfOm1DEys9OhE=)
                          7: FhEZUb-g8tz0dmvk1v5GsrCRk84.roa (hash: HgfA9zucPguD1AxEbybavmC0DMPH66TlawClBCpe9FE=)
                          8: G69JKrBdDzPKZ3vnbDuuWA1tb7I.roa (hash: 6v8iJzBQxu1EBH72GEHMAvN+9lMnUKlEbyIa+l9gXGI=)
                          9: H4FvMRollmXHX1HLPKkKwpukncU.roa (hash: h2xTWOZ2JED1huxeyfzhrD1jjW++qapkXmS/QsPC0TM=)
                          10: I8BSHZjJe4fRK_pUy0SQfbwHviY.roa (hash: owvOqrLDeUoNT6uZ5W/6Ts90NCtLLVm8pkgG0HtL5JY=)
                          11: INENFus9WqXWtpOeaFhh1OQTHRg.roa (hash: UQ8ya8gJ+M8V393h6OpqNyf/HVYXH6ODYAUSl4pAhYA=)
                          12: IPdBRl0ekj3fZtV-aqYG0wF3csc.roa (hash: YdT5DEuAY9nQ03V75nwU5Qvhsos7OjQYU5mlCXpV4eo=)
                          13: IQdyXm10YIvxpQ3vSn-LIRr7Tug.roa (hash: 1o3qWwAApVqGDQZX3XomOg7J1VOuy+P2D6qgrlUjgOM=)
                          14: KlXP61wGSf-pkp0VnUHJdMFJoT0.roa (hash: ME21anJjxNOFhXR1wF7FD1dWOc2tT2Q1ZM7bSJeQB80=)
                          15: KvOJHKAeGDCeKLkhq9pdSk6taCI.roa (hash: Utpb4p6sMigitDFrU3vkuJ9LNtTzlJoCBSnn2mdzHV0=)
                          16: MjtJWGzm5_f2mFBP8I4N32iTc-4.roa (hash: aJwLirgkbC/JPwSdOE8hrKkslYd0mnJVTACDtqwDsTU=)
                          17: NBAGDYPUnvorO2q1yfBImzh7D6w.roa (hash: QnH1bhgeIDfkHQTP+dUysIWRvONxxhMwrYv0/dcYFz0=)
                          18: NlTNyrWPdL5vOt3EGOf2-nBw1DQ.roa (hash: ttRkNbClIFmBa+I1Ta8+zVuctuQ/7uS20NKV7LYulFI=)
                          19: NyUq0rHsT91G7RkHUT-LWQ7PPSg.roa (hash: T0QRKwpRKCboBN8QOjnL0H+oqbdiRAZQLY2yjOk7Fio=)
                          20: OnJJI-UcryEC3I5kYOeKYPOGl7A.roa (hash: j0CqJNVWt12tK61vQ9wyqHc91rd5hkC5twzuHb3o6Z4=)
                          21: P-3WPsxzJjEfo1fblfP6RKJSuMk.roa (hash: 9S6Tg0GaCIXSokwyy2tq+kgbf5yA9aYiTlT4v7uY+9c=)
                          22: R3eyxC5MHgP9DZIjq3TQ_al5Q5w.roa (hash: 0AIz8WCbcmrBhbx3W2meQYXWJcwFyXjOFoI5n5QWbtU=)
                          23: RRF0BWArThGFUtcgB-Rqqa21Q_M.roa (hash: Tluv64ZgR6YwKTB2F70qHzzv+8hIQNsglXWcD11honc=)
                          24: RgjfGOiIOGhb6lg8ZO0jej276JE.roa (hash: 0wjqoo1DYJfFxcDdCs330fRKCDC9d/Cj22mlZ4GDf/E=)
                          25: SGUSmUbykBNQca489rTDr5H7TUw.roa (hash: sHwxwvrHUWm6wMY6yXM0WuSJ3XhvZLBBAlnjJ4BZgaU=)
                          26: SgVz4Rhh2Ype3A59WGbt5jdH2m8.roa (hash: +xIisR5vxXG2z9EPwn6u9uPIg7+bwDVFkwKXElUiUts=)
                          27: SmRMEVaFGAPzet7sCHbM-YnVrvA.crl (hash: 5Qx86Swj+c97lfoK0GEKo4BA4Ih+9KTaqlbKfJPzyiI=)
                          28: TRECTuZaimFnG4pglvpHe58bwuE.roa (hash: t9cM2WOMQCuoJ1uhCsS6FdzzKHKaQ2I8gJTVvzG0yxM=)
                          29: WKySn7XdjeuNNZEp6xruqyreXbE.roa (hash: vqnAHunN4IDq5O1yObfv2D22QaI1DnObaKUwy2tS29c=)
                          30: XH3gTwRRyfVFNyTqOOY3Pn1Soo4.roa (hash: 0DFR9fZPWn7s4wVKq2sl4VDe/1kG/0fqQ3Yy0F8vnsc=)
                          31: XnUGRcKQ1QjwVPMHWlTU3ttR-1Q.roa (hash: x9C1r40DphD4ncetArBuOXIje8ycmsCbdCyI1Ndy7ks=)
                          32: YKUl3tkS9m8YLLcw0AZ1bvpFPXw.roa (hash: 79y53z5o9XdogxOi0yLDNYi3RG7BP5zSnNpGbs32iuE=)
                          33: Zt6LHMTfLR59IJjYMO4sjFCKZOk.roa (hash: KMPWjVV+IX/YuLVJb8fP0p9dBoY/PwezciceUfVHcII=)
                          34: _hukbR93J254DMJnWRshzd_9XrE.roa (hash: dq+JoTZvaafPqz+HU6kp+DfcclBouMWGtMG/1Mq5b+I=)
                          35: aKk7eVYzVveE3UsbN47EfRGODKw.roa (hash: bTMl5+kG1FU9bagaR/GwsnR/LJRUAYF48oD6z7F3xyg=)
                          36: cv52lnCd4OYEq3ChwVPuByt4EO4.roa (hash: Y6tX9RqJ28Ihc1ndH1vV880Oy2R/oaI4x6kTnzu/ycg=)
                          37: fTdBXzX_wjVsaCcMmc4AAQ6qlo4.roa (hash: YJPgDmA6+lWa70RWmr2Z2Yx5naS+Coy9SWZAG40kkJc=)
                          38: h4MHbt8rKPdvE6pCQSer3G6MnTc.roa (hash: e70Hy1ZWtxV0aKC4XEmDEQ1J5rWwDvs4dhPGTZIpvgc=)
                          39: hi43TFpwTUa1bPTZUPSrgm6ZR0Y.roa (hash: uyoQYVM2fn2Ho94tHrlyaVhbjVElvndeIP7l0BHoDz0=)
                          40: jhl7y3sjFqu5uIbMLXHfKsNFdx4.roa (hash: mcdHes63xQ4mXYFPj11J8KDqcbki1pWoOvlCMQmkfxA=)
                          41: kL4zPBMybJxQYl9_8Kt5EkZ8aFg.roa (hash: MYkciW/HAYtdagBM93kAsR9eBHWWpyUXvGcFUS0gkdI=)
                          42: mMDxK0WxFJ6maCrg4OEHyDDdyRA.roa (hash: j/wglFh+8XuVLWXZyOV3IHQbOCogUlGy3GWIuKkD70o=)
                          43: mNNzWKNLR2mS3EBf98lw7fJ0Vpw.roa (hash: xtfUuEn1+EtPD4+a7supLhoEKiAn2RSR2EUKwPfE0XY=)
                          44: n2RHtL-CU9otjO1yQwBptv89dVs.roa (hash: cDXkL76j5pmJaZo4nD5IUqXbLLMgJaocy5vsopbqkYo=)
                          45: n5ExxW7AlKYh8Zobqyue2WEan98.roa (hash: 53bKldCzLO+N7tn60ehAZ5PROGRcKw9uwit5PGEVVvo=)
                          46: piBUrLE00RKW5_XyaVZB2W7Ph_I.roa (hash: hjEqDcW3jaeavPYcEgUuV3jVxdcO3aqYh7/dD8xfdNc=)
                          47: qlY6buwvfS8BnPFLAQXRyVhx_l4.roa (hash: bx/hWa3x57JwzWRJdOeX096KavRo16EGex+VEF6HwmQ=)
                          48: s5nOHH7O_Iy35NadNlKWRTHv234.roa (hash: Zqo89mKPMWCA1LhQsk+V9v8ft2unhkmQL40GMLvzCkw=)
                          49: sQcj_duo5Cg8Xfz-ES3oPTUOi28.roa (hash: UBRg0OFo+PF18+ZgKxelM+L0bmaiqfhjolhWTmBXih0=)
                          50: tHpRTBuaFH5QWf2yxdfZP_yIVK4.roa (hash: FIYygeHNRAHFoaxV2xTCdULSPAEV/6fM5bXp6Z4QEEo=)
                          51: uqoQ-8UD9FCwIAXYqwnRKnPFPg4.roa (hash: mL5tPrwEO0f7YBN34MFrBQ2Qu7yG1DPUrXis6eR0Yjo=)
                          52: wpUmu-Xo2ip46WIEDVpmSlqYSmU.roa (hash: LP/oQP8iUFbd2UyMIKESE/MB+dwqGm6E999guHOpv0w=)
                          53: xli88av7B6kw_A3aRMP1ILsAyFQ.roa (hash: Z3gErDqytP3YBgryDBSj/BDdq4jReFxtEbdskVpyY9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:2d:28:13:a8:74:f1:92:c2:54:54:25:b4:a3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jun 13 15:01:14 2025 GMT
            Not After : Jun 14 15:01:14 2025 GMT
        Subject: CN=34ff3d398613fa23ad936d467c2db487fd414467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:05:d5:85:cd:50:d5:04:06:38:e0:a4:be:
                    21:d2:5b:fc:ed:72:a4:90:29:cf:1c:f4:2c:07:78:
                    e1:73:be:73:16:37:eb:69:82:c7:42:97:56:a0:12:
                    f8:12:86:c4:d1:01:aa:a3:5b:61:cc:0a:f5:44:f8:
                    ce:27:c9:94:2f:a4:de:ef:08:02:7e:16:95:2f:ec:
                    72:a7:c5:7d:1c:55:d5:b8:01:7e:a1:ca:f2:32:7f:
                    50:ce:d6:0c:a2:87:a3:8d:dc:64:20:a1:00:4d:f9:
                    32:e7:75:36:c7:a4:d1:70:87:e4:4f:e4:ed:6d:de:
                    23:cd:0f:d0:a5:5e:4a:64:85:66:17:98:90:65:93:
                    5d:dc:ae:e3:78:74:61:cb:74:c1:f6:f4:4a:ae:9a:
                    aa:de:2f:b1:c3:50:56:ab:9f:a1:24:76:0c:70:07:
                    9f:69:2e:7b:8f:1e:0b:6e:ba:6e:4e:b7:8d:d2:22:
                    c9:86:39:9e:58:95:56:86:1d:5d:61:96:92:43:9b:
                    fa:1b:5f:28:cf:93:c4:8a:c1:90:4e:73:12:df:7f:
                    f3:26:43:08:44:be:a7:44:90:e8:f3:e1:34:7c:72:
                    46:8e:51:dc:fe:b8:d6:d6:81:7f:8b:ef:ba:aa:9b:
                    36:dd:4b:4b:2c:4e:03:cc:c0:36:57:e7:c5:99:14:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:3D:39:86:13:FA:23:AD:93:6D:46:7C:2D:B4:87:FD:41:44:67
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:d5:89:94:aa:89:c1:1a:43:14:78:80:53:cb:eb:08:98:
         97:c3:b0:4e:93:75:e0:7e:8d:53:64:2b:ae:60:f3:55:26:de:
         20:b8:7b:8b:c8:9c:5d:57:78:06:49:b6:e6:bd:7f:42:af:33:
         ac:8c:3e:2f:c4:e5:91:b7:d9:f2:e2:e5:40:04:c5:9b:ef:34:
         4c:ef:9f:fc:f4:9f:a4:34:3c:80:5d:48:c8:ea:7a:80:2d:d5:
         d5:72:80:e9:8e:6f:eb:6c:bc:8f:25:22:16:14:d9:cd:a6:0f:
         ff:9f:68:4d:cc:d4:77:71:a8:95:45:83:44:21:70:75:80:19:
         67:7b:7a:e6:a1:8b:b0:a2:f5:f2:37:e4:73:aa:ff:1f:08:2b:
         04:2b:28:bb:b1:fd:46:6a:c2:1c:62:eb:f7:62:f7:14:39:0e:
         e0:9f:16:8c:7c:79:85:6c:98:49:65:26:ee:0b:9f:37:16:a4:
         15:7c:22:9f:b1:a8:41:cb:18:d4:03:6c:55:51:41:b4:29:b0:
         41:d2:9e:3e:b8:22:d4:66:33:84:4d:9e:5c:ec:c6:19:1c:cc:
         19:10:ed:a0:ce:56:e6:ab:38:45:f0:3e:5c:b9:10:8f:c4:28:
         e8:61:01:66:97:34:d1:d9:82:10:36:45:17:02:59:52:19:85:
         97:79:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----