Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          S+209RUdHb4O7UOIGqkeeU7btqrniDxpb/b9cTUPx5A=
Subject key identifier:   96:78:58:B7:02:1D:58:4C:D9:4D:D0:3D:D5:D9:7D:2C:A5:46:9E:42
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       019A4E4F70A8C7DAA5258ECC48BEE352434B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0F90
Signing time:             Tue 04 Nov 2025 10:00:20 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:20 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:20 +0000
Files and hashes:         1: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          2: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          3: 3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa (hash: ghQ2YzpCC9cQdtiIH9wDRG0qGVcd1atQTaldPN8jXwM=)
                          4: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          5: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          6: 6TAg5h6JB3I0CM2Vyicny0RgSwI.roa (hash: D8FLS1BfWg93BjIKpEgKtuQ3uhfK/yRWFwiL8yH9elI=)
                          7: 6enrTheZlg2LTqdMmIhfZVyFqSo.roa (hash: kqgvQKSPF2+Up/2yDj3HrsLxLHBj0u7sT6S7YBLCFtI=)
                          8: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (hash: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=)
                          9: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          10: BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa (hash: gr5E54KUXZ1S0kWmDwR6NxGfZr8Il97zAx8H2R2BeUg=)
                          11: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          12: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          13: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          14: FxXgnbjIjMQJSVyfPbrnNLIEdzE.roa (hash: 3RrsCHtrq0EWoychIudSGLBvrbDi5Gn3NMR0p8Y1rFM=)
                          15: G4uMj4jEgbl0nPqapbiYN9oWNtk.roa (hash: 0hgew6NK06cNsc5ACwn1eMXrZldgM8YdDncSgwy28f4=)
                          16: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          17: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          18: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          19: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          20: PaYlLL1YOtm8IJ8_CD0zAGIXidM.roa (hash: eUBaLNH36vCB6dujbo8I9hbjCeQAzjBG5TSSXdiMCes=)
                          21: QVpUZXXtRIH20Imi_FSbaFyiVsM.roa (hash: 4TM9EKcDHQ+gG0op3bcQD0U+ZAq/ULDsduNRox8hgWE=)
                          22: TN7hnpecGw4vVEA_h9JU4nwBKAI.roa (hash: QguoCsciRkHqlithinwUkI7ebgBBrsRhr+OaqhRW+4A=)
                          23: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          24: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          25: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          26: Y202gT9Jqy8iAdNt-19QysSVvqg.roa (hash: xiLKkaHcZefVoBcsFuyXKuKiRKZdYLgydHNRy1Epp28=)
                          27: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          28: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          29: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          30: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          31: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: DsQPM4A4RrGOzsWb6heOVgNcZFNqKc6lIsfl6YLEjpk=)
                          32: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          33: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          34: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          35: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          36: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          37: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          38: pbEV8GSzmyv5GEIcw9Ps_8U2s_w.roa (hash: qlJyUREqgOjbb/bkcX56q9Hymy9qBj3GRGQENNt2mZk=)
                          39: pmxFhlPPQLXGUv6hd8fA82dYGtE.roa (hash: a6LynfLW7GHcGAYPPMXAzMR7yEq39V2Fcbsey8YM/M8=)
                          40: qv1zuA1uhOhB0iQXeqNiqrroLGs.roa (hash: Q8oWPpA1az03yvY1CQBg0YQouTSBYAb79g98f5yLevk=)
                          41: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          42: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          43: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          44: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          45: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          46: uF8rk7LpxpBMxklV_RWm55Ih4vo.roa (hash: y0maThc1Ra2sguvgT6xC+DyshsCgw3R/u2YIpFuI4Dc=)
                          47: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          48: wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa (hash: 49IYyocP4YGAaKauaepHwxpuEkb9L27DPoNPiAyWcVI=)
                          49: wTJ_C-dHa_YC0YaPRRArBwkXQCI.roa (hash: m3xr5x0LZS9Tb0mqyHZiSXVhFpmAus+lr+3Q2xaJxvc=)
                          50: x31hzZOnD7O9edsjO5u3SJ23-pI.roa (hash: oo82mjNcZVQ5QSJcBfFb2oJyDhWM7EmnrUotsqB9cDc=)
                          51: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
                          52: z_F3eZPtphqpXf_B7RZ4t8rRcAw.roa (hash: CRnPIsnZf64ThYvuup5THfnyETtp12ZJqAtj5gO1A74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:70:a8:c7:da:a5:25:8e:cc:48:be:e3:52:43:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Nov  4 10:00:20 2025 GMT
            Not After : Nov  5 10:00:20 2025 GMT
        Subject: CN=967858b7021d584cd94dd03dd5d97d2ca5469e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:bd:af:c0:0d:67:1c:af:1e:c7:7f:60:3b:
                    a7:48:1c:2e:e3:25:85:8b:af:2b:55:fe:61:1e:6a:
                    0e:5f:b6:b4:81:98:64:87:c4:24:ae:bc:22:f6:73:
                    c6:24:1b:a0:7f:5a:f0:f9:99:e8:c3:17:59:bc:68:
                    5c:87:8b:a9:a1:56:27:5f:03:7e:2d:62:53:aa:e8:
                    0c:64:8f:90:88:92:da:5d:37:6a:70:45:30:c4:26:
                    79:10:ac:1e:1c:c5:68:ec:7d:5b:29:9f:6c:b8:30:
                    17:fa:08:dc:60:60:aa:11:f6:b0:0c:39:27:be:94:
                    02:89:30:82:6d:82:ba:fd:d8:2b:fe:7a:60:5d:50:
                    23:52:92:fd:8f:58:4a:3c:44:7e:7e:5d:1d:5c:37:
                    3a:e5:de:79:b9:12:7a:85:f9:fc:57:7a:9e:e4:07:
                    14:91:50:c9:d5:36:2a:9f:5d:bd:36:e4:61:e8:7e:
                    c2:a3:c2:ef:3c:c2:56:79:1c:92:bb:3f:09:c4:c0:
                    d8:79:f6:c5:ed:c4:80:f4:4a:a6:78:07:b8:6c:c1:
                    ec:05:74:08:62:b1:62:df:3c:dd:76:4d:7b:aa:83:
                    d3:64:44:84:14:12:03:dd:03:25:e7:33:8b:99:c9:
                    38:eb:c6:4c:f5:60:9a:ed:41:8b:a6:3a:b4:38:34:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:58:B7:02:1D:58:4C:D9:4D:D0:3D:D5:D9:7D:2C:A5:46:9E:42
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:8e:d4:8c:9c:1a:01:4d:1e:ae:ce:ff:44:0d:90:41:e1:
         52:1b:2e:31:b6:aa:46:16:96:16:8b:d7:df:23:1f:f5:15:2e:
         90:e9:17:2c:cb:61:ca:79:1b:18:af:a8:40:4e:db:93:14:ef:
         fa:84:2c:68:bb:81:9b:51:a3:de:bc:4a:66:83:2d:fe:61:47:
         0f:71:3d:e1:c0:87:c4:f8:7b:ea:04:fa:5f:34:d4:6b:c5:5f:
         24:ff:7e:21:57:bb:7f:ff:73:05:8f:33:d6:88:08:c4:04:4d:
         c1:1a:46:fb:6f:e7:75:99:8b:8c:75:31:7c:15:0c:6c:4f:1e:
         0e:60:7e:ee:c8:e2:b3:2d:99:1d:60:2a:f5:5b:a1:2a:a9:0c:
         9d:9d:4d:55:8e:dc:16:1f:bd:7a:c6:9b:8c:b4:8c:d9:0d:74:
         10:5c:aa:c9:b4:4d:a1:6f:a4:d9:84:67:06:a4:8d:54:15:a2:
         d1:12:bb:8c:cb:ea:d0:59:d2:f4:4e:49:d8:e5:fc:db:1a:9c:
         ae:3f:4a:39:79:9d:46:e8:e5:fc:ee:a2:17:07:5b:b8:5c:18:
         db:53:46:dc:b2:c6:6c:b8:98:c9:b0:47:57:dd:14:d9:d7:8d:
         b1:fe:41:4f:e4:50:5e:4a:45:af:ae:46:d2:a1:f7:34:5b:dd:
         37:93:db:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT3Cox9qlJY7MSL7jUkNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUxMTA0MTAwMDIwWhcNMjUxMTA1MTAwMDIwWjAzMTEwLwYDVQQD
Eyg5Njc4NThiNzAyMWQ1ODRjZDk0ZGQwM2RkNWQ5N2QyY2E1NDY5ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipO9r8ANZxyvHsd/YDunSBwu4yWF
i68rVf5hHmoOX7a0gZhkh8Qkrrwi9nPGJBugf1rw+ZnowxdZvGhch4upoVYnXwN+
LWJTqugMZI+QiJLaXTdqcEUwxCZ5EKweHMVo7H1bKZ9suDAX+gjcYGCqEfawDDkn
vpQCiTCCbYK6/dgr/npgXVAjUpL9j1hKPER+fl0dXDc65d55uRJ6hfn8V3qe5AcU
kVDJ1TYqn129NuRh6H7Co8LvPMJWeRySuz8JxMDYefbF7cSA9EqmeAe4bMHsBXQI
YrFi3zzddk17qoPTZESEFBID3QMl5zOLmck468ZM9WCa7UGLpjq0ODSLiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ4WLcCHVhM2U3QPdXZfSylRp5CMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkSO1Iyc
GgFNHq7O/0QNkEHhUhsuMbaqRhaWFovX3yMf9RUukOkXLMthynkbGK+oQE7bkxTv
+oQsaLuBm1Gj3rxKZoMt/mFHD3E94cCHxPh76gT6XzTUa8VfJP9+IVe7f/9zBY8z
1ogIxARNwRpG+2/ndZmLjHUxfBUMbE8eDmB+7sjisy2ZHWAq9VuhKqkMnZ1NVY7c
Fh+9esabjLSM2Q10EFyqybRNoW+k2YRnBqSNVBWi0RK7jMvq0FnS9E5J2OX82xqc
rj9KOXmdRujl/O6iFwdbuFwY21NG3LLGbLiYybBHV90U2deNsf5BT+RQXkpFr65G
0qH3NFvdN5Pbrw==
-----END CERTIFICATE-----