Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          OB0/I8QdcBPHKVVbvtALN/IMBTCmvXCTd5FQjtBd87s=
Subject key identifier:   EC:FB:17:12:3D:61:D7:CA:FD:3E:E3:3A:27:5F:52:3A:4C:6E:DB:1C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01987CE55534E8CA3CEF7946ABAD1503D9FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0E88
Signing time:             Wed 06 Aug 2025 01:01:00 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:00 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:00 +0000
Files and hashes:         1: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          2: 2QEeCadqEhVcQ-IYNYImyt8YZTg.roa (hash: RnK7p9pZ9eJs5CA9o9TSPDtv2Utt2D3Lw4LvedEFWq4=)
                          3: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          4: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          5: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          6: 63a15p8fkUPzdSevCe4_8LijZK8.roa (hash: kSxgKgvIJZtG3hH/JW85TLbhxWW4mNszOVGpH9xSEy4=)
                          7: 6TAg5h6JB3I0CM2Vyicny0RgSwI.roa (hash: D8FLS1BfWg93BjIKpEgKtuQ3uhfK/yRWFwiL8yH9elI=)
                          8: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (hash: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=)
                          9: 9Q2YqpAXgtWvBppY_D8fOP81XzM.roa (hash: pLLj49UP0BY8ewDJchr7KsaH13T09HrWAcMCApWmeU0=)
                          10: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          11: BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa (hash: gr5E54KUXZ1S0kWmDwR6NxGfZr8Il97zAx8H2R2BeUg=)
                          12: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          13: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          14: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          15: G4uMj4jEgbl0nPqapbiYN9oWNtk.roa (hash: 0hgew6NK06cNsc5ACwn1eMXrZldgM8YdDncSgwy28f4=)
                          16: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          17: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          18: J1i1oW9ojIkHTT-QNpmlt5khDYU.roa (hash: lBmiOfhhGD3ObQeP/PKuhssEkhyEAEQd/oOfDgATIyc=)
                          19: JPQcLRXCUA1un-RAIAFE5RgmHNQ.roa (hash: 9mmcC109z0SZ+/moI3k2gaEvQXIEQwAlcMFxJGHODpI=)
                          20: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          21: KSZzqYecmpv6aO1HSwza7iOQ1os.roa (hash: nccjz+3gHID+efv98vuj6/lOlFRUhMMGymeEmx7TRc4=)
                          22: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          23: P3jT3074ztf6Q9k-tDnLxk1X9xs.roa (hash: OQZGx3r1WGNBtxfpm5AaUYpQMRQcyHWfBZIkT/pZafA=)
                          24: QVpUZXXtRIH20Imi_FSbaFyiVsM.roa (hash: 4TM9EKcDHQ+gG0op3bcQD0U+ZAq/ULDsduNRox8hgWE=)
                          25: TN7hnpecGw4vVEA_h9JU4nwBKAI.roa (hash: QguoCsciRkHqlithinwUkI7ebgBBrsRhr+OaqhRW+4A=)
                          26: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          27: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          28: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          29: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          30: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          31: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          32: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          33: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: 1uESEpZ+cPKjERY6sCNjoPAjybek1NM87oHcgQdvSgE=)
                          34: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          35: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          36: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          37: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          38: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          39: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          40: pbEV8GSzmyv5GEIcw9Ps_8U2s_w.roa (hash: qlJyUREqgOjbb/bkcX56q9Hymy9qBj3GRGQENNt2mZk=)
                          41: pmxFhlPPQLXGUv6hd8fA82dYGtE.roa (hash: a6LynfLW7GHcGAYPPMXAzMR7yEq39V2Fcbsey8YM/M8=)
                          42: qv1zuA1uhOhB0iQXeqNiqrroLGs.roa (hash: Q8oWPpA1az03yvY1CQBg0YQouTSBYAb79g98f5yLevk=)
                          43: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          44: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          45: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          46: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          47: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          48: uF8rk7LpxpBMxklV_RWm55Ih4vo.roa (hash: y0maThc1Ra2sguvgT6xC+DyshsCgw3R/u2YIpFuI4Dc=)
                          49: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          50: wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa (hash: 49IYyocP4YGAaKauaepHwxpuEkb9L27DPoNPiAyWcVI=)
                          51: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
                          52: z_F3eZPtphqpXf_B7RZ4t8rRcAw.roa (hash: CRnPIsnZf64ThYvuup5THfnyETtp12ZJqAtj5gO1A74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:55:34:e8:ca:3c:ef:79:46:ab:ad:15:03:d9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Aug  6 01:01:00 2025 GMT
            Not After : Aug  7 01:01:00 2025 GMT
        Subject: CN=ecfb17123d61d7cafd3ee33a275f523a4c6edb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:10:7f:5a:81:9c:c3:3e:98:d3:5b:17:e3:10:
                    0c:9d:01:ab:d6:6b:84:e0:c6:cc:87:dd:4c:bd:4b:
                    93:03:e6:e4:90:a7:b5:b4:03:04:2c:a6:8f:37:56:
                    1f:67:65:fb:92:d1:6e:96:51:42:95:55:a9:83:ad:
                    d2:19:60:fe:3e:0b:4b:75:47:d0:ab:1e:0e:00:04:
                    b5:01:4c:d3:b7:14:02:6b:44:46:d0:04:8f:e9:09:
                    9e:fb:7a:59:5d:cf:3c:8a:17:3b:f7:3f:5f:15:e6:
                    41:26:47:9e:30:87:e5:d2:c4:70:04:ed:2e:fb:07:
                    a3:b1:20:db:34:13:b4:7f:3e:33:73:93:cb:39:7d:
                    9e:57:fe:cd:0c:25:23:61:2c:3a:9c:f7:7d:28:2b:
                    11:c1:29:b7:4c:e9:22:44:45:93:99:a6:b2:c2:b2:
                    6f:0f:55:64:56:a6:d0:cc:44:4d:f4:d8:14:9e:79:
                    c3:6c:71:72:48:e1:47:d1:14:b9:f2:fa:ed:9c:b9:
                    eb:90:29:ce:6e:80:73:8b:7e:b9:dd:e0:cc:ca:ed:
                    7d:34:6d:1e:74:fe:98:a9:0d:fd:c8:cb:4f:a5:b8:
                    ca:b5:09:0f:a5:0a:73:68:ac:dc:a2:c7:93:3d:a4:
                    4a:37:a0:0c:fd:fb:41:43:23:0e:0d:89:5d:ac:38:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FB:17:12:3D:61:D7:CA:FD:3E:E3:3A:27:5F:52:3A:4C:6E:DB:1C
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:82:79:ba:7c:89:ac:8e:ef:f6:45:5b:a8:9b:2b:10:69:
         22:ec:0e:7a:cb:61:03:de:0b:9a:80:9c:ea:1e:42:70:fa:2a:
         05:f1:be:00:e9:a3:60:43:41:38:1f:79:7b:1a:7f:fc:ed:d5:
         10:11:9c:53:af:48:91:2d:cd:cf:ff:39:b7:80:86:22:ae:02:
         47:ce:ff:1c:b4:b9:39:4e:bf:f8:25:9c:f2:f4:4e:3f:03:bb:
         c9:3b:b6:86:49:e0:fe:4b:3b:57:ff:c2:61:e8:d5:ab:95:07:
         0c:00:11:48:15:97:97:93:de:7c:7b:3a:e6:16:be:bc:13:7a:
         5a:d1:e4:54:b2:e8:68:ef:41:7a:9e:e0:5f:de:81:12:aa:7e:
         ed:4d:c1:98:32:b8:b3:87:d8:21:b6:65:28:16:ff:ab:4f:ea:
         ff:6f:ac:b5:03:da:7e:01:b2:75:c8:8b:47:e3:b7:70:a0:8a:
         b5:89:55:7b:95:2d:38:98:6e:21:3b:e0:bc:c9:4d:2d:cb:d3:
         23:e2:df:8a:19:3f:b8:7a:71:7c:4a:8b:5d:d1:39:b0:f5:ce:
         bf:76:da:ee:45:d6:27:77:48:7b:07:cf:ad:9c:19:81:93:70:
         60:c1:54:c7:79:d0:ab:f7:ed:ec:e7:c8:28:a2:3e:4a:c7:dc:
         3c:1c:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----