Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          TFcGSmZDEm12mJrzXUlIFNtJjDzhc1F9/OyHfu3m4zU=
Subject key identifier:   6E:B5:77:DA:87:EB:32:C1:9A:2D:A7:C3:84:D1:D3:3A:17:0A:8E:29
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019A50E3334CE41ED2F2D0F5C7EA410F04E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          169A
Signing time:             Tue 04 Nov 2025 22:00:58 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:58 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:58 +0000
Files and hashes:         1: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (hash: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=)
                          2: 3nHQeUIvfgERGGgwZXPLqGrFwCc.roa (hash: PVqd7KRgPCILOUDhdegbeY89u7gfE4kJTUXx1+4aybk=)
                          3: 4fJd3OUxKotrDopMoPp8x_J3KXs.roa (hash: jo1NuUMOgj2DOUbbjYgsD3WHmHnI2e64VwgOioKGjxc=)
                          4: 7xBwrzDU-Q3LgBd_pCCkSVZJ8r8.roa (hash: I4+USeGM9vUX6KcuBfkfPPLNkgp4BpNTxxlqHARIlaA=)
                          5: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (hash: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=)
                          6: GMUqnPQO8HVIx48VQ0kZwO4akaw.roa (hash: uZv76tLJNRtDmi3fk8CwmWOl4QIbJTpAAFy6cS5OdOg=)
                          7: HIqyL1_xN65PGGh2pYvXxB9JRnY.roa (hash: WSdWXpJpM+IApu/ksgC0/SIwWBLtodEczT76Ij0oaDM=)
                          8: HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa (hash: Xdy5Q/i3U4vTL+1/dZaz9m7aiTQM9VV6w2ke2pIj8Mo=)
                          9: L0_jQJT5Qclln0Oyg58IDEsvUEY.roa (hash: O4ru/bejek+UTjQtcEf3F24KaS3s+lQbPWX4dTGtcIg=)
                          10: M6XyFHtKP2ScUd5goZuFirggjdg.roa (hash: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=)
                          11: MiH69dfcyCIB23Qa5GvglWS530s.roa (hash: ib+HOhPLu/yX/AwfYmsfgR2RDO6fgoZuxLt0/b+SAbc=)
                          12: OE3tT2H2fUUZLW1vQ7BzbV1M8gU.roa (hash: y5ASsgsrkdPRvKNsFBA0em5Q7FjI70gdDU/50w7KFJA=)
                          13: Q155SYsxVZHtklas2BS3w5w70h0.roa (hash: FvNx0toywZuvzc5WA2iEA8TJxxDlZbL0owUYzKxW1No=)
                          14: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (hash: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=)
                          15: SX3ylag-hZOGWYy_pZkwNhLOSsE.roa (hash: 43OUdEAz6tq0z1F5ikIM0mpbPVhfkw5HMKGB/qtwP5M=)
                          16: VBzP8kfPQEFNtuR8PdFsD2jp1DY.roa (hash: 3EY9SySAHD8fNQ9KBgqy9PEqScRiw8H7Y0JuBdXiKGk=)
                          17: VWUyUYrxBUBQm8U_GjpDzaM_d0M.roa (hash: DnWyph44y5iJj5u6j2MjM6Rs0v4MJI8RZHnOeiNRgbw=)
                          18: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (hash: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=)
                          19: XOeYPDFunsrsYp0-Y7f01UANXYE.roa (hash: EDBHmHjrHHD79zYQIl4IIyJ7MsjaCFiA1LKPLtylFCA=)
                          20: YALvBFXCZCuiPMm-BJVewPH_enA.roa (hash: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=)
                          21: _GtticsJYfVQoe0D3zav_vzfdBI.roa (hash: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=)
                          22: auEd2AJZBbZPig_7z1vxDlWadmA.roa (hash: 60BE0mDiR8P6qgvwmA8KQFG8GMDS3ckQBTSoMT45CdA=)
                          23: auJYqSGMRM2eh3GuPu73K0unOdU.roa (hash: GDejZaeuJKin43qGV5V9PEXLP2cVvsiS1K0IxA3fdMk=)
                          24: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (hash: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=)
                          25: cG7_wfsakBmyctpOoPE_qHS49E4.roa (hash: mSuDbhxIa4I4Ml2s2/BDm98rCr3yNT2h8gR1W7fngK4=)
                          26: e1WMx_ge3OvvuQfeVWgtsTZKIeI.roa (hash: AcxhV2adeY8w5h5li2Z6uouvIaFM+nk6upPlV2hgezs=)
                          27: gchn44JRTuDd880WIwbVtgXZUsU.roa (hash: JI8XHT7Ed3+L0vajm6jq0SIoKJNRevXoKUe8F/HW81I=)
                          28: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: EiiTTTFBjroDw3HVMgBsug0rLu00rtDneAEXO9IbwE8=)
                          29: kP5Kud5JC4HdByWF3NmU2sgwbJg.roa (hash: aeS1WvwgOcwV+L4eoLjhAuXFnavKM4LbSU/DAgly4BI=)
                          30: ojT-i1WyMoMzrKUGF70lR5SpfKo.roa (hash: +svQt7tDqw+nZSwF/1dh5yGoWZXeOhltuo6UFjy/ZCA=)
                          31: pFdc9GKBdXBjaKb_bkpy4pwiK_0.roa (hash: 8795JOEM2aEDEqQnWkWWkhSBntyGxcwSFS+eMBONKHk=)
                          32: qTXSVWTU8wL-LtchYD96dAZna1M.roa (hash: whr6apWGUcvqYoUu99TAxnFfLEWJVx+7V1setIYeu9Q=)
                          33: qiq4lHzWMEzrZSdOazDM-vLTXbw.roa (hash: xlyv2U2zn5kmXMwTOObtgWC0+eOvTyqFjN2rhysl2z8=)
                          34: uV9qh0Bz3P5Gfc4DrA8wQrQZnKM.roa (hash: Q2zeYVmGmIBxQp2Z7g0x6cXzrzkC3NswS2sBlFvJ0Pg=)
                          35: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (hash: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:33:4c:e4:1e:d2:f2:d0:f5:c7:ea:41:0f:04:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Nov  4 22:00:58 2025 GMT
            Not After : Nov  5 22:00:58 2025 GMT
        Subject: CN=6eb577da87eb32c19a2da7c384d1d33a170a8e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:f9:47:e3:61:a9:8f:1d:95:cd:1e:ad:47:
                    5e:39:c9:60:c3:8d:4f:b0:d5:b7:de:20:bc:a2:a1:
                    c2:d3:fe:57:56:97:51:15:54:27:09:f3:f3:f8:d3:
                    4a:21:4a:09:93:42:5e:e9:63:f0:f3:cd:b9:54:81:
                    9e:d9:2c:bd:ed:db:6f:31:6a:6e:41:f9:9a:34:ba:
                    30:65:fa:d6:21:e2:30:3d:91:07:69:7c:1a:0e:da:
                    3e:75:b0:16:dc:49:bc:41:59:0d:bc:d4:a7:2a:96:
                    64:20:93:d7:bf:2d:bf:c8:3f:de:01:b5:c7:d5:70:
                    04:43:9b:85:0c:5f:b2:46:fb:16:87:c4:25:d8:df:
                    b1:32:b5:ba:67:b5:c4:b6:9f:b2:5e:5c:17:49:dc:
                    68:7d:22:6e:6a:fb:c7:53:49:88:40:7c:fb:df:3e:
                    fd:da:54:8b:92:4d:d8:36:9f:09:b9:e6:e6:97:67:
                    fd:e4:dc:40:d1:8c:0a:a5:4f:ae:ba:e1:f2:75:e1:
                    00:a7:8d:53:e3:8a:ec:03:90:6e:c4:cc:3e:50:80:
                    31:32:e2:24:3d:06:97:6a:14:7a:09:98:f8:ff:f3:
                    05:4a:c0:28:af:03:79:45:7e:c6:06:b3:05:79:09:
                    6c:76:88:5b:ba:4e:05:dd:d3:aa:73:b9:d1:16:8d:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:77:DA:87:EB:32:C1:9A:2D:A7:C3:84:D1:D3:3A:17:0A:8E:29
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:1c:1c:4d:1e:e9:76:9f:63:6d:d8:46:c7:f6:82:98:55:
         ea:bc:c7:13:10:6a:72:57:e9:7c:78:2c:a5:dd:5d:98:b7:f8:
         4f:6c:43:f4:15:4e:56:fd:cc:2c:d7:91:35:98:c7:ff:0e:53:
         7f:ba:bf:af:5a:ab:aa:15:bf:0f:b2:0c:85:ae:97:8e:c0:98:
         e0:0b:73:5b:f7:41:7c:8f:c3:61:04:99:6f:8c:13:a8:a8:f1:
         9a:ab:34:f4:40:10:32:0c:4a:9f:93:fa:5d:7b:6d:f5:b7:04:
         cc:2b:66:e0:7c:48:a5:d4:4c:5e:91:00:72:86:4b:4c:2f:d2:
         06:54:1d:a9:09:44:0f:a2:86:a7:57:cf:b4:78:84:91:ef:ba:
         de:e8:f5:62:0d:b8:be:34:8a:f9:34:06:d7:22:40:6e:75:ee:
         b7:e1:d1:84:0a:53:8e:e9:fe:4a:7f:58:c9:74:ef:5b:f1:9e:
         d9:c5:97:fb:51:45:36:bf:6a:bc:1c:d9:e0:f8:fc:e3:9d:b7:
         79:e4:08:93:4b:63:62:72:7c:9c:26:5e:10:15:84:5e:61:12:
         31:eb:8e:5c:c2:92:0d:7b:04:be:08:9b:6a:88:68:7b:6b:ce:
         80:a4:f3:0f:6f:d2:f3:37:ee:51:d4:1b:ac:46:7d:fe:e3:92:
         25:63:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:46 2025 by rpki-client