Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          mP5MOSRmgIgvb7huW5jjy6t4QNkZjeSozReBfJ0OIys=
Subject key identifier:   32:AC:FA:25:ED:20:37:89:66:D2:D8:D7:6A:C4:A7:25:05:DA:B0:4D
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019CAC104F6CBC519AEC40146B14BCCF4A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          17D5
Signing time:             Mon 02 Mar 2026 01:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:15 +0000
Files and hashes:         1: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (hash: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc=)
                          2: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (hash: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0=)
                          3: A2ISr3AhA_OLuE4vCaltguerrGk.roa (hash: XVo2mBP5vj7zEOjBJU4fz3hD0zF9gjIIidmQOyfmPm8=)
                          4: B_yoM3Jy8N0DdJQtpgjme97ROik.roa (hash: xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=)
                          5: C2qsqykPJR8bxPt0il6bx1Ync08.roa (hash: rx7IIuhYb6OjHMFPkhQQKe1jf34rAxrZNmsnAP5woPw=)
                          6: Eilep39s0W_osQQFQPSsoAKdfco.roa (hash: 6jL20G1x9LLedCqLFzBSvWrG2YOC5Aac6CVPlj6NRgI=)
                          7: Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (hash: 48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=)
                          8: LNoBJyvljWdZYTcoXm9QsLP9FVs.roa (hash: nWOaebTubOf17QtTCJLmMJRa/dUDUevgmWP2si3deW4=)
                          9: M0ezANIScQkGcDEfzTIy1094Ygs.roa (hash: 7L/Z05JVXLM96cEqfLd/Qa3M1xxz6mw6TCdvAoqtsH8=)
                          10: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (hash: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc=)
                          11: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (hash: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew=)
                          12: Rcz6VMasvEn3PT7aHlXnvRNCCOg.roa (hash: R6ZpFMZ8awfD85SLkNWsQUS4lhgnShCOUqpgZEdYua8=)
                          13: RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (hash: WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=)
                          14: TXYlpnJahpSSf4D14CU4Lc0pyNk.roa (hash: IvdTjuXpCeq2Kesan+YisYqHbTJ/fmABOJltSTgXFiY=)
                          15: USkeW3SqGK1BFL38UkgCCeCEWQ0.roa (hash: eMrg63tQqYpAlPke35tL59n0mF440GKZbiUGCAytzHY=)
                          16: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (hash: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8=)
                          17: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (hash: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ=)
                          18: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (hash: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII=)
                          19: enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (hash: xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=)
                          20: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (hash: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=)
                          21: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (hash: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI=)
                          22: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (hash: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg=)
                          23: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: ncbOIxMNVgwDiANT9B+33OQW4IYMmvSFTDeKp28Lrqk=)
                          24: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (hash: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ=)
                          25: nN1BqZwpwg6pGbp1ybabVsffEuI.roa (hash: pegbr3i5RQokP5AQQn4oGY5tWqdgEeSi6ilxYg+Y1MU=)
                          26: nokRMmTxz9Xd6z-hBVMNLvX9YfM.roa (hash: bPLMWPwlw8xLKZWkuAQ5tOhzaVyBMSkZqaVe4QemGq0=)
                          27: rHtH6ewJBJbv0Px0ycpkTuJZhpw.roa (hash: TT27fGDeU9y8svpHAoyYAyCi7PfXey2z2Ll9/ZDN9Dw=)
                          28: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (hash: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=)
                          29: sjSbwRvUxsb3yUwsgUfAMG2V4_U.roa (hash: aPIFLtmwDtgSR2q0IlrMpjeonu3SIjoONqTj1lEh+4c=)
                          30: tJezA1CZfS-7gIrwzQeF07w1QZE.roa (hash: 6SVRW7grHCoY7EelqwfyobL1Mgn1MekdbVvAZaNRMSw=)
                          31: thj7o1aypMnMA4ArmDP29ne0Qrs.roa (hash: p1Tyu3GhBNAM6VQcZ8/KqZ+QVAReZGUEnoLBz/Y2j0I=)
                          32: uIsD9Xy2Vc1GIzrsfeZU-p_i07c.roa (hash: owmGDd/9tCt8PZOlqfI/7VwgHd7b2hJO3Tnc74AlIQw=)
                          33: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (hash: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=)
                          34: wX2DATSM-PZGG043XYepDGv416w.roa (hash: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=)
                          35: wss7zMwe7PbIUt44ISQdw5NRA-o.roa (hash: hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:4f:6c:bc:51:9a:ec:40:14:6b:14:bc:cf:4a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Mar  2 01:01:15 2026 GMT
            Not After : Mar  3 01:01:15 2026 GMT
        Subject: CN=32acfa25ed20378966d2d8d76ac4a72505dab04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:34:68:61:f3:8f:09:0c:84:cc:b7:a8:54:
                    da:a6:ba:4a:e6:53:f9:52:26:d1:e8:c1:ef:22:b4:
                    0c:6a:34:e2:c5:09:43:e0:e9:85:9c:6f:97:2e:cb:
                    2d:1c:7f:27:ff:86:3f:1d:21:9c:d9:a9:aa:92:a4:
                    0a:85:c8:22:b4:5e:36:b5:1a:82:aa:82:3a:41:e4:
                    53:3c:61:9c:31:bb:99:e2:8d:27:a0:ca:2c:0b:6a:
                    10:3f:47:21:60:93:4c:e2:94:58:eb:fc:61:c4:93:
                    69:ee:e5:44:29:54:df:c9:78:88:5c:aa:5f:4f:b5:
                    d0:de:ab:94:0d:df:b5:4a:4b:81:e2:ed:57:a2:62:
                    50:69:ec:f3:ae:90:8a:a2:56:ea:f6:40:10:61:d7:
                    e2:9f:e7:9a:72:d8:f3:12:d5:f0:65:40:35:44:9e:
                    87:3f:5b:46:ea:a1:74:98:62:ce:8f:84:be:f5:89:
                    ee:ef:59:aa:64:6f:24:a9:bb:f6:d6:8a:fb:98:39:
                    be:0c:70:d8:7f:3d:1c:e0:43:ad:b0:a5:23:68:66:
                    5c:a2:91:04:ee:45:3e:3f:54:8e:3b:a0:8f:ef:bb:
                    45:a3:87:bb:a4:c9:b1:27:2c:80:55:53:b4:cd:64:
                    85:c3:3e:f1:25:85:07:63:eb:4d:6b:fd:4c:49:6e:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AC:FA:25:ED:20:37:89:66:D2:D8:D7:6A:C4:A7:25:05:DA:B0:4D
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:27:69:51:dd:38:54:ad:fe:20:4e:21:d3:95:d7:ea:19:
         51:e3:4f:93:32:b3:99:00:3f:3c:83:3e:e6:7a:00:2e:f7:65:
         c5:eb:25:80:0d:25:0a:f8:ae:1f:b6:6f:85:a9:2f:06:9e:82:
         dc:02:09:91:6d:4f:3f:4f:78:91:a8:72:f1:ad:ff:eb:cb:a5:
         46:f3:c4:09:c6:75:4a:be:cc:64:7a:7f:6e:3d:4b:76:a3:5d:
         fe:0e:26:b6:f0:e7:57:7e:ad:93:94:5a:0d:67:1f:75:7b:b3:
         68:be:21:01:e0:85:dd:8c:1e:62:72:98:1a:2c:69:4a:5e:bc:
         ec:46:60:49:05:ea:cf:2c:ec:f7:da:4d:39:96:d1:c5:47:94:
         b2:e0:67:9f:80:6c:68:e3:d9:0a:b0:50:f0:18:b3:6e:c8:49:
         4e:5e:82:74:e8:54:e5:4d:a7:61:d3:7b:15:54:31:f2:a1:3b:
         98:26:6f:8a:2b:09:47:4b:d1:66:0f:b6:00:f1:37:0f:8d:2f:
         c8:27:ae:05:48:2d:88:f9:09:f8:3a:d1:9e:b0:8d:4e:00:8f:
         7c:c9:9c:ed:16:26:82:05:75:69:1a:f1:15:c9:4b:3a:fb:32:
         a0:a9:70:9b:0b:23:0e:3f:91:e9:4a:87:3b:16:61:01:4b:85:
         69:e2:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:04 2026 by rpki-client