Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          o1uj3jGOLwCjMwjbebBsZk6E9YpML7e4lkf+UQBo4+U=
Subject key identifier:   73:0F:8F:68:90:BD:CD:05:97:AC:59:A2:15:0F:8A:C8:CD:15:2F:99
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019782E97BD6251252378EEFBCD03B7C5946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          151F
Signing time:             Wed 18 Jun 2025 12:00:29 +0000
Manifest this update:     Wed 18 Jun 2025 12:00:29 +0000
Manifest next update:     Thu 19 Jun 2025 12:00:29 +0000
Files and hashes:         1: 1-I83jfVW3gnjQ0XhaxdfUDTrtZQ.roa (hash: InqTQ4KEAcMUMLc4WaYucGx20ArL2EDlb5vdlWGkCOQ=)
                          2: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (hash: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=)
                          3: 3nHQeUIvfgERGGgwZXPLqGrFwCc.roa (hash: PVqd7KRgPCILOUDhdegbeY89u7gfE4kJTUXx1+4aybk=)
                          4: 4fJd3OUxKotrDopMoPp8x_J3KXs.roa (hash: jo1NuUMOgj2DOUbbjYgsD3WHmHnI2e64VwgOioKGjxc=)
                          5: 7xBwrzDU-Q3LgBd_pCCkSVZJ8r8.roa (hash: I4+USeGM9vUX6KcuBfkfPPLNkgp4BpNTxxlqHARIlaA=)
                          6: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (hash: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=)
                          7: GMUqnPQO8HVIx48VQ0kZwO4akaw.roa (hash: uZv76tLJNRtDmi3fk8CwmWOl4QIbJTpAAFy6cS5OdOg=)
                          8: HIqyL1_xN65PGGh2pYvXxB9JRnY.roa (hash: WSdWXpJpM+IApu/ksgC0/SIwWBLtodEczT76Ij0oaDM=)
                          9: L0_jQJT5Qclln0Oyg58IDEsvUEY.roa (hash: O4ru/bejek+UTjQtcEf3F24KaS3s+lQbPWX4dTGtcIg=)
                          10: M6XyFHtKP2ScUd5goZuFirggjdg.roa (hash: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=)
                          11: MiH69dfcyCIB23Qa5GvglWS530s.roa (hash: ib+HOhPLu/yX/AwfYmsfgR2RDO6fgoZuxLt0/b+SAbc=)
                          12: OE3tT2H2fUUZLW1vQ7BzbV1M8gU.roa (hash: y5ASsgsrkdPRvKNsFBA0em5Q7FjI70gdDU/50w7KFJA=)
                          13: Q155SYsxVZHtklas2BS3w5w70h0.roa (hash: FvNx0toywZuvzc5WA2iEA8TJxxDlZbL0owUYzKxW1No=)
                          14: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (hash: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=)
                          15: S0Vg2fI8gb3gpVyIPxKcm-n-ucY.roa (hash: RtFSjw2hWEe1SJxWJS4nXDDZmSFL7zcL0HiqdY+IYlU=)
                          16: SX3ylag-hZOGWYy_pZkwNhLOSsE.roa (hash: 43OUdEAz6tq0z1F5ikIM0mpbPVhfkw5HMKGB/qtwP5M=)
                          17: VBzP8kfPQEFNtuR8PdFsD2jp1DY.roa (hash: 3EY9SySAHD8fNQ9KBgqy9PEqScRiw8H7Y0JuBdXiKGk=)
                          18: VWUyUYrxBUBQm8U_GjpDzaM_d0M.roa (hash: DnWyph44y5iJj5u6j2MjM6Rs0v4MJI8RZHnOeiNRgbw=)
                          19: WtdvHTgaPbc6g2ySB79N9Bk-vr0.roa (hash: uGFB6TOoGk6ENsyZsYuRiLNHuu8M5UHtsLE0/o+SH8I=)
                          20: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (hash: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=)
                          21: YALvBFXCZCuiPMm-BJVewPH_enA.roa (hash: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=)
                          22: _GtticsJYfVQoe0D3zav_vzfdBI.roa (hash: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=)
                          23: aleW7Ot-gpwQFgCpX5YamcoaUQc.roa (hash: BMPbglBlQN5MqzrXdwkO3ix1cczyDRBBYgypfG53uco=)
                          24: auEd2AJZBbZPig_7z1vxDlWadmA.roa (hash: 60BE0mDiR8P6qgvwmA8KQFG8GMDS3ckQBTSoMT45CdA=)
                          25: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (hash: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=)
                          26: cG7_wfsakBmyctpOoPE_qHS49E4.roa (hash: mSuDbhxIa4I4Ml2s2/BDm98rCr3yNT2h8gR1W7fngK4=)
                          27: e1WMx_ge3OvvuQfeVWgtsTZKIeI.roa (hash: AcxhV2adeY8w5h5li2Z6uouvIaFM+nk6upPlV2hgezs=)
                          28: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: LxzBkC1z1W1gsBVmbzvml6bzq6MxCKBauWyww50Js2Y=)
                          29: ojT-i1WyMoMzrKUGF70lR5SpfKo.roa (hash: +svQt7tDqw+nZSwF/1dh5yGoWZXeOhltuo6UFjy/ZCA=)
                          30: pFdc9GKBdXBjaKb_bkpy4pwiK_0.roa (hash: 8795JOEM2aEDEqQnWkWWkhSBntyGxcwSFS+eMBONKHk=)
                          31: qTXSVWTU8wL-LtchYD96dAZna1M.roa (hash: whr6apWGUcvqYoUu99TAxnFfLEWJVx+7V1setIYeu9Q=)
                          32: qiq4lHzWMEzrZSdOazDM-vLTXbw.roa (hash: xlyv2U2zn5kmXMwTOObtgWC0+eOvTyqFjN2rhysl2z8=)
                          33: tOw_jqE3Dau7CprhVxgbfHmkMKk.roa (hash: 536rFfo9TY6DRetoTvNlW5OYz8P03fOdxZHdFtaIAzg=)
                          34: uV9qh0Bz3P5Gfc4DrA8wQrQZnKM.roa (hash: Q2zeYVmGmIBxQp2Z7g0x6cXzrzkC3NswS2sBlFvJ0Pg=)
                          35: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (hash: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:e9:7b:d6:25:12:52:37:8e:ef:bc:d0:3b:7c:59:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jun 18 12:00:29 2025 GMT
            Not After : Jun 19 12:00:29 2025 GMT
        Subject: CN=730f8f6890bdcd0597ac59a2150f8ac8cd152f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:05:e1:85:6c:7e:33:0d:5d:0e:fb:78:5d:
                    d4:eb:0e:57:44:1f:f7:ed:65:01:5c:02:2f:06:64:
                    2f:0b:95:06:a5:7d:08:3d:21:68:fb:ea:ba:45:92:
                    c0:05:73:1a:75:c9:54:a4:fb:f2:a0:d8:f5:a7:e1:
                    fc:be:6f:a0:27:b9:01:55:c0:7b:b9:30:0a:ac:58:
                    aa:4b:ea:c6:30:0e:75:fe:cd:63:6a:4d:4d:dd:8e:
                    85:34:2d:5d:a1:67:54:3a:c7:a3:ec:3d:21:9e:d0:
                    b6:d5:bc:db:8e:1f:c8:65:b0:1e:9a:8a:16:98:91:
                    f4:cb:78:26:47:98:db:11:35:09:a6:a2:64:15:61:
                    f3:c3:25:81:78:8d:9d:ce:1a:34:19:ef:c1:dd:62:
                    8c:06:b6:9e:11:6c:ef:b8:20:b7:b0:f3:4d:db:ed:
                    83:bb:f1:06:ad:5c:51:b6:95:3b:9a:f8:b0:47:b9:
                    9d:bb:f3:ae:cc:63:20:c2:8b:2d:fa:e2:75:78:93:
                    34:75:96:97:5f:fb:0b:f6:89:1f:b1:54:2f:5a:f6:
                    b0:f0:43:34:4b:81:21:41:6f:db:b6:07:35:b4:e7:
                    6f:1b:cd:7d:d5:31:43:db:e4:5d:29:14:aa:d5:30:
                    41:42:68:59:ac:19:6f:09:35:d4:8d:14:03:77:7e:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:8F:68:90:BD:CD:05:97:AC:59:A2:15:0F:8A:C8:CD:15:2F:99
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6b:c4:e5:ac:4a:50:f9:10:45:c0:d3:49:b0:86:65:92:b3:
         7b:2c:98:00:9c:8d:95:de:44:74:af:a1:45:c9:76:10:9f:9f:
         d1:2c:75:cd:f1:03:95:f7:63:22:1d:25:8a:1e:f2:b3:26:59:
         02:d6:54:f9:9f:99:87:1e:36:be:2f:5f:2a:c5:b3:1b:b5:16:
         b1:c3:b6:e7:df:d9:f9:a7:53:d4:d2:e0:49:d4:69:4f:db:dc:
         ce:aa:7e:36:3a:62:c8:43:92:b5:44:a6:fa:eb:44:a9:45:c6:
         01:c6:62:4a:3a:ad:d6:32:73:bd:f8:fc:97:34:58:6c:90:df:
         49:5a:68:ff:6b:fa:27:90:d1:0f:5e:66:ba:af:0d:23:7e:56:
         ca:3b:56:c5:8c:39:c5:e4:62:f6:20:d8:2a:b6:3a:f2:47:2a:
         c1:03:14:97:57:bb:e5:40:b9:c0:f8:c6:96:00:7c:77:8d:25:
         ab:b9:53:88:e5:d8:77:9e:1a:20:82:f0:e2:84:da:e1:da:03:
         56:cf:ab:73:d7:b5:a8:50:7a:1f:7c:be:ee:7e:82:8a:87:62:
         eb:de:50:f6:1a:31:e5:7d:fa:45:dd:a0:f7:c8:8f:4f:d8:0a:
         50:37:18:39:2e:e4:a5:ef:c4:8a:4b:8f:89:81:27:62:5d:d2:
         3d:55:c2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:39:53 2025 by rpki-client