Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          khvtVjXytkldjiIKs/5fKWRmupyDB0U94JQVXPOOWF0=
Subject key identifier:   D0:34:14:12:F4:9B:25:49:0E:29:62:9F:56:31:7B:CA:AD:C9:91:1E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       01A0DC1731CDC2949D35194C6C3D1F577D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          1A01
Signing time:             Sat 26 Sep 2026 05:01:42 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:42 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:42 +0000
Files and hashes:         1: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (hash: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc=)
                          2: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (hash: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0=)
                          3: A2ISr3AhA_OLuE4vCaltguerrGk.roa (hash: XVo2mBP5vj7zEOjBJU4fz3hD0zF9gjIIidmQOyfmPm8=)
                          4: B_yoM3Jy8N0DdJQtpgjme97ROik.roa (hash: xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=)
                          5: C2qsqykPJR8bxPt0il6bx1Ync08.roa (hash: rx7IIuhYb6OjHMFPkhQQKe1jf34rAxrZNmsnAP5woPw=)
                          6: Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (hash: 48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=)
                          7: LNoBJyvljWdZYTcoXm9QsLP9FVs.roa (hash: nWOaebTubOf17QtTCJLmMJRa/dUDUevgmWP2si3deW4=)
                          8: M0ezANIScQkGcDEfzTIy1094Ygs.roa (hash: 7L/Z05JVXLM96cEqfLd/Qa3M1xxz6mw6TCdvAoqtsH8=)
                          9: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (hash: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc=)
                          10: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (hash: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew=)
                          11: Rcz6VMasvEn3PT7aHlXnvRNCCOg.roa (hash: R6ZpFMZ8awfD85SLkNWsQUS4lhgnShCOUqpgZEdYua8=)
                          12: RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (hash: WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=)
                          13: TXYlpnJahpSSf4D14CU4Lc0pyNk.roa (hash: IvdTjuXpCeq2Kesan+YisYqHbTJ/fmABOJltSTgXFiY=)
                          14: USkeW3SqGK1BFL38UkgCCeCEWQ0.roa (hash: eMrg63tQqYpAlPke35tL59n0mF440GKZbiUGCAytzHY=)
                          15: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (hash: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8=)
                          16: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (hash: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ=)
                          17: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (hash: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII=)
                          18: enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (hash: xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=)
                          19: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (hash: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=)
                          20: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (hash: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI=)
                          21: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (hash: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg=)
                          22: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: SkVRAILzO1PkZnRWELSodoRfPssLaQ8cK7Ix11rJqN8=)
                          23: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (hash: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ=)
                          24: nN1BqZwpwg6pGbp1ybabVsffEuI.roa (hash: pegbr3i5RQokP5AQQn4oGY5tWqdgEeSi6ilxYg+Y1MU=)
                          25: nokRMmTxz9Xd6z-hBVMNLvX9YfM.roa (hash: bPLMWPwlw8xLKZWkuAQ5tOhzaVyBMSkZqaVe4QemGq0=)
                          26: rHtH6ewJBJbv0Px0ycpkTuJZhpw.roa (hash: TT27fGDeU9y8svpHAoyYAyCi7PfXey2z2Ll9/ZDN9Dw=)
                          27: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (hash: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=)
                          28: sjSbwRvUxsb3yUwsgUfAMG2V4_U.roa (hash: aPIFLtmwDtgSR2q0IlrMpjeonu3SIjoONqTj1lEh+4c=)
                          29: tJezA1CZfS-7gIrwzQeF07w1QZE.roa (hash: 6SVRW7grHCoY7EelqwfyobL1Mgn1MekdbVvAZaNRMSw=)
                          30: thj7o1aypMnMA4ArmDP29ne0Qrs.roa (hash: p1Tyu3GhBNAM6VQcZ8/KqZ+QVAReZGUEnoLBz/Y2j0I=)
                          31: uIsD9Xy2Vc1GIzrsfeZU-p_i07c.roa (hash: owmGDd/9tCt8PZOlqfI/7VwgHd7b2hJO3Tnc74AlIQw=)
                          32: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (hash: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=)
                          33: wX2DATSM-PZGG043XYepDGv416w.roa (hash: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=)
                          34: wqD_cahWbtK_rETYwCH9DQnzgC0.roa (hash: +1HRTYJRyWzmBbxFFebxvIYVWXCr9UiBiZmjfLPimQA=)
                          35: wss7zMwe7PbIUt44ISQdw5NRA-o.roa (hash: hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:31:cd:c2:94:9d:35:19:4c:6c:3d:1f:57:7d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Sep 26 05:01:42 2026 GMT
            Not After : Sep 27 05:01:42 2026 GMT
        Subject: CN=d0341412f49b25490e29629f56317bcaadc9911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:63:bd:35:05:d8:55:93:7f:5c:8f:c1:5b:
                    b9:d5:61:b7:ee:97:b7:f8:97:d4:d9:35:8f:c9:aa:
                    cb:b2:9d:56:0e:a3:e9:25:4c:e7:df:28:f8:0b:94:
                    2a:08:21:6d:be:64:69:80:45:4a:d7:61:69:cc:32:
                    36:73:f3:65:d6:ef:71:7d:2f:95:5e:19:c6:09:e9:
                    98:2c:91:53:d1:a6:61:1c:72:c0:c7:61:a2:36:65:
                    d4:7f:9d:b1:e4:74:d7:38:a0:a3:03:2e:20:55:d7:
                    44:94:f3:6f:74:b9:98:a3:82:27:fc:07:c7:f3:be:
                    70:23:6a:0b:38:96:48:a8:23:a1:c3:45:4f:a1:14:
                    3d:b5:45:20:56:48:50:f4:b1:6c:5a:7d:88:c5:65:
                    77:d8:1e:5d:4a:83:7b:38:62:9a:45:d9:c6:98:22:
                    8f:d7:57:99:7e:ae:f1:8d:98:15:1f:6e:b9:c6:1e:
                    cd:fd:c7:bd:ec:4a:e9:55:74:77:00:00:13:43:c0:
                    49:dc:ff:15:27:61:db:74:86:c1:94:41:64:bd:36:
                    dd:5c:af:bb:0d:90:dc:b1:49:1a:63:94:94:11:06:
                    43:13:ee:30:4f:cb:d5:29:fa:a1:d8:b7:af:ff:68:
                    44:19:7f:65:f2:5e:6b:49:fd:c3:5a:33:48:3f:7f:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:34:14:12:F4:9B:25:49:0E:29:62:9F:56:31:7B:CA:AD:C9:91:1E
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:5d:aa:70:5b:db:51:32:b1:2f:d2:e7:ba:00:ef:39:72:
         f1:b3:3d:a0:23:8d:f6:53:12:99:0c:49:35:db:eb:02:18:c5:
         e6:97:bb:9a:dc:f0:65:a7:de:8e:54:32:d0:38:40:69:3b:ff:
         cf:9a:07:fa:53:d1:a3:ef:ac:a9:15:e7:d3:e7:71:10:d6:2a:
         45:cb:0e:b1:93:2c:5b:78:72:c2:3f:04:37:33:de:52:ca:24:
         a8:ee:76:70:12:b5:2f:a9:8b:24:c4:e1:33:39:47:d0:fd:a8:
         57:17:2f:6d:7c:d5:37:bc:e5:41:97:bc:89:ad:d3:ce:e1:74:
         4f:0e:f7:02:09:43:d7:7a:18:c7:1d:e3:f8:1a:49:f9:ff:ce:
         95:13:4b:8c:07:76:77:27:bb:5d:2f:1a:bb:3e:eb:6e:3d:b1:
         66:dc:21:08:29:13:a6:f9:c6:6b:43:89:a5:d3:f5:16:be:99:
         ee:f4:03:89:0b:9e:8d:86:6f:8c:38:f6:30:e6:52:bd:8c:17:
         d0:0f:40:6a:8b:80:f3:9d:8b:c1:ef:ba:46:56:71:57:e9:2f:
         92:1e:35:1c:b9:78:54:5d:90:2a:57:79:e5:3f:73:e6:30:fc:
         01:49:a2:c7:5b:61:a4:9b:56:76:e5:3e:c8:91:4b:e5:f2:e8:
         53:0a:9c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFzHNwpSdNRlMbD0fV32GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjYwOTI2MDUwMTQyWhcNMjYwOTI3MDUwMTQyWjAzMTEwLwYDVQQD
EyhkMDM0MTQxMmY0OWIyNTQ5MGUyOTYyOWY1NjMxN2JjYWFkYzk5MTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9NjvTUF2FWTf1yPwVu51WG37pe3
+JfU2TWPyarLsp1WDqPpJUzn3yj4C5QqCCFtvmRpgEVK12FpzDI2c/Nl1u9xfS+V
XhnGCemYLJFT0aZhHHLAx2GiNmXUf52x5HTXOKCjAy4gVddElPNvdLmYo4In/AfH
875wI2oLOJZIqCOhw0VPoRQ9tUUgVkhQ9LFsWn2IxWV32B5dSoN7OGKaRdnGmCKP
11eZfq7xjZgVH265xh7N/ce97ErpVXR3AAATQ8BJ3P8VJ2HbdIbBlEFkvTbdXK+7
DZDcsUkaY5SUEQZDE+4wT8vVKfqh2Lev/2hEGX9l8l5rSf3DWjNIP3+WDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA0FBL0myVJDilin1Yxe8qtyZEeMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVexdqnBb
21EysS/S57oA7zly8bM9oCON9lMSmQxJNdvrAhjF5pe7mtzwZafejlQy0DhAaTv/
z5oH+lPRo++sqRXn0+dxENYqRcsOsZMsW3hywj8ENzPeUsokqO52cBK1L6mLJMTh
MzlH0P2oVxcvbXzVN7zlQZe8ia3TzuF0Tw73AglD13oYxx3j+BpJ+f/OlRNLjAd2
dye7XS8auz7rbj2xZtwhCCkTpvnGa0OJpdP1Fr6Z7vQDiQuejYZvjDj2MOZSvYwX
0A9AaouA852Lwe+6RlZxV+kvkh41HLl4VF2QKld55T9z5jD8AUmix1thpJtWduU+
yJFL5fLoUwqczQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:39:55 2026 by rpki-client