Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          W7abKbb0KyBzCtRwdi5fyd4MykDJ9Ne39GF+ew0/geE=
Subject key identifier:   85:0B:D2:2B:EF:CB:E8:FA:64:7E:08:49:2F:25:7A:54:37:BC:66:F2
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019D9B878FA5F1573A38F2E52B7B8D316EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          1851
Signing time:             Fri 17 Apr 2026 13:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:45 +0000
Files and hashes:         1: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (hash: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc=)
                          2: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (hash: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0=)
                          3: A2ISr3AhA_OLuE4vCaltguerrGk.roa (hash: XVo2mBP5vj7zEOjBJU4fz3hD0zF9gjIIidmQOyfmPm8=)
                          4: B_yoM3Jy8N0DdJQtpgjme97ROik.roa (hash: xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=)
                          5: C2qsqykPJR8bxPt0il6bx1Ync08.roa (hash: rx7IIuhYb6OjHMFPkhQQKe1jf34rAxrZNmsnAP5woPw=)
                          6: Eilep39s0W_osQQFQPSsoAKdfco.roa (hash: 6jL20G1x9LLedCqLFzBSvWrG2YOC5Aac6CVPlj6NRgI=)
                          7: Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (hash: 48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=)
                          8: LNoBJyvljWdZYTcoXm9QsLP9FVs.roa (hash: nWOaebTubOf17QtTCJLmMJRa/dUDUevgmWP2si3deW4=)
                          9: M0ezANIScQkGcDEfzTIy1094Ygs.roa (hash: 7L/Z05JVXLM96cEqfLd/Qa3M1xxz6mw6TCdvAoqtsH8=)
                          10: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (hash: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc=)
                          11: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (hash: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew=)
                          12: Rcz6VMasvEn3PT7aHlXnvRNCCOg.roa (hash: R6ZpFMZ8awfD85SLkNWsQUS4lhgnShCOUqpgZEdYua8=)
                          13: RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (hash: WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=)
                          14: TXYlpnJahpSSf4D14CU4Lc0pyNk.roa (hash: IvdTjuXpCeq2Kesan+YisYqHbTJ/fmABOJltSTgXFiY=)
                          15: USkeW3SqGK1BFL38UkgCCeCEWQ0.roa (hash: eMrg63tQqYpAlPke35tL59n0mF440GKZbiUGCAytzHY=)
                          16: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (hash: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8=)
                          17: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (hash: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ=)
                          18: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (hash: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII=)
                          19: enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (hash: xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=)
                          20: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (hash: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=)
                          21: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (hash: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI=)
                          22: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (hash: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg=)
                          23: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: KBAdw1H8oKiSzepC9VkbiDS7vEDyKOv0eUBm+fixdcQ=)
                          24: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (hash: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ=)
                          25: nN1BqZwpwg6pGbp1ybabVsffEuI.roa (hash: pegbr3i5RQokP5AQQn4oGY5tWqdgEeSi6ilxYg+Y1MU=)
                          26: nokRMmTxz9Xd6z-hBVMNLvX9YfM.roa (hash: bPLMWPwlw8xLKZWkuAQ5tOhzaVyBMSkZqaVe4QemGq0=)
                          27: rHtH6ewJBJbv0Px0ycpkTuJZhpw.roa (hash: TT27fGDeU9y8svpHAoyYAyCi7PfXey2z2Ll9/ZDN9Dw=)
                          28: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (hash: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=)
                          29: sjSbwRvUxsb3yUwsgUfAMG2V4_U.roa (hash: aPIFLtmwDtgSR2q0IlrMpjeonu3SIjoONqTj1lEh+4c=)
                          30: tJezA1CZfS-7gIrwzQeF07w1QZE.roa (hash: 6SVRW7grHCoY7EelqwfyobL1Mgn1MekdbVvAZaNRMSw=)
                          31: thj7o1aypMnMA4ArmDP29ne0Qrs.roa (hash: p1Tyu3GhBNAM6VQcZ8/KqZ+QVAReZGUEnoLBz/Y2j0I=)
                          32: uIsD9Xy2Vc1GIzrsfeZU-p_i07c.roa (hash: owmGDd/9tCt8PZOlqfI/7VwgHd7b2hJO3Tnc74AlIQw=)
                          33: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (hash: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=)
                          34: wX2DATSM-PZGG043XYepDGv416w.roa (hash: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=)
                          35: wss7zMwe7PbIUt44ISQdw5NRA-o.roa (hash: hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:8f:a5:f1:57:3a:38:f2:e5:2b:7b:8d:31:6e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 17 13:00:45 2026 GMT
            Not After : Apr 18 13:00:45 2026 GMT
        Subject: CN=850bd22befcbe8fa647e08492f257a5437bc66f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:a8:ea:c4:04:b6:da:be:36:c7:a6:eb:aa:
                    2f:50:23:d2:12:de:81:1d:08:58:e4:b3:59:4b:4c:
                    3f:bb:09:2e:59:a0:ea:7d:5f:7c:9c:68:87:8a:61:
                    37:de:f2:05:b9:80:8c:bc:85:df:92:76:1a:d0:e0:
                    7a:f7:45:b6:12:84:f9:51:fd:7b:5c:14:46:c6:c6:
                    a4:4b:77:81:9f:29:44:c6:da:49:d5:23:c5:fc:85:
                    ed:26:f5:ad:fe:12:81:b0:50:d3:58:07:9a:d7:45:
                    ff:4a:d4:a8:0b:a6:ee:bd:0c:21:6d:b8:85:0a:a5:
                    f2:28:39:51:ea:89:b3:74:3a:7d:c7:17:67:fd:a9:
                    aa:70:f0:57:23:bd:01:04:11:1f:5c:5b:fc:60:bd:
                    a5:cb:b6:ad:fe:31:3b:29:23:f8:d2:d4:eb:16:39:
                    69:06:e4:03:00:2f:8e:91:86:96:3a:17:33:ed:11:
                    8f:6f:fa:54:1c:3e:3d:47:de:94:d1:f6:80:14:d5:
                    fc:6f:79:c6:18:d4:cc:2c:06:31:16:d5:3b:9f:c5:
                    83:28:81:51:75:87:d0:ed:c5:12:bd:17:e9:b2:4e:
                    13:54:82:b0:f2:e1:89:39:b5:00:c4:62:2e:2e:8c:
                    ee:31:19:b8:2b:1a:31:6b:3b:fe:39:1e:4c:11:73:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0B:D2:2B:EF:CB:E8:FA:64:7E:08:49:2F:25:7A:54:37:BC:66:F2
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:63:d9:d6:75:62:4d:c5:ea:25:55:06:e2:06:eb:51:3b:4e:
         de:cb:e1:53:0f:e2:69:d3:54:dd:a0:11:e9:61:05:f4:b6:4c:
         be:4a:3e:c1:ef:ca:db:d7:c9:36:ce:02:6e:21:87:ce:cc:6c:
         3a:96:52:16:1d:9b:9c:40:e7:62:11:55:97:be:5a:32:ad:93:
         9e:07:46:c6:95:f7:67:32:8c:da:9d:3c:d4:f9:74:dc:ec:bb:
         ee:91:02:cb:2d:62:8c:b6:8d:da:43:93:40:05:1b:86:c3:17:
         0b:20:ff:21:4c:52:fc:df:d7:b5:63:4d:e0:55:49:96:fc:bb:
         a8:b4:bb:f4:ab:78:11:de:a3:f4:87:ba:98:0e:97:c6:95:ce:
         59:0a:33:ed:bc:0d:32:71:4f:27:aa:b9:aa:7f:f2:45:d7:b8:
         70:1b:fa:21:2b:16:3a:dc:14:74:6b:a0:f4:2d:a9:fa:f6:41:
         9c:b4:e7:5f:b4:90:dd:3b:8c:22:89:33:5f:95:d6:11:1f:0f:
         d2:2b:bd:d2:63:31:0f:16:e1:f1:ff:a1:1a:d7:91:ac:5d:46:
         2b:c9:fe:38:80:f8:12:8c:c9:d1:3e:b9:3c:2c:75:14:91:90:
         3f:0f:17:c8:bc:9a:c6:31:71:cc:d1:08:73:0b:33:bd:b0:6b:
         5f:c6:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:10 2026 by rpki-client