Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          DfgOm/e63yNqtADQ9GFDhnxuLn1tMiy/DLwx3bWHCKk=
Subject key identifier:   D0:A2:6E:0B:3F:49:99:B6:1B:9A:2D:F3:F3:22:A0:85:54:1F:D4:18
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019EC14898DD1957061F92720C97220EE6CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          18EA
Signing time:             Sat 13 Jun 2026 14:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:20 +0000
Files and hashes:         1: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (hash: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc=)
                          2: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (hash: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0=)
                          3: A2ISr3AhA_OLuE4vCaltguerrGk.roa (hash: XVo2mBP5vj7zEOjBJU4fz3hD0zF9gjIIidmQOyfmPm8=)
                          4: B_yoM3Jy8N0DdJQtpgjme97ROik.roa (hash: xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=)
                          5: C2qsqykPJR8bxPt0il6bx1Ync08.roa (hash: rx7IIuhYb6OjHMFPkhQQKe1jf34rAxrZNmsnAP5woPw=)
                          6: Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (hash: 48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=)
                          7: LNoBJyvljWdZYTcoXm9QsLP9FVs.roa (hash: nWOaebTubOf17QtTCJLmMJRa/dUDUevgmWP2si3deW4=)
                          8: M0ezANIScQkGcDEfzTIy1094Ygs.roa (hash: 7L/Z05JVXLM96cEqfLd/Qa3M1xxz6mw6TCdvAoqtsH8=)
                          9: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (hash: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc=)
                          10: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (hash: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew=)
                          11: Rcz6VMasvEn3PT7aHlXnvRNCCOg.roa (hash: R6ZpFMZ8awfD85SLkNWsQUS4lhgnShCOUqpgZEdYua8=)
                          12: RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (hash: WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=)
                          13: TXYlpnJahpSSf4D14CU4Lc0pyNk.roa (hash: IvdTjuXpCeq2Kesan+YisYqHbTJ/fmABOJltSTgXFiY=)
                          14: USkeW3SqGK1BFL38UkgCCeCEWQ0.roa (hash: eMrg63tQqYpAlPke35tL59n0mF440GKZbiUGCAytzHY=)
                          15: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (hash: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8=)
                          16: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (hash: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ=)
                          17: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (hash: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII=)
                          18: enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (hash: xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=)
                          19: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (hash: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=)
                          20: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (hash: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI=)
                          21: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (hash: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg=)
                          22: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: CW4PHa8nq95CntE3Btv+rz8lYn8pjNAFFo+J9NgP1+M=)
                          23: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (hash: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ=)
                          24: nN1BqZwpwg6pGbp1ybabVsffEuI.roa (hash: pegbr3i5RQokP5AQQn4oGY5tWqdgEeSi6ilxYg+Y1MU=)
                          25: nokRMmTxz9Xd6z-hBVMNLvX9YfM.roa (hash: bPLMWPwlw8xLKZWkuAQ5tOhzaVyBMSkZqaVe4QemGq0=)
                          26: rHtH6ewJBJbv0Px0ycpkTuJZhpw.roa (hash: TT27fGDeU9y8svpHAoyYAyCi7PfXey2z2Ll9/ZDN9Dw=)
                          27: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (hash: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=)
                          28: sjSbwRvUxsb3yUwsgUfAMG2V4_U.roa (hash: aPIFLtmwDtgSR2q0IlrMpjeonu3SIjoONqTj1lEh+4c=)
                          29: tJezA1CZfS-7gIrwzQeF07w1QZE.roa (hash: 6SVRW7grHCoY7EelqwfyobL1Mgn1MekdbVvAZaNRMSw=)
                          30: thj7o1aypMnMA4ArmDP29ne0Qrs.roa (hash: p1Tyu3GhBNAM6VQcZ8/KqZ+QVAReZGUEnoLBz/Y2j0I=)
                          31: uIsD9Xy2Vc1GIzrsfeZU-p_i07c.roa (hash: owmGDd/9tCt8PZOlqfI/7VwgHd7b2hJO3Tnc74AlIQw=)
                          32: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (hash: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=)
                          33: wX2DATSM-PZGG043XYepDGv416w.roa (hash: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=)
                          34: wqD_cahWbtK_rETYwCH9DQnzgC0.roa (hash: +1HRTYJRyWzmBbxFFebxvIYVWXCr9UiBiZmjfLPimQA=)
                          35: wss7zMwe7PbIUt44ISQdw5NRA-o.roa (hash: hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:98:dd:19:57:06:1f:92:72:0c:97:22:0e:e6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jun 13 14:00:20 2026 GMT
            Not After : Jun 14 14:00:20 2026 GMT
        Subject: CN=d0a26e0b3f4999b61b9a2df3f322a085541fd418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:d1:00:9d:f1:0f:18:b2:8d:21:e1:bb:7b:
                    eb:c5:16:a9:ff:57:05:a8:15:de:ca:07:4c:d3:bc:
                    9b:90:3f:d6:59:9c:1f:9f:aa:7b:89:6e:1d:82:31:
                    6a:d4:98:aa:64:b8:61:a2:c9:93:24:d1:08:b4:2e:
                    cf:75:ad:56:1d:ce:b9:3f:8b:21:6c:3b:5d:18:6a:
                    bd:93:d1:ba:b7:2f:36:fd:01:fb:fe:df:a2:f0:41:
                    38:35:7a:ce:84:30:cf:93:c0:04:4c:47:cf:0e:08:
                    d0:7e:ff:44:b0:08:ed:76:6d:37:f7:fd:6d:ee:f2:
                    55:d0:ea:eb:89:e1:10:10:22:19:5b:30:23:84:64:
                    e4:f4:69:be:05:01:f2:95:f9:af:ab:e0:8e:63:46:
                    b8:e7:54:ba:7c:02:00:29:2d:c7:ee:31:f0:cb:89:
                    c0:86:bc:4c:94:3a:d6:e6:52:60:a8:b6:0f:f3:2b:
                    8f:60:33:3b:6d:d7:5c:db:3a:95:8d:09:ea:ba:12:
                    80:0b:ee:7b:af:97:e6:0c:27:2a:30:aa:57:50:1a:
                    9b:80:42:1e:31:99:77:1b:0e:5b:81:c2:27:2e:cc:
                    56:22:79:d1:f6:e6:cf:e5:61:bd:5c:a0:1a:86:59:
                    03:03:e4:5f:df:d1:76:c2:6f:d1:9d:cb:bc:db:88:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:6E:0B:3F:49:99:B6:1B:9A:2D:F3:F3:22:A0:85:54:1F:D4:18
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:5f:19:9c:5a:2c:87:d8:1e:f4:bf:ad:e9:93:fa:13:84:
         c6:74:b0:3a:86:5a:19:f2:88:a7:8a:34:2d:fe:17:e5:63:61:
         c6:f7:cd:2d:ec:ed:c6:cd:18:f9:78:0b:5c:58:81:94:e9:9c:
         14:56:af:c8:e8:88:88:bd:d7:61:04:f1:be:cd:b5:ed:2f:60:
         4b:b2:51:85:da:58:ee:e4:ee:28:90:17:1a:4f:21:8e:77:6c:
         ae:0a:e5:25:ce:ab:cb:4d:24:d7:7b:ad:41:3e:03:a4:12:8e:
         f2:7b:01:be:b4:fc:ff:a9:81:1e:85:0b:0c:9c:e2:82:24:8d:
         b0:d7:e3:19:58:93:a7:60:11:18:c4:aa:5a:26:91:e3:2f:40:
         40:ee:bd:b5:66:58:af:6a:47:e3:c1:6f:91:20:f9:a3:d6:07:
         7b:c1:6b:9c:05:0d:9b:d6:f4:63:5d:d3:5e:40:68:b3:97:1c:
         f3:17:80:f2:4f:4d:68:9c:9e:db:d7:a8:03:dd:39:66:6e:f9:
         d5:88:0c:1f:59:60:0e:4c:d5:9c:9a:23:1c:91:4f:e4:ea:08:
         b3:0f:8b:e1:74:0e:d9:73:90:f7:45:1f:18:fd:dd:67:8a:97:
         f7:00:4b:51:f1:14:22:10:0b:e7:57:ab:9f:e3:e8:f0:56:bf:
         e7:b8:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:03:26 2026 by rpki-client