Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          vHie7x/YWkVJAXuIIzXXVulf9MMV49VihJ+R+jki7v4=
Subject key identifier:   FF:A8:6D:49:88:59:99:48:AB:DF:7B:D4:7C:E6:FB:C0:D4:15:D8:38
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       0196BA48E5BB53FFDE03B533AE10014A7770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0D7E
Signing time:             Sat 10 May 2025 13:01:01 +0000
Manifest this update:     Sat 10 May 2025 13:01:01 +0000
Manifest next update:     Sun 11 May 2025 13:01:01 +0000
Files and hashes:         1: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          2: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          3: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          4: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          5: 63a15p8fkUPzdSevCe4_8LijZK8.roa (hash: kSxgKgvIJZtG3hH/JW85TLbhxWW4mNszOVGpH9xSEy4=)
                          6: 6OtKmTEgJhEIk0Dz0L52FDn_Rxg.roa (hash: ++83jB7VPRyh2VqDTxG+SKyYdSiPfkffv1qvHCEPuJw=)
                          7: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (hash: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=)
                          8: 920Vm8vcSs5GtWnd22ORSrNJy7E.roa (hash: Eym+34P8a0n2AJ2BbmYtyd0VnVkanNH1uU7GM+VfILA=)
                          9: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          10: BOpZuTUHf_38qW20mqxlJj2_bUA.roa (hash: dmTBGE0cltlqEvyJsGCp7oAJga3BfxGHn785/xuae2Q=)
                          11: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          12: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          13: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          14: Ed54BhJmmKTucMCINT4tn9Epec4.roa (hash: ZdzYSfODPIPGszhqCfQjEHvG3+W8jWrq4vyg4cTzFEI=)
                          15: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          16: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          17: J1i1oW9ojIkHTT-QNpmlt5khDYU.roa (hash: lBmiOfhhGD3ObQeP/PKuhssEkhyEAEQd/oOfDgATIyc=)
                          18: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          19: KSZzqYecmpv6aO1HSwza7iOQ1os.roa (hash: nccjz+3gHID+efv98vuj6/lOlFRUhMMGymeEmx7TRc4=)
                          20: MjKZrafSIm7TV8yanRgSfGhY2pU.roa (hash: Yww0N6pTISvOfcVEdc2oFg30SKebG8XeTy8TeW7OZiY=)
                          21: N2kkoQ2o02HHZZ6qVv-WtTqW5RQ.roa (hash: UVosnwUdXYQqAJ8cpa4t/j4iKftdjiRWmrikerbtPWI=)
                          22: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          23: OAqxF3O43IYIQpxquWKCePco-PA.roa (hash: tyR142cYWuPaX2JucubyUikFKIPSla1u33sJOw9lYQs=)
                          24: P3jT3074ztf6Q9k-tDnLxk1X9xs.roa (hash: OQZGx3r1WGNBtxfpm5AaUYpQMRQcyHWfBZIkT/pZafA=)
                          25: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          26: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          27: Wv5388wlQhklHahSmTc__s3NoLE.roa (hash: aHba1yC3JOAv35PLRKxvMiDiBWSyoqXiiA/VAVtP0+E=)
                          28: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          29: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          30: cKd4Fq3TBvtMmJChVDk4P_eQ0Dw.roa (hash: aLw6fbW7IVWc6ThJpGEdUSHp7y1SPbXF1NXjXvIeE68=)
                          31: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          32: fBLuy90uGCv22rBLuoDIiG2G66M.roa (hash: jPE3VFqawczzibzPQw80OEeyieLxlbeXn6UrGWxbDQA=)
                          33: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          34: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          35: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: 1ETD/uf0pn92C7rDAyj5WKocdjvzY8lux5T8WF0+pjk=)
                          36: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          37: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          38: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          39: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          40: lSZdw4rLtWkD1k8AaGknRw4MB5w.roa (hash: i21M0iRknAUEtnV2bnQfsAfpJTKvyHSzWggCXf0tFs0=)
                          41: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          42: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          43: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          44: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          45: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          46: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          47: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          48: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          49: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:e5:bb:53:ff:de:03:b5:33:ae:10:01:4a:77:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: May 10 13:01:01 2025 GMT
            Not After : May 11 13:01:01 2025 GMT
        Subject: CN=ffa86d4988599948abdf7bd47ce6fbc0d415d838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:83:81:f2:45:87:20:d2:07:25:86:fa:bb:
                    27:60:f2:6a:01:cf:82:95:9f:27:6c:2a:1c:64:cb:
                    a1:98:8f:f1:21:c2:86:e7:25:5c:02:72:bb:c4:24:
                    f9:83:8a:e7:db:72:0a:73:db:26:18:9f:69:9a:30:
                    ef:dd:50:e1:92:56:63:48:b8:ac:24:d5:73:c4:8d:
                    92:71:a8:d7:02:52:72:32:cb:78:54:57:ae:13:21:
                    4d:87:78:8d:51:25:34:12:1b:95:3a:9b:f8:cf:21:
                    af:e4:18:93:09:97:47:c4:8c:bd:54:7e:da:ca:f9:
                    50:78:93:97:7a:fa:72:3c:7d:11:bc:23:99:ce:04:
                    dd:46:81:d3:88:b2:c9:20:be:b6:56:f6:e1:fb:42:
                    b4:71:f6:d8:a2:e4:29:6b:35:54:a9:68:7f:6d:97:
                    61:b0:ac:e5:92:2b:9f:9c:4d:fb:11:74:9d:a7:eb:
                    4b:3a:7b:c0:1b:af:f5:97:70:d9:d1:19:be:61:e4:
                    56:2a:2e:9f:ce:7e:44:82:49:14:0f:c2:7e:8e:16:
                    8d:cd:a3:70:2b:68:46:ea:50:84:a4:3d:66:c8:e3:
                    90:eb:ed:61:f3:7a:37:d9:dd:5b:fc:b3:e0:fd:33:
                    32:73:c6:9c:20:8f:78:12:c5:4f:36:01:00:b7:a7:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:6D:49:88:59:99:48:AB:DF:7B:D4:7C:E6:FB:C0:D4:15:D8:38
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:07:72:66:c9:8c:b8:50:72:c6:41:68:bd:8e:fe:e9:fe:5f:
         5c:67:40:9d:6b:a2:8f:2d:3e:65:cc:e9:7c:60:14:d1:1c:c0:
         d3:fe:be:6d:78:a5:d0:5c:a7:c1:30:61:ea:81:aa:c8:a3:88:
         d9:f7:1e:6a:01:4a:e1:9c:1e:3a:3f:f8:78:08:47:e8:a6:53:
         ba:db:83:17:4b:6b:2f:3d:11:f2:08:90:fa:a6:38:89:b0:57:
         f6:f2:db:c5:80:89:4f:a3:c4:0c:0a:bf:34:44:06:65:56:7c:
         b0:25:23:70:9e:02:9c:d8:3a:1f:b2:36:b3:96:c2:6c:14:5d:
         09:32:6d:66:f7:f8:96:6d:bd:a5:98:a3:b5:99:58:df:be:14:
         a1:5e:fd:0d:b7:23:9c:ab:cc:b1:0b:2c:ca:07:dc:f3:6e:b6:
         6d:22:66:96:9e:03:bd:dd:1e:12:84:96:3c:cc:e0:08:da:8c:
         a0:d8:4d:f1:c5:3c:54:0c:7e:b0:e3:1b:71:c4:2d:21:c0:59:
         be:29:a4:1a:c0:d6:3c:9c:f0:e5:65:67:f2:5b:69:4f:92:83:
         06:84:1b:a9:a0:a1:c0:26:75:93:35:f8:98:96:72:2f:eb:29:
         61:ee:a6:43:51:cb:c6:4a:5b:3e:51:fc:93:67:33:ce:f8:53:
         76:3f:0b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SOW7U//eA7UzrhABSndwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwNTEwMTMwMTAxWhcNMjUwNTExMTMwMTAxWjAzMTEwLwYDVQQD
EyhmZmE4NmQ0OTg4NTk5OTQ4YWJkZjdiZDQ3Y2U2ZmJjMGQ0MTVkODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymODgfJFhyDSByWG+rsnYPJqAc+C
lZ8nbCocZMuhmI/xIcKG5yVcAnK7xCT5g4rn23IKc9smGJ9pmjDv3VDhklZjSLis
JNVzxI2ScajXAlJyMst4VFeuEyFNh3iNUSU0EhuVOpv4zyGv5BiTCZdHxIy9VH7a
yvlQeJOXevpyPH0RvCOZzgTdRoHTiLLJIL62Vvbh+0K0cfbYouQpazVUqWh/bZdh
sKzlkiufnE37EXSdp+tLOnvAG6/1l3DZ0Rm+YeRWKi6fzn5EgkkUD8J+jhaNzaNw
K2hG6lCEpD1myOOQ6+1h83o32d1b/LPg/TMyc8acII94EsVPNgEAt6dInQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+obUmIWZlIq9971Hzm+8DUFdg4MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgdyZsmM
uFByxkFovY7+6f5fXGdAnWuijy0+ZczpfGAU0RzA0/6+bXil0FynwTBh6oGqyKOI
2fceagFK4ZweOj/4eAhH6KZTutuDF0trLz0R8giQ+qY4ibBX9vLbxYCJT6PEDAq/
NEQGZVZ8sCUjcJ4CnNg6H7I2s5bCbBRdCTJtZvf4lm29pZijtZlY374UoV79Dbcj
nKvMsQssygfc8262bSJmlp4Dvd0eEoSWPMzgCNqMoNhN8cU8VAx+sOMbccQtIcBZ
vimkGsDWPJzw5WVn8ltpT5KDBoQbqaChwCZ1kzX4mJZyL+spYe6mQ1HLxkpbPlH8
k2czzvhTdj8Lmg==
-----END CERTIFICATE-----