Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          0wUw94jcpk915u1eY5d6oNiJQtd2oqRMFsaXPxTQ3gg=
Subject key identifier:   16:1C:7A:98:D3:30:20:70:24:8E:CF:E5:D6:88:2A:7F:12:DC:C7:1C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       0199FD344E265110EB76D71A7ACE09101AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0F62
Signing time:             Sun 19 Oct 2025 16:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:27 +0000
Files and hashes:         1: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          2: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          3: 3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa (hash: ghQ2YzpCC9cQdtiIH9wDRG0qGVcd1atQTaldPN8jXwM=)
                          4: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          5: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          6: 6TAg5h6JB3I0CM2Vyicny0RgSwI.roa (hash: D8FLS1BfWg93BjIKpEgKtuQ3uhfK/yRWFwiL8yH9elI=)
                          7: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (hash: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=)
                          8: 7gDVXYzVg1BvONcpfCIgQ1ikYW0.roa (hash: Z2b/6g0Ewxo1JzfiDSHW6lUXSikVRdrWw603e3VzRm4=)
                          9: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          10: BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa (hash: gr5E54KUXZ1S0kWmDwR6NxGfZr8Il97zAx8H2R2BeUg=)
                          11: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          12: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          13: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          14: FxXgnbjIjMQJSVyfPbrnNLIEdzE.roa (hash: 3RrsCHtrq0EWoychIudSGLBvrbDi5Gn3NMR0p8Y1rFM=)
                          15: G4uMj4jEgbl0nPqapbiYN9oWNtk.roa (hash: 0hgew6NK06cNsc5ACwn1eMXrZldgM8YdDncSgwy28f4=)
                          16: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          17: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          18: JMDcAIWxrwE8KfR3NGRyLH7J9uQ.roa (hash: 0nHeWpMjTTXLjF1SNsTFJ//WlmXhrR/+ojxRWqJj3yI=)
                          19: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          20: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          21: PaYlLL1YOtm8IJ8_CD0zAGIXidM.roa (hash: eUBaLNH36vCB6dujbo8I9hbjCeQAzjBG5TSSXdiMCes=)
                          22: QVpUZXXtRIH20Imi_FSbaFyiVsM.roa (hash: 4TM9EKcDHQ+gG0op3bcQD0U+ZAq/ULDsduNRox8hgWE=)
                          23: R-aTrSt-2ZV-lEf1_-snMmfd8J4.roa (hash: d8N5g8jVz0cpcp/i/Z5cwaIfBDnFIkgzwMup5/9HjUM=)
                          24: TN7hnpecGw4vVEA_h9JU4nwBKAI.roa (hash: QguoCsciRkHqlithinwUkI7ebgBBrsRhr+OaqhRW+4A=)
                          25: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          26: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          27: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          28: Y202gT9Jqy8iAdNt-19QysSVvqg.roa (hash: xiLKkaHcZefVoBcsFuyXKuKiRKZdYLgydHNRy1Epp28=)
                          29: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          30: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          31: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          32: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          33: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: iv+7NvVnV16dAlJ4KZZwLVHUCPnLYulrU1/7vLDJZXY=)
                          34: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          35: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          36: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          37: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          38: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          39: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          40: pbEV8GSzmyv5GEIcw9Ps_8U2s_w.roa (hash: qlJyUREqgOjbb/bkcX56q9Hymy9qBj3GRGQENNt2mZk=)
                          41: pmxFhlPPQLXGUv6hd8fA82dYGtE.roa (hash: a6LynfLW7GHcGAYPPMXAzMR7yEq39V2Fcbsey8YM/M8=)
                          42: qv1zuA1uhOhB0iQXeqNiqrroLGs.roa (hash: Q8oWPpA1az03yvY1CQBg0YQouTSBYAb79g98f5yLevk=)
                          43: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          44: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          45: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          46: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          47: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          48: uF8rk7LpxpBMxklV_RWm55Ih4vo.roa (hash: y0maThc1Ra2sguvgT6xC+DyshsCgw3R/u2YIpFuI4Dc=)
                          49: uSq6xLBAK0GECNAw8hmDWTykehs.roa (hash: JGTYAj5I8PUVkpKmdncdmoIpVKDxvmXHwu3rcLsTxxI=)
                          50: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          51: wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa (hash: 49IYyocP4YGAaKauaepHwxpuEkb9L27DPoNPiAyWcVI=)
                          52: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
                          53: z_F3eZPtphqpXf_B7RZ4t8rRcAw.roa (hash: CRnPIsnZf64ThYvuup5THfnyETtp12ZJqAtj5gO1A74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:4e:26:51:10:eb:76:d7:1a:7a:ce:09:10:1a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Oct 19 16:01:27 2025 GMT
            Not After : Oct 20 16:01:27 2025 GMT
        Subject: CN=161c7a98d3302070248ecfe5d6882a7f12dcc71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:5c:81:b9:70:b5:58:e6:55:c3:99:51:69:
                    f2:72:a5:4f:04:83:5a:20:46:d8:31:64:d8:f8:bc:
                    65:6d:fb:11:79:74:67:bd:41:b1:3b:bb:77:ab:22:
                    09:d8:95:47:3a:93:8d:8a:4c:2a:16:57:96:57:d0:
                    2d:da:89:30:95:1c:d2:4d:ef:02:54:35:9a:aa:86:
                    b1:d0:14:b7:2b:b4:d1:f0:ec:1b:34:59:3b:d7:a5:
                    25:1d:4d:a4:65:ea:6b:a5:61:cc:0a:2c:56:d3:a0:
                    9a:5d:cf:a1:34:1d:d6:0d:8d:ef:43:06:ab:7b:28:
                    dc:eb:a3:e6:b2:2c:d9:31:72:2f:c0:b7:1b:fe:6c:
                    bb:a3:29:28:8c:fb:e3:8a:14:01:ef:3d:e5:69:57:
                    65:d0:6d:d1:8f:8e:a1:1c:55:19:81:98:7f:53:53:
                    c7:fb:87:0b:2e:35:cc:ce:d5:dc:6d:05:86:c5:80:
                    24:67:78:26:ae:36:29:70:be:9a:ad:1d:76:e9:4c:
                    31:dd:4d:68:6e:23:5e:0b:a4:a5:86:3b:1e:e8:e8:
                    5b:54:63:1c:96:be:42:e6:25:8e:b4:0d:97:1e:28:
                    57:2c:35:33:27:25:ba:a9:4a:8d:02:58:23:20:07:
                    25:2c:c5:07:32:5e:f3:84:c6:f8:78:e0:20:24:8a:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1C:7A:98:D3:30:20:70:24:8E:CF:E5:D6:88:2A:7F:12:DC:C7:1C
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:da:40:97:89:39:68:78:e5:79:2c:46:a9:69:d7:6e:b3:
         4d:8c:86:17:51:5a:51:37:96:24:c5:32:eb:91:7a:05:8c:59:
         22:6d:6a:73:e9:bd:e4:ed:50:e6:2a:51:61:b2:3f:ab:40:34:
         17:38:46:3a:85:d6:69:1c:80:06:cd:29:55:28:14:9f:3b:e6:
         ab:a6:ce:e3:59:a6:63:67:e2:7d:4a:d1:62:b8:58:27:ec:9f:
         29:9a:d7:3f:52:2d:c0:d0:cb:d5:92:53:84:11:74:80:2b:15:
         6c:7c:0d:5b:0f:a8:4f:d4:c9:b4:41:19:0e:8c:f6:3f:02:cf:
         9a:f2:0f:b0:35:eb:fc:e5:ce:53:0c:2c:c8:7a:d7:db:bb:61:
         d3:4e:59:d2:fe:73:7e:40:da:fc:ef:35:70:67:61:3d:28:58:
         24:5c:0f:c6:e8:18:ad:c3:a3:91:8a:08:bb:61:b3:ee:79:19:
         a8:11:c0:c9:43:e0:37:2e:77:67:c1:83:3d:a3:7d:07:a5:0d:
         62:a1:fa:01:88:9c:93:f8:87:36:97:24:21:da:f7:b0:1c:7a:
         96:a3:6f:9f:b4:da:6b:35:c9:3f:33:b1:48:ba:f7:db:dd:7f:
         da:32:88:c2:ec:05:3c:f7:44:ce:b8:bc:16:00:a9:c5:94:60:
         5e:55:17:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----