Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          9DEisJdxJUtxS70crUKktS2It+CkF5Y9+3F18mqO6Is=
Subject key identifier:   66:28:68:C2:01:FE:67:E9:69:44:29:63:E8:AA:01:26:32:AD:4D:D8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       0197B7B387CC841A9EC7DD3B232789FCAE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0E1D
Signing time:             Sat 28 Jun 2025 18:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:25 +0000
Files and hashes:         1: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          2: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          3: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          4: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          5: 63a15p8fkUPzdSevCe4_8LijZK8.roa (hash: kSxgKgvIJZtG3hH/JW85TLbhxWW4mNszOVGpH9xSEy4=)
                          6: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (hash: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=)
                          7: 920Vm8vcSs5GtWnd22ORSrNJy7E.roa (hash: Eym+34P8a0n2AJ2BbmYtyd0VnVkanNH1uU7GM+VfILA=)
                          8: 9Q2YqpAXgtWvBppY_D8fOP81XzM.roa (hash: pLLj49UP0BY8ewDJchr7KsaH13T09HrWAcMCApWmeU0=)
                          9: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          10: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          11: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          12: CnpXvHCjQBhGkHjS4GEBrsyD0Ls.roa (hash: +4TTYcJ513NTSkhs1YvjASWAiCdz18RdzHM8dcd7WKs=)
                          13: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          14: GCdMuRRfvMAh3H8lDbpqaJ3gcFI.roa (hash: 7/Dx6NhWzga4bPTSQuI5QkDRTsfH4N+VkZ0Prh2NJZg=)
                          15: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          16: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          17: J1i1oW9ojIkHTT-QNpmlt5khDYU.roa (hash: lBmiOfhhGD3ObQeP/PKuhssEkhyEAEQd/oOfDgATIyc=)
                          18: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          19: KSZzqYecmpv6aO1HSwza7iOQ1os.roa (hash: nccjz+3gHID+efv98vuj6/lOlFRUhMMGymeEmx7TRc4=)
                          20: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          21: P3jT3074ztf6Q9k-tDnLxk1X9xs.roa (hash: OQZGx3r1WGNBtxfpm5AaUYpQMRQcyHWfBZIkT/pZafA=)
                          22: QVpUZXXtRIH20Imi_FSbaFyiVsM.roa (hash: 4TM9EKcDHQ+gG0op3bcQD0U+ZAq/ULDsduNRox8hgWE=)
                          23: TN7hnpecGw4vVEA_h9JU4nwBKAI.roa (hash: QguoCsciRkHqlithinwUkI7ebgBBrsRhr+OaqhRW+4A=)
                          24: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          25: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          26: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          27: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          28: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          29: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          30: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          31: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: 5Y3AopUHw3LF7cgb0qnQs1Y9ski0exrjszjh35fbdyI=)
                          32: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          33: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          34: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          35: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          36: lSZdw4rLtWkD1k8AaGknRw4MB5w.roa (hash: i21M0iRknAUEtnV2bnQfsAfpJTKvyHSzWggCXf0tFs0=)
                          37: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          38: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          39: pbEV8GSzmyv5GEIcw9Ps_8U2s_w.roa (hash: qlJyUREqgOjbb/bkcX56q9Hymy9qBj3GRGQENNt2mZk=)
                          40: pmxFhlPPQLXGUv6hd8fA82dYGtE.roa (hash: a6LynfLW7GHcGAYPPMXAzMR7yEq39V2Fcbsey8YM/M8=)
                          41: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          42: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          43: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          44: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          45: tnqGyUlZUIVyWTllZ-_bB828PWE.roa (hash: fXRkBAYqJVFHa94R+YOh351qEN51xxFSQ+gJUqt3hVw=)
                          46: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          47: uF8rk7LpxpBMxklV_RWm55Ih4vo.roa (hash: y0maThc1Ra2sguvgT6xC+DyshsCgw3R/u2YIpFuI4Dc=)
                          48: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          49: y5jk7A_2uM0azO24XUKFRlQ8ez0.roa (hash: +zHyOoesQ7/l0J/q9PljXWm35J3B+xwWRgguNYco15M=)
                          50: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
                          51: z_F3eZPtphqpXf_B7RZ4t8rRcAw.roa (hash: CRnPIsnZf64ThYvuup5THfnyETtp12ZJqAtj5gO1A74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:87:cc:84:1a:9e:c7:dd:3b:23:27:89:fc:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Jun 28 18:01:25 2025 GMT
            Not After : Jun 29 18:01:25 2025 GMT
        Subject: CN=662868c201fe67e969442963e8aa012632ad4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:74:ad:9a:ab:f8:b8:ef:90:67:1e:a4:c8:
                    b8:16:5b:4c:81:2e:3f:19:e4:1d:7d:7e:70:a7:67:
                    20:21:ce:3c:b6:fc:49:09:cd:fb:af:f0:b7:ef:32:
                    7b:b0:8c:dc:31:94:26:76:1b:83:cb:e1:d2:6f:1e:
                    ce:31:ca:8c:da:89:76:45:53:8f:5d:05:1a:75:d8:
                    c0:25:75:c8:4f:7d:01:91:b0:68:9c:48:48:55:0f:
                    39:50:2f:f2:2e:3e:cd:a8:67:9a:47:6a:e1:55:da:
                    61:57:3c:aa:6b:83:dd:90:7e:6c:92:2d:57:12:ba:
                    4f:bd:ce:9c:cd:f1:7f:f7:9a:55:5c:44:2a:3c:42:
                    f2:76:b9:af:ff:7c:0d:69:6c:39:d0:77:0c:f9:91:
                    85:16:14:6f:c3:bc:bb:fb:88:d6:bf:41:d3:0b:28:
                    85:7c:51:75:0f:8b:9e:25:74:f8:82:56:70:55:75:
                    00:ec:42:ef:45:14:79:05:4b:f6:e2:94:3c:aa:5f:
                    16:cc:9c:ce:60:27:34:c4:a2:7d:a7:5e:69:4a:0f:
                    15:56:5f:22:b5:5f:75:e3:cc:1b:25:07:d0:c0:81:
                    1f:33:d0:7d:0e:c4:f8:52:e3:2c:20:37:63:3e:a7:
                    e4:71:e9:b9:71:66:9d:b1:7e:be:e0:9a:3b:c0:fb:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:68:C2:01:FE:67:E9:69:44:29:63:E8:AA:01:26:32:AD:4D:D8
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:c4:3b:20:2b:3b:3f:22:92:64:6a:68:64:6b:80:16:7a:
         22:28:5f:26:39:6e:77:6e:c1:0b:1d:e2:85:82:63:8a:d3:3a:
         b7:58:4a:fe:be:db:23:ee:ff:45:57:b3:05:5c:9a:fa:7f:cf:
         0a:97:e0:3d:df:36:bc:a0:85:98:af:b0:cd:16:b2:1e:99:f2:
         23:f9:ec:fb:07:da:21:1e:fe:ac:2c:57:52:98:55:77:60:5b:
         fe:fb:c4:0f:e4:af:3c:0b:1b:85:46:16:ad:85:73:c7:3b:16:
         25:21:3a:0f:c8:33:d9:90:9f:49:0a:db:84:30:38:ef:72:43:
         6e:d0:88:8e:46:d0:0c:b2:bc:27:5d:92:7e:2b:0b:b7:26:ab:
         e0:ba:c1:48:de:a4:ce:97:53:ec:67:52:0d:0e:f5:75:1d:13:
         2f:9f:33:ad:ba:43:df:c4:80:98:76:55:f1:de:8f:cd:11:9a:
         29:fd:e0:58:42:22:a9:a9:7d:3e:28:be:a6:85:0f:48:c6:12:
         d9:25:c2:78:4e:e8:9c:47:8c:d7:72:ea:2a:9a:ff:0d:4b:a0:
         c8:77:89:53:50:1c:d5:66:35:51:59:3a:04:fc:b4:d3:69:d3:
         3f:f3:e9:6c:39:ec:72:fe:2e:0c:7a:7e:c0:44:f6:52:48:71:
         56:50:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----