Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File:                     Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier:          HoycEElBNERDwnYhEgAvHfqx3jnQOmeSreE5a8Eg9Qc=
Subject key identifier:   33:9E:E4:0D:1A:6B:CE:72:15:B9:B8:D1:6C:A3:0B:31:EE:2F:A7:BD
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer:       /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial:       01A1DB6F765CF9488D347849A078E83A3CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number:          0524
Signing time:             Sat 14 Nov 2026 19:01:17 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:17 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:17 +0000
Files and hashes:         1: 1-7lBoUQLqCs0SrDtfuOiH-hBqKY.roa (hash: uKNvGN7ZD4nsV4in9Y8Y//rdyR/gaCR0sYeleivqS5M=)
                          2: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
                          3: 36PRmC1GP3ueaeEjlYANeJ3LXbA.roa (hash: PZlaEdi/ajdKb06dXTcZ+6Hv0OskYDexJ38koRPQi50=)
                          4: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
                          5: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
                          6: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
                          7: D8AltX8NXcLOq-pSTN7KWtLKGHY.roa (hash: Jhg74LTPlJvtU+9SkThmAe1N9wxkw8e/NSOn4orb4Jw=)
                          8: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: Hw+3tJ0kq1KQ0yuyiZtqneQs7GW8CYaSUj0wU4BNh7c=)
                          9: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
                          10: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
                          11: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
                          12: SW6Tanlspu32Q4YoMd-Rt7HAHNs.roa (hash: aL36fgXsHk04MAwwOrDjHIzxG5aLhcW1gldiD4rfIMM=)
                          13: VvLQA9Cae2PQuMrr3_Y-0TmNwcY.roa (hash: XwK6vB2kQtof3+RV72T5Wj8ggzbbz/YUbH3GUgwyoJw=)
                          14: Z6MskMkEXzBOrr08MyqO_Qkq-eg.roa (hash: Jc2k3yBoYG8HC5iVw30jV49DTomvXwgVQwrLuJF9/+g=)
                          15: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
                          16: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
                          17: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
                          18: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
                          19: a_bqWhibp7SeshuAQiOml-HBzFo.roa (hash: 3/NcBV1xs1onuU3mKr8Ow0etCQW+Riv48+qzB2krzYc=)
                          20: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
                          21: eh5fOnfV3Yahiu4aGae0RbMTacA.roa (hash: EnUBauk+HPUC2FL0C2u4k3bttrn+4mEzqjxd5GPr53A=)
                          22: ii9LtIl5z4pfeWcOSv4chuHToL0.roa (hash: XZ9+lbsPmgFqiDNRTZUxX1Y4b8nNUBrBj4+Zb+KEdjI=)
                          23: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
                          24: oVD_dVqY96Rae8qlPSjzu1nbP2A.roa (hash: hMwSc/t+zdpyL3GPyUyGW/FYHdZ8kxNPn94rYv1mr6s=)
                          25: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
                          26: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
                          27: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
                          28: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:76:5c:f9:48:8d:34:78:49:a0:78:e8:3a:3c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
        Validity
            Not Before: Nov 14 19:01:17 2026 GMT
            Not After : Nov 15 19:01:17 2026 GMT
        Subject: CN=339ee40d1a6bce7215b9b8d16ca30b31ee2fa7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:d4:1a:1d:fb:51:27:55:5c:09:bb:58:0b:
                    1f:42:43:e6:e5:06:f1:c1:6f:37:a7:52:d7:b8:2d:
                    2f:6c:60:ea:a3:eb:ff:68:5d:ed:ed:30:b6:cd:62:
                    25:bf:58:3e:be:17:d5:1f:16:0e:4a:11:cf:83:dc:
                    16:c1:cb:0c:00:36:97:f6:91:1e:0a:cc:d7:80:f5:
                    2c:6f:c4:62:86:04:94:19:99:9d:fd:ba:8c:41:4a:
                    45:7d:1e:3c:50:ef:1a:6a:55:4c:f4:da:13:92:b7:
                    c0:6d:5e:19:ae:81:2d:70:cb:8a:70:ac:eb:d7:04:
                    ae:6e:e0:e1:7b:1c:a0:1f:d7:54:df:09:de:85:2c:
                    34:30:99:51:05:af:9e:02:31:5d:8a:3d:31:04:46:
                    f9:f8:ec:bd:fe:02:b6:c0:83:f3:c7:c8:f2:6a:99:
                    54:33:d5:8a:27:fc:7a:e1:32:44:4d:0b:05:f5:c0:
                    a5:d5:1e:47:38:44:66:fa:01:af:a3:39:5c:f8:4d:
                    6d:ed:15:bb:33:15:cf:69:e9:d7:36:31:23:3f:cc:
                    65:3f:a8:91:97:97:74:fd:42:dc:e6:08:68:69:26:
                    43:f9:5a:ac:8e:9a:29:dc:33:11:c5:30:a8:26:e4:
                    90:df:b0:50:1a:d2:96:f1:3e:ec:bf:71:0e:85:04:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9E:E4:0D:1A:6B:CE:72:15:B9:B8:D1:6C:A3:0B:31:EE:2F:A7:BD
            X509v3 Authority Key Identifier:
                keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:03:1e:6f:bf:4c:9d:4f:1e:1e:25:da:b7:49:66:4b:cb:
         c8:87:dd:d8:1d:58:22:88:70:fd:fa:a6:56:2c:97:f7:13:d4:
         8c:ed:30:95:1f:e9:3e:8a:5c:87:ae:14:73:f5:b7:2c:56:5f:
         75:3b:cb:ac:36:fc:c4:71:84:0c:d4:5b:ba:6f:e1:0e:f1:27:
         6a:58:b1:48:6f:f5:87:52:aa:fb:61:90:43:da:72:61:c8:e6:
         a3:7a:20:50:5f:5e:93:2a:c8:25:29:e4:80:cd:38:fc:a1:7b:
         3b:df:34:fc:99:41:14:95:e1:df:1d:24:00:c5:1a:61:b0:42:
         c4:d8:9a:bb:1b:95:16:4a:87:39:ac:43:42:dd:2e:b7:8e:d1:
         0d:65:b2:d8:e9:d4:d3:73:72:8f:b0:75:d2:51:b8:1a:d8:10:
         69:66:a5:5b:0a:0d:77:30:64:30:6e:b2:f5:da:51:0f:1a:81:
         47:5d:e9:72:5c:99:b2:d9:69:08:66:cd:3d:54:3d:3c:52:ec:
         20:6b:b8:37:81:44:40:06:7b:ac:a3:30:ac:10:03:81:b1:1a:
         21:60:4b:f6:a2:b5:2f:aa:dc:ed:9e:9f:e4:49:55:01:8c:67:
         e1:7c:f2:db:57:e0:03:c6:62:55:b4:89:6d:74:af:c8:59:cc:
         64:9d:12:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbb3Zc+UiNNHhJoHjoOjyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjYxMTE0MTkwMTE3WhcNMjYxMTE1MTkwMTE3WjAzMTEwLwYDVQQD
EygzMzllZTQwZDFhNmJjZTcyMTViOWI4ZDE2Y2EzMGIzMWVlMmZhN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8fUGh37USdVXAm7WAsfQkPm5Qbx
wW83p1LXuC0vbGDqo+v/aF3t7TC2zWIlv1g+vhfVHxYOShHPg9wWwcsMADaX9pEe
CszXgPUsb8RihgSUGZmd/bqMQUpFfR48UO8aalVM9NoTkrfAbV4ZroEtcMuKcKzr
1wSubuDhexygH9dU3wnehSw0MJlRBa+eAjFdij0xBEb5+Oy9/gK2wIPzx8jyaplU
M9WKJ/x64TJETQsF9cCl1R5HOERm+gGvozlc+E1t7RW7MxXPaenXNjEjP8xlP6iR
l5d0/ULc5ghoaSZD+Vqsjpop3DMRxTCoJuSQ37BQGtKW8T7sv3EOhQQ7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOe5A0aa85yFbm40WyjCzHuL6e9MB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntsDHm+/
TJ1PHh4l2rdJZkvLyIfd2B1YIohw/fqmViyX9xPUjO0wlR/pPopch64Uc/W3LFZf
dTvLrDb8xHGEDNRbum/hDvEnalixSG/1h1Kq+2GQQ9pyYcjmo3ogUF9ekyrIJSnk
gM04/KF7O980/JlBFJXh3x0kAMUaYbBCxNiauxuVFkqHOaxDQt0ut47RDWWy2OnU
03Nyj7B10lG4GtgQaWalWwoNdzBkMG6y9dpRDxqBR13pclyZstlpCGbNPVQ9PFLs
IGu4N4FEQAZ7rKMwrBADgbEaIWBL9qK1L6rc7Z6f5ElVAYxn4Xzy21fgA8ZiVbSJ
bXSvyFnMZJ0SAg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:16:28 2026 by rpki-client