Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          VCxNQdOJnWZod9WWLe3nT8bwb2Y/ZRyfkNjNh6bF9qE=
Subject key identifier:   93:12:67:FC:0B:69:29:F6:85:C0:15:80:79:8F:97:75:A5:97:64:12
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       0199FBEB1D226B4A307CCC685A473AC2F748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          166E
Signing time:             Sun 19 Oct 2025 10:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:53 +0000
Files and hashes:         1: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (hash: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=)
                          2: 3nHQeUIvfgERGGgwZXPLqGrFwCc.roa (hash: PVqd7KRgPCILOUDhdegbeY89u7gfE4kJTUXx1+4aybk=)
                          3: 4fJd3OUxKotrDopMoPp8x_J3KXs.roa (hash: jo1NuUMOgj2DOUbbjYgsD3WHmHnI2e64VwgOioKGjxc=)
                          4: 7xBwrzDU-Q3LgBd_pCCkSVZJ8r8.roa (hash: I4+USeGM9vUX6KcuBfkfPPLNkgp4BpNTxxlqHARIlaA=)
                          5: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (hash: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=)
                          6: GMUqnPQO8HVIx48VQ0kZwO4akaw.roa (hash: uZv76tLJNRtDmi3fk8CwmWOl4QIbJTpAAFy6cS5OdOg=)
                          7: HIqyL1_xN65PGGh2pYvXxB9JRnY.roa (hash: WSdWXpJpM+IApu/ksgC0/SIwWBLtodEczT76Ij0oaDM=)
                          8: HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa (hash: Xdy5Q/i3U4vTL+1/dZaz9m7aiTQM9VV6w2ke2pIj8Mo=)
                          9: L0_jQJT5Qclln0Oyg58IDEsvUEY.roa (hash: O4ru/bejek+UTjQtcEf3F24KaS3s+lQbPWX4dTGtcIg=)
                          10: M6XyFHtKP2ScUd5goZuFirggjdg.roa (hash: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=)
                          11: MiH69dfcyCIB23Qa5GvglWS530s.roa (hash: ib+HOhPLu/yX/AwfYmsfgR2RDO6fgoZuxLt0/b+SAbc=)
                          12: OE3tT2H2fUUZLW1vQ7BzbV1M8gU.roa (hash: y5ASsgsrkdPRvKNsFBA0em5Q7FjI70gdDU/50w7KFJA=)
                          13: Q155SYsxVZHtklas2BS3w5w70h0.roa (hash: FvNx0toywZuvzc5WA2iEA8TJxxDlZbL0owUYzKxW1No=)
                          14: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (hash: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=)
                          15: SX3ylag-hZOGWYy_pZkwNhLOSsE.roa (hash: 43OUdEAz6tq0z1F5ikIM0mpbPVhfkw5HMKGB/qtwP5M=)
                          16: VBzP8kfPQEFNtuR8PdFsD2jp1DY.roa (hash: 3EY9SySAHD8fNQ9KBgqy9PEqScRiw8H7Y0JuBdXiKGk=)
                          17: VWUyUYrxBUBQm8U_GjpDzaM_d0M.roa (hash: DnWyph44y5iJj5u6j2MjM6Rs0v4MJI8RZHnOeiNRgbw=)
                          18: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (hash: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=)
                          19: XOeYPDFunsrsYp0-Y7f01UANXYE.roa (hash: EDBHmHjrHHD79zYQIl4IIyJ7MsjaCFiA1LKPLtylFCA=)
                          20: YALvBFXCZCuiPMm-BJVewPH_enA.roa (hash: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=)
                          21: _GtticsJYfVQoe0D3zav_vzfdBI.roa (hash: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=)
                          22: auEd2AJZBbZPig_7z1vxDlWadmA.roa (hash: 60BE0mDiR8P6qgvwmA8KQFG8GMDS3ckQBTSoMT45CdA=)
                          23: auJYqSGMRM2eh3GuPu73K0unOdU.roa (hash: GDejZaeuJKin43qGV5V9PEXLP2cVvsiS1K0IxA3fdMk=)
                          24: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (hash: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=)
                          25: cG7_wfsakBmyctpOoPE_qHS49E4.roa (hash: mSuDbhxIa4I4Ml2s2/BDm98rCr3yNT2h8gR1W7fngK4=)
                          26: e1WMx_ge3OvvuQfeVWgtsTZKIeI.roa (hash: AcxhV2adeY8w5h5li2Z6uouvIaFM+nk6upPlV2hgezs=)
                          27: gchn44JRTuDd880WIwbVtgXZUsU.roa (hash: JI8XHT7Ed3+L0vajm6jq0SIoKJNRevXoKUe8F/HW81I=)
                          28: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: T1e7nzq/LRPPkGMhNyAkmFA1bP8q8af6XbmX51/0L2E=)
                          29: kP5Kud5JC4HdByWF3NmU2sgwbJg.roa (hash: aeS1WvwgOcwV+L4eoLjhAuXFnavKM4LbSU/DAgly4BI=)
                          30: ojT-i1WyMoMzrKUGF70lR5SpfKo.roa (hash: +svQt7tDqw+nZSwF/1dh5yGoWZXeOhltuo6UFjy/ZCA=)
                          31: pFdc9GKBdXBjaKb_bkpy4pwiK_0.roa (hash: 8795JOEM2aEDEqQnWkWWkhSBntyGxcwSFS+eMBONKHk=)
                          32: qTXSVWTU8wL-LtchYD96dAZna1M.roa (hash: whr6apWGUcvqYoUu99TAxnFfLEWJVx+7V1setIYeu9Q=)
                          33: qiq4lHzWMEzrZSdOazDM-vLTXbw.roa (hash: xlyv2U2zn5kmXMwTOObtgWC0+eOvTyqFjN2rhysl2z8=)
                          34: uV9qh0Bz3P5Gfc4DrA8wQrQZnKM.roa (hash: Q2zeYVmGmIBxQp2Z7g0x6cXzrzkC3NswS2sBlFvJ0Pg=)
                          35: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (hash: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:1d:22:6b:4a:30:7c:cc:68:5a:47:3a:c2:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Oct 19 10:01:53 2025 GMT
            Not After : Oct 20 10:01:53 2025 GMT
        Subject: CN=931267fc0b6929f685c01580798f9775a5976412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:5d:c1:71:fa:2f:b1:f7:9c:62:3f:39:91:
                    fc:a3:e4:6c:c2:ae:cb:3e:fb:c8:fa:33:07:55:4b:
                    59:ac:ea:7e:bf:29:3e:17:d9:1c:b0:9c:5d:88:9d:
                    7f:c6:65:e6:29:87:ca:4c:04:cf:73:fb:0b:0a:8f:
                    32:31:bc:a4:bd:7a:d9:65:a7:78:b0:de:26:56:aa:
                    44:19:94:98:6b:fa:df:ac:07:29:56:e9:cc:69:17:
                    8b:7c:a6:02:54:29:66:5a:82:a9:4b:ef:11:55:6e:
                    62:c3:73:e0:f9:f6:97:07:e2:db:f7:35:79:6c:d3:
                    f3:e8:9f:99:6a:30:37:52:ec:7e:e5:4d:dd:24:3a:
                    ae:1a:f9:b3:f3:dd:2a:71:ac:e1:97:d1:8f:64:61:
                    87:c3:40:8a:e5:f5:cf:5a:fa:6d:5c:92:f9:e3:67:
                    ef:05:c0:82:6c:92:15:c5:31:dd:9a:63:2a:ff:68:
                    2d:47:b5:7c:99:e3:21:d1:dd:a7:7c:37:49:05:db:
                    96:74:9e:69:09:7f:2d:fd:02:69:90:8a:08:4f:9e:
                    77:ea:a6:78:3b:95:f4:60:7d:65:dc:f2:b0:9b:5b:
                    30:f8:57:67:e6:66:65:5e:96:58:a7:4b:1b:ca:3e:
                    a7:e8:9d:ec:cf:93:eb:e7:7e:46:ad:94:42:1d:76:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:67:FC:0B:69:29:F6:85:C0:15:80:79:8F:97:75:A5:97:64:12
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:5e:cf:d2:17:4f:73:5e:8f:b4:27:2b:01:0f:7c:e4:88:
         98:5e:f2:e0:9e:93:f2:be:40:6d:68:47:cf:9b:c8:1a:9c:89:
         0f:8e:d4:46:4a:60:8f:8b:13:a3:0e:dc:a0:e2:75:d4:ff:1b:
         55:81:9b:92:d4:6c:c2:4c:d9:23:f8:b5:af:09:e9:c5:61:1c:
         cd:dc:08:04:ed:09:37:36:bc:4d:3a:93:ca:9a:9a:4a:2a:a9:
         fe:d4:56:8f:56:ea:0d:e4:59:8a:cb:d5:52:a5:b8:96:70:c1:
         2c:da:05:35:68:af:81:ca:cb:26:86:38:e9:12:60:2c:ad:c0:
         a5:c7:ec:c2:39:7f:c7:f9:3e:e2:f2:c6:29:eb:5c:8e:eb:28:
         6b:47:43:58:10:88:cf:9c:07:79:4c:37:52:1f:7a:2e:1d:8c:
         07:19:08:42:1a:cf:29:61:7e:57:10:30:9f:5d:dd:11:fd:4b:
         47:88:aa:12:90:ff:4d:cc:cf:8c:7b:da:cd:b4:ef:45:25:7b:
         1a:09:9d:74:56:19:69:ed:25:89:ee:83:62:a0:40:8e:e9:a2:
         d5:a0:88:d8:45:70:32:53:e5:b5:e4:26:8e:0e:05:b6:02:8d:
         07:fb:d8:af:84:65:96:95:f2:4d:d1:bb:50:13:42:e5:9a:72:
         3e:e5:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:54 2025 by rpki-client