Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          niPqT8C1zslsrnF8d2lX17/7hMace2qSm4jqj21RXPM=
Subject key identifier:   EC:75:B9:2D:5B:39:DA:B6:BA:92:EC:09:AA:CF:46:60:0B:C3:9A:34
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01A16F4A0BCA68AACB36E877AA3F50058F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          1404
Signing time:             Sat 24 Oct 2026 19:01:25 +0000
Manifest this update:     Sat 24 Oct 2026 19:01:25 +0000
Manifest next update:     Sun 25 Oct 2026 19:01:25 +0000
Files and hashes:         1: 1GNYNSpLZEV6lJSEiC0uCb45Kkg.roa (hash: DoJnuhEW/B73op3Jk3VX1qudvNpeJmTAZynYtUkq/MA=)
                          2: 1vOhHgLL8ypkA7AeKTApTuYjMM8.roa (hash: a4ximXSS2ACOK28cI23+Vv6QeWhDzbBvIfhwIlFgfY8=)
                          3: 4noyBMzOCNKYuK7WX_dw4pE45No.roa (hash: Yr1+eCyVe6rAqEGkfCOpgvBoF+WvkrURk9Nzz/EX8RM=)
                          4: 5FPzvveRrCz-9qyh9zTW711G9sM.roa (hash: VuXchz0NkcQUmGkPc2YLEoISBITahfJ9I51Pd9l0//4=)
                          5: 7ILt3tRaBwvDmxRcp9pAtmThBQQ.roa (hash: UTeuLb21OXYLzr+OgLnrywjDX9fAAXFqeiRc8iiwPtg=)
                          6: Ae-hIfwIW5l44gq3bQ6fD9xZUa4.roa (hash: jt/2Qc5ro/Uf1U7fHbCQymjem4oaSg8YKFwgMZyP+8s=)
                          7: AedslwPjaOixRlDhz3PglsifGwo.roa (hash: hQDlmxs2wxlMsISuNdJnrcE36LrHbNy48cGf43T4kDw=)
                          8: B3bav0t0hDiX1W337kB25C5HGY4.roa (hash: qbQKkq3fonzHSYx+gIqNbMAHU+K4oKU4ecnvT3bxWu8=)
                          9: CTH6llkqY8QEf1x4aNkjzAcim1s.roa (hash: 41kYp+q2tN6NsaOBsHxrX4WWRSeIR71Dy7qOjCd7f1A=)
                          10: DM-pFRR9LpWRIpvf-2h5y8_0fsg.roa (hash: OKUcDnP6WYswr/5CqsQAiDROKhZGes/nlC9qde6uU4Y=)
                          11: D_7l4IRtiGgtLkXWFXmZzoeBsKM.roa (hash: 74770mWn3X7ul0+qNxwSszdIcHgZFIxfun6pO5jcCYA=)
                          12: Eiqk4xSVjcRTuuVmXJBeUsZDjNc.roa (hash: fMKBZRAkELrox6xHawYxU6QvQ53mp/eHKxDZT1eRprc=)
                          13: FGE22DbZh3-56wjW7LCxc0Hbgvw.roa (hash: AYkR0sqr/HhohnZBEQcJEx3ib1PKOMXkamXQeJAHf7E=)
                          14: K4GADlpJx7a-ADehO2WgAR3RfPo.roa (hash: dXoSVWob3o9r4eiPJsMBcF4NpFZwbEa5hGIeV5W7+/g=)
                          15: LAOjiliw905xAx7igPNLN7aHfJ4.roa (hash: hUAQeh5fs6lQZSPiVdtF+Mmt5TZ/YZWi01UrqTgdHKs=)
                          16: LPQxVSAvGY926r3uTI5zcpn8oNA.roa (hash: x4oi1go9d4wPnHvz/do0Ej0kpAzYcJILu4A/BxarN8U=)
                          17: M9VtHtBwZiyrmU9cQgJyCp9R5o4.roa (hash: 3pDLehtqxff6QwHIJzpKnVjixMBpmhQJ+f1jqAsX7d4=)
                          18: MJvlTgHoG92QdFvf2k_X6Wb43K0.roa (hash: huZaS1m4BKTt9lX0ik1oeLI2WTBDykmxxkVQDzL+ecU=)
                          19: MTzF4ny-96tIif-EidSHT4X1wno.roa (hash: OBXGWOMrsRP/smPXB6w03mEMeeObFVRS2I+j2/hEmBY=)
                          20: R0xDBDaXrV_eyAz8WkN_JQUZ4AE.roa (hash: W6wQ1LNspk01Db2gHMVWYb9tj9T7c9Bu4eVPrScws8A=)
                          21: SP8L2dVaDJxt4XOTwpJMW0cuceE.roa (hash: S2SGnySe9Cy9weM0WVxwbLjf6UNYLuCBrQG1j1p0yfw=)
                          22: SxYA2eAXAKr0cnVWY1NxUEONOjw.roa (hash: 9j2DjDHd4IAamTX3oXd9lojSys88uaOmCY+n/WqYeOw=)
                          23: VR9kkM6riL_UnjiPLn997_UOhiI.roa (hash: 7cUMyf8WFPegociCFOdgoKkPKZzdoMo8ElLPrSWbs0w=)
                          24: ZRFnYGkLFgovphZizcwKU6uUowg.roa (hash: YmXAu8sLqslzYgkDRgzGSyNVGuR0LkaBfrELpjOjdXc=)
                          25: _7O_-2Hqx6dd7BLv6-gdksNz2Rk.roa (hash: yw0lew1SjRfqNAbnUhMSQfXW9LI6mbh8pxBFVvBnAu4=)
                          26: f3mf-dMP4SQheIwutrUiUleHb98.roa (hash: +qavYKqze36TJN+0/GZiHsCrGskAVVYXAHeeQ9YEX7M=)
                          27: fAGJ0zZiE23sjBMLXsq0Z_mvXEo.roa (hash: hQSWzXWXEpVRTEJG6Hqx3+kFQWHZ1X1EhYkwPSOVP3I=)
                          28: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: VoMmpqUdAUutr7bMPvS0eODsWBqa6BLcBB2fdmOKeHg=)
                          29: jizoxosQSTJ5-V846UhzrFybNP0.roa (hash: WC7sGtpdWLh0jzPyJwTkr3UUmEQSFveDVXO2/YvbgNA=)
                          30: jzKQY-qcPHhXVpAMrKN6jLuaUuw.roa (hash: WoM8kxljrEpcgZDenB5VgkA5gdJ6KKuNHBZdyQe0YiY=)
                          31: lbH01O_hBjur5zMbB6nFwH6jV-M.roa (hash: Fh2sQdI/bxydxVblUEDRzHsLdP9WDZ+GiS2qsXlgYtE=)
                          32: lkhPxJCun2Z5dUraPSN6RULYRDg.roa (hash: eFqAJaFBxk27IgOacKteSGKbRvtbv4VmDnVEga8GwnE=)
                          33: m9NhpqaT1oB2GLt0jjDfs6pgSSg.roa (hash: 5b1tI/znVjW73nWc4ORWaXr9KnAQ1h7/N9EmwsKVAIM=)
                          34: oKNCpcCzBqGQkkapGVmQ6yQAuXg.roa (hash: x1VGmz1TvNMJOY5QRynE8J58kRdyz/U6UQCEsYsPPbE=)
                          35: o_w_tt83Ip_Og6aDkqID9OkYI0Q.roa (hash: tbC/lAu7gp5/nD60oWO521aRfIJ6J89imn/xlAkfLeQ=)
                          36: phKbTl9jfdL9suNl9YTmbf4vDwg.roa (hash: 5ZxT0IsatUdiV5ZDYhZaf+6bRly3kDzKrl6zHwbf7cc=)
                          37: rGLSFEm3Y7kKmct7XWI472xUoTY.roa (hash: eAV1/LHM3VjIqdpFQdCDlaSaMHVt7jz/VCHC/XCO/90=)
                          38: rxh464Q5WmKf8fpfEDFQtyxC8Ak.roa (hash: wSIDCxUi6l3CwLgE6LzQTfu3GG3jihp0aUhhGCo4BtM=)
                          39: tW40rr1Pntra6PPgqQAgkX5Z5Xs.roa (hash: Qx0mkOtIV/lSjj4EYeb1L2TJSLzRTogUFVPwRsFgF24=)
                          40: tZ3f5UDNEfuTAiUHCsAlVn7EuEE.roa (hash: wu4rLNJuQz4PM2FvFJ6zQAb5PyB+03Q0YVI4paUW4f8=)
                          41: tk8LMTXHR-vkEzE7mrOyRfOjWII.roa (hash: oAEOJs1eSEQuJaQDddQ7Siwx7SJ0/VxRlPTRbM3cBdg=)
                          42: u-d7X_AW9V4vXxLXDQ9da7w59oI.roa (hash: ojmt1yanA19Lzpv2/5UfU5KH5FAp3bFIlRB+Ny6uq+c=)
                          43: u1L3ZB09RwCRuaF5N3Pftk1WENc.roa (hash: ObicshZatZNuYv7v3v/Y9aFvSMebPDg/sFZYQqyt+YE=)
                          44: uZDw5aQDg9kzqxAtzIUgqnOWO6w.roa (hash: NhfmaZ0kw27eExE8ON4LLs4g9I2IN7wuuGVJMPmFM88=)
                          45: vsFbiafTNqlN9eI0vVGQTuIt1-g.roa (hash: K2yJ/FuL7swYMPzV1euQf9hhv3CO5mRUqn+/EJ86BrY=)
                          46: xJcSYU94K5jt_ivJFiMsle809Hw.roa (hash: Ahcjs1hZbBxdInemIQY/K59iHfp9XLQMFrNrIw2tDxU=)
                          47: xh2ktDWXopMlUxwLXDcaZmh4chw.roa (hash: KZLHD74s+6ijD7vg9mCkLBFyndzUla57bu6HUOQXpOk=)
                          48: yAol-EbbaNV-k8hN9i2jtI165b8.roa (hash: OyOG5EZ2J+vlWGjKD43VcOysAruFfwshDM1TLDcnnw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:4a:0b:ca:68:aa:cb:36:e8:77:aa:3f:50:05:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Oct 24 19:01:25 2026 GMT
            Not After : Oct 25 19:01:25 2026 GMT
        Subject: CN=ec75b92d5b39dab6ba92ec09aacf46600bc39a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:fb:0a:19:76:62:05:28:07:bd:a9:01:22:
                    d0:6e:88:a1:e4:63:d6:cb:46:a9:4d:44:72:c4:02:
                    30:1d:3c:b3:9d:9b:75:d6:1b:1c:46:f4:b3:a8:39:
                    c4:c9:b4:2f:82:c1:17:43:78:e4:b9:16:c3:aa:1d:
                    0d:9d:d6:1a:ae:b2:1b:c2:86:fa:81:99:b4:e1:f9:
                    aa:95:df:d0:8e:6a:48:49:58:5d:26:c3:88:18:98:
                    be:83:43:16:c4:b7:78:02:dd:77:33:e2:61:cb:57:
                    f6:60:d0:a0:d0:4b:df:1e:be:c0:3b:26:b4:60:29:
                    20:a4:b6:18:b5:1f:e0:20:45:b9:06:92:01:bf:7e:
                    a5:76:79:d3:ef:56:8b:0f:f3:d1:61:ce:0e:90:d7:
                    b1:48:19:b4:05:1b:58:71:e0:76:13:ac:83:37:46:
                    f6:2d:a5:0e:a8:b9:cd:c6:8d:77:0d:f4:4c:3f:89:
                    2b:91:0b:3b:5f:b6:47:c1:a3:51:72:06:eb:82:4d:
                    ff:9d:d4:8f:48:18:a3:04:b2:d1:d8:5f:7b:90:eb:
                    61:4e:88:96:ac:38:63:94:d8:47:06:97:f0:c4:3d:
                    c0:25:36:00:0c:8b:7c:95:d1:54:60:eb:bf:f3:a0:
                    0d:b5:4b:f2:b3:9e:4d:a8:6f:42:dd:2f:22:93:50:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:B9:2D:5B:39:DA:B6:BA:92:EC:09:AA:CF:46:60:0B:C3:9A:34
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b1:70:4a:5d:6f:a0:52:49:19:d9:0b:44:bb:b2:9d:bd:c3:
         b5:a3:f9:32:ef:9c:6a:4c:0c:80:2d:99:0c:e4:72:bb:bc:82:
         54:59:04:0e:dc:db:f1:76:dd:f9:e9:36:86:e8:5f:cb:14:5a:
         98:f4:9a:f4:c3:9d:9f:bb:ca:c7:c6:59:21:56:d1:f4:5a:31:
         f8:99:99:ad:c1:51:e1:b8:ba:97:21:b6:f1:dc:5b:59:ae:73:
         a3:3a:52:c6:d1:9f:f4:40:1f:81:26:f8:69:14:90:00:e9:9c:
         6c:6d:15:9b:8c:ee:b7:f2:90:8d:f4:8b:6a:13:16:e6:66:60:
         8c:0e:89:af:52:5d:09:f6:d2:d9:27:fd:82:f0:4e:04:45:ec:
         f3:a0:b2:80:52:19:85:e0:24:50:f5:a5:84:ae:a3:f8:c7:46:
         7f:ca:8b:cb:1e:90:ae:ee:f1:27:c3:8c:bc:39:f2:8d:97:c1:
         42:16:9f:e0:f3:1b:1b:b1:e4:a2:c6:6a:f9:a0:85:ab:ce:23:
         56:f5:68:51:a6:84:69:03:d3:3a:27:44:8e:e4:77:5c:3a:c6:
         55:40:4e:a7:0f:18:8a:6f:78:66:8f:99:11:91:35:a5:ef:aa:
         51:67:7f:2a:90:52:18:8e:94:e8:fe:4b:c1:2a:c1:eb:41:f8:
         56:a6:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----