Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          zPC3KFV9cmXGzQxTMyfnhGC28xNqQ6kWPtjDWksUVc4=
Subject key identifier:   C4:9F:E5:E9:E4:DA:D3:93:1C:FD:30:4A:EB:F2:CC:20:0E:BD:CA:81
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       019A04ED45BA0AD275A71144543BCEB70FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0F66
Signing time:             Tue 21 Oct 2025 04:00:49 +0000
Manifest this update:     Tue 21 Oct 2025 04:00:49 +0000
Manifest next update:     Wed 22 Oct 2025 04:00:49 +0000
Files and hashes:         1: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          2: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          3: 3dhPwrEfhjofRYtfJkI4cPyP9HQ.roa (hash: ghQ2YzpCC9cQdtiIH9wDRG0qGVcd1atQTaldPN8jXwM=)
                          4: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          5: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          6: 6TAg5h6JB3I0CM2Vyicny0RgSwI.roa (hash: D8FLS1BfWg93BjIKpEgKtuQ3uhfK/yRWFwiL8yH9elI=)
                          7: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (hash: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=)
                          8: 7gDVXYzVg1BvONcpfCIgQ1ikYW0.roa (hash: Z2b/6g0Ewxo1JzfiDSHW6lUXSikVRdrWw603e3VzRm4=)
                          9: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          10: BP4TqkOtBFp0i9RIcsfpzdFxxtY.roa (hash: gr5E54KUXZ1S0kWmDwR6NxGfZr8Il97zAx8H2R2BeUg=)
                          11: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          12: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          13: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          14: FxXgnbjIjMQJSVyfPbrnNLIEdzE.roa (hash: 3RrsCHtrq0EWoychIudSGLBvrbDi5Gn3NMR0p8Y1rFM=)
                          15: G4uMj4jEgbl0nPqapbiYN9oWNtk.roa (hash: 0hgew6NK06cNsc5ACwn1eMXrZldgM8YdDncSgwy28f4=)
                          16: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          17: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          18: JMDcAIWxrwE8KfR3NGRyLH7J9uQ.roa (hash: 0nHeWpMjTTXLjF1SNsTFJ//WlmXhrR/+ojxRWqJj3yI=)
                          19: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          20: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          21: PaYlLL1YOtm8IJ8_CD0zAGIXidM.roa (hash: eUBaLNH36vCB6dujbo8I9hbjCeQAzjBG5TSSXdiMCes=)
                          22: QVpUZXXtRIH20Imi_FSbaFyiVsM.roa (hash: 4TM9EKcDHQ+gG0op3bcQD0U+ZAq/ULDsduNRox8hgWE=)
                          23: R-aTrSt-2ZV-lEf1_-snMmfd8J4.roa (hash: d8N5g8jVz0cpcp/i/Z5cwaIfBDnFIkgzwMup5/9HjUM=)
                          24: TN7hnpecGw4vVEA_h9JU4nwBKAI.roa (hash: QguoCsciRkHqlithinwUkI7ebgBBrsRhr+OaqhRW+4A=)
                          25: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          26: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          27: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          28: Y202gT9Jqy8iAdNt-19QysSVvqg.roa (hash: xiLKkaHcZefVoBcsFuyXKuKiRKZdYLgydHNRy1Epp28=)
                          29: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          30: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          31: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          32: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          33: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: BaKSchLM1zSRW1cMyOn8piK8KsXdBXtrmTN40GGoS5c=)
                          34: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          35: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          36: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          37: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          38: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          39: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          40: pbEV8GSzmyv5GEIcw9Ps_8U2s_w.roa (hash: qlJyUREqgOjbb/bkcX56q9Hymy9qBj3GRGQENNt2mZk=)
                          41: pmxFhlPPQLXGUv6hd8fA82dYGtE.roa (hash: a6LynfLW7GHcGAYPPMXAzMR7yEq39V2Fcbsey8YM/M8=)
                          42: qv1zuA1uhOhB0iQXeqNiqrroLGs.roa (hash: Q8oWPpA1az03yvY1CQBg0YQouTSBYAb79g98f5yLevk=)
                          43: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          44: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          45: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          46: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          47: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          48: uF8rk7LpxpBMxklV_RWm55Ih4vo.roa (hash: y0maThc1Ra2sguvgT6xC+DyshsCgw3R/u2YIpFuI4Dc=)
                          49: uSq6xLBAK0GECNAw8hmDWTykehs.roa (hash: JGTYAj5I8PUVkpKmdncdmoIpVKDxvmXHwu3rcLsTxxI=)
                          50: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          51: wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa (hash: 49IYyocP4YGAaKauaepHwxpuEkb9L27DPoNPiAyWcVI=)
                          52: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
                          53: z_F3eZPtphqpXf_B7RZ4t8rRcAw.roa (hash: CRnPIsnZf64ThYvuup5THfnyETtp12ZJqAtj5gO1A74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:ed:45:ba:0a:d2:75:a7:11:44:54:3b:ce:b7:0f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Oct 21 04:00:49 2025 GMT
            Not After : Oct 22 04:00:49 2025 GMT
        Subject: CN=c49fe5e9e4dad3931cfd304aebf2cc200ebdca81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:50:09:e5:3f:51:b8:8f:02:6f:5f:33:20:
                    e9:0d:a6:0c:8d:ff:e8:6b:09:26:b7:90:64:ba:10:
                    94:da:97:ad:9b:30:0a:a2:1f:f0:c9:86:b5:2a:d4:
                    d5:8b:cc:b5:23:b9:46:4e:a4:4c:3a:3e:24:43:97:
                    7e:e7:d4:a9:5e:4f:41:99:1e:bf:79:53:da:7f:c6:
                    cf:89:b4:d2:45:df:e4:d5:88:a3:80:ae:1e:17:e7:
                    bd:44:45:9c:31:fe:9c:ec:a5:25:a4:7a:46:8a:ce:
                    5b:d5:b5:bf:2b:41:df:14:83:ee:14:d1:6b:76:7d:
                    f0:f2:0d:bc:f3:43:64:ea:cd:a1:ba:7b:e7:be:1e:
                    90:ce:ad:c2:8a:b1:ef:31:c6:0d:1d:9b:bb:92:1b:
                    5d:0c:bd:7a:4d:0a:52:62:e2:de:9d:db:dd:bd:fc:
                    0b:90:59:1d:e5:a0:d7:c7:1b:4d:82:f0:ec:4f:7d:
                    8f:8d:02:8c:0a:2e:21:44:42:0a:07:9d:88:b8:78:
                    86:e1:d7:b2:4c:7b:7b:9a:fc:f9:19:1f:c5:c7:05:
                    1e:7e:31:d9:a9:88:29:7f:3e:b8:9d:88:35:e2:39:
                    aa:3e:00:69:10:5f:2f:c5:cc:e2:31:ab:8d:90:e1:
                    33:65:f8:89:ed:54:7e:8e:59:b9:c5:cf:70:15:b1:
                    aa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9F:E5:E9:E4:DA:D3:93:1C:FD:30:4A:EB:F2:CC:20:0E:BD:CA:81
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:50:e8:bc:dc:ef:f7:e2:7e:b7:28:8d:84:60:4a:88:6d:
         fb:16:4c:25:9a:30:c3:7b:22:20:16:57:16:b8:bd:b6:f2:a4:
         e5:2a:8a:ef:c1:fd:a3:da:22:9b:20:4d:48:6d:f2:b9:77:ef:
         2c:82:a7:1b:38:bb:9e:bf:a4:74:89:ac:00:97:c8:ce:47:c0:
         df:6c:40:d7:51:e6:cc:52:5e:33:a0:57:53:a4:ae:6b:67:90:
         0e:da:d0:ca:0c:41:5d:ed:1b:79:a0:8f:ab:de:52:c1:16:cb:
         32:e1:26:ae:ef:68:31:3e:b9:3d:80:c2:12:1a:84:8a:8a:31:
         02:c4:db:64:0b:5b:67:f7:9e:66:b5:a4:ca:b6:d5:93:6e:8c:
         b5:f6:79:a7:c8:33:0b:9f:0f:cd:eb:e2:38:95:50:4c:32:fe:
         b4:af:7d:5e:9f:ac:31:98:3b:13:ff:a6:c4:9f:54:2f:c9:86:
         c8:92:34:02:4a:1b:44:03:32:07:1a:86:d0:76:13:f4:55:5c:
         ba:f1:07:3d:14:24:50:84:b1:b5:a7:97:f0:50:d1:16:b9:24:
         b1:82:f5:ea:72:64:5a:bc:7f:02:68:f2:ed:c1:18:18:fa:45:
         05:ae:d2:37:84:f5:b6:a4:25:4f:45:a1:d8:f5:4b:45:48:ea:
         be:fc:67:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoE7UW6CtJ1pxFEVDvOtw/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUxMDIxMDQwMDQ5WhcNMjUxMDIyMDQwMDQ5WjAzMTEwLwYDVQQD
EyhjNDlmZTVlOWU0ZGFkMzkzMWNmZDMwNGFlYmYyY2MyMDBlYmRjYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApypQCeU/UbiPAm9fMyDpDaYMjf/o
awkmt5BkuhCU2petmzAKoh/wyYa1KtTVi8y1I7lGTqRMOj4kQ5d+59SpXk9BmR6/
eVPaf8bPibTSRd/k1YijgK4eF+e9REWcMf6c7KUlpHpGis5b1bW/K0HfFIPuFNFr
dn3w8g2880Nk6s2hunvnvh6Qzq3CirHvMcYNHZu7khtdDL16TQpSYuLendvdvfwL
kFkd5aDXxxtNgvDsT32PjQKMCi4hREIKB52IuHiG4deyTHt7mvz5GR/FxwUefjHZ
qYgpfz64nYg14jmqPgBpEF8vxcziMauNkOEzZfiJ7VR+jlm5xc9wFbGqQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSf5enk2tOTHP0wSuvyzCAOvcqBMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJtQ6Lzc
7/fifrcojYRgSoht+xZMJZoww3siIBZXFri9tvKk5SqK78H9o9oimyBNSG3yuXfv
LIKnGzi7nr+kdImsAJfIzkfA32xA11HmzFJeM6BXU6Sua2eQDtrQygxBXe0beaCP
q95SwRbLMuEmru9oMT65PYDCEhqEiooxAsTbZAtbZ/eeZrWkyrbVk26MtfZ5p8gz
C58PzeviOJVQTDL+tK99Xp+sMZg7E/+mxJ9UL8mGyJI0AkobRAMyBxqG0HYT9FVc
uvEHPRQkUISxtaeX8FDRFrkksYL16nJkWrx/Amjy7cEYGPpFBa7SN4T1tqQlT0Wh
2PVLRUjqvvxnkg==
-----END CERTIFICATE-----