Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          LnJlmVGd8gAd6F3kBVkkZ703k8+I4XpQHXSjFTetFc8=
Subject key identifier:   43:BF:1A:DB:93:A6:CC:47:D4:09:0B:36:9B:71:10:C8:14:94:BC:EE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01960489BA06193BA6260E250CE369718943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0D11
Signing time:             Sat 05 Apr 2025 06:00:57 +0000
Manifest this update:     Sat 05 Apr 2025 06:00:57 +0000
Manifest next update:     Sun 06 Apr 2025 06:00:57 +0000
Files and hashes:         1: 18Oe-4KhnSWeIAohuVOv-8N-ZM0.roa (hash: H+2p9ICX6HbPGaZKSv++WyX8urHJj4fFtPKDE1rQURA=)
                          2: 1g-KrbdKdsirF4z_TJUgMYDdg8w.roa (hash: t4/rANrGQWzgMBGHr7j/eIG0rZ6yy42STR9wQTGQfXg=)
                          3: 3DfFQETO6bhcObetwxPc_BEalpU.roa (hash: xqeLrmN/A5n6UzRrPesNYGPs31AaH1Fhah/D9XB5+TU=)
                          4: 5jSUnFhs2XEyycUC5F1Dog5tF5I.roa (hash: NzPe1uK8hgb/2QUTC9/jZUJTZ1C0bqYViWey+KVX7G0=)
                          5: 5k0l33eoi3Brg_78Lfio8CwECJY.roa (hash: 7s9GklqJfkLUFdqkSy634AK7jTs0g0YfNGnBUpjatlY=)
                          6: 7igeo9_TlsXUqUlVvyOjpwVfpDU.roa (hash: wrE83GpVnnbvy4NsTM2G5dYnzbEPX50/JpJmfQzjBx4=)
                          7: 920Vm8vcSs5GtWnd22ORSrNJy7E.roa (hash: Eym+34P8a0n2AJ2BbmYtyd0VnVkanNH1uU7GM+VfILA=)
                          8: 9XJ8JgTiV-34uWu_hPOglrJk2n0.roa (hash: +3NQyf49TSxAqBfL7Hu2b6iSQj37geRqsOg3CEtljdA=)
                          9: 9a227jlcyERB05XuKgmmcTNLpNE.roa (hash: a8eVC/jEAw2MkKx2mic9H59IS/um5WPqUrHWI5PvJLg=)
                          10: BOpZuTUHf_38qW20mqxlJj2_bUA.roa (hash: dmTBGE0cltlqEvyJsGCp7oAJga3BfxGHn785/xuae2Q=)
                          11: BSMTiyM4pnl9If5voX3KbONrs5w.roa (hash: uWxXBrcWnzi1eJsm6+Zzg9+sO9uQewGhXuGeqUwQqqk=)
                          12: CRZRtehztTtgWzQtbQPSWf6XW0o.roa (hash: 76hBOLhxFMSoFb2U9B/edZAyunhaiojf6U+F7Si+vgo=)
                          13: Ct8mDAJZ8lZ3iHwsAAiPgJuLaho.roa (hash: DqisiAtgMNAzc5PU8NEVt9H9xXUvbQuT95XDdCMZxEw=)
                          14: G_75n8-L0iJqnjkaHw7zP2gBjIo.roa (hash: z2fRWBvDRrVRPA42qxS+QP078b8hBDM48KrQZFVaasA=)
                          15: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (hash: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=)
                          16: J1i1oW9ojIkHTT-QNpmlt5khDYU.roa (hash: lBmiOfhhGD3ObQeP/PKuhssEkhyEAEQd/oOfDgATIyc=)
                          17: JvqBIXiq5TxtaexDe6MiLG7Uzco.roa (hash: huNRUsFo/Oz7iRP5jciR9/safRSwPrF9PgF6uaHgaAU=)
                          18: KSZzqYecmpv6aO1HSwza7iOQ1os.roa (hash: nccjz+3gHID+efv98vuj6/lOlFRUhMMGymeEmx7TRc4=)
                          19: MjKZrafSIm7TV8yanRgSfGhY2pU.roa (hash: Yww0N6pTISvOfcVEdc2oFg30SKebG8XeTy8TeW7OZiY=)
                          20: N2kkoQ2o02HHZZ6qVv-WtTqW5RQ.roa (hash: UVosnwUdXYQqAJ8cpa4t/j4iKftdjiRWmrikerbtPWI=)
                          21: NnAxQCksqItExvZLldJlkjJaDPU.roa (hash: tSnaOUKLG9no6tm+L2kNSTXG7yxAD3P/F0t251P32qE=)
                          22: OAqxF3O43IYIQpxquWKCePco-PA.roa (hash: tyR142cYWuPaX2JucubyUikFKIPSla1u33sJOw9lYQs=)
                          23: P3jT3074ztf6Q9k-tDnLxk1X9xs.roa (hash: OQZGx3r1WGNBtxfpm5AaUYpQMRQcyHWfBZIkT/pZafA=)
                          24: UaHUGX2me0fCinu2K0o7FQZnjgw.roa (hash: OaWH39B32ar55uhOAtdCpNgOxqCD3V6ZAB5otMTUBaU=)
                          25: VnhOPBZDowa-khGe6_hFTUNqCsk.roa (hash: qCIsr4GjCEdCucIllYzz4SFGtxqgpQsm/0HzykOXZ08=)
                          26: XreWF-dzlOcgK_7UUvJIWUUq16I.roa (hash: zc2OR/ijrznF2LEmeYNAq4SUMXQRqDJyOAjX/GcmzX0=)
                          27: Zkz4_ZlIcB7DyFtPU6FEcoHSLPM.roa (hash: s1IAQ81D2wcGPIyH9EA3eeNc1gEW0sjHMUGBYsUA8aU=)
                          28: cOqBhkQFZDqvfoidrCqH20nwfYo.roa (hash: e2BiJt4oTR8uOBuwP/FqEV3tWaMWx640gccR16PY+Ec=)
                          29: cVRIKyklOGb7gyBNTjf8ZM0mf7c.roa (hash: 1zkBtP2Tn8VtUUwECLAshf+HOZ82qvOHUiN42yc3zEo=)
                          30: fBLuy90uGCv22rBLuoDIiG2G66M.roa (hash: jPE3VFqawczzibzPQw80OEeyieLxlbeXn6UrGWxbDQA=)
                          31: g7CQjOrXAZDWN-UCXNhfBqU8GtM.roa (hash: TsfqchRGcZNHpPlXb+jTlHuU31TnVWJ3XGIt3131e90=)
                          32: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (hash: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=)
                          33: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: x3ezLWImDfspnkkutS5H3M62p3wepCkGi8iPkGr8YCM=)
                          34: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (hash: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=)
                          35: hhDruU2BGyL72LcDTa30VVmeyeI.roa (hash: QkshKq6erv7Xez3qseCJmTlwPfpvRSNnvi/jlZLUf8M=)
                          36: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (hash: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=)
                          37: kOl5tooHYMmCtstl7OngZrFymus.roa (hash: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=)
                          38: okmrS3MAeCGkajH0g9nEl4QdGVo.roa (hash: UuGatYmxYnLQPEz6I45Aj5HUMzevfoaTRLkkn05wa24=)
                          39: pCZJYGWLfMf47M4hTTnNHaf3lqE.roa (hash: jcoNV10A9nQKZm/yHM5DNeojh1+AoJUaIuNjlaLYlYY=)
                          40: qd-wHflT1W5Uh1OvqeaUGo08WJk.roa (hash: G9nD1hbUj98EUh6LgOZegklP6ybwuRC9JMmIQ0QCPnQ=)
                          41: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (hash: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=)
                          42: r9qtEucdT5fBEuZvonXHKnblamc.roa (hash: e84AERvT12bRjzteneYAf/72qjIGN9KxsKv7v1cQ7Nk=)
                          43: t1jAwDE4ePrJr-20runZjcVjYy8.roa (hash: J3DFEAIlVxaosyTy22VtpM9ytnJ7AurPBR88JS2iL1U=)
                          44: tSrMnczmlEbYIQOpkEmwHRnQpzI.roa (hash: FuBmyi06UTvYJhovqEho4RVXPO+aGk1wa3ZPdqXvWWY=)
                          45: tscTIRNnXBX4bdk7PPWEzOgkrpQ.roa (hash: jmoGtQG/6MXeYZuB+mNX2aLoq4UfhEQ2DtKrowmccSM=)
                          46: vPvzH2Jkd68NGCsRhA2y2FlM_lA.roa (hash: 9Klt1Up9ZbII9TfgturV2CBhPEMnjyOglIYDIB463Jw=)
                          47: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (hash: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=)
                          48: yjRCQFpYP8D73UWSiMzAw7wapsY.roa (hash: FPB3XcPaMGvyEveeCWYQTqED1L4KYJ2NaYoaDDoNETk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:04:89:ba:06:19:3b:a6:26:0e:25:0c:e3:69:71:89:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Apr  5 06:00:57 2025 GMT
            Not After : Apr  6 06:00:57 2025 GMT
        Subject: CN=43bf1adb93a6cc47d4090b369b7110c81494bcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:82:28:55:0b:cb:be:fb:62:ab:98:05:a9:
                    9b:14:54:b2:19:ac:d6:33:7b:a5:fe:b9:1f:d0:7d:
                    d7:2d:e9:75:1b:fc:67:c5:1d:1a:8a:43:e5:2f:76:
                    22:e7:5f:63:ac:5e:a4:6a:a3:9c:7d:f0:ad:6c:ce:
                    c4:29:f0:4f:cd:ea:09:0c:02:27:cc:70:48:b2:91:
                    28:1d:ec:90:f3:42:ae:77:c3:71:2c:08:fc:66:61:
                    f6:49:01:f4:04:8b:31:b2:34:69:a1:b3:6c:cb:d8:
                    91:d3:b9:52:57:fc:c8:a6:33:63:62:59:a7:db:c5:
                    cc:40:ca:11:e8:fd:de:82:96:8c:47:50:0f:5d:73:
                    08:64:0b:54:77:e0:0f:4b:73:d9:6d:1d:57:03:25:
                    1d:5e:8c:6f:c0:83:94:56:51:50:1f:7a:a3:75:fb:
                    e0:e3:9b:c6:a4:83:e5:57:ad:d3:79:5a:b9:02:60:
                    36:b9:4b:e8:f7:e1:35:f5:0f:a9:69:8f:0b:58:4f:
                    92:68:0b:24:31:0d:fd:21:f8:36:38:4d:a2:a9:6a:
                    4d:dd:8e:dd:0d:f7:95:c5:80:0c:78:ab:df:f1:73:
                    cb:a3:1e:95:4f:6f:ca:2b:6b:8d:6b:a9:8e:b3:b3:
                    03:7b:b6:d4:e3:2a:f6:49:36:68:8a:1e:91:fa:af:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BF:1A:DB:93:A6:CC:47:D4:09:0B:36:9B:71:10:C8:14:94:BC:EE
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:f2:14:94:3c:d6:9b:3d:e0:f3:eb:6d:8d:e8:72:fb:4e:
         f1:69:b6:e1:3d:fd:23:71:bd:18:82:16:18:59:e7:9d:3a:4d:
         46:33:9f:37:53:04:de:ff:4d:7a:54:fe:72:78:4a:53:44:a9:
         eb:58:61:6c:56:7f:2d:b4:d4:32:bb:42:23:6e:df:88:2e:bf:
         6b:10:ef:da:54:52:93:f1:71:8c:2e:df:45:dc:aa:de:6f:75:
         dc:d2:7f:90:92:47:05:82:e7:a0:c3:a7:70:60:0f:92:2c:87:
         8d:e1:8f:e2:44:6f:d4:f4:14:70:06:79:4b:9a:66:9f:b9:a6:
         dc:20:de:6d:9d:30:c7:f4:c9:6d:ff:05:67:17:5c:10:04:08:
         ce:6c:64:14:b2:62:73:34:f8:89:aa:29:fb:b0:f4:ab:68:34:
         86:8a:31:c1:32:fe:fb:7d:af:af:26:eb:2e:fb:33:35:19:40:
         ad:41:6e:da:65:4f:c4:70:fe:57:ab:f9:09:b3:fc:60:b7:70:
         82:8a:e2:45:96:34:3c:a6:1a:4d:5c:ef:57:95:c6:d0:be:1e:
         08:0f:86:9d:5d:0d:07:47:26:d7:f0:08:2f:d7:5e:cb:ad:48:
         6e:9e:57:11:bd:06:16:55:5e:b4:36:38:03:a8:b5:93:05:7c:
         08:9b:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----