Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          IIpRElsn5xPq20rLwbT81z8TE+HAX6KFMi4TzE9zR6w=
Subject key identifier:   D5:3D:99:6B:66:F5:57:73:8D:03:CA:E5:B8:4E:30:2E:44:32:41:CD
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019E2AD845F4CB47F0598BC2AAD760DFACDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          189C
Signing time:             Fri 15 May 2026 08:54:36 +0000
Manifest this update:     Fri 15 May 2026 08:54:36 +0000
Manifest next update:     Sat 16 May 2026 08:54:36 +0000
Files and hashes:         1: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (hash: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc=)
                          2: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (hash: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0=)
                          3: A2ISr3AhA_OLuE4vCaltguerrGk.roa (hash: XVo2mBP5vj7zEOjBJU4fz3hD0zF9gjIIidmQOyfmPm8=)
                          4: B_yoM3Jy8N0DdJQtpgjme97ROik.roa (hash: xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=)
                          5: C2qsqykPJR8bxPt0il6bx1Ync08.roa (hash: rx7IIuhYb6OjHMFPkhQQKe1jf34rAxrZNmsnAP5woPw=)
                          6: Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (hash: 48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=)
                          7: LNoBJyvljWdZYTcoXm9QsLP9FVs.roa (hash: nWOaebTubOf17QtTCJLmMJRa/dUDUevgmWP2si3deW4=)
                          8: M0ezANIScQkGcDEfzTIy1094Ygs.roa (hash: 7L/Z05JVXLM96cEqfLd/Qa3M1xxz6mw6TCdvAoqtsH8=)
                          9: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (hash: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc=)
                          10: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (hash: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew=)
                          11: Rcz6VMasvEn3PT7aHlXnvRNCCOg.roa (hash: R6ZpFMZ8awfD85SLkNWsQUS4lhgnShCOUqpgZEdYua8=)
                          12: RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (hash: WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=)
                          13: TXYlpnJahpSSf4D14CU4Lc0pyNk.roa (hash: IvdTjuXpCeq2Kesan+YisYqHbTJ/fmABOJltSTgXFiY=)
                          14: USkeW3SqGK1BFL38UkgCCeCEWQ0.roa (hash: eMrg63tQqYpAlPke35tL59n0mF440GKZbiUGCAytzHY=)
                          15: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (hash: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8=)
                          16: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (hash: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ=)
                          17: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (hash: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII=)
                          18: enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (hash: xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=)
                          19: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (hash: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=)
                          20: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (hash: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI=)
                          21: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (hash: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg=)
                          22: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: B3J1f/UG60O57NWIVRp0JoWrtEwHKaFabRa497P35ww=)
                          23: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (hash: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ=)
                          24: nN1BqZwpwg6pGbp1ybabVsffEuI.roa (hash: pegbr3i5RQokP5AQQn4oGY5tWqdgEeSi6ilxYg+Y1MU=)
                          25: nokRMmTxz9Xd6z-hBVMNLvX9YfM.roa (hash: bPLMWPwlw8xLKZWkuAQ5tOhzaVyBMSkZqaVe4QemGq0=)
                          26: rHtH6ewJBJbv0Px0ycpkTuJZhpw.roa (hash: TT27fGDeU9y8svpHAoyYAyCi7PfXey2z2Ll9/ZDN9Dw=)
                          27: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (hash: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=)
                          28: sjSbwRvUxsb3yUwsgUfAMG2V4_U.roa (hash: aPIFLtmwDtgSR2q0IlrMpjeonu3SIjoONqTj1lEh+4c=)
                          29: tJezA1CZfS-7gIrwzQeF07w1QZE.roa (hash: 6SVRW7grHCoY7EelqwfyobL1Mgn1MekdbVvAZaNRMSw=)
                          30: thj7o1aypMnMA4ArmDP29ne0Qrs.roa (hash: p1Tyu3GhBNAM6VQcZ8/KqZ+QVAReZGUEnoLBz/Y2j0I=)
                          31: uIsD9Xy2Vc1GIzrsfeZU-p_i07c.roa (hash: owmGDd/9tCt8PZOlqfI/7VwgHd7b2hJO3Tnc74AlIQw=)
                          32: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (hash: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=)
                          33: wX2DATSM-PZGG043XYepDGv416w.roa (hash: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=)
                          34: wqD_cahWbtK_rETYwCH9DQnzgC0.roa (hash: +1HRTYJRyWzmBbxFFebxvIYVWXCr9UiBiZmjfLPimQA=)
                          35: wss7zMwe7PbIUt44ISQdw5NRA-o.roa (hash: hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:d8:45:f4:cb:47:f0:59:8b:c2:aa:d7:60:df:ac:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: May 15 08:54:36 2026 GMT
            Not After : May 16 08:54:36 2026 GMT
        Subject: CN=d53d996b66f557738d03cae5b84e302e443241cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:c9:bc:7d:36:0c:19:36:ce:3a:18:2b:88:
                    dc:3f:83:2e:f4:6f:c8:0b:50:e1:ba:b6:73:b6:b5:
                    a4:0c:79:b5:99:7d:d3:58:f9:1e:49:a8:fc:67:d2:
                    e2:ec:59:e6:e9:9c:eb:ed:fe:07:14:5d:a8:94:d9:
                    a6:ef:70:7b:38:4d:e1:82:5a:ef:42:f9:1b:f6:7c:
                    ed:68:02:43:09:e9:82:97:0b:29:df:4a:a2:11:90:
                    67:fd:6a:f0:ec:e4:5e:26:1e:bb:d1:e4:3a:3c:5a:
                    cc:70:65:fb:fa:d2:bb:29:18:8f:19:58:49:b3:f4:
                    be:55:49:07:d8:95:29:c7:3d:26:91:89:26:b2:3d:
                    c3:94:c3:e1:b3:bf:cd:e9:5a:d5:84:ff:50:81:c5:
                    e2:fd:f4:0b:af:3c:b0:3e:b3:d5:a7:b8:fd:79:08:
                    09:2b:98:f7:b1:72:a5:68:d0:f4:fe:95:88:c7:8e:
                    d9:19:76:cc:78:f0:2d:cd:39:97:44:98:75:5a:78:
                    6d:33:98:65:fd:16:1e:cb:77:a7:33:a1:f2:78:12:
                    4e:2e:9e:a5:a9:ec:ec:77:85:78:b4:d9:e3:d6:81:
                    77:17:5e:27:da:64:0c:9a:79:25:c1:f8:4d:04:82:
                    c7:cc:ae:70:d6:a9:a7:58:b4:bd:2d:25:26:5e:f8:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3D:99:6B:66:F5:57:73:8D:03:CA:E5:B8:4E:30:2E:44:32:41:CD
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9e:b7:08:99:94:6d:5d:80:e2:80:e4:5e:65:60:d5:26:ee:
         61:ed:d8:e7:c3:44:05:fd:d4:4d:ca:a0:63:72:cf:3c:79:8f:
         fb:f1:fb:7c:e9:39:73:d4:25:96:45:b9:51:f2:de:cb:cb:4a:
         62:19:95:3a:6a:ef:b5:49:db:b3:20:e0:d5:69:e1:22:1e:3b:
         b0:8d:85:1c:b1:78:ce:6b:f1:7a:a2:43:46:55:b5:dc:4d:d2:
         69:ba:27:58:fe:af:2d:41:96:12:08:4f:48:d1:2f:b2:75:52:
         0a:7f:48:a2:e3:fc:8d:43:13:50:ca:65:c1:16:98:65:1b:a5:
         b4:f2:e8:ed:b5:d5:e8:e9:c4:85:29:4e:48:be:20:0f:8a:5a:
         fc:5b:ac:dd:86:96:5d:ac:06:e3:3b:f9:29:d1:fa:b5:0e:e7:
         5f:ae:39:e0:43:78:3e:21:e4:60:f7:dd:0b:f4:27:62:be:14:
         d9:e2:0b:b9:88:1e:42:a1:ce:6d:fb:6e:c8:31:79:bc:b3:ad:
         c7:01:c8:8a:87:7b:4d:75:91:30:0b:fc:05:a5:7a:15:c9:a6:
         dc:ca:b4:e7:27:12:5c:de:ec:a7:bd:aa:a2:2b:c7:f9:3e:3d:
         fe:bf:30:ff:13:34:2d:80:49:aa:0d:35:f0:6c:ea:b6:13:56:
         4e:1e:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:36:10 2026 by rpki-client