Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File:                     gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier:          wRxn9NqGOdxegHrsjygy+8PCP7XdW8hXd6XUl0xtBIc=
Subject key identifier:   DF:1B:8B:53:08:40:55:98:24:35:88:D4:B7:83:B3:5C:00:F9:FF:2B
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019D390A4257B53BAF54A597A619C9869719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number:          181E
Signing time:             Sun 29 Mar 2026 10:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:06 +0000
Files and hashes:         1: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (hash: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc=)
                          2: 5rXwssl527FV2FHeDhR2oKlUXW0.roa (hash: WQ/svE53owqqplnZu2XskLFlrf81EITn3WaJ4Owl8c0=)
                          3: A2ISr3AhA_OLuE4vCaltguerrGk.roa (hash: XVo2mBP5vj7zEOjBJU4fz3hD0zF9gjIIidmQOyfmPm8=)
                          4: B_yoM3Jy8N0DdJQtpgjme97ROik.roa (hash: xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=)
                          5: C2qsqykPJR8bxPt0il6bx1Ync08.roa (hash: rx7IIuhYb6OjHMFPkhQQKe1jf34rAxrZNmsnAP5woPw=)
                          6: Eilep39s0W_osQQFQPSsoAKdfco.roa (hash: 6jL20G1x9LLedCqLFzBSvWrG2YOC5Aac6CVPlj6NRgI=)
                          7: Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (hash: 48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=)
                          8: LNoBJyvljWdZYTcoXm9QsLP9FVs.roa (hash: nWOaebTubOf17QtTCJLmMJRa/dUDUevgmWP2si3deW4=)
                          9: M0ezANIScQkGcDEfzTIy1094Ygs.roa (hash: 7L/Z05JVXLM96cEqfLd/Qa3M1xxz6mw6TCdvAoqtsH8=)
                          10: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (hash: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc=)
                          11: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (hash: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew=)
                          12: Rcz6VMasvEn3PT7aHlXnvRNCCOg.roa (hash: R6ZpFMZ8awfD85SLkNWsQUS4lhgnShCOUqpgZEdYua8=)
                          13: RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (hash: WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=)
                          14: TXYlpnJahpSSf4D14CU4Lc0pyNk.roa (hash: IvdTjuXpCeq2Kesan+YisYqHbTJ/fmABOJltSTgXFiY=)
                          15: USkeW3SqGK1BFL38UkgCCeCEWQ0.roa (hash: eMrg63tQqYpAlPke35tL59n0mF440GKZbiUGCAytzHY=)
                          16: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (hash: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8=)
                          17: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (hash: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ=)
                          18: aQDw7Mo9EKwcZxqOVfhx0_yZdp4.roa (hash: ZuwT0G21oBkcWxGxdz/rJk2/q4wyN7jfVVKKPfYFCII=)
                          19: enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (hash: xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=)
                          20: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (hash: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=)
                          21: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (hash: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI=)
                          22: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (hash: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg=)
                          23: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: 2lM7ZyBb6kKB7CxRHu2z/0LIMfr+9KuUcQRIDGuGFyw=)
                          24: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (hash: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ=)
                          25: nN1BqZwpwg6pGbp1ybabVsffEuI.roa (hash: pegbr3i5RQokP5AQQn4oGY5tWqdgEeSi6ilxYg+Y1MU=)
                          26: nokRMmTxz9Xd6z-hBVMNLvX9YfM.roa (hash: bPLMWPwlw8xLKZWkuAQ5tOhzaVyBMSkZqaVe4QemGq0=)
                          27: rHtH6ewJBJbv0Px0ycpkTuJZhpw.roa (hash: TT27fGDeU9y8svpHAoyYAyCi7PfXey2z2Ll9/ZDN9Dw=)
                          28: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (hash: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=)
                          29: sjSbwRvUxsb3yUwsgUfAMG2V4_U.roa (hash: aPIFLtmwDtgSR2q0IlrMpjeonu3SIjoONqTj1lEh+4c=)
                          30: tJezA1CZfS-7gIrwzQeF07w1QZE.roa (hash: 6SVRW7grHCoY7EelqwfyobL1Mgn1MekdbVvAZaNRMSw=)
                          31: thj7o1aypMnMA4ArmDP29ne0Qrs.roa (hash: p1Tyu3GhBNAM6VQcZ8/KqZ+QVAReZGUEnoLBz/Y2j0I=)
                          32: uIsD9Xy2Vc1GIzrsfeZU-p_i07c.roa (hash: owmGDd/9tCt8PZOlqfI/7VwgHd7b2hJO3Tnc74AlIQw=)
                          33: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (hash: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=)
                          34: wX2DATSM-PZGG043XYepDGv416w.roa (hash: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=)
                          35: wss7zMwe7PbIUt44ISQdw5NRA-o.roa (hash: hY/bHx558olj4wZ8AeI9REogrHwn5IbR1IKhgej6jig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:42:57:b5:3b:af:54:a5:97:a6:19:c9:86:97:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Mar 29 10:01:06 2026 GMT
            Not After : Mar 30 10:01:06 2026 GMT
        Subject: CN=df1b8b5308405598243588d4b783b35c00f9ff2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:c8:86:3b:91:f1:67:ab:87:66:cb:f6:6e:
                    27:1f:5b:96:d8:57:ed:ea:9d:ca:1f:81:05:93:16:
                    e5:5b:78:f7:9d:26:ef:bc:ce:9e:39:cb:19:ff:2d:
                    0b:86:04:12:96:dc:af:ae:9d:38:1e:83:45:b1:df:
                    11:dc:6c:de:ae:27:47:24:0f:f2:79:73:c0:21:08:
                    3f:5c:10:12:7f:bc:fb:a6:e3:4d:a5:6e:b7:1b:bb:
                    94:1d:9d:a4:6b:bb:fc:fc:70:22:c8:42:a1:05:90:
                    c2:2e:69:8b:71:b8:ac:a7:78:8e:dd:04:2c:be:b0:
                    be:5f:f6:10:eb:83:d0:5d:8f:78:f4:1f:da:7a:18:
                    51:ea:4e:51:d6:50:1c:6b:55:05:47:85:66:c2:7c:
                    e3:ef:82:3e:fa:4b:34:fc:1c:25:36:45:c0:98:cd:
                    79:23:c7:70:8a:43:8d:46:fc:96:05:17:5d:bd:9f:
                    2e:2c:34:9f:0a:6d:7f:1e:0f:bc:8d:94:10:4c:9b:
                    72:44:61:cc:f4:22:ac:f5:0c:c0:ae:9d:77:a7:50:
                    f4:40:b8:22:2b:51:6a:90:6e:51:38:49:5a:4c:4f:
                    d9:78:d7:b1:02:c1:76:cc:0a:f6:68:47:f1:17:f1:
                    16:07:af:92:cb:a2:d3:1e:bc:b3:98:5f:d9:98:a9:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1B:8B:53:08:40:55:98:24:35:88:D4:B7:83:B3:5C:00:F9:FF:2B
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:dd:4c:c8:b0:77:97:f6:52:d9:b8:b9:ef:26:45:64:f0:
         01:b7:65:80:0f:7a:31:dd:02:52:13:cd:da:f5:23:3e:99:52:
         c1:74:3b:f7:b7:b5:be:35:eb:eb:a7:08:03:2d:e6:42:e6:85:
         45:66:52:55:6d:a6:8a:4c:82:d6:0d:e2:ad:36:77:f8:15:84:
         b2:fc:5e:9b:dd:b8:0b:71:fb:bc:6c:99:5f:ae:06:d6:0a:7c:
         88:09:b5:39:31:30:0d:88:69:6d:e5:84:d7:ea:0b:c4:a1:db:
         28:43:34:57:f8:8d:e4:85:6b:c7:4b:fc:28:01:8f:14:21:1a:
         b2:b0:00:9b:f6:d6:e3:b0:88:17:dd:27:72:cc:a0:41:36:80:
         d3:b6:8b:6f:27:01:99:8b:0a:40:73:60:7c:eb:e7:d8:ff:3d:
         c9:08:44:46:78:e0:85:b8:ad:70:a3:9d:56:46:7e:06:c8:d2:
         6e:91:25:da:cc:a4:bc:f7:a4:8d:8b:f2:eb:11:10:87:e4:c9:
         49:c6:ed:4c:0a:b4:67:e1:90:c2:7a:dc:0c:e3:28:fc:3f:d2:
         d3:3a:40:4c:61:d3:b8:f6:e0:5d:0d:da:31:a1:d2:db:c6:d8:
         f1:f8:5b:c1:d5:d8:6c:56:4e:d5:a9:cd:e4:50:66:f8:6f:4c:
         4c:a8:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:19 2026 by rpki-client