Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          ocv1EdVUS4f4nbas296DiPehgIAB2ImFvRmGr43dWyk=
Subject key identifier:   B9:B5:94:FC:F8:2E:F3:7A:26:70:20:28:FD:BE:F6:8E:77:89:06:48
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01A0D6F08AAEAAB0268CE5391FA914D8CEE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          18FD
Signing time:             Fri 25 Sep 2026 05:01:23 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:23 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:23 +0000
Files and hashes:         1: 0Lm7esoKkHareAs6Ls8vjEmxa3Q.roa (hash: x+lTP2mMfmYdH0ZyCDCtnT35GU+4XuQiyxHUZ4mGGfo=)
                          2: 1-MX61ORDAEgGzStxHPqb31eQIkM.roa (hash: cgOhBiY8skFAOtiWyBzOjuYndSHYI+GF0dLm5wWs2X8=)
                          3: 1-l5uVc54PydSELuogxMSOlvZknc.roa (hash: IqbYRdGYfwB0/Ape3iNBhfXkFPQtJCX9oUdgHc+bBrQ=)
                          4: 3GpQDK6RUjxER6WqFkD6MrfTePE.roa (hash: oMZnSqlrIwX0HF6cXDzl5mTixP+9NujvpL/rC6+j6+I=)
                          5: 3nrBO5sN2ydgeQAybOfYJbnytMk.roa (hash: Zw/gRLsYG0xWKmlMFeUVC7H8FkwaHfFstqGc6SQAVFY=)
                          6: 3wCNNSuWzSSwYQwg_CL9pzACFMM.roa (hash: HF8Fm/z5VIt/9WuJvChaK+4H6Qn8FFsO9P/WD6aF2K0=)
                          7: 5hxJVaW1ITHjqTzVJE_yCZQu6TY.roa (hash: 4jHQruBZmL2C+S6zlzONMLh0unhRvxQBys9HI6W8e9c=)
                          8: 61rQFUGqJg0nLTLj-Rrzy9qHIPI.roa (hash: g3jur0hhvVqeoUrencrp2/jQZ48qi0hd7qQhX0ZdtvQ=)
                          9: 75MkeVAB6wqfTbbl9R4hRrGVFvs.roa (hash: SDpqmU4lJ+MDSgO6M3+78G3BfOWJYqo0dHAIvZ9Ho+A=)
                          10: 9TJMpeYqsoOoDUusQBPckUuMx5w.roa (hash: glgiITvixFtsZGf3Fx9yb2ESkrKPhP/O4mnFOL1v/4c=)
                          11: CRj57suiWLnitfcdYAQ0fpq77m8.roa (hash: BM0sP2DTYDAmY/abV0dJE1uW3k/F6/Bydu5DJZuP9K0=)
                          12: Cawa-DODLcgEccenA7kSlmsMJQk.roa (hash: iTOAQgX2G9bRdF7X+s3MxrFF2agAxk0qoBnqwrYlVYk=)
                          13: EMGYlLFyG7va5tHSqgNvuA_a5nA.roa (hash: K4h7GbaJUcJNo0E5HuiTdnv50fqxOcqcCoCjsxIgI2I=)
                          14: FCwIxiEEDY1PleIvLIa6TTqCKsw.roa (hash: lecQNWWmvhO3cnwmwlTqpFfyjhIxcOjNyiOGPXfVcKA=)
                          15: GjSR40LYx6Uk1tSZXchrDAV5_FM.roa (hash: dmPBoCrxSTJGl6a45mJDmt04LJWy+gct5xWGz1rrJag=)
                          16: GvLMsK1YIlG3H3ud3AEcdujFVoA.roa (hash: BSzH67VCZLLTTNw1xUILHi1JzYZa1Ek/ANs66qlglA4=)
                          17: HizlzTiqTuK5yatK99t0S4irGGY.roa (hash: e6yJe+XRznL1kEYGrcT8TWqS3RNROSK/qwM9VbNmNQM=)
                          18: IF9Q2mJv-D2RGLIuOuKfNMWVngw.roa (hash: kjzPy/2bPn68qL6lDttpNzisPWOLObsMw4ZdNbjMTQs=)
                          19: JRgE3d1rNe9vs44GRHF6SwRVXtE.roa (hash: Tw5mid4PGhap1bN/JiXsmMDZEWrQouLEemZWuia7EY4=)
                          20: KCMg1rWAyjF2aUsKSYcyVlgvIjs.roa (hash: LRsU+6j0QZMSSik/ispHex4V9d57wSM/OoTJAU9IlEI=)
                          21: KcmV8oBRoGzjxOHt-8ic3_JKEog.roa (hash: I0SFj3nuJizf26jnbqDeLC1lOQjufyA0x0s3y7ZnVXg=)
                          22: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: 9hoDeH6P9v4tKBtiC/g5GIVyqRZjNd6+o4p7WkhFRPw=)
                          23: MPHNqx3HfJMj0eCK6sDL2cRhO24.roa (hash: q5C2xphEnKrAzqKaBfkvfZ6Po1hLeV+9/fLgpIoxUg8=)
                          24: MVdaz8ics8Sd-XffD7C430qY11I.roa (hash: xtPCUH6KPnYcKU0oSSaYFdckSNDB0iw7+CjSZPjS4rE=)
                          25: QaDdxTDIKujsHj1_R2vhxiuywYo.roa (hash: cYzKZHRBZg4cQMpG2FirPav999wiYn13B4xqmO7W52M=)
                          26: R1ohmYJEu56Bfs07T3EgDidDkJI.roa (hash: Y1jRS/ZVpA6RpVUuvHtsb5WhLGj0fmu9R54h10BXmEE=)
                          27: SgsTOpfz4GV5ysHaU_hkxTEuBfY.roa (hash: 6wqRkJqmJOrf7latD4lpHfKJuj57gPHrqy5yXyHp9PQ=)
                          28: Vos0YXlrvSISzNrKBPqS7zLPjkY.roa (hash: B60nLXQoRs5gI3OiafhBiz9AYmOTRBwAZAW2+lTtGio=)
                          29: Wbq3ETax87bNgr0IS2yPIgugFIw.roa (hash: rzQKsoxByu4D7B4LcyGQotg64vsqqzgntIgDVwaTWwY=)
                          30: Yl-c_Z4vHEK-iI9aMfFocbI8cWU.roa (hash: cDP8W9SA7kri+7+m28tZHCLpb7Hu7PBPYZaCs2lbGOk=)
                          31: ZlgR9Wr6dRwYYKCu_QgGesPkRUo.roa (hash: F/KTa7KhD4sbza9rvdpPEqF/Bd5rYWcbJdnRE9lkwd4=)
                          32: _U_w6bXH111HMDU_sQ6-CKmlsuM.roa (hash: O+NWacU5mxgiI23XoSRRPRaw31TaJyyv5c/Hgp1qWl4=)
                          33: _qeKgQV4YyvDP3FhgdytthiDJXQ.roa (hash: 94DaY/N+Pi5r/GoDumGOEfU7J+SovdZjttg7Ii1+hmc=)
                          34: _v2WHlFRDcYhLkjXUloV_hg-H_k.roa (hash: 2xB0wD+Tur4/gI83e6PeVkTwe5048HzykjHm5uoJNv0=)
                          35: b1SYoSctQ6aIsIAy0MojkuPYIOk.roa (hash: xgNc0NfLxyarAEUTAARhWGBOZXXjIfuwJ9TfgP17+Ss=)
                          36: bFT_Z4_-ysHNs5WuSzbJw1AU8jo.roa (hash: KsQGBoDh+Ca9uE3jShzCM613jUL/H5/LE3nQG31F4hQ=)
                          37: fcWjKwnV5uWFQpY6jXiQNMuRgkE.roa (hash: aVNaD71ue+hpJcWavqO3/XeCq7N0yPSAhnhxvuC8vGM=)
                          38: fdsXyKST1NSooA0SOdWNXyrQKIE.roa (hash: q49gBnA2IZuUpW1nTeMLqaXrULLEsizhuzjfeilzgRw=)
                          39: fwZq6psMq56Ml0BVrit_Wp9BQ4A.roa (hash: aIQPnLzBx7/fEcGBfohS/yOvrVJole1RPiyfkmAvLQg=)
                          40: j-xoCug8oSXkLy-zRPrQvCr6fM0.roa (hash: Ey2qMtymo6/7vUVDP3c3+HbS2Exk1vQ0aziEB5/WRwc=)
                          41: kkM-u8aI9NOPkDtX2Tyi0THikGY.roa (hash: ehAaGwGwW1/CYWh/qR4IoHFBzAdnsXoWmuDDawEf07k=)
                          42: kvzJ4z4u71EvbDjK364raJ6WEGY.roa (hash: X7jFBMafkq6TdXlHD8jdf2lu7z2MV7abkwkmrenDNww=)
                          43: lWq-fTyJH_c8x_RL0HQZdlijhM4.roa (hash: NVgGyE+t6UpHRgsptpairBBdU4cY7oezcTyDp8PGFvk=)
                          44: nT3CPzgOXFPIxgCiJvzaGFj4iPQ.roa (hash: JRupVB/8+FWibeOM3qCsVYRvWGj1OBxjlkAaV4mHw1k=)
                          45: p239cBbOLA6sibvWSilUs4XV_LU.roa (hash: 2wD/G4UoqtbRToicOl2l4uFB7WjdllylTPbWqZtpZ5c=)
                          46: pJAVbgi9uaf5nf8_qEz50NNIhnQ.roa (hash: qyo9WsdMQTxh9RhYGvavCPJWOZfI7qs/fZyRhZ+/now=)
                          47: pq9eJdbCOIfrvaynnbQZJhA8zQw.roa (hash: t54wtf6PQVEtTTtm1PsZ+Xtd8yxn24JYaMP23lf02Rw=)
                          48: rlmsd6PpCLGDar5RoisaMe8IHhI.roa (hash: 87NJGu3xmNWRFtTUSOeFPV+lS8Rn45UJIMOhad/Hf98=)
                          49: t0_-P-p1FyY1ODpwO0YUkJBxj8c.roa (hash: g7MSzOZksmuKAgTRnCXrR4HOBteag1BykLmwHFt8BuA=)
                          50: th2pTn-En0EvqF1fUXxC_GzD4e4.roa (hash: YWsreN1mrS6/tFSiQgn3+FJfJIWQ+GiL364NxHSL7es=)
                          51: vMZUucYgT5z0znQZnRF-dVJeRiE.roa (hash: W7+gTHKhQj/8XXemyZ/NzWsuUf16BLgdFCj756C84Vo=)
                          52: yz1pKtQyMgtptdlncZbKN2T4oYY.roa (hash: Ae387dsOHzGBlCorX2l0mMZpwYKnxEqAqoAymjWiIOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:8a:ae:aa:b0:26:8c:e5:39:1f:a9:14:d8:ce:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Sep 25 05:01:23 2026 GMT
            Not After : Sep 26 05:01:23 2026 GMT
        Subject: CN=b9b594fcf82ef37a26702028fdbef68e77890648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:e3:aa:1a:c9:34:6c:d5:1f:52:84:1f:85:
                    e2:6c:06:fa:14:06:5a:06:16:3b:b5:5c:3b:7c:ba:
                    98:2e:d5:39:b1:68:3f:c1:e1:02:89:5f:99:be:d2:
                    71:0a:e4:52:68:30:f6:38:08:28:3f:72:25:69:95:
                    38:90:49:53:91:f0:08:5e:b5:a5:61:80:e5:34:3e:
                    c5:7d:c9:40:3d:f8:54:25:d6:4e:f1:82:cb:03:b0:
                    79:44:51:16:23:76:a0:31:aa:79:45:f4:e8:01:1a:
                    26:88:c9:46:8d:95:15:22:73:24:42:28:96:7a:f3:
                    81:0d:fc:48:18:6d:1b:7e:9f:27:82:79:d7:44:13:
                    b7:04:3c:81:73:65:d9:c5:6a:63:8b:f7:bb:f7:a5:
                    29:ba:7b:b8:de:ad:49:dc:48:d4:fc:50:da:80:2d:
                    02:5c:c0:d4:00:7b:7a:a9:83:26:38:96:32:4f:e9:
                    24:0c:99:60:d9:d5:da:90:6c:46:20:c7:5c:f7:9b:
                    f5:d3:ec:00:8c:18:d3:e9:c6:8c:ae:ae:52:8a:d3:
                    12:24:13:37:d1:78:e0:39:95:ad:09:a7:c9:6c:c8:
                    3b:68:92:e5:ef:24:c6:7b:8f:98:8b:5e:1f:b5:58:
                    b2:5d:4a:a1:64:77:0d:35:e7:17:1b:e6:80:c4:f8:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:94:FC:F8:2E:F3:7A:26:70:20:28:FD:BE:F6:8E:77:89:06:48
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:01:f3:1b:d5:1e:a0:01:0b:2f:b6:08:2c:10:d5:21:c1:
         b2:48:f1:66:6a:de:ab:b2:53:8d:67:67:fd:07:83:e4:b1:d9:
         83:88:f0:62:f2:af:3a:0f:b0:fb:ab:0f:1f:84:ef:72:ed:78:
         52:61:a4:b4:95:d8:e4:02:36:c6:3c:d4:6a:dc:46:68:6e:62:
         03:e4:fd:23:fa:bd:e5:a0:8e:c8:e0:c1:71:37:89:1e:18:f5:
         a4:0e:ab:1a:39:c7:36:4b:53:5d:d7:10:fe:ba:1b:8e:da:0d:
         a6:78:84:9c:a5:a2:5a:8e:b8:dc:9b:06:93:1b:2f:28:d0:58:
         b4:0a:b1:46:57:0d:32:38:76:5d:06:2b:28:c6:85:9d:e1:4a:
         ef:f2:90:d9:c1:07:34:a2:2f:a3:f0:7e:15:55:3e:df:88:54:
         39:42:ec:bd:ed:e8:83:c7:1b:d5:e6:b4:d8:b6:64:7c:4d:4e:
         a6:ee:d4:ee:ea:d2:46:52:24:66:33:db:84:f9:c3:cd:5c:d0:
         f9:f2:fa:ad:e1:61:14:a2:39:fd:3f:79:16:9c:7d:54:a2:1e:
         55:34:f2:63:f3:d9:30:4a:a8:53:91:0c:8a:58:ef:be:ed:72:
         79:70:f3:b6:db:3e:ff:dc:2d:30:53:a7:0e:0a:1f:8a:21:1f:
         d4:34:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:55:36 2026 by rpki-client