Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          WSGA3yShA/kRFxRhQbERmvl/9uNgKfd0nJN/dSxrgIk=
Subject key identifier:   AF:F5:77:70:70:E1:DA:CB:19:C6:01:DB:C4:17:3E:CD:BC:1B:BB:83
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       01A0D383742617837170171DD31994297669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          18AE
Signing time:             Thu 24 Sep 2026 13:03:22 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:22 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:22 +0000
Files and hashes:         1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          2: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=)
                          3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=)
                          5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
                          6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: lUQPT3MZX/w+pYpfFVvv2eE6KGKJ+97F4VLhSlwe6U8=)
                          7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=)
                          9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=)
                          10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=)
                          12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=)
                          13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=)
                          15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          16: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=)
                          17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
                          19: aOll2yIzGlTioL_5KcotM1hRg6I.roa (hash: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=)
                          20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=)
                          21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=)
                          25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
                          26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=)
                          27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          29: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=)
                          30: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=)
                          31: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (hash: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=)
                          32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
                          35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
                          37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
                          38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:74:26:17:83:71:70:17:1d:d3:19:94:29:76:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Sep 24 13:03:22 2026 GMT
            Not After : Sep 25 13:03:22 2026 GMT
        Subject: CN=aff5777070e1dacb19c601dbc4173ecdbc1bbb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:45:34:bf:8e:ef:44:f3:3e:a8:e4:86:ac:
                    58:b0:a8:21:2b:dc:ed:e0:bd:c3:84:fc:88:ae:c6:
                    f7:b9:5f:cb:56:0c:9b:33:27:db:b4:ae:88:14:6c:
                    23:db:9a:55:0f:0c:fe:46:ff:de:09:22:9e:4a:fe:
                    ed:46:56:48:23:e7:50:eb:07:c2:1c:1b:6b:9d:99:
                    c6:2e:20:08:43:b9:f6:fa:e1:e4:44:14:f9:d7:af:
                    12:c2:f3:10:7f:ab:93:d4:64:20:51:35:3a:a0:c5:
                    cd:b7:ac:64:5e:4f:b6:8c:5f:42:2a:2f:f5:bd:f3:
                    75:96:dc:1e:97:2a:22:6c:4a:12:87:a2:b1:37:85:
                    80:d8:de:75:68:7e:87:30:77:3b:7a:1f:2f:a0:9c:
                    3d:fa:c5:71:9a:2b:fa:46:32:ef:d8:e3:bc:13:e2:
                    ed:cb:06:b0:0b:52:72:9b:e6:f5:59:b1:0c:b4:db:
                    15:41:09:fe:bf:34:e0:e2:39:f3:f6:66:1a:af:a1:
                    fa:6c:d9:3c:74:2b:b4:2c:62:7f:80:09:a3:c0:aa:
                    2f:73:39:fc:b0:3a:79:ba:e4:f1:86:38:cd:4e:db:
                    c2:90:00:b3:f4:3c:82:68:e4:16:b2:7b:25:91:9d:
                    36:70:1d:1d:37:8d:e2:1c:b7:67:32:e0:b0:bf:39:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:77:70:70:E1:DA:CB:19:C6:01:DB:C4:17:3E:CD:BC:1B:BB:83
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:ab:36:13:eb:c3:97:24:1c:8d:b5:c6:34:7f:cf:3a:49:
         e4:48:cb:3f:e1:52:f7:21:45:d4:57:f4:b8:97:d8:51:d8:12:
         ab:2f:4f:4a:83:d4:5e:d3:69:64:66:47:b3:b3:2e:98:98:66:
         10:c8:cd:4c:81:4d:0c:5d:1f:86:e9:d2:3d:4a:d9:a0:b8:6f:
         37:52:22:d9:7b:8f:47:bb:df:17:d9:0f:4a:03:cb:c8:ea:17:
         a2:38:e1:11:3c:1c:a5:1a:f4:00:ed:74:5f:91:26:94:5e:f5:
         0c:1d:2a:ec:b6:5f:28:e1:1f:79:fb:98:f9:73:4a:62:53:0c:
         6b:aa:9e:26:15:8f:59:57:d9:e2:02:b1:a3:ed:2b:cc:b8:9d:
         5d:03:5b:82:48:d8:57:e8:92:70:90:e1:00:ce:cb:60:60:fc:
         a7:53:70:d6:bc:42:0b:87:f6:6b:5f:8f:d7:b5:83:1e:0f:b2:
         28:38:92:11:49:64:33:a3:c5:72:73:97:c6:32:93:63:63:60:
         00:b7:54:cf:af:61:14:9c:b8:a7:7f:62:d5:bc:4b:45:1a:fb:
         8c:8b:92:d9:6c:fc:dd:e5:0e:c0:66:9f:09:44:25:83:c2:6f:
         24:63:61:89:48:87:a9:ec:1a:91:0a:03:a2:6e:4d:18:1c:63:
         08:52:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:58 2026 by rpki-client