Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          kl9EvBrB0TPcO3vhKJpN1DluPQ5H9I8O/xKWo+YJf9Y=
Subject key identifier:   96:33:20:94:16:2D:BF:AF:EB:A3:6E:2A:6C:DB:17:D0:54:92:0B:08
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       01A0CFA4B552108E2A0F5C92BB29D42C5995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          18AC
Signing time:             Wed 23 Sep 2026 19:01:12 +0000
Manifest this update:     Wed 23 Sep 2026 19:01:12 +0000
Manifest next update:     Thu 24 Sep 2026 19:01:12 +0000
Files and hashes:         1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          2: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=)
                          3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=)
                          5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
                          6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: 2LykxtVfeSfHxaPcAerQg/c2aLiyxDNgg9KKdXPYGDA=)
                          7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=)
                          9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=)
                          10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=)
                          12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=)
                          13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=)
                          15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          16: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=)
                          17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
                          19: aOll2yIzGlTioL_5KcotM1hRg6I.roa (hash: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=)
                          20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=)
                          21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=)
                          25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
                          26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=)
                          27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          29: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=)
                          30: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=)
                          31: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (hash: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=)
                          32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
                          35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
                          37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
                          38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:b5:52:10:8e:2a:0f:5c:92:bb:29:d4:2c:59:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Sep 23 19:01:12 2026 GMT
            Not After : Sep 24 19:01:12 2026 GMT
        Subject: CN=96332094162dbfafeba36e2a6cdb17d054920b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:08:45:63:75:18:88:3e:79:6b:1a:c4:3f:e6:
                    27:1a:57:3f:ed:24:ac:ce:a7:40:3d:b1:10:42:5b:
                    0f:0c:8b:ad:51:99:86:48:da:28:3a:79:3f:8d:49:
                    b3:8d:e6:2d:cf:19:3d:c2:50:f7:74:62:8b:e9:bf:
                    6f:cc:8d:ea:b0:05:e4:e9:1f:1f:cb:47:0a:54:40:
                    31:d9:1a:38:5d:96:9c:4e:c6:34:af:07:c5:ea:e8:
                    2e:10:ff:de:23:66:fe:d6:b0:ac:e2:fc:38:f8:50:
                    02:1d:ff:e4:2d:d2:d9:f8:15:af:0e:dc:9b:a6:b4:
                    4b:ad:f8:ca:72:08:bd:51:96:5c:1b:d7:b0:12:e8:
                    4f:bc:ca:4e:5b:74:6a:d5:f6:8a:28:c6:d9:91:f5:
                    a0:a8:c9:38:ad:62:96:66:a2:9c:ac:db:27:43:58:
                    8f:91:f3:fd:49:58:b2:be:8f:74:2b:04:cb:9a:ab:
                    2b:e3:a3:d8:48:8a:19:58:9d:63:b6:0a:20:70:db:
                    1e:b9:ab:1a:71:9c:4b:c9:07:a1:3f:7e:ce:16:30:
                    b2:7a:5f:fa:a6:5b:34:30:87:b0:44:52:fc:9c:03:
                    67:c6:60:ff:e5:24:8a:3c:73:c3:36:95:79:d0:8b:
                    79:1c:2d:2b:7a:e0:8f:28:91:8a:24:07:85:6c:92:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:33:20:94:16:2D:BF:AF:EB:A3:6E:2A:6C:DB:17:D0:54:92:0B:08
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:e4:b0:14:75:f8:0f:37:d0:e5:86:01:a8:0d:a1:7e:a6:
         95:6a:d3:b2:06:a6:d7:00:57:fe:72:27:d1:85:aa:fc:f5:22:
         82:a8:14:f7:7a:52:2d:a4:51:24:f8:a8:84:26:87:50:8b:0c:
         ad:b2:2d:ba:ef:58:96:33:6b:bb:27:ed:59:a7:f1:eb:df:30:
         22:21:d8:cb:ee:be:14:be:79:73:fe:ad:c6:c1:9b:88:ad:3c:
         b0:cb:33:0b:58:41:24:cd:c9:7e:b9:82:f4:ca:90:d8:15:e3:
         d5:56:32:a6:eb:d1:1a:77:1f:f1:cf:0e:55:98:4b:d5:26:8f:
         15:e1:6c:59:db:df:e7:aa:d1:db:34:23:60:0b:b9:8c:15:bb:
         e7:a0:3e:a5:86:6c:82:54:a7:57:41:95:0f:03:09:64:ac:56:
         1e:d8:e4:74:9c:b1:3f:97:0e:61:d1:3d:e6:16:bf:9e:57:b5:
         92:e4:42:23:d8:9f:91:a6:7b:8c:1c:e0:0d:90:59:bc:11:7e:
         14:ad:74:e8:5d:2c:f3:bd:bf:eb:61:c0:61:90:64:3a:c3:5c:
         d4:07:a1:0f:c6:dd:dd:3f:7c:f7:3e:5f:6b:aa:1c:5b:69:a9:
         ad:86:c2:1a:ac:de:9d:39:44:cd:38:cc:08:c1:8c:1a:c3:5f:
         75:c1:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:29:31 2026 by rpki-client