Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          6VnVcb5Nr9eBk2Pb+3QYygXaujNfh7h/xdq3UccNeig=
Subject key identifier:   25:A0:58:55:42:0A:4F:D8:EC:98:40:50:0B:68:BF:7A:6B:CF:B6:22
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       019E1E6C17A8E9EAFFCF1107DCCF0326B83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          16F6
Signing time:             Tue 12 May 2026 23:01:00 +0000
Manifest this update:     Tue 12 May 2026 23:01:00 +0000
Manifest next update:     Wed 13 May 2026 23:01:00 +0000
Files and hashes:         1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          2: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          3: E3dI1fRat5VYfuJRoSmCeeSjT64.roa (hash: mvWTjci8lEf/Yn5OTMD2cAPD9UQC6c4YZ2JiTnrhswo=)
                          4: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
                          5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: m65u1UBX7qTfP75jJJJbJVLFZ4vcKOUs6GCVc7ompgc=)
                          6: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          7: JWQS_G0UFZx3QuPZOTGxg1qvEz4.roa (hash: EY/6Bg0MTFnpdKXxUkbSSCAlhGDkkCzuChVoiMDOUcE=)
                          8: Jgwn3B02uc3mfVfMOZv45UmGgtY.roa (hash: nMSpgFycYN/khqI7U1mF+BBHpG7nf5LdJdR+FjJMiU0=)
                          9: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          10: SJwzlxfcwICTklf_s8R-67YCyso.roa (hash: DnW64AJKW4oEI9+a5JkKiYx8I8xhqSSHPF/uy8PPKlk=)
                          11: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          12: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          13: UWnvj61RxMXCdGTXgUybwOUFpkE.roa (hash: UQXxnIOrFfoWsnkN1Vg3gQakqcKwTGfkenZBJ3YxlPc=)
                          14: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=)
                          15: XXSTcRkCx2FdQaklbV11MSDD0ZY.roa (hash: mmZMZr+HshOcyt7jbdu8TgJJ6khX6PBndh04iVbROEE=)
                          16: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          17: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
                          18: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          19: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          20: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          21: j7NLJIdD0pUUdWEjRus-d-ouOmw.roa (hash: nNWuvc7kwCcbsaHWqB1PxoRJF9M6XW2okYQM0JcWXQc=)
                          22: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
                          23: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=)
                          24: l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa (hash: HR6ptQCMdThZ1PMDVclOOHeHNKKZwAZroNYyVK4P37c=)
                          25: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          26: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          27: pMQVecamDodQSmBw-UmLqkRzTyk.roa (hash: EmfM/FtUUlT/f5+MPBX6UPv6rg0dkI+I1HJgurEQFXU=)
                          28: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=)
                          29: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          30: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          31: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
                          32: w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa (hash: Oi5pXvAB+JPYM6z0KbwrvUVqx+IEISCt2YPJDDcKR6M=)
                          33: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          34: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
                          35: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
                          36: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:17:a8:e9:ea:ff:cf:11:07:dc:cf:03:26:b8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: May 12 23:01:00 2026 GMT
            Not After : May 13 23:01:00 2026 GMT
        Subject: CN=25a05855420a4fd8ec9840500b68bf7a6bcfb622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:67:40:db:15:84:67:94:4c:c5:ef:31:25:
                    32:cb:11:cd:3f:92:e2:78:d4:5c:c1:44:25:31:80:
                    26:d2:92:f1:41:3e:80:b4:fa:2c:2f:fb:14:3e:05:
                    23:dd:99:21:91:48:54:9e:77:aa:bf:1b:50:04:8d:
                    e0:ab:92:d0:a4:fb:15:27:23:a4:b9:ac:22:cb:21:
                    84:5d:0f:1a:a5:56:53:bb:57:38:3f:74:bf:e2:e6:
                    28:44:d2:74:0b:54:7b:18:6f:1d:97:57:61:4b:0a:
                    8d:ac:a1:92:d2:f4:6a:7d:37:3e:d3:75:f3:f3:08:
                    e9:20:93:09:3a:f5:9b:0e:6d:c8:e1:a0:a0:20:b0:
                    2f:9a:b5:c0:15:dc:93:a8:15:91:46:97:6c:47:37:
                    c2:f9:24:6a:ac:11:43:50:e7:f2:83:9b:e0:83:a8:
                    bf:e0:65:56:25:37:78:4f:af:19:2e:b4:73:fd:31:
                    0d:55:8d:14:70:44:b3:ac:4e:d9:44:d2:d2:73:43:
                    fb:83:08:30:03:c0:f4:4d:11:9e:76:11:67:b2:13:
                    2e:41:98:cc:bc:cf:6d:d9:e3:9d:c3:88:92:a4:bb:
                    5c:86:7d:73:42:33:7e:c7:35:81:9c:1f:0b:8b:d9:
                    d9:b8:74:f3:ca:d9:00:0a:d8:fd:56:63:4c:1b:56:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A0:58:55:42:0A:4F:D8:EC:98:40:50:0B:68:BF:7A:6B:CF:B6:22
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:14:02:28:95:7f:51:51:c0:1c:bb:4f:4f:35:95:1b:03:12:
         f6:c2:7a:6f:7c:a3:d4:1d:7a:4a:3e:fd:2e:7a:b0:f7:76:f8:
         2a:fd:45:b5:12:a1:31:8d:34:c6:2f:e7:e0:6f:d4:ec:83:c9:
         d6:c0:a3:50:08:2b:8f:f8:90:7c:ca:e8:71:d5:c3:78:e0:cc:
         81:65:40:ce:ec:53:41:e9:d3:ea:b5:07:f1:99:b0:8b:2a:94:
         3c:6e:26:8f:af:97:41:4a:9c:0a:ce:b6:3b:aa:b1:3d:28:ce:
         74:7c:62:f3:76:16:04:b5:e5:d2:41:1d:83:12:84:20:3a:b0:
         26:5c:ea:0a:c3:09:13:60:a1:5f:7a:91:30:c9:0b:71:0d:68:
         89:7a:8e:c1:05:ca:d6:a3:bb:d6:1a:ea:6d:8c:aa:d0:b3:a1:
         80:f7:3e:54:e0:f7:5e:a8:2e:b1:f2:9f:90:5a:e9:c4:be:65:
         50:c1:1d:2e:08:c5:33:18:82:30:dc:54:75:96:85:86:40:33:
         08:8a:b2:85:b3:17:0f:e1:d7:04:2f:9d:f1:d5:2f:67:b5:c0:
         6e:90:5e:5d:ea:22:15:61:51:96:a9:ae:7f:41:a9:ee:96:60:
         ed:30:dc:7a:4a:5a:45:8f:7a:8d:fe:34:34:b4:7d:71:fd:74:
         20:64:b3:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebBeo6er/zxEH3M8DJrg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwNTEyMjMwMTAwWhcNMjYwNTEzMjMwMTAwWjAzMTEwLwYDVQQD
EygyNWEwNTg1NTQyMGE0ZmQ4ZWM5ODQwNTAwYjY4YmY3YTZiY2ZiNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxatnQNsVhGeUTMXvMSUyyxHNP5Li
eNRcwUQlMYAm0pLxQT6AtPosL/sUPgUj3ZkhkUhUnneqvxtQBI3gq5LQpPsVJyOk
uawiyyGEXQ8apVZTu1c4P3S/4uYoRNJ0C1R7GG8dl1dhSwqNrKGS0vRqfTc+03Xz
8wjpIJMJOvWbDm3I4aCgILAvmrXAFdyTqBWRRpdsRzfC+SRqrBFDUOfyg5vgg6i/
4GVWJTd4T68ZLrRz/TENVY0UcESzrE7ZRNLSc0P7gwgwA8D0TRGedhFnshMuQZjM
vM9t2eOdw4iSpLtchn1zQjN+xzWBnB8Li9nZuHTzytkACtj9VmNMG1aKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWgWFVCCk/Y7JhAUAtov3prz7YiMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRQCKJV/
UVHAHLtPTzWVGwMS9sJ6b3yj1B16Sj79Lnqw93b4Kv1FtRKhMY00xi/n4G/U7IPJ
1sCjUAgrj/iQfMrocdXDeODMgWVAzuxTQenT6rUH8ZmwiyqUPG4mj6+XQUqcCs62
O6qxPSjOdHxi83YWBLXl0kEdgxKEIDqwJlzqCsMJE2ChX3qRMMkLcQ1oiXqOwQXK
1qO71hrqbYyq0LOhgPc+VOD3XqgusfKfkFrpxL5lUMEdLgjFMxiCMNxUdZaFhkAz
CIqyhbMXD+HXBC+d8dUvZ7XAbpBeXeoiFWFRlqmuf0Gp7pZg7TDcekpaRY96jf40
NLR9cf10IGSzrQ==
-----END CERTIFICATE-----