Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          qmQk5QxB/bg8HyHb4dUAPbUgCQioplI1PrJHFQmnbW4=
Subject key identifier:   D1:8D:01:73:E3:B1:DF:3D:65:72:99:ED:DB:10:3C:06:DF:A0:66:59
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       019F9090DBC200CFDE028C4624F34DE973AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          17C9
Signing time:             Thu 23 Jul 2026 20:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:40 +0000
Files and hashes:         1: 1-MNz1qgM3BisP8pynJ-h5fPgpxw.roa (hash: Hf80PSzQpFEh05UT8oCnoafaP3U3KLXh1X8GWZOOWpQ=)
                          2: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          3: 67cb4CVEd93Kal1WB78eaZaXMaQ.roa (hash: ZcMr0wkok+GwKeLBJ19lhnn1dS3XMFc3UKTI/fu+EjQ=)
                          4: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
                          6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: kBwhXK33RUOQhPCB3Qe3r/3fpwrIz2qk0O4UWLy4JyM=)
                          7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          8: JWQS_G0UFZx3QuPZOTGxg1qvEz4.roa (hash: EY/6Bg0MTFnpdKXxUkbSSCAlhGDkkCzuChVoiMDOUcE=)
                          9: Jgwn3B02uc3mfVfMOZv45UmGgtY.roa (hash: nMSpgFycYN/khqI7U1mF+BBHpG7nf5LdJdR+FjJMiU0=)
                          10: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=)
                          11: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          12: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          13: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=)
                          14: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          15: UWnvj61RxMXCdGTXgUybwOUFpkE.roa (hash: UQXxnIOrFfoWsnkN1Vg3gQakqcKwTGfkenZBJ3YxlPc=)
                          16: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=)
                          17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
                          19: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          20: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          21: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          22: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
                          23: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=)
                          24: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=)
                          25: l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa (hash: HR6ptQCMdThZ1PMDVclOOHeHNKKZwAZroNYyVK4P37c=)
                          26: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          27: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          28: pMQVecamDodQSmBw-UmLqkRzTyk.roa (hash: EmfM/FtUUlT/f5+MPBX6UPv6rg0dkI+I1HJgurEQFXU=)
                          29: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=)
                          30: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          31: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          32: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
                          33: w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa (hash: Oi5pXvAB+JPYM6z0KbwrvUVqx+IEISCt2YPJDDcKR6M=)
                          34: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          35: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
                          36: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
                          37: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:db:c2:00:cf:de:02:8c:46:24:f3:4d:e9:73:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Jul 23 20:00:40 2026 GMT
            Not After : Jul 24 20:00:40 2026 GMT
        Subject: CN=d18d0173e3b1df3d657299eddb103c06dfa06659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:5b:c8:5c:44:f8:72:86:ec:a8:ed:d0:1c:
                    58:c4:24:7f:7f:66:05:01:c0:78:65:b7:1f:89:89:
                    cc:54:7a:80:56:23:14:f9:94:8a:75:4f:40:43:ad:
                    18:cc:79:c5:0c:cc:28:80:71:5c:80:60:14:b2:b4:
                    d5:b7:0f:0f:0d:de:d1:cb:46:2c:30:42:e6:dc:68:
                    ed:13:32:da:53:8b:1c:b8:1d:70:b1:31:0e:8d:6f:
                    ed:ef:82:24:ac:1c:47:41:a1:89:f8:80:2c:cc:73:
                    2d:88:7a:fa:d3:25:f9:10:d0:7e:84:2b:12:f6:4a:
                    fd:d6:66:ae:27:14:e1:ea:d5:2e:42:7f:fd:06:3b:
                    2d:f7:77:1f:48:c2:2e:ae:cc:64:96:f2:dd:68:e8:
                    7f:b2:8a:a7:a2:a9:59:1d:d0:09:92:3e:ae:1c:77:
                    dc:a7:e0:e3:b1:7d:0b:b2:1b:00:84:f5:48:c4:ec:
                    35:35:98:b7:4b:29:67:d4:93:99:a2:d4:ab:90:a7:
                    4d:d2:e2:07:94:ba:58:b5:ed:c9:11:1e:11:0e:f1:
                    ad:6f:52:3b:8a:37:76:a1:ef:6c:63:09:32:e0:71:
                    96:37:00:47:e5:f7:7c:0b:74:31:67:ae:12:04:57:
                    b6:e2:c2:dd:43:2d:20:3f:8b:6f:96:af:e4:ac:f9:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8D:01:73:E3:B1:DF:3D:65:72:99:ED:DB:10:3C:06:DF:A0:66:59
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:57:29:41:31:61:24:c4:b4:08:e6:22:e5:e3:57:e6:07:43:
         e9:ad:ce:6d:02:33:cb:9e:22:e5:dc:c2:55:f7:2a:2e:af:dd:
         53:52:7e:d0:91:a3:ff:ce:9a:60:96:0f:84:14:d4:d3:2a:53:
         b9:86:b5:5f:fa:06:86:6b:fd:67:e3:b9:9d:eb:b4:0a:81:77:
         30:45:66:75:61:a5:44:d6:af:9d:2f:8a:7b:01:21:9e:7b:32:
         14:d1:82:67:e4:86:42:51:eb:59:ce:97:8e:42:0a:fe:6a:68:
         db:e9:7f:57:30:8a:1b:df:86:50:a6:8f:c7:d8:56:f6:1e:32:
         c5:df:b0:ba:a4:7d:94:3b:57:b5:30:b6:f5:9d:3b:36:eb:19:
         79:c2:49:ac:08:76:ed:2b:b5:10:71:28:49:20:07:29:62:04:
         4f:4d:e4:00:03:8a:cf:9f:87:12:48:04:03:ee:68:ae:b6:c6:
         7a:af:5e:fc:de:33:7b:fd:33:da:9c:88:c5:8c:12:76:1f:f0:
         a6:d0:b0:bb:c0:0f:ac:c3:bc:26:83:2b:5e:25:b6:f3:1d:88:
         26:5a:ee:8a:40:3d:77:f4:3b:6b:a6:19:2b:3a:cb:9b:0d:d8:
         43:67:e5:0a:9f:b8:91:43:3e:41:0f:3a:a0:6e:82:b3:f6:05:
         23:2d:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----