Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          aeBjRbuJFYrTPvggmqjeAB49B0QyAWnt0t3V5gnDeXY=
Subject key identifier:   29:E9:B3:94:1E:6F:6F:78:78:54:39:D1:6C:0B:5A:31:04:72:DC:C3
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       01A1DA5C85400FF47B52F34BC936C35A8798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          193D
Signing time:             Sat 14 Nov 2026 14:00:58 +0000
Manifest this update:     Sat 14 Nov 2026 14:00:58 +0000
Manifest next update:     Sun 15 Nov 2026 14:00:58 +0000
Files and hashes:         1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          2: 2hF8o3nRCJeM-T2KUqB72EQXa3E.roa (hash: AMf4zC4JBXPeXIjLuCvMdhg4jyKKMdkmmnMx34J32GM=)
                          3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=)
                          5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
                          6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: dm824bwfc8+5AwOFapKNaW0va9VBatuCu3I34Ir6w+k=)
                          7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=)
                          9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=)
                          10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=)
                          12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=)
                          13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          14: SZu55x7en_czyZkzfAyJFpU244Y.roa (hash: OzvmzSsqolBamLC2DAGFHbq89A4Q/ST8nHE6ANWH5N4=)
                          15: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=)
                          16: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          17: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=)
                          18: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          19: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
                          20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=)
                          21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=)
                          25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
                          26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=)
                          27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          29: mFDtnw2zOBm4m8lyja8rov1jrJ0.roa (hash: z7tByQoQdnDXIZGKLP4tPJuJqmCKulJ32V8LDkaO+34=)
                          30: oE74MoN2bW6fiMiut7Z-JHHL4Zo.roa (hash: eaim3HM5ZdDDRgbNAkLs2CPrhY68/sGFs70q9m6jby4=)
                          31: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=)
                          32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
                          35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
                          37: xXwhd1ZfBTFymdCUU_5GOHv-ey0.roa (hash: ZgpOmycMYskL4aFYgTGwaUX4EnWEC5YNIFB8nqr4BKg=)
                          38: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
                          39: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:5c:85:40:0f:f4:7b:52:f3:4b:c9:36:c3:5a:87:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Nov 14 14:00:58 2026 GMT
            Not After : Nov 15 14:00:58 2026 GMT
        Subject: CN=29e9b3941e6f6f78785439d16c0b5a310472dcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:f0:5d:43:ea:08:04:14:30:49:8a:4c:24:
                    1c:aa:6a:b9:a9:97:60:9a:a4:85:0a:15:a9:5e:12:
                    84:04:1d:b3:19:c7:5e:00:cc:04:91:20:25:4c:8d:
                    7c:27:27:72:a0:13:f8:7f:ad:b6:6c:43:d0:5f:63:
                    8a:7f:2a:c0:7e:64:24:b4:aa:ca:65:70:ae:11:f1:
                    ec:23:3b:ab:48:c0:75:8d:03:1b:06:39:f4:ae:75:
                    c1:02:3b:30:a7:8e:15:f2:e1:56:15:9f:47:6e:e0:
                    2f:ce:83:88:fe:25:81:12:a8:3c:45:ff:e3:4a:f7:
                    ec:8c:6c:e8:66:4d:14:7e:22:e5:c5:39:07:a6:a8:
                    22:63:f4:b6:e7:75:46:67:8a:70:43:85:77:c4:49:
                    25:da:a7:fb:ba:05:e2:32:19:84:d4:2f:1e:3a:db:
                    ec:f9:0a:a9:3b:d8:10:ab:6d:0e:0e:fe:63:2e:57:
                    ab:73:c2:c8:b8:36:af:8c:c2:e7:43:95:34:08:4d:
                    75:7f:f5:71:1e:c7:e5:71:19:d1:4e:28:f6:64:68:
                    ec:f1:1a:c3:7c:c9:de:d0:60:92:4e:fb:50:b0:7f:
                    3a:a8:45:09:2e:f6:83:60:b7:95:14:85:1e:70:66:
                    ea:9d:17:95:2c:49:37:8b:70:99:8a:01:6f:c2:91:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:B3:94:1E:6F:6F:78:78:54:39:D1:6C:0B:5A:31:04:72:DC:C3
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b1:a0:c2:48:c2:30:90:8f:3e:dd:44:fd:38:9b:db:17:41:
         67:41:49:c8:0d:ff:dc:0a:3e:5a:c5:85:b2:1a:16:8d:e4:4a:
         9e:56:39:13:36:61:41:36:ef:a7:79:6e:ff:67:2e:25:e9:37:
         45:f7:62:a7:00:7e:8c:d5:87:20:89:e7:ac:03:16:3c:f2:d1:
         c9:13:cf:27:03:2e:e4:d8:8e:48:e2:ea:96:32:8d:de:be:b0:
         0f:99:2c:80:e0:d7:3d:f5:36:bc:dc:71:3d:49:4c:e0:5d:34:
         05:af:29:48:16:50:9f:92:be:f6:2c:23:62:e4:3a:c0:d2:e9:
         b4:e1:bf:2b:23:dd:de:3d:42:58:76:f9:cb:69:fc:f9:a4:48:
         aa:94:7d:c2:fa:52:03:8f:4c:9a:88:56:7b:3b:d9:ed:35:83:
         f6:9d:66:4b:e0:10:1c:d2:d8:12:54:43:d5:3d:cd:d8:bb:b0:
         82:a4:f2:36:1e:15:1e:ba:8b:06:73:9a:93:d2:2e:b1:f0:34:
         ae:62:ea:3a:bf:10:71:42:c9:ce:4c:8f:7b:db:8a:d3:e9:d1:
         1d:7d:4b:16:83:ec:57:82:00:59:57:f8:c5:45:cd:7b:ae:80:
         b1:66:61:3e:eb:a6:0e:c5:f8:c8:55:c9:c2:c7:03:5c:01:b0:
         f9:46:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:53 2026 by rpki-client