Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          r2OC6p4dL6FXHXvJneMfohleRqWBfPAUqcYRG/yov5Q=
Subject key identifier:   2B:7E:92:77:CA:BC:55:F0:4E:B4:C1:B5:FC:4C:2C:3C:28:5E:96:7D
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019D25F1F249C9B80A05BADFF7B5B299A846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          18AE
Signing time:             Wed 25 Mar 2026 17:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:46 +0000
Files and hashes:         1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
                          2: 5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa (hash: 6qzHpGrxdIjiu8z1NvLGeZSk8yFo48qK9MNsjEijr88=)
                          3: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
                          4: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
                          5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
                          6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: Jd93QDFoSpgD+SPzAeg8ugfe1/edaE+zzmtuI1KnkTM=)
                          7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
                          8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
                          9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
                          10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
                          11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
                          12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
                          13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
                          14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
                          15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
                          16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
                          17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
                          18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
                          19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
                          20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
                          21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
                          22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
                          23: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (hash: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw=)
                          24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
                          25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
                          26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
                          27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
                          28: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
                          29: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
                          30: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:f2:49:c9:b8:0a:05:ba:df:f7:b5:b2:99:a8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Mar 25 17:01:46 2026 GMT
            Not After : Mar 26 17:01:46 2026 GMT
        Subject: CN=2b7e9277cabc55f04eb4c1b5fc4c2c3c285e967d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:5e:d1:35:6f:7f:30:40:e4:04:c1:bd:d2:
                    79:e3:7f:2f:04:ad:cb:f5:cc:4d:2d:6e:09:c2:a0:
                    8d:6f:5c:8a:64:1c:4f:f5:22:88:bb:4f:92:42:87:
                    a2:11:4e:32:aa:0a:f9:b1:96:84:d4:b7:82:ca:e6:
                    3e:6c:a4:f0:14:77:5d:0f:0f:2c:d2:04:9b:6e:5b:
                    6d:a1:40:3b:59:69:c9:6e:c6:52:2c:dc:5b:eb:ed:
                    b3:1a:7c:8a:bd:6a:94:f3:9b:77:6d:61:1d:5a:eb:
                    3a:a4:99:ee:c2:df:0d:de:0b:4f:75:35:a4:21:2e:
                    83:70:33:3d:19:ba:b3:f7:e2:e4:9c:7c:51:06:55:
                    a9:9b:e3:40:eb:77:3a:e7:e7:14:89:0e:8e:0a:e5:
                    69:20:e7:25:16:98:3c:cf:2d:c3:fe:be:83:20:f3:
                    69:25:fe:d5:37:8b:71:50:2c:79:0c:02:44:8a:95:
                    3b:b6:e9:c6:f6:99:2c:8b:e7:5d:94:67:57:e7:d3:
                    72:6d:e1:5f:99:d9:8a:3c:0a:29:26:e0:62:dd:06:
                    3d:7f:dd:cd:e2:3d:71:d2:73:6b:25:77:dc:76:2b:
                    df:e9:7e:a6:7b:e3:ec:1a:f1:a6:40:49:86:4d:a6:
                    11:11:1b:f4:05:93:c8:47:f8:5f:cc:f3:31:24:42:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7E:92:77:CA:BC:55:F0:4E:B4:C1:B5:FC:4C:2C:3C:28:5E:96:7D
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7b:45:0c:9f:ac:09:d8:d0:b4:0e:84:55:8a:1c:3f:0a:7d:
         8a:34:8b:05:c0:67:a3:f5:7b:0c:de:92:a2:2a:8d:f1:a9:71:
         e0:67:be:79:4d:19:90:8e:5a:be:25:25:3c:3c:2e:52:a2:b9:
         79:70:85:77:7c:54:68:9c:ab:a5:d8:4d:50:0c:ca:26:5f:1d:
         56:29:ad:51:f8:31:0d:52:ad:a5:21:39:8e:b9:6c:20:69:a1:
         64:ac:03:45:a0:86:60:c5:9e:1a:49:7b:e4:64:52:bc:b8:de:
         52:c3:a3:d9:a6:46:68:86:71:4d:89:99:e1:63:ab:70:dd:18:
         ae:55:d3:66:de:82:3f:cf:f9:35:ec:ec:1b:9b:21:0f:8c:c0:
         25:b7:45:88:56:5e:2c:e3:3c:27:43:d5:bf:86:9e:1f:e2:61:
         2d:56:a8:4c:56:85:bc:92:05:6d:c2:c2:3f:0d:9a:2d:5e:f2:
         39:0a:16:06:3a:f9:8a:04:b3:f1:84:27:87:38:3e:79:7c:aa:
         1a:59:53:6a:0e:0c:7a:56:9d:96:c7:0b:78:d6:1d:0d:f4:4e:
         93:c8:2f:73:b4:be:77:a2:6b:62:82:46:3b:dc:9b:2e:3c:04:
         31:61:60:60:65:05:98:74:34:67:ad:9d:49:12:0f:ec:23:62:
         1e:d2:5e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8fJJybgKBbrf97WymahGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjYwMzI1MTcwMTQ2WhcNMjYwMzI2MTcwMTQ2WjAzMTEwLwYDVQQD
EygyYjdlOTI3N2NhYmM1NWYwNGViNGMxYjVmYzRjMmMzYzI4NWU5NjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVxe0TVvfzBA5ATBvdJ5438vBK3L
9cxNLW4JwqCNb1yKZBxP9SKIu0+SQoeiEU4yqgr5sZaE1LeCyuY+bKTwFHddDw8s
0gSbblttoUA7WWnJbsZSLNxb6+2zGnyKvWqU85t3bWEdWus6pJnuwt8N3gtPdTWk
IS6DcDM9Gbqz9+LknHxRBlWpm+NA63c65+cUiQ6OCuVpIOclFpg8zy3D/r6DIPNp
Jf7VN4txUCx5DAJEipU7tunG9pksi+ddlGdX59NybeFfmdmKPAopJuBi3QY9f93N
4j1x0nNrJXfcdivf6X6me+PsGvGmQEmGTaYRERv0BZPIR/hfzPMxJEJr1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt+knfKvFXwTrTBtfxMLDwoXpZ9MB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARntFDJ+s
CdjQtA6EVYocPwp9ijSLBcBno/V7DN6SoiqN8alx4Ge+eU0ZkI5aviUlPDwuUqK5
eXCFd3xUaJyrpdhNUAzKJl8dVimtUfgxDVKtpSE5jrlsIGmhZKwDRaCGYMWeGkl7
5GRSvLjeUsOj2aZGaIZxTYmZ4WOrcN0YrlXTZt6CP8/5NezsG5shD4zAJbdFiFZe
LOM8J0PVv4aeH+JhLVaoTFaFvJIFbcLCPw2aLV7yOQoWBjr5igSz8YQnhzg+eXyq
GllTag4MeladlscLeNYdDfROk8gvc7S+d6JrYoJGO9ybLjwEMWFgYGUFmHQ0Z62d
SRIP7CNiHtJegg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:06 2026 by rpki-client