Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          pYXQYQkOgdsNAR9gE9dy0TCz1SX6ZFAmmSPnPIPmlQo=
Subject key identifier:   E4:94:88:21:1B:D0:81:F5:E1:5F:33:40:DF:BE:11:48:81:A3:B2:12
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019F9135DDC32A664ABB2F68959A0E802DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          124B
Signing time:             Thu 23 Jul 2026 23:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:54 +0000
Files and hashes:         1: 0ew4m4ItSCVepyc29nNm9tAEIKM.roa (hash: qJf794gHKOzylfCxvXi/18OeXDgu/UQKuPAemY2FauU=)
                          2: 5H1OpW-AycH1O-bkgqM8Yvh65T0.roa (hash: d9gll8e31C0axgcql2tfiqAMsE0s3zsOdBZT3TwLDh4=)
                          3: 8OnV91N_zqcbSEf40E1ouE7GeJs.roa (hash: m6ppgYlMTCPYh8z67jY4eoshyn8bp37m9v5Ohrm1dI0=)
                          4: 912ggk5y8hlaC5Oq1RcqiznaZVo.roa (hash: DjODdr6zI59Yx4ri8xsDh4PbCcxOZi8hGkYTMA91hDs=)
                          5: 9kJoijXp_W2x-CNIVGU2gTyIHu4.roa (hash: g/JnEpQSh0oe6cxDrcijYpkgjg+0UyJYEEJmxmRejxg=)
                          6: BWPseGVRi3l-zfC0baLeQvt8npw.roa (hash: S5E2qZZQYizqFQAAmmLpDPTTQwoCIm+hzIsTiWyQI/w=)
                          7: D4jQ64CPf3ChQqrGC5CjuKJAtKk.roa (hash: HUWd5q+dWVXaDmL/ynWKy6UbQqXoypWgmhL40Z/VQnI=)
                          8: Dz_xAtS_XW35D61yLERn3HqqTl4.roa (hash: tE44UbfHA1S8bb6yZPuiKFoXcbPWrwD3Vwt3MEGtAV8=)
                          9: Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa (hash: 3RHPyWH6kpXSP5rfHQPf6P61NWqvSrxvQJZ4KT7Fy8g=)
                          10: IpZt3R636ZD03S5nVfJoWLfdThw.roa (hash: 2lYw7bc2aQ4JwU9fCqx9mE7G9ukNJ7HxjNeKB5KC5KI=)
                          11: KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa (hash: s0iOSLMdSnE0XfkwKLxNI9H4430lKBoEen6MwmkygC8=)
                          12: KyZkiVRwovZC3LrfusqaW75r1Kk.roa (hash: Lb1GKS5ZorjNu583mkwjyw6Qxq2DeQxnAy7pzrOkcOM=)
                          13: NZhAdOiHD1zio5nnxiLQXypL-04.roa (hash: cXPsSX6LaAvczX/mV2tPPsm8l4OjqgM1mQ6UY42I7C0=)
                          14: N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa (hash: byrWfo1ZH5Y1FyKu4vOI/ViN8X+7h1tAmf+YhOXuZ/k=)
                          15: PlTPJtrSm59MicMXGc0T5QFobVk.roa (hash: vxokb71Ck6MbAwg9eWOIXGy43vgQiWwgqzqyuy/N+p8=)
                          16: QS2YfmJsmgaN4NK2AXvh-V9gXVA.roa (hash: 5ZLCC0mXDbdajebs22UeArfWPlsHeHgp/0frCCZOu78=)
                          17: RTDS83BZPr8GOwxlBuZwrgifhpE.roa (hash: dlJ9uDPjVjDJVz0OiQ96/4glzXs5xczVqBOYnJ5HiV4=)
                          18: RbJmDHOG8CdfIUm4-yXshwbt3fU.roa (hash: 8rpXsYWlJfCS6Vck7t+jkmI8ojM9CDZBlR9NO0Um754=)
                          19: VlqgFVIoOR9-G2wJsL8MxPVQAWA.roa (hash: dAKmS3ffO585YXonTbK1C2xZs3hm3oFut9oOO9E3T3s=)
                          20: WLvpNSFQRhdWZaC9I_Ah1bgcC0I.roa (hash: PDyeHlRCszFX07KKXj3dedhf6EgMf4av9amiMdMXQ3U=)
                          21: WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa (hash: YcgwHssC0IerMr07yjE5xNvbp7mTIbDmtcrXLuP8XiQ=)
                          22: YvQ0mb9xL1me3FE2T2kfrR62qHw.roa (hash: YA4zjb2nMxYTedW1G+JpN82HAbrqmEFmZX4LL6ddxjo=)
                          23: ae2K9tmAIRZd8cJcNm_F_NfRfI4.roa (hash: oNt4Xcrn0Ecxv4Mw9KGJgnzzWpMIqz/MDYN4HT/YRYk=)
                          24: c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa (hash: xfIMp+34y6MSA9eYmpp36aGhUYMtBbTbqNw42uiP6Hc=)
                          25: d5r0W7DTPQ3gTqs_-NBseisWlCo.roa (hash: d47i9og2b8C2O7tuxenulALhI1Vd+GOyXorTmCH8MG8=)
                          26: g3ftKCOekd6MZAoyD7J4SL4FblQ.roa (hash: s+hLkIL+pR6iQslHmvl1kgMv8MT83YoyoUr7i6yvI1M=)
                          27: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: 7UxTRy9B2/8MD5Yy1J7EHHx9H1Wg6yYxQI2rb5fwemU=)
                          28: kvMWdnWiB8O4z6UGidzk9YiNNds.roa (hash: qQo2451yWLYIM5XcxKIaEg78mQdIPydPLkoRnJCOxSg=)
                          29: lHYwXThCBP7FlBWtS7W6i19LI5U.roa (hash: U/OGFWU5CJfOEtNnO7YwqzY/UYqJfO4+HxhHERKhfbc=)
                          30: lZ1qvLI02CD8UXhaq52LvdNAKcY.roa (hash: /Ub1OWh7+9Ly/PwiA4DBQeFni2XC79IYKxPRK7AiJsc=)
                          31: mei8xgH0X4b3oYs1JzOkVwZUqgE.roa (hash: 6r1vzQ4PHdBXGDQPN9IegVfc1dZJl95MXIt8jdby3Ao=)
                          32: mxRDtABpFcklfSsg3aqlEhdyVAo.roa (hash: +8omy9Xwwaces0V4gWLaq7H+IkKX2MYQDc4o2Yp+Bmc=)
                          33: pAIBYyl03DB7XvIHrbS3QzCtJmw.roa (hash: GQ6FPXE4A+w0U7jvziiqaUGlGRv8mE2hgF7AEFVUJmU=)
                          34: rnIbzC-rnzZRuZ0gE9Ol9qXNpB8.roa (hash: yNGtVyB4AnZrAbIlabLdkD82cw/2NFn/z89D1weqzjo=)
                          35: seCjwUfGeZdQIEL762INXIQGvuo.roa (hash: K/UAMD30hNnbAtpW3PPYRC2bTFBict6use4t0t2OfjY=)
                          36: tFdZOVm-PrcIf_Tv6ZA86VKLE0A.roa (hash: f+mSSCLTTZwRD7r4dreo2vc8CPrb2fYZFXUXgRgCL9E=)
                          37: u0WEwYM28nVJWjjYbM_J1vAHVxo.roa (hash: ipopkQY+H/Upmbbpfts+dH7hizt7AcAZwXiPE0WuDhc=)
                          38: uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa (hash: feZaV8ykSWDhxYFCGXR1xId5z2ls9ece6Z9cvczsEoE=)
                          39: wJAlBUmYe42KOx2tCaF06o0t0pg.roa (hash: aknTSx/FaTXyVrp5NgiU7vXETTnusgRJTCtXz2lhJZg=)
                          40: xHusoPKod-9ku7rZw8cealGeT28.roa (hash: 7YrQt4ZeBYedxpBakuCTTQk0fE7OEPDPBMWW4QTkzWo=)
                          41: xZ2nAeLyC0ezaqseLjJkV22U5mE.roa (hash: oxTigerjyhGYgfgpErnFxoqmId6FySfGh3aATIsx2pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:dd:c3:2a:66:4a:bb:2f:68:95:9a:0e:80:2d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jul 23 23:00:54 2026 GMT
            Not After : Jul 24 23:00:54 2026 GMT
        Subject: CN=e49488211bd081f5e15f3340dfbe114881a3b212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:17:23:e4:a4:b9:d3:b4:62:70:76:a2:64:
                    b4:e9:32:3f:12:28:b5:3c:60:4f:fd:28:2f:9d:13:
                    3f:25:49:a8:9d:d9:47:3c:27:c2:c5:44:cc:04:4e:
                    9c:d0:7c:b9:3e:69:3b:ac:76:79:f1:d7:7d:76:c1:
                    10:7b:cc:ed:75:30:06:a6:bf:7a:67:f3:a2:79:83:
                    67:b5:72:67:ff:4e:76:78:3c:ad:a4:e7:a6:d4:7f:
                    25:99:c5:11:db:fc:ff:d3:1c:d2:73:d7:fd:62:59:
                    5d:bc:6e:90:fa:01:d4:23:d5:da:fc:2a:11:99:75:
                    f5:c5:16:6b:1a:50:c0:09:ad:dc:f5:32:a4:21:bd:
                    48:d2:8a:46:43:cc:04:a4:8c:a6:79:7b:6c:f1:09:
                    72:66:51:8b:05:1c:1b:90:79:1b:ab:a7:94:74:7d:
                    7f:30:53:08:90:e4:03:e0:73:e3:94:06:fe:41:f7:
                    fc:52:84:f7:dc:69:c8:27:f5:0a:08:cf:ab:6a:99:
                    9e:3d:16:26:c1:0e:72:14:43:93:5f:30:11:b7:cf:
                    63:48:db:8d:ec:b4:44:01:30:23:b0:25:8c:d2:b3:
                    b2:ca:b6:5f:13:0e:cf:ee:36:d1:b0:25:54:b9:f2:
                    ca:21:2a:ec:59:24:fb:92:cb:ab:be:ab:6a:dc:37:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:94:88:21:1B:D0:81:F5:E1:5F:33:40:DF:BE:11:48:81:A3:B2:12
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:04:df:04:b7:a3:e5:da:97:18:4a:b3:8e:da:a9:97:bc:b5:
         ab:99:8d:a1:e8:b3:c1:b8:ee:03:e4:19:4f:6c:2f:7f:78:20:
         a0:db:d3:4c:ad:a9:05:fd:65:30:ff:67:f9:0a:5a:af:6e:6c:
         5e:6f:d9:40:1e:e4:5f:87:84:37:ee:51:05:ab:fb:33:2c:df:
         64:21:79:59:9b:a0:d6:58:26:ae:cc:27:23:d0:cf:57:47:06:
         34:51:2d:89:dc:0b:17:51:ac:e1:dd:aa:22:64:42:96:5b:17:
         0c:fe:1d:67:d9:51:29:0a:a1:06:3f:83:72:1d:52:3b:8a:44:
         58:ca:ef:a1:be:9d:86:6a:cc:70:d1:62:7f:8b:0b:78:a8:62:
         b1:2d:cf:6a:ad:4a:de:8e:d9:1c:af:e6:5a:7a:da:e9:5a:52:
         39:ad:b2:e5:1b:9a:9b:bc:e5:1f:c9:77:9c:d9:15:e6:44:6a:
         ea:6f:86:f7:b0:47:ec:b3:10:e6:9a:ec:12:2c:61:af:7b:94:
         8a:dc:b7:30:0b:67:73:b4:5d:1e:c2:3b:5d:42:14:1c:00:82:
         7e:5b:5e:16:02:b4:0d:04:50:7c:f3:0a:df:60:8f:2b:80:a5:
         b9:6a:cd:b7:0a:b2:d6:14:fc:1f:1e:c2:5e:53:1f:0f:77:0d:
         dc:00:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:58 2026 by rpki-client