Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          z/Sh4/qqsvHoACFI+ZfYYHdF31PJwFVdNym6/p1OSYw=
Subject key identifier:   0C:7F:FB:C0:72:88:99:11:AF:FA:F1:B4:DF:19:F8:ED:F1:D5:BA:FC
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019E1D5991485731EF165D08E442456A1246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          1187
Signing time:             Tue 12 May 2026 18:01:09 +0000
Manifest this update:     Tue 12 May 2026 18:01:09 +0000
Manifest next update:     Wed 13 May 2026 18:01:09 +0000
Files and hashes:         1: 0ew4m4ItSCVepyc29nNm9tAEIKM.roa (hash: qJf794gHKOzylfCxvXi/18OeXDgu/UQKuPAemY2FauU=)
                          2: 4U6TAx0I3Dr5PEDJAWguosXKYEc.roa (hash: Cqe+GfFKh2Ky3zbDk3PaBNhILy+VnAgYRzcYi0H6oss=)
                          3: 5H1OpW-AycH1O-bkgqM8Yvh65T0.roa (hash: d9gll8e31C0axgcql2tfiqAMsE0s3zsOdBZT3TwLDh4=)
                          4: 8OnV91N_zqcbSEf40E1ouE7GeJs.roa (hash: m6ppgYlMTCPYh8z67jY4eoshyn8bp37m9v5Ohrm1dI0=)
                          5: 912ggk5y8hlaC5Oq1RcqiznaZVo.roa (hash: DjODdr6zI59Yx4ri8xsDh4PbCcxOZi8hGkYTMA91hDs=)
                          6: 9PjE-FT5x3lfbDy22uURpGtuaH8.roa (hash: Qc8PbJ+121WDG0jcNdRI6MTD3GMXfVRF32u77QXsW1U=)
                          7: 9kJoijXp_W2x-CNIVGU2gTyIHu4.roa (hash: g/JnEpQSh0oe6cxDrcijYpkgjg+0UyJYEEJmxmRejxg=)
                          8: BWPseGVRi3l-zfC0baLeQvt8npw.roa (hash: S5E2qZZQYizqFQAAmmLpDPTTQwoCIm+hzIsTiWyQI/w=)
                          9: DD_WAIXT_d5Bi71Wp0F-YRqzAeY.roa (hash: TgYS7RvooVLjNCbehPFvkEOoQsy+7O0+z7H9lT2pLEo=)
                          10: Dz_xAtS_XW35D61yLERn3HqqTl4.roa (hash: tE44UbfHA1S8bb6yZPuiKFoXcbPWrwD3Vwt3MEGtAV8=)
                          11: Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa (hash: 3RHPyWH6kpXSP5rfHQPf6P61NWqvSrxvQJZ4KT7Fy8g=)
                          12: IpZt3R636ZD03S5nVfJoWLfdThw.roa (hash: 2lYw7bc2aQ4JwU9fCqx9mE7G9ukNJ7HxjNeKB5KC5KI=)
                          13: KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa (hash: s0iOSLMdSnE0XfkwKLxNI9H4430lKBoEen6MwmkygC8=)
                          14: KyZkiVRwovZC3LrfusqaW75r1Kk.roa (hash: Lb1GKS5ZorjNu583mkwjyw6Qxq2DeQxnAy7pzrOkcOM=)
                          15: MScYZfLkEgj9xUczQoShHi7if34.roa (hash: Lr5ikl0tvlQII709pYQ4cZ3QlbMQlLSyyT0QS99VL8g=)
                          16: NZhAdOiHD1zio5nnxiLQXypL-04.roa (hash: cXPsSX6LaAvczX/mV2tPPsm8l4OjqgM1mQ6UY42I7C0=)
                          17: N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa (hash: byrWfo1ZH5Y1FyKu4vOI/ViN8X+7h1tAmf+YhOXuZ/k=)
                          18: PlTPJtrSm59MicMXGc0T5QFobVk.roa (hash: vxokb71Ck6MbAwg9eWOIXGy43vgQiWwgqzqyuy/N+p8=)
                          19: QS2YfmJsmgaN4NK2AXvh-V9gXVA.roa (hash: 5ZLCC0mXDbdajebs22UeArfWPlsHeHgp/0frCCZOu78=)
                          20: RTDS83BZPr8GOwxlBuZwrgifhpE.roa (hash: dlJ9uDPjVjDJVz0OiQ96/4glzXs5xczVqBOYnJ5HiV4=)
                          21: RbJmDHOG8CdfIUm4-yXshwbt3fU.roa (hash: 8rpXsYWlJfCS6Vck7t+jkmI8ojM9CDZBlR9NO0Um754=)
                          22: VlqgFVIoOR9-G2wJsL8MxPVQAWA.roa (hash: dAKmS3ffO585YXonTbK1C2xZs3hm3oFut9oOO9E3T3s=)
                          23: WLvpNSFQRhdWZaC9I_Ah1bgcC0I.roa (hash: PDyeHlRCszFX07KKXj3dedhf6EgMf4av9amiMdMXQ3U=)
                          24: WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa (hash: YcgwHssC0IerMr07yjE5xNvbp7mTIbDmtcrXLuP8XiQ=)
                          25: YvQ0mb9xL1me3FE2T2kfrR62qHw.roa (hash: YA4zjb2nMxYTedW1G+JpN82HAbrqmEFmZX4LL6ddxjo=)
                          26: ae2K9tmAIRZd8cJcNm_F_NfRfI4.roa (hash: oNt4Xcrn0Ecxv4Mw9KGJgnzzWpMIqz/MDYN4HT/YRYk=)
                          27: c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa (hash: xfIMp+34y6MSA9eYmpp36aGhUYMtBbTbqNw42uiP6Hc=)
                          28: d5r0W7DTPQ3gTqs_-NBseisWlCo.roa (hash: d47i9og2b8C2O7tuxenulALhI1Vd+GOyXorTmCH8MG8=)
                          29: g3ftKCOekd6MZAoyD7J4SL4FblQ.roa (hash: s+hLkIL+pR6iQslHmvl1kgMv8MT83YoyoUr7i6yvI1M=)
                          30: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: r9+2uBtLZnfpj6NfbiWYLW5mRmIgQc1hNsB6Ks2C+Pg=)
                          31: kOeStUr-S36PPYxRvN7P5tKOJwg.roa (hash: JYGGn+yiElMOBrVTl8GeU6lToRXH7Upj5oy8AgfmV7c=)
                          32: kvMWdnWiB8O4z6UGidzk9YiNNds.roa (hash: qQo2451yWLYIM5XcxKIaEg78mQdIPydPLkoRnJCOxSg=)
                          33: lHYwXThCBP7FlBWtS7W6i19LI5U.roa (hash: U/OGFWU5CJfOEtNnO7YwqzY/UYqJfO4+HxhHERKhfbc=)
                          34: lZ1qvLI02CD8UXhaq52LvdNAKcY.roa (hash: /Ub1OWh7+9Ly/PwiA4DBQeFni2XC79IYKxPRK7AiJsc=)
                          35: mei8xgH0X4b3oYs1JzOkVwZUqgE.roa (hash: 6r1vzQ4PHdBXGDQPN9IegVfc1dZJl95MXIt8jdby3Ao=)
                          36: mxRDtABpFcklfSsg3aqlEhdyVAo.roa (hash: +8omy9Xwwaces0V4gWLaq7H+IkKX2MYQDc4o2Yp+Bmc=)
                          37: pAIBYyl03DB7XvIHrbS3QzCtJmw.roa (hash: GQ6FPXE4A+w0U7jvziiqaUGlGRv8mE2hgF7AEFVUJmU=)
                          38: rnIbzC-rnzZRuZ0gE9Ol9qXNpB8.roa (hash: yNGtVyB4AnZrAbIlabLdkD82cw/2NFn/z89D1weqzjo=)
                          39: seCjwUfGeZdQIEL762INXIQGvuo.roa (hash: K/UAMD30hNnbAtpW3PPYRC2bTFBict6use4t0t2OfjY=)
                          40: tFdZOVm-PrcIf_Tv6ZA86VKLE0A.roa (hash: f+mSSCLTTZwRD7r4dreo2vc8CPrb2fYZFXUXgRgCL9E=)
                          41: uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa (hash: feZaV8ykSWDhxYFCGXR1xId5z2ls9ece6Z9cvczsEoE=)
                          42: xHusoPKod-9ku7rZw8cealGeT28.roa (hash: 7YrQt4ZeBYedxpBakuCTTQk0fE7OEPDPBMWW4QTkzWo=)
                          43: xZ2nAeLyC0ezaqseLjJkV22U5mE.roa (hash: oxTigerjyhGYgfgpErnFxoqmId6FySfGh3aATIsx2pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:91:48:57:31:ef:16:5d:08:e4:42:45:6a:12:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: May 12 18:01:09 2026 GMT
            Not After : May 13 18:01:09 2026 GMT
        Subject: CN=0c7ffbc072889911affaf1b4df19f8edf1d5bafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:74:3e:cc:a8:d5:a4:2f:f2:9d:65:d0:92:
                    52:54:49:86:75:36:b1:7c:bd:b8:fd:eb:e1:f7:dc:
                    7e:74:50:05:dc:a5:2e:3e:84:f1:55:c3:98:9c:78:
                    49:57:e5:17:47:b7:74:c3:80:ba:a9:db:10:47:da:
                    eb:6a:38:e0:30:a5:25:84:1c:31:e5:b7:31:8c:ab:
                    55:cb:90:4b:ad:58:7f:8b:0f:b4:f3:d3:bc:27:59:
                    ce:ae:8f:cc:ef:a6:23:1b:65:07:df:90:b0:8c:eb:
                    4a:2f:49:7e:d6:b9:0f:1f:73:8e:2a:c0:a7:75:57:
                    e6:71:dc:79:ee:02:cf:74:fe:f5:33:83:fa:4b:21:
                    07:ba:34:62:73:70:cc:91:75:7a:1f:99:9d:22:4b:
                    2f:54:85:80:4d:b2:6c:22:a2:1b:27:e4:67:ce:43:
                    1a:9c:80:cb:39:f5:59:48:42:12:35:99:6a:7d:9c:
                    87:2b:c3:dc:e9:2f:e1:b2:b6:fc:0e:fb:cc:49:08:
                    34:5d:86:dd:7d:20:ad:ab:59:1f:ed:d9:51:a4:76:
                    4d:99:11:bf:b9:2b:4b:2b:de:01:4c:f3:1d:5b:b0:
                    fd:57:2e:4f:f8:03:c2:b0:22:d3:ce:9a:51:86:30:
                    96:c5:d2:fe:c0:86:c1:15:e9:be:ab:66:31:88:ae:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7F:FB:C0:72:88:99:11:AF:FA:F1:B4:DF:19:F8:ED:F1:D5:BA:FC
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:45:2d:fd:07:fc:32:d9:fa:9f:43:c2:92:5f:fb:1e:28:2d:
         e2:05:2f:9b:0f:0e:0f:0e:17:3f:66:c1:a6:f2:0c:9a:1e:ef:
         e9:7f:a6:07:84:9d:2f:5e:6c:13:67:26:c3:b5:b6:aa:b1:ff:
         de:cd:52:a5:3f:92:9a:dc:eb:89:47:07:5b:49:b7:43:d6:bb:
         b2:c2:ec:36:fb:9a:b8:54:33:8f:b5:19:76:c8:09:8c:66:83:
         47:41:73:19:9e:2d:08:a8:81:90:8f:50:2d:22:bf:d5:7f:e7:
         2e:12:4e:1e:f2:fa:95:70:ff:b9:71:2e:6c:34:f7:b9:de:07:
         7c:1d:ca:f7:c4:3e:a9:0e:d5:63:2d:cf:1a:85:da:32:70:dd:
         b9:f0:32:51:9d:e0:b0:2f:f9:64:31:eb:be:08:0a:da:97:98:
         36:bf:c6:74:16:2d:19:03:23:6a:53:6f:c2:8a:a1:7b:4a:70:
         0c:98:fa:9c:9a:10:e9:83:aa:c5:12:c8:47:76:aa:12:14:74:
         11:fc:61:e1:28:c2:e6:60:f0:01:20:f1:32:f9:f6:cf:41:31:
         86:d4:18:32:29:2d:f0:2e:3b:d2:f2:a9:a1:fa:23:97:51:de:
         2c:da:1a:16:55:af:b2:b2:15:85:12:98:06:c9:b3:5b:5c:1a:
         1d:b9:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:48 2026 by rpki-client