Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          z+xLWjPzeFGOuVQvEzsyuJHw5ZZzmE2Gq4skYTwthE4=
Subject key identifier:   CE:7E:D1:6C:D0:1D:F5:B7:7E:11:1A:32:6A:AF:26:64:0E:51:9C:58
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019D26CD81C09955D2BDD3A81041929C305B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          1105
Signing time:             Wed 25 Mar 2026 21:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:35 +0000
Files and hashes:         1: 0ew4m4ItSCVepyc29nNm9tAEIKM.roa (hash: qJf794gHKOzylfCxvXi/18OeXDgu/UQKuPAemY2FauU=)
                          2: 5H1OpW-AycH1O-bkgqM8Yvh65T0.roa (hash: d9gll8e31C0axgcql2tfiqAMsE0s3zsOdBZT3TwLDh4=)
                          3: 8OnV91N_zqcbSEf40E1ouE7GeJs.roa (hash: m6ppgYlMTCPYh8z67jY4eoshyn8bp37m9v5Ohrm1dI0=)
                          4: 8m9QB0xxAdt_pSiqIqhqIa4gs74.roa (hash: v+nE2XaufnNZvnaDV9lRk6ql9G4VsMoO6PsRrFqD1OI=)
                          5: 912ggk5y8hlaC5Oq1RcqiznaZVo.roa (hash: DjODdr6zI59Yx4ri8xsDh4PbCcxOZi8hGkYTMA91hDs=)
                          6: 9PjE-FT5x3lfbDy22uURpGtuaH8.roa (hash: Qc8PbJ+121WDG0jcNdRI6MTD3GMXfVRF32u77QXsW1U=)
                          7: 9kJoijXp_W2x-CNIVGU2gTyIHu4.roa (hash: g/JnEpQSh0oe6cxDrcijYpkgjg+0UyJYEEJmxmRejxg=)
                          8: BWPseGVRi3l-zfC0baLeQvt8npw.roa (hash: S5E2qZZQYizqFQAAmmLpDPTTQwoCIm+hzIsTiWyQI/w=)
                          9: DD_WAIXT_d5Bi71Wp0F-YRqzAeY.roa (hash: TgYS7RvooVLjNCbehPFvkEOoQsy+7O0+z7H9lT2pLEo=)
                          10: Dz_xAtS_XW35D61yLERn3HqqTl4.roa (hash: tE44UbfHA1S8bb6yZPuiKFoXcbPWrwD3Vwt3MEGtAV8=)
                          11: Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa (hash: 3RHPyWH6kpXSP5rfHQPf6P61NWqvSrxvQJZ4KT7Fy8g=)
                          12: KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa (hash: s0iOSLMdSnE0XfkwKLxNI9H4430lKBoEen6MwmkygC8=)
                          13: KyZkiVRwovZC3LrfusqaW75r1Kk.roa (hash: Lb1GKS5ZorjNu583mkwjyw6Qxq2DeQxnAy7pzrOkcOM=)
                          14: MScYZfLkEgj9xUczQoShHi7if34.roa (hash: Lr5ikl0tvlQII709pYQ4cZ3QlbMQlLSyyT0QS99VL8g=)
                          15: NZhAdOiHD1zio5nnxiLQXypL-04.roa (hash: cXPsSX6LaAvczX/mV2tPPsm8l4OjqgM1mQ6UY42I7C0=)
                          16: N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa (hash: byrWfo1ZH5Y1FyKu4vOI/ViN8X+7h1tAmf+YhOXuZ/k=)
                          17: PlTPJtrSm59MicMXGc0T5QFobVk.roa (hash: vxokb71Ck6MbAwg9eWOIXGy43vgQiWwgqzqyuy/N+p8=)
                          18: QS2YfmJsmgaN4NK2AXvh-V9gXVA.roa (hash: 5ZLCC0mXDbdajebs22UeArfWPlsHeHgp/0frCCZOu78=)
                          19: RTDS83BZPr8GOwxlBuZwrgifhpE.roa (hash: dlJ9uDPjVjDJVz0OiQ96/4glzXs5xczVqBOYnJ5HiV4=)
                          20: RbJmDHOG8CdfIUm4-yXshwbt3fU.roa (hash: 8rpXsYWlJfCS6Vck7t+jkmI8ojM9CDZBlR9NO0Um754=)
                          21: VlqgFVIoOR9-G2wJsL8MxPVQAWA.roa (hash: dAKmS3ffO585YXonTbK1C2xZs3hm3oFut9oOO9E3T3s=)
                          22: WLvpNSFQRhdWZaC9I_Ah1bgcC0I.roa (hash: PDyeHlRCszFX07KKXj3dedhf6EgMf4av9amiMdMXQ3U=)
                          23: WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa (hash: YcgwHssC0IerMr07yjE5xNvbp7mTIbDmtcrXLuP8XiQ=)
                          24: YvQ0mb9xL1me3FE2T2kfrR62qHw.roa (hash: YA4zjb2nMxYTedW1G+JpN82HAbrqmEFmZX4LL6ddxjo=)
                          25: ZmguPJp1dEDwuB2JzJkq0iBU2V4.roa (hash: 1R1ZTE25yybbWHQtxGwRissKmJ1D8mZszAklbSjRDLM=)
                          26: ae2K9tmAIRZd8cJcNm_F_NfRfI4.roa (hash: oNt4Xcrn0Ecxv4Mw9KGJgnzzWpMIqz/MDYN4HT/YRYk=)
                          27: c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa (hash: xfIMp+34y6MSA9eYmpp36aGhUYMtBbTbqNw42uiP6Hc=)
                          28: d5r0W7DTPQ3gTqs_-NBseisWlCo.roa (hash: d47i9og2b8C2O7tuxenulALhI1Vd+GOyXorTmCH8MG8=)
                          29: g3ftKCOekd6MZAoyD7J4SL4FblQ.roa (hash: s+hLkIL+pR6iQslHmvl1kgMv8MT83YoyoUr7i6yvI1M=)
                          30: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: Wg6Z/PWNaGK55iaoI4gUdE6LMGV9J3M4Z3reT6wFtQQ=)
                          31: kOeStUr-S36PPYxRvN7P5tKOJwg.roa (hash: JYGGn+yiElMOBrVTl8GeU6lToRXH7Upj5oy8AgfmV7c=)
                          32: kvMWdnWiB8O4z6UGidzk9YiNNds.roa (hash: qQo2451yWLYIM5XcxKIaEg78mQdIPydPLkoRnJCOxSg=)
                          33: lHYwXThCBP7FlBWtS7W6i19LI5U.roa (hash: U/OGFWU5CJfOEtNnO7YwqzY/UYqJfO4+HxhHERKhfbc=)
                          34: lZ1qvLI02CD8UXhaq52LvdNAKcY.roa (hash: /Ub1OWh7+9Ly/PwiA4DBQeFni2XC79IYKxPRK7AiJsc=)
                          35: mei8xgH0X4b3oYs1JzOkVwZUqgE.roa (hash: 6r1vzQ4PHdBXGDQPN9IegVfc1dZJl95MXIt8jdby3Ao=)
                          36: mxRDtABpFcklfSsg3aqlEhdyVAo.roa (hash: +8omy9Xwwaces0V4gWLaq7H+IkKX2MYQDc4o2Yp+Bmc=)
                          37: pAIBYyl03DB7XvIHrbS3QzCtJmw.roa (hash: GQ6FPXE4A+w0U7jvziiqaUGlGRv8mE2hgF7AEFVUJmU=)
                          38: rnIbzC-rnzZRuZ0gE9Ol9qXNpB8.roa (hash: yNGtVyB4AnZrAbIlabLdkD82cw/2NFn/z89D1weqzjo=)
                          39: tFdZOVm-PrcIf_Tv6ZA86VKLE0A.roa (hash: f+mSSCLTTZwRD7r4dreo2vc8CPrb2fYZFXUXgRgCL9E=)
                          40: uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa (hash: feZaV8ykSWDhxYFCGXR1xId5z2ls9ece6Z9cvczsEoE=)
                          41: xHusoPKod-9ku7rZw8cealGeT28.roa (hash: 7YrQt4ZeBYedxpBakuCTTQk0fE7OEPDPBMWW4QTkzWo=)
                          42: xZ2nAeLyC0ezaqseLjJkV22U5mE.roa (hash: oxTigerjyhGYgfgpErnFxoqmId6FySfGh3aATIsx2pc=)
                          43: zDk64z6NkHXx103b_DDKnk_Pj-c.roa (hash: 8SAIBtw8DhrZJ/a4ePIKes3vCLUWaDEFEnhQa263Bg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:81:c0:99:55:d2:bd:d3:a8:10:41:92:9c:30:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Mar 25 21:01:35 2026 GMT
            Not After : Mar 26 21:01:35 2026 GMT
        Subject: CN=ce7ed16cd01df5b77e111a326aaf26640e519c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:8a:71:e1:c7:bc:19:6a:a4:94:62:c9:91:
                    e7:32:7b:00:cc:0d:39:24:ed:b3:7a:cd:83:f7:b4:
                    2a:1d:a0:a8:d1:6a:27:e5:19:10:82:e2:93:1c:34:
                    6b:c1:9a:f4:c1:4d:3a:9e:d6:18:81:00:85:f2:01:
                    19:d1:86:92:06:b8:d2:9d:91:d7:75:53:01:42:af:
                    aa:ca:d4:90:2f:d0:71:42:4a:34:1e:5e:84:c8:b4:
                    12:03:d1:d6:09:dd:8e:cd:bc:31:7d:0a:a7:bf:27:
                    74:a4:09:29:de:fb:c1:05:6d:bb:9d:54:db:ee:c4:
                    ab:da:8f:60:95:db:e7:14:d6:20:d1:51:a7:be:d1:
                    bd:7f:ce:57:1e:a4:23:08:fc:8a:c8:be:17:34:ab:
                    17:72:6d:1b:3a:95:85:5c:25:c3:b4:d3:18:91:a8:
                    c2:85:f9:aa:1e:c7:c3:88:b8:03:9b:49:2f:18:0b:
                    40:90:71:40:e2:e5:29:d9:76:d3:fc:6e:ad:50:e6:
                    a3:f6:5b:f8:67:35:fd:de:66:ac:88:09:13:ee:b4:
                    5e:25:ff:61:36:c7:bd:fa:9c:68:34:33:af:17:3b:
                    fe:0b:07:96:c8:63:b6:05:e6:5b:6d:fc:4f:a4:e1:
                    e5:fa:88:78:99:e1:95:c9:72:9a:b0:45:96:19:80:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:D1:6C:D0:1D:F5:B7:7E:11:1A:32:6A:AF:26:64:0E:51:9C:58
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:c2:cb:3e:ee:00:11:05:04:63:2a:65:71:84:c5:f1:6e:
         d3:65:f1:1b:42:17:e9:9a:2f:84:9d:ba:8f:14:ff:ef:dc:c5:
         cc:1d:84:7b:46:37:0c:0b:3f:ab:ef:8d:a0:2a:ba:e4:a7:16:
         76:37:f1:f6:b2:17:16:11:12:91:60:c8:8b:74:1f:65:a5:4c:
         0d:9d:16:d4:e7:45:b7:05:23:35:1c:86:bd:27:1a:ad:18:62:
         c7:db:ca:63:cd:6c:df:85:20:91:e8:9c:76:ea:b4:6a:1e:b2:
         34:3d:a1:bd:ea:13:d6:fd:fb:3a:c8:63:ac:2d:58:a0:53:65:
         71:20:04:a5:a0:ab:91:96:a0:91:c6:ad:27:ce:c7:4a:39:d3:
         35:bb:2b:35:a4:0c:e3:11:d7:3e:89:99:f9:e0:de:b8:ec:d6:
         c7:1b:2a:fb:ce:21:bd:cf:c1:2f:28:20:9e:45:ab:1a:75:f6:
         36:3a:f1:58:99:38:09:89:46:74:00:ba:fb:c5:f3:0e:14:03:
         0b:a1:4a:fe:d4:2c:90:f0:61:40:43:94:cc:4c:9a:49:82:99:
         88:79:4f:c8:25:d9:47:60:b3:1e:05:71:64:0c:63:e3:d2:21:
         97:1b:00:62:89:c7:76:13:22:06:9f:2b:2f:43:0d:d8:1d:3a:
         69:bd:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:23 2026 by rpki-client