Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          dl8n4GVkY4wnWrij9ClwcGqD1ANmw6m2gLO2wDsUPsA=
Subject key identifier:   60:17:37:37:08:FC:05:F2:96:FE:D5:CE:E0:9F:92:E9:07:82:A4:8C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       01A1D9815043E15CB61690E8FE3DB57AF72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          1382
Signing time:             Sat 14 Nov 2026 10:01:32 +0000
Manifest this update:     Sat 14 Nov 2026 10:01:32 +0000
Manifest next update:     Sun 15 Nov 2026 10:01:32 +0000
Files and hashes:         1: 02Ra5XLUOiSqJhXc_BY2SbnTFPk.roa (hash: jWd4ZrQ7cj7tjeLk9IloqsQIlAKliPsfBFb2nlijgTo=)
                          2: 0ew4m4ItSCVepyc29nNm9tAEIKM.roa (hash: qJf794gHKOzylfCxvXi/18OeXDgu/UQKuPAemY2FauU=)
                          3: 0nhG75Ydk868JVhVwD1g26vq048.roa (hash: V8YBxuCcErnYbVcRl+A8AO4nLsszH0ZChmRSeS9p21o=)
                          4: 5H1OpW-AycH1O-bkgqM8Yvh65T0.roa (hash: d9gll8e31C0axgcql2tfiqAMsE0s3zsOdBZT3TwLDh4=)
                          5: 5HNmdQjykqwAfNhIg-tpp8-gdbc.roa (hash: zZXn5dulYMclvldWCNdu7wVTL28APNYs2w1Gzx7oEi4=)
                          6: 8OnV91N_zqcbSEf40E1ouE7GeJs.roa (hash: m6ppgYlMTCPYh8z67jY4eoshyn8bp37m9v5Ohrm1dI0=)
                          7: 912ggk5y8hlaC5Oq1RcqiznaZVo.roa (hash: DjODdr6zI59Yx4ri8xsDh4PbCcxOZi8hGkYTMA91hDs=)
                          8: 9kJoijXp_W2x-CNIVGU2gTyIHu4.roa (hash: g/JnEpQSh0oe6cxDrcijYpkgjg+0UyJYEEJmxmRejxg=)
                          9: BWPseGVRi3l-zfC0baLeQvt8npw.roa (hash: S5E2qZZQYizqFQAAmmLpDPTTQwoCIm+hzIsTiWyQI/w=)
                          10: D4jQ64CPf3ChQqrGC5CjuKJAtKk.roa (hash: HUWd5q+dWVXaDmL/ynWKy6UbQqXoypWgmhL40Z/VQnI=)
                          11: Dz_xAtS_XW35D61yLERn3HqqTl4.roa (hash: tE44UbfHA1S8bb6yZPuiKFoXcbPWrwD3Vwt3MEGtAV8=)
                          12: Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa (hash: 3RHPyWH6kpXSP5rfHQPf6P61NWqvSrxvQJZ4KT7Fy8g=)
                          13: IpZt3R636ZD03S5nVfJoWLfdThw.roa (hash: 2lYw7bc2aQ4JwU9fCqx9mE7G9ukNJ7HxjNeKB5KC5KI=)
                          14: KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa (hash: s0iOSLMdSnE0XfkwKLxNI9H4430lKBoEen6MwmkygC8=)
                          15: KpYEHyMkQbXZZ7MeJIQL9ykyMS0.roa (hash: aPBiqHoDciKhqfOJFJj9PjLKQKyBMgnwyp3mDWvbvBw=)
                          16: NZhAdOiHD1zio5nnxiLQXypL-04.roa (hash: cXPsSX6LaAvczX/mV2tPPsm8l4OjqgM1mQ6UY42I7C0=)
                          17: N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa (hash: byrWfo1ZH5Y1FyKu4vOI/ViN8X+7h1tAmf+YhOXuZ/k=)
                          18: PlTPJtrSm59MicMXGc0T5QFobVk.roa (hash: vxokb71Ck6MbAwg9eWOIXGy43vgQiWwgqzqyuy/N+p8=)
                          19: QS2YfmJsmgaN4NK2AXvh-V9gXVA.roa (hash: 5ZLCC0mXDbdajebs22UeArfWPlsHeHgp/0frCCZOu78=)
                          20: RTDS83BZPr8GOwxlBuZwrgifhpE.roa (hash: dlJ9uDPjVjDJVz0OiQ96/4glzXs5xczVqBOYnJ5HiV4=)
                          21: RbJmDHOG8CdfIUm4-yXshwbt3fU.roa (hash: 8rpXsYWlJfCS6Vck7t+jkmI8ojM9CDZBlR9NO0Um754=)
                          22: VlqgFVIoOR9-G2wJsL8MxPVQAWA.roa (hash: dAKmS3ffO585YXonTbK1C2xZs3hm3oFut9oOO9E3T3s=)
                          23: WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa (hash: YcgwHssC0IerMr07yjE5xNvbp7mTIbDmtcrXLuP8XiQ=)
                          24: YvQ0mb9xL1me3FE2T2kfrR62qHw.roa (hash: YA4zjb2nMxYTedW1G+JpN82HAbrqmEFmZX4LL6ddxjo=)
                          25: ae2K9tmAIRZd8cJcNm_F_NfRfI4.roa (hash: oNt4Xcrn0Ecxv4Mw9KGJgnzzWpMIqz/MDYN4HT/YRYk=)
                          26: c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa (hash: xfIMp+34y6MSA9eYmpp36aGhUYMtBbTbqNw42uiP6Hc=)
                          27: d5r0W7DTPQ3gTqs_-NBseisWlCo.roa (hash: d47i9og2b8C2O7tuxenulALhI1Vd+GOyXorTmCH8MG8=)
                          28: eym3EQD0kjTqc87x3Cf4n7Pm8Vs.roa (hash: 0VMN2yJOd5xI9pMsZkJYbc0AS1KesvzkmGy9U/8Xx/E=)
                          29: g3ftKCOekd6MZAoyD7J4SL4FblQ.roa (hash: s+hLkIL+pR6iQslHmvl1kgMv8MT83YoyoUr7i6yvI1M=)
                          30: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: KEP072PDgJf45+Ev+6/vPvKVrszNDiMpKRPN95KNhqU=)
                          31: kvMWdnWiB8O4z6UGidzk9YiNNds.roa (hash: qQo2451yWLYIM5XcxKIaEg78mQdIPydPLkoRnJCOxSg=)
                          32: lHYwXThCBP7FlBWtS7W6i19LI5U.roa (hash: U/OGFWU5CJfOEtNnO7YwqzY/UYqJfO4+HxhHERKhfbc=)
                          33: mei8xgH0X4b3oYs1JzOkVwZUqgE.roa (hash: 6r1vzQ4PHdBXGDQPN9IegVfc1dZJl95MXIt8jdby3Ao=)
                          34: mxRDtABpFcklfSsg3aqlEhdyVAo.roa (hash: +8omy9Xwwaces0V4gWLaq7H+IkKX2MYQDc4o2Yp+Bmc=)
                          35: pAIBYyl03DB7XvIHrbS3QzCtJmw.roa (hash: GQ6FPXE4A+w0U7jvziiqaUGlGRv8mE2hgF7AEFVUJmU=)
                          36: rnIbzC-rnzZRuZ0gE9Ol9qXNpB8.roa (hash: yNGtVyB4AnZrAbIlabLdkD82cw/2NFn/z89D1weqzjo=)
                          37: seCjwUfGeZdQIEL762INXIQGvuo.roa (hash: K/UAMD30hNnbAtpW3PPYRC2bTFBict6use4t0t2OfjY=)
                          38: tArZ99VcTsxNxK_216-rD1IfLa8.roa (hash: yflYOPOql80JLL7z9LZan55L3eroFqyueifHNmAbWxo=)
                          39: tFdZOVm-PrcIf_Tv6ZA86VKLE0A.roa (hash: f+mSSCLTTZwRD7r4dreo2vc8CPrb2fYZFXUXgRgCL9E=)
                          40: u0WEwYM28nVJWjjYbM_J1vAHVxo.roa (hash: ipopkQY+H/Upmbbpfts+dH7hizt7AcAZwXiPE0WuDhc=)
                          41: uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa (hash: feZaV8ykSWDhxYFCGXR1xId5z2ls9ece6Z9cvczsEoE=)
                          42: vQkqnUDZKxiJ8e43kvxqlbfksh4.roa (hash: kAOJJ8sg71RF+T8wa19+F6dJ6P7Bf2aeuP/rcYhgoM4=)
                          43: xHusoPKod-9ku7rZw8cealGeT28.roa (hash: 7YrQt4ZeBYedxpBakuCTTQk0fE7OEPDPBMWW4QTkzWo=)
                          44: xZ2nAeLyC0ezaqseLjJkV22U5mE.roa (hash: oxTigerjyhGYgfgpErnFxoqmId6FySfGh3aATIsx2pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:81:50:43:e1:5c:b6:16:90:e8:fe:3d:b5:7a:f7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Nov 14 10:01:32 2026 GMT
            Not After : Nov 15 10:01:32 2026 GMT
        Subject: CN=6017373708fc05f296fed5cee09f92e90782a48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:74:1e:84:b2:8a:b0:8d:e8:f3:ae:ec:28:
                    02:18:bf:9b:a2:9f:74:22:a8:24:ca:91:61:e5:51:
                    ae:ff:d6:7f:cc:a0:82:10:c4:c7:8d:8b:ad:14:9c:
                    32:e9:c0:9f:e4:54:f9:6e:61:40:a3:f2:54:b3:f6:
                    f9:72:9d:5a:70:73:dd:94:d7:5b:2f:8e:d2:40:9d:
                    cf:2e:63:55:5c:55:33:eb:ff:43:80:5b:ae:6b:7d:
                    c1:4f:9f:62:b1:cb:3c:6f:be:27:20:12:5d:33:4d:
                    11:b9:86:69:29:fd:10:73:8f:a2:f2:18:21:9b:b6:
                    48:04:ff:02:93:82:69:39:21:47:19:95:62:e7:02:
                    86:ec:ea:41:01:c9:28:74:c6:6e:dd:f3:9c:9e:c5:
                    ee:15:56:cb:48:f8:9d:3a:c2:a3:8e:0d:c6:e2:45:
                    2f:49:4d:6d:65:47:45:24:f4:01:84:c9:34:f5:08:
                    24:96:cc:ef:84:fb:87:5f:b8:1e:a2:35:67:99:99:
                    2f:8d:57:02:f5:f9:6c:54:52:40:cd:74:7d:64:bd:
                    cf:b6:60:ef:a3:08:b6:da:4b:0c:d3:0d:0f:3e:61:
                    5a:0e:73:4d:2c:cd:f6:ca:39:2e:43:4c:22:9c:23:
                    d6:16:22:2c:2d:c3:99:24:1c:4f:85:25:83:18:df:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:37:37:08:FC:05:F2:96:FE:D5:CE:E0:9F:92:E9:07:82:A4:8C
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:8e:c6:e5:3f:80:1a:8f:04:3a:fa:07:60:62:31:78:40:
         f0:3b:3c:59:f9:85:ab:7f:15:ea:f8:d1:39:1a:dd:f8:d9:36:
         69:97:13:47:9e:d4:d0:45:8d:f8:94:75:39:c9:c2:41:9c:ff:
         a5:29:fe:b7:fb:d4:37:10:d9:8d:93:df:ed:43:29:01:04:a1:
         2c:70:dc:2c:2d:57:4d:d8:af:d3:4b:81:a6:c7:39:d6:b2:7c:
         32:bf:c6:a4:54:c1:70:bf:3b:c6:a2:f0:fd:f7:ff:61:8e:53:
         f3:d4:39:0e:72:0a:0d:28:4d:3d:47:01:29:fb:3f:44:63:64:
         8a:b8:e3:ad:d6:cd:ff:98:33:03:ac:0c:37:19:a5:09:7e:60:
         51:d6:35:17:ad:6b:a9:c6:d9:f0:f5:a9:b3:a1:52:9b:45:79:
         b9:07:ca:e6:f1:29:df:53:8b:af:56:05:be:19:d2:df:81:1c:
         5f:d2:e2:49:21:16:15:9a:f8:4f:20:6b:8d:ca:f8:be:56:9e:
         d8:81:74:1b:9c:94:89:d1:cf:b2:a2:63:bc:80:73:6d:85:0a:
         fe:55:c7:c9:e9:b3:91:26:a9:d8:18:87:30:e3:03:5d:4c:ee:
         6a:eb:51:ad:dd:20:b6:d8:99:7a:28:84:21:98:9b:81:ae:53:
         2c:a9:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----