Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          xL86LeHFm7Fy/hBYWkgZdT78s4OiKc0M4hu0cfoxii4=
Subject key identifier:   EA:DB:08:1C:3F:45:0E:0E:DE:26:8B:C2:93:5F:C4:B1:29:24:E3:C8
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       019D29CDE746C6B709D2AE455A50DE2BEFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          18AE
Signing time:             Thu 26 Mar 2026 11:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:53 +0000
Files and hashes:         1: 1-5hlvMiawPJhDesGa1hua0Z8BCA.roa (hash: BfnuRMvzsKjw1r6Bbn0LN0nj8+jvf67Ex6NtuxitDqQ=)
                          2: 1nmLtwr3_xN50X0yyl7WQKTVv98.roa (hash: uJrw+w0+LATHhQU+jXTMfZ98iGwXOHwn/VgBuobhVEA=)
                          3: 497otZddeNozXBoDa4RW_3BJUUA.roa (hash: RrfBGeLjLrahf5Fq8xtl0pH9MkRki42Oz1D2w2x2gcg=)
                          4: 4uQiIz-NMAyBiXKYAOFesJYFaTo.roa (hash: sgg7t/axC5+BJccoHRq2eZqdOKI6JJ+dD5n9PgXCumE=)
                          5: 6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa (hash: MRty88BfOMZk7CPSt+WkF0Jw+KzFd+Cug5OdTNKjyKg=)
                          6: 7ytwb7Womq08ykvieFP3In40-Rw.roa (hash: osTlvrBih0cPXahWkQhNIUbUc1RlCh2qx/FZaxLigMw=)
                          7: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: fdUsJuwpSXX8DUFAcGWyQ/G5sOWFO0wkMoZPaZhvlCw=)
                          8: C9o_73_XlKWwZbFCnJva18iPkB8.roa (hash: uD75t1SS6PfmQHvP9mDG+mDve1RgK0EmPySeWbN7cPI=)
                          9: CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa (hash: IVdKTM0Yxp2TPDqtVbZnlReXxKJAgo4s135GUv5aFjI=)
                          10: DROi7Rp35sbr_86r7xv563blIMY.roa (hash: 7tFkBPwhrQlBuEG6rIRbYO1U6Y/jsLvlcfB6EpkaFjw=)
                          11: DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa (hash: WblU2LEBXlZHlgqM8eisTMs9DCuuDvc8/DOwyfHQxh4=)
                          12: DXxFsnXwwNOGBcXslTr_wxOHW5U.roa (hash: WbVnLGOKZKrDUXnOGjZKmIubU2SC7h17bYnLNJHVzpE=)
                          13: Er970agph2hLDyUlRJlJHOLFcbA.roa (hash: oKGHOBpG4eQUVxF3qK1OSzoiisohDbRhmk7gK3ibtXg=)
                          14: JaxfUROoj6_NE96Q3__O9cwsQjg.roa (hash: ILIdmkOAIzD229XH8RpeKSfXmuZBzViWpFrbxXXN1Q0=)
                          15: LN31RTvGNNs31aCpj-wD6ee3dXo.roa (hash: C8SYZE0oqDJoDWLfNKKDQCP77oIU9jXrR3D5bTf/XTE=)
                          16: LtMkeVGzz7h7CkGqERqV6V4qsFw.roa (hash: RGCmsp7/VHcixBUIVcMwlIa1/oiBpWlQTFWDvtpCknY=)
                          17: MKWEmJirSw3wmRIR8xi7TCm8ATY.roa (hash: +VYG8Zjz2aYUxOlu/jdFIaid9VbP2EyTDGglQMC2eaY=)
                          18: MaIYiMv9oMH3UrGRpQxs3PmnAkM.roa (hash: t9r1ASd9rgul0//4WLxQCfdWKzz9owsa0TXBcSfyu0w=)
                          19: NuqPhouRONL44rUb1cLtqoOo1jg.roa (hash: cnRw58Xkwpz25Kb8YVWzU5CREedmYPvRcaBJ1jenGwY=)
                          20: ONeqkPnIGoNNtO8mGjFbkXmPWcw.roa (hash: kYO1wyTB/f6FZFDGDpkcy3vl9zMFVUkU3iINvS8pdJw=)
                          21: OtCGjso3OIWCT91z-dIAYXRLgaE.roa (hash: WzB/mkhNLhkBDDIyblbVxHLJteaxiC10uxzpbmBXXEA=)
                          22: R31qObxiyQRlsNG-FXBwOBiVcU8.roa (hash: u2PZhnDmqyjhRjCWYLGVizKep6XRYMVgkRgwc2jvHNo=)
                          23: R4WyxNHLfKVec7YTSt41OkBc2-I.roa (hash: UvwJJ1IYolylQX/6J5pFwnIJ6bg+W6t5KGekM66aRL8=)
                          24: WOaZgUiFG3331FVBQatZCXAC0dE.roa (hash: hlsZVOzwIyp+sFW7ERc8C9T73C489aiUFZqPHUBwG7E=)
                          25: WyBzP1akOaPSMtH83i7cdE8IRJI.roa (hash: xYMkoOWF3Z1or1lZb3hlI7rxmaHJaALyTgSuHbLZoNg=)
                          26: YpEIU7oBXpQHjZnpi0wheo8-1x4.roa (hash: timvsij1t+AwdE8hg7UZpIDt/dbM6PaXZ26qNPAglrA=)
                          27: _3HkKCfyg2p0JgvR26Gejd3Jyr0.roa (hash: IvyxG/8DsPEwSYh6UOg3Oba63B6pRVilCWEvL9ZX0K4=)
                          28: _n6zTWE5SpfSTPhy5YLorMZeiUg.roa (hash: eMCHBXlIbla8Sso8GtkKSwTjb6V35xuvU5uz7iYF9ik=)
                          29: bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa (hash: mFM8fPDKlogmsI5AE4bX3ek/ET4zQQFwwzKp3y4dESw=)
                          30: caCNERnJxfTGouZNM-ZhrZMZ3Dk.roa (hash: QxIZr8silfyaFcfQ4eLDZhsTooVK0dikoa7i3WYvqgc=)
                          31: ci3wqyDprqwbhq0cWz8ci3-6Cao.roa (hash: licFYzWIjztrfnZ7+8ryd0A2Wh1SW3GkTCtGQYIfjxc=)
                          32: e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa (hash: oYoj+Ap4IHXg1gtH78drwk88Ptq15W+fIpoCre/+UjE=)
                          33: gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa (hash: Hgp5BhkZ1R5EgXib6KjQEGqRGTYiApeWX+wRLpcWukM=)
                          34: h8j2rZi6YE0oBAImebndnjRdDAM.roa (hash: y8g6VlOFnaXteE+vwuQSHx1ywVH7Kmooo6Pd73iGin4=)
                          35: iBNkdxjoFZSykmkB0JSA3w3U7r0.roa (hash: fGAEdD7pbx6+gbCw5REx9yU5OTaVPQoHov6zQrqTWxc=)
                          36: ihTWirRVFtiifabGL54o1Hr7CZw.roa (hash: wQkCs7eQ2rpkelVIqbWJ+aWjqbRePWvwVn2KuudiplQ=)
                          37: jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa (hash: AWBZLQMuBiaZN340mhPRyITSlDhQnxohD2VrtfAI5E8=)
                          38: kxil1Z63WH5g5nMISzgclUNYVfg.roa (hash: bW6nN7sMwjxCwELFXsQx2gQTfa2q7HuAdDBSc++BMGc=)
                          39: ne1Hve3IxHD6J17bvXlDCoPZloI.roa (hash: E85TTNY9E00OvFpACeu2MfPIAJt6N64uMbnXW5x8sCM=)
                          40: s_XOUNE27Rt9EfkW6tpKIzfnB74.roa (hash: BJWU9WY8p23Wc9XLAEAvNVCPXfxDvC9l2as3ADvyFPs=)
                          41: t6o9CcRozbZixEiqMV0MRsZpTM0.roa (hash: /sMmNa9m743M2OGS7Cbc67P9Pek3pHjvDg425PY1NVE=)
                          42: tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa (hash: bvY4/tharyuzDPrRsmC185qxD3sZT9but5rOBl+Adzc=)
                          43: u3JKV-adkwKGsv5hodSaNbHzPB4.roa (hash: c3YsJQeJHhLtbxb9inM4xaKttWXYOVN6+JQXx5fxGOs=)
                          44: uwWeM12akfviVBKgj5V4jKYX10s.roa (hash: GWFPsvp4uvzRWxgRHQVC8crG4d3ea80ySU8gEcTXtgQ=)
                          45: v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa (hash: Jcz9P2Y4QeuqZOaA28xqXNYGZV40OskOqiuBj2qNWnE=)
                          46: w70489xMl6X6aCjHRjAC8Ah5HNc.roa (hash: rqJZ3tCvcXQJoQ6aJMbBqiFsgTmKKLtIm5U+CF77FX8=)
                          47: wAB319bF59pbqogEGue3dUyMfyU.roa (hash: 7tbkhOvjhN26XlWaA9QFm7KpD6qs3B3JEKiopbBlJO8=)
                          48: y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa (hash: 9QPX2u4tZEN3H/22+qKUcxXcBFy2u4JGqbw8FLY/7C4=)
                          49: zAff6ilnehpGGi5BDUZ7hLHheXA.roa (hash: 4vg6QTx+7Obl0HEsR7tGfz+AKdR30zhHteU6BT4n1so=)
                          50: zxXgFrqVOHijRHiRR71FP7_iwAY.roa (hash: gW3oGK3WuYusfZYDVwP28OguyD2JdnpNIpD21g+ThnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:e7:46:c6:b7:09:d2:ae:45:5a:50:de:2b:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Mar 26 11:00:53 2026 GMT
            Not After : Mar 27 11:00:53 2026 GMT
        Subject: CN=eadb081c3f450e0ede268bc2935fc4b12924e3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:cf:26:76:fd:0c:f6:97:33:78:57:22:88:
                    54:5d:a0:b4:ca:2f:11:28:bb:50:64:d7:82:62:84:
                    7b:02:ae:38:7f:0f:b0:27:56:da:5a:9f:4b:bf:d6:
                    d6:43:f5:e7:b2:7c:ac:39:13:55:8c:3c:21:da:cb:
                    d0:7a:e4:55:f0:a2:e0:e8:f9:75:d4:e5:3c:fd:76:
                    9e:82:23:1d:37:71:41:42:4d:62:66:e4:15:7e:b8:
                    09:c0:c8:53:b2:a0:7b:6a:00:0b:88:46:bd:e8:d0:
                    1f:19:0f:71:60:88:d7:c0:6a:93:48:36:bb:17:b1:
                    89:65:7f:26:a1:c9:d3:45:7d:c3:5f:67:9d:82:d3:
                    43:81:04:1d:af:e9:77:6b:ee:97:f3:5c:e9:dc:25:
                    2f:1e:31:a0:3f:24:0b:39:4a:4b:d4:e9:bc:2e:37:
                    af:61:37:cc:a3:6a:55:28:a3:c8:1a:68:d7:7d:d4:
                    66:d9:4c:9a:8b:53:7e:f1:77:33:21:d7:f5:4c:b6:
                    5c:b9:f7:fe:86:ed:5a:ed:99:e1:fb:72:7e:11:6c:
                    f5:9d:df:b1:db:da:af:f6:40:4e:50:e1:d6:cb:95:
                    08:5d:03:c3:bd:57:3d:b8:96:30:91:11:13:2c:94:
                    25:5f:46:da:7b:48:2f:92:d1:8f:ef:ad:01:51:12:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:08:1C:3F:45:0E:0E:DE:26:8B:C2:93:5F:C4:B1:29:24:E3:C8
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:95:c0:6a:22:18:ea:00:40:a3:be:28:40:d5:69:e3:15:
         95:b6:1d:0f:30:ea:08:47:67:9f:a9:f8:19:57:0e:98:e3:32:
         1b:60:c1:20:57:4f:01:ae:73:10:44:fd:0e:c5:c6:d7:9c:d4:
         c3:41:29:d9:d1:aa:e0:56:30:24:48:cc:78:5f:36:89:39:84:
         8e:ff:35:32:8b:2a:44:d7:a9:59:3b:7d:e6:25:c0:50:72:45:
         81:8c:18:47:7f:48:ae:4f:55:2d:ba:14:fb:45:dc:7c:df:f4:
         7a:e0:25:1c:9a:e9:93:87:80:fa:c0:8b:7e:5a:00:b5:74:e5:
         0e:7f:e3:0e:2d:ec:d3:d0:55:68:8d:3a:9d:9a:c4:8a:cb:7d:
         2d:79:76:b6:6f:f3:6d:bc:a1:0e:58:71:2e:cf:e8:fd:e2:42:
         af:38:ac:c0:0c:34:4c:a9:52:46:3a:28:c4:03:8f:54:b2:a8:
         38:1c:c5:94:8b:e6:73:88:f9:d9:3e:c7:ff:d3:71:fb:4b:01:
         5e:bf:bf:0a:8d:7a:ef:67:ae:f9:cf:12:5f:36:7f:b7:18:7a:
         45:e1:41:68:6e:1a:e9:46:96:f0:89:9c:77:75:be:ab:02:6f:
         77:af:19:f8:3b:33:13:22:34:79:fb:1a:c8:63:1d:5e:74:4c:
         19:04:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----