Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          QCAJwsNG0diDSnk79BZh91yea/SnQea/SG/eYpEyKTA=
Subject key identifier:   AE:C9:E8:7F:0B:CC:D6:6A:E0:1E:12:34:36:AF:67:4C:E8:2F:D1:87
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       019D27DF91DD1FAC75DB227B58D71584815C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          18AD
Signing time:             Thu 26 Mar 2026 02:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:56 +0000
Files and hashes:         1: 1-5hlvMiawPJhDesGa1hua0Z8BCA.roa (hash: BfnuRMvzsKjw1r6Bbn0LN0nj8+jvf67Ex6NtuxitDqQ=)
                          2: 1nmLtwr3_xN50X0yyl7WQKTVv98.roa (hash: uJrw+w0+LATHhQU+jXTMfZ98iGwXOHwn/VgBuobhVEA=)
                          3: 497otZddeNozXBoDa4RW_3BJUUA.roa (hash: RrfBGeLjLrahf5Fq8xtl0pH9MkRki42Oz1D2w2x2gcg=)
                          4: 4uQiIz-NMAyBiXKYAOFesJYFaTo.roa (hash: sgg7t/axC5+BJccoHRq2eZqdOKI6JJ+dD5n9PgXCumE=)
                          5: 6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa (hash: MRty88BfOMZk7CPSt+WkF0Jw+KzFd+Cug5OdTNKjyKg=)
                          6: 7ytwb7Womq08ykvieFP3In40-Rw.roa (hash: osTlvrBih0cPXahWkQhNIUbUc1RlCh2qx/FZaxLigMw=)
                          7: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: C7L9f25hNCQQjuviGIO0V+pSvqXcHiICRLnu04rE4t4=)
                          8: C9o_73_XlKWwZbFCnJva18iPkB8.roa (hash: uD75t1SS6PfmQHvP9mDG+mDve1RgK0EmPySeWbN7cPI=)
                          9: CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa (hash: IVdKTM0Yxp2TPDqtVbZnlReXxKJAgo4s135GUv5aFjI=)
                          10: DROi7Rp35sbr_86r7xv563blIMY.roa (hash: 7tFkBPwhrQlBuEG6rIRbYO1U6Y/jsLvlcfB6EpkaFjw=)
                          11: DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa (hash: WblU2LEBXlZHlgqM8eisTMs9DCuuDvc8/DOwyfHQxh4=)
                          12: DXxFsnXwwNOGBcXslTr_wxOHW5U.roa (hash: WbVnLGOKZKrDUXnOGjZKmIubU2SC7h17bYnLNJHVzpE=)
                          13: Er970agph2hLDyUlRJlJHOLFcbA.roa (hash: oKGHOBpG4eQUVxF3qK1OSzoiisohDbRhmk7gK3ibtXg=)
                          14: JaxfUROoj6_NE96Q3__O9cwsQjg.roa (hash: ILIdmkOAIzD229XH8RpeKSfXmuZBzViWpFrbxXXN1Q0=)
                          15: LN31RTvGNNs31aCpj-wD6ee3dXo.roa (hash: C8SYZE0oqDJoDWLfNKKDQCP77oIU9jXrR3D5bTf/XTE=)
                          16: LtMkeVGzz7h7CkGqERqV6V4qsFw.roa (hash: RGCmsp7/VHcixBUIVcMwlIa1/oiBpWlQTFWDvtpCknY=)
                          17: MKWEmJirSw3wmRIR8xi7TCm8ATY.roa (hash: +VYG8Zjz2aYUxOlu/jdFIaid9VbP2EyTDGglQMC2eaY=)
                          18: MaIYiMv9oMH3UrGRpQxs3PmnAkM.roa (hash: t9r1ASd9rgul0//4WLxQCfdWKzz9owsa0TXBcSfyu0w=)
                          19: NuqPhouRONL44rUb1cLtqoOo1jg.roa (hash: cnRw58Xkwpz25Kb8YVWzU5CREedmYPvRcaBJ1jenGwY=)
                          20: ONeqkPnIGoNNtO8mGjFbkXmPWcw.roa (hash: kYO1wyTB/f6FZFDGDpkcy3vl9zMFVUkU3iINvS8pdJw=)
                          21: OtCGjso3OIWCT91z-dIAYXRLgaE.roa (hash: WzB/mkhNLhkBDDIyblbVxHLJteaxiC10uxzpbmBXXEA=)
                          22: R31qObxiyQRlsNG-FXBwOBiVcU8.roa (hash: u2PZhnDmqyjhRjCWYLGVizKep6XRYMVgkRgwc2jvHNo=)
                          23: R4WyxNHLfKVec7YTSt41OkBc2-I.roa (hash: UvwJJ1IYolylQX/6J5pFwnIJ6bg+W6t5KGekM66aRL8=)
                          24: WOaZgUiFG3331FVBQatZCXAC0dE.roa (hash: hlsZVOzwIyp+sFW7ERc8C9T73C489aiUFZqPHUBwG7E=)
                          25: WyBzP1akOaPSMtH83i7cdE8IRJI.roa (hash: xYMkoOWF3Z1or1lZb3hlI7rxmaHJaALyTgSuHbLZoNg=)
                          26: YpEIU7oBXpQHjZnpi0wheo8-1x4.roa (hash: timvsij1t+AwdE8hg7UZpIDt/dbM6PaXZ26qNPAglrA=)
                          27: _3HkKCfyg2p0JgvR26Gejd3Jyr0.roa (hash: IvyxG/8DsPEwSYh6UOg3Oba63B6pRVilCWEvL9ZX0K4=)
                          28: _n6zTWE5SpfSTPhy5YLorMZeiUg.roa (hash: eMCHBXlIbla8Sso8GtkKSwTjb6V35xuvU5uz7iYF9ik=)
                          29: bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa (hash: mFM8fPDKlogmsI5AE4bX3ek/ET4zQQFwwzKp3y4dESw=)
                          30: caCNERnJxfTGouZNM-ZhrZMZ3Dk.roa (hash: QxIZr8silfyaFcfQ4eLDZhsTooVK0dikoa7i3WYvqgc=)
                          31: ci3wqyDprqwbhq0cWz8ci3-6Cao.roa (hash: licFYzWIjztrfnZ7+8ryd0A2Wh1SW3GkTCtGQYIfjxc=)
                          32: e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa (hash: oYoj+Ap4IHXg1gtH78drwk88Ptq15W+fIpoCre/+UjE=)
                          33: gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa (hash: Hgp5BhkZ1R5EgXib6KjQEGqRGTYiApeWX+wRLpcWukM=)
                          34: h8j2rZi6YE0oBAImebndnjRdDAM.roa (hash: y8g6VlOFnaXteE+vwuQSHx1ywVH7Kmooo6Pd73iGin4=)
                          35: iBNkdxjoFZSykmkB0JSA3w3U7r0.roa (hash: fGAEdD7pbx6+gbCw5REx9yU5OTaVPQoHov6zQrqTWxc=)
                          36: ihTWirRVFtiifabGL54o1Hr7CZw.roa (hash: wQkCs7eQ2rpkelVIqbWJ+aWjqbRePWvwVn2KuudiplQ=)
                          37: jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa (hash: AWBZLQMuBiaZN340mhPRyITSlDhQnxohD2VrtfAI5E8=)
                          38: kxil1Z63WH5g5nMISzgclUNYVfg.roa (hash: bW6nN7sMwjxCwELFXsQx2gQTfa2q7HuAdDBSc++BMGc=)
                          39: ne1Hve3IxHD6J17bvXlDCoPZloI.roa (hash: E85TTNY9E00OvFpACeu2MfPIAJt6N64uMbnXW5x8sCM=)
                          40: s_XOUNE27Rt9EfkW6tpKIzfnB74.roa (hash: BJWU9WY8p23Wc9XLAEAvNVCPXfxDvC9l2as3ADvyFPs=)
                          41: t6o9CcRozbZixEiqMV0MRsZpTM0.roa (hash: /sMmNa9m743M2OGS7Cbc67P9Pek3pHjvDg425PY1NVE=)
                          42: tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa (hash: bvY4/tharyuzDPrRsmC185qxD3sZT9but5rOBl+Adzc=)
                          43: u3JKV-adkwKGsv5hodSaNbHzPB4.roa (hash: c3YsJQeJHhLtbxb9inM4xaKttWXYOVN6+JQXx5fxGOs=)
                          44: uwWeM12akfviVBKgj5V4jKYX10s.roa (hash: GWFPsvp4uvzRWxgRHQVC8crG4d3ea80ySU8gEcTXtgQ=)
                          45: v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa (hash: Jcz9P2Y4QeuqZOaA28xqXNYGZV40OskOqiuBj2qNWnE=)
                          46: w70489xMl6X6aCjHRjAC8Ah5HNc.roa (hash: rqJZ3tCvcXQJoQ6aJMbBqiFsgTmKKLtIm5U+CF77FX8=)
                          47: wAB319bF59pbqogEGue3dUyMfyU.roa (hash: 7tbkhOvjhN26XlWaA9QFm7KpD6qs3B3JEKiopbBlJO8=)
                          48: y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa (hash: 9QPX2u4tZEN3H/22+qKUcxXcBFy2u4JGqbw8FLY/7C4=)
                          49: zAff6ilnehpGGi5BDUZ7hLHheXA.roa (hash: 4vg6QTx+7Obl0HEsR7tGfz+AKdR30zhHteU6BT4n1so=)
                          50: zxXgFrqVOHijRHiRR71FP7_iwAY.roa (hash: gW3oGK3WuYusfZYDVwP28OguyD2JdnpNIpD21g+ThnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:91:dd:1f:ac:75:db:22:7b:58:d7:15:84:81:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Mar 26 02:00:56 2026 GMT
            Not After : Mar 27 02:00:56 2026 GMT
        Subject: CN=aec9e87f0bccd66ae01e123436af674ce82fd187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:8c:1a:37:72:b5:05:69:72:ea:ec:b0:9a:
                    60:dd:b5:7c:a3:46:3b:e0:ef:1d:c8:b1:49:b4:72:
                    ae:76:d5:ed:bd:63:d9:a4:b2:25:79:cd:d6:1a:31:
                    17:9d:9a:79:99:b6:df:64:d3:b6:87:a4:ba:07:4d:
                    03:3f:db:fd:54:87:bb:82:12:79:29:d0:97:ba:83:
                    76:0d:1c:16:8a:c4:e8:8e:9d:f9:f5:bb:5b:31:a7:
                    48:2c:53:ec:a2:d8:5d:39:ea:cc:1e:a3:28:aa:f2:
                    f0:ae:fe:0c:65:23:c9:da:7d:21:7f:23:19:a7:71:
                    18:91:f1:7b:f7:9a:99:6a:2e:69:7c:ed:9e:ab:5a:
                    0d:62:21:62:8e:34:db:54:9f:c4:f2:b5:b2:48:0b:
                    90:a6:6a:77:8d:fe:83:b7:d4:64:ba:3c:f0:82:62:
                    c0:cc:f6:97:e3:be:9c:3a:e2:2a:a5:3a:e9:75:b3:
                    12:96:69:ee:a9:b6:db:34:f9:59:39:b7:63:8a:1c:
                    1a:08:27:52:0b:f5:39:4a:13:8f:ca:42:34:d4:75:
                    9d:67:39:d9:8b:34:84:8e:a8:77:26:16:c9:1c:33:
                    06:be:3c:4c:90:8e:5a:a6:84:04:37:1d:bb:d2:94:
                    00:cd:e5:90:23:c3:79:f9:13:06:db:2a:a2:9e:82:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C9:E8:7F:0B:CC:D6:6A:E0:1E:12:34:36:AF:67:4C:E8:2F:D1:87
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:20:be:ad:ee:ad:96:1f:49:93:75:e2:68:f4:79:64:7d:5e:
         e5:01:d5:07:04:26:6a:34:0b:db:3e:89:06:09:21:b7:01:ae:
         62:5c:09:3c:f0:3a:31:5d:65:fa:19:1e:9e:65:95:06:21:e3:
         68:d0:58:b8:57:ab:80:2e:c4:07:de:e4:ed:6d:f5:e1:a3:94:
         f6:38:19:1d:2d:e0:5d:a2:b8:a4:79:a9:b4:67:e5:bb:0b:9f:
         8d:b1:a4:98:b7:d6:ef:eb:2f:a4:45:f5:b2:42:47:dc:4f:87:
         3d:b6:f9:81:5c:33:40:f4:dc:c1:35:86:b1:8e:e6:b0:4e:c6:
         86:48:2d:cd:3f:80:fa:99:3b:c3:48:3c:31:95:50:35:32:5b:
         2e:40:62:27:74:e5:e1:34:3a:22:ef:2f:5e:95:3b:55:7e:8e:
         b8:37:a0:cc:a5:ee:25:1d:1b:59:1a:4c:9a:1a:b0:a5:f8:98:
         a1:b3:19:24:36:0f:ac:89:b6:9d:1f:98:c4:30:3d:fd:2d:20:
         5d:ce:de:22:05:6f:2f:b5:3c:80:ba:90:d6:c3:d8:30:a6:11:
         17:ea:55:ad:b0:05:c7:32:33:f1:64:2f:6f:d1:2c:19:5e:d1:
         95:a2:ec:18:02:ce:8f:12:fb:06:d4:58:f2:1d:63:be:9c:9c:
         ab:5c:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----