Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
File:                     1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json)
Hash identifier:          UHY/GTnnjr6znfDd8AVUq/sbv9lPl4Q1oLWSftaUEuI=
Subject key identifier:   03:B8:E8:9D:3A:78:6C:C7:65:BE:A7:F3:FB:00:34:3C:39:5C:98:C7
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       019D2627EDE1A9AAD8B564EDAD041B019BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
Manifest number:          0D44
Signing time:             Wed 25 Mar 2026 18:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:44 +0000
Files and hashes:         1: 1-L8tDfEG-3pgIU7kfSKnf9ffLk0.roa (hash: iZJZZ6IHUsAM2x3U2uVQeumOeN1QKM3CgmxIrUe3hSU=)
                          2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: aF3R+2pIYknxBWRryvoY2p40y/EtloxP6/++Mkrnp3A=)
                          3: 2f6PQ52RrE2rBdK-zJ6WM_j95eI.roa (hash: uNZ99GxNYSx799rRk/4xuT3cH59ZCsDIn0sSjir72VU=)
                          4: 2v1pQuTwC884qOqMuPFIGe3hLEM.roa (hash: 9QYXHAznoJYbVxUrvlkB+2xgeSleEtgz8F3cc5bCAvg=)
                          5: 66PvU9zZe40QPvYfUbIMVwRtoUc.roa (hash: PuDY7T0dTQnWl6fRZWtjtvnzjPu119CD4rEyspEfVG0=)
                          6: 6T8JuJI5zBMlhhsnMWJwqschkxs.roa (hash: y3Ffb+9k264Crde/fiQpnad2BjTOVvWEHiSxXwbuzAw=)
                          7: 6TAhwel28mn1EkKNP8zK_phx-fY.roa (hash: ASRsbD8Q6E32M18wKwO98fu3c6RpmRXPNQyvdS3lfG0=)
                          8: E89yAQtO79M-1Ms7Kd_oXCvLPh8.roa (hash: 5du/pnLCkjqXOpm9RfFvPGgH9EWazk1nBHyV5aHULNo=)
                          9: EanbdxvpQ8YPKktBIMtq6aA5Iik.roa (hash: FIQbob6SdbdBIWE3qNGlhsXeIMRffnyctbKh9SLGzb4=)
                          10: GHtx92XK6yIjK3lcHPo5sov-XWw.roa (hash: 2moJc4PYALug9KGrlP5vC1bPAu6G097omiLInZPacKw=)
                          11: GWkEKO-jjYXKvJ1IkOHmMuTaMMM.roa (hash: 5SE2deMTvP0ySSnwGxZWlc8RDVoTqcq938sEZ/Qd1+M=)
                          12: HxcwusE96Pu4klA3JVP9ca71QRk.roa (hash: geWZwbjFXtpXNCgh8QcSp0aqYZouzyEjG0Xg6ZT16Q0=)
                          13: LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa (hash: 382IR5KX357ftVcZUNVV6W3Ot0v8DcTQMbqIjY9RuVI=)
                          14: LxR6ymO2jTw3ogIuaUShbQlGTdk.roa (hash: 8fZ9LesjpoPrv1NgIcb6YI3BUredk/uWtux2rOwhc5k=)
                          15: Mx9B9hAEqLYTXQZ61hw0ACEgjyE.roa (hash: NJCE700WkOf9hTWVW5JZ/csL1Ex7RFOI14hRWLuaIz8=)
                          16: QiFIDQaK57RQDC2wBjTgFDeAGGk.roa (hash: i5P77GwNdzqnxs89g/W5Ts+xYO0h1KNAlwDqj9gxX20=)
                          17: S9R4kfXateW9DiicYhQOk_HsyCc.roa (hash: 6tWmU70/4MEWbvV+ci3xerNiMtekKazP7VSfBAnVejg=)
                          18: VMe6oVea4JH4JSY7fPcNrhdKRXg.roa (hash: 4zNlXcLLXGUVEab2oJM3gKwsrSRnUYbnT5rLCiqqs2c=)
                          19: W-iGdfrXWzVhktlrOj6ji9PTTVI.roa (hash: LisKv+NARInTtmqbTfKgDTZvU5Ejrq0c/4kFI8VtQYo=)
                          20: YWn3_kOmvMICb5PtlbN2PUVpwOI.roa (hash: zMKagDS1cv4q0fyGdmCZSTRmcOaC06mZ8/iFRXUPWcc=)
                          21: Z4qehmmIIMgRP7ObXHN1Fjvd9Cs.roa (hash: 0jO7nFM/draO2m1gezepqenb1TXb8u84Y7tHyJsUFNM=)
                          22: Ztx5883bK84tY0HARcS8sYjlri4.roa (hash: bpcCdBvqDQHLcDos6XVgo6TvWqDUz3X955uO9/6fckE=)
                          23: Zyo9GK454m2Y9Hx3gQAA2RVkkzg.roa (hash: mbKN457fTUnOw3MdaP/O9IlT3j3fwRDhf3hiIlpCzIg=)
                          24: a8PPU1ip3j32Ymgqfu62wHKo5mw.roa (hash: pjbHZ4qnhuGinRxZROwWTf+1L8XWffBeqFR4/Nx4i4M=)
                          25: bIKyF2Q2GTRRfkCcfpg-PYm-LAk.roa (hash: S0GM3HoDdp+EGNSxNl3mIV/O8dn7DSvjLXDYeT6IM4U=)
                          26: bV5g9xO1gWLyZE-xFxBp6KcQkc4.roa (hash: ywUsGA0qRHlNgSAcO124wmmxvQg54JHyL7K3WEufZNo=)
                          27: eXmt2jVibjpqoe6NGuHZQJz6WVM.roa (hash: 22Fr4YmY+8Ydz5UaUG7pknY6flPqfENyc12ItVwexCQ=)
                          28: glK6ZuS9aqKDNeeSV_q0U4t5vXY.roa (hash: s7+RSd0SFVoNOLR0ritAMahQjQAKwe5bQ1PhYBQniks=)
                          29: jfh4ndJVi_2OCC9En6iTi8N-1Kc.roa (hash: yAiRDCOqj4K8MDuwTH0iwPZgdvZiWfos4vKFlx6nBmY=)
                          30: lCEndQQuRFKwVDrjJIr6SI6t0UM.roa (hash: y4vvvIiOM6IWgLq+xv6Y/UunBkXZxLfyP01+4Mj48hM=)
                          31: lti_ZS1qdJ17vzlUErHLJRdShuM.roa (hash: pXwn0qmcFCbouYnI/xcckKVTRJj3c7qW6G8+Sd30GnE=)
                          32: m6CFvFAczr2F2DiKaFi8VY6jdPc.roa (hash: 1cETzaUqMjEIhVmKAeMSNUEoxmYNmG6Gm0P7w6RCk0k=)
                          33: mTnpNXtSRSshm6IHF4xPDb9VAyE.roa (hash: mWRi8SVlY7LD0pXjbijK7E8xwH1QgR+28+JZDNM84HA=)
                          34: mXIUM2kiyOLjpAVTpXs9HhfDNfc.roa (hash: gABdSnnh7vVHsofsdTGV+68MIIXEAwF2Pew3xWqm9n8=)
                          35: m_3H1L33iu_sTjlK1X6PySnBCCE.roa (hash: VeRZdbR5GDqWeXOFTzkrb42trAhWtCXjDpqyk5HJZrY=)
                          36: m_fA9JV4UbPXvhLhsaGYJOi5eq0.roa (hash: RK7A9Vb2xwxqtK3XxCZOKxVeAKSGlwepdjvL35LN7+g=)
                          37: nWKr43KJPGiZdKkpuyeThhqeASs.roa (hash: JJbd06WArevN7NTvfMbhFxIEnpHo49DD/vbrjs5BiOg=)
                          38: oHEqPAe1ivuwFNv9bGllrDKsai0.roa (hash: wG4lmKGW2sDhafNch0IB2B5XrD9JZ9PYTL5b8W0MG0c=)
                          39: raV-nGfCRH7nb4cH2VBHwr8bFdQ.roa (hash: emSlxFHfN6IxHEyPyRdKwviBvDuHbEBLYDJSglAnOps=)
                          40: rrE5_Xv44YbQ9qA5W_yVeWLWQqk.roa (hash: aWkyJwhgcYJNcVUtvT2FylXeuHe4GVHP7OIlYAfjgCA=)
                          41: rwid864otSc2caBOwHGaSFtuYfU.roa (hash: 36zoJ53OOCRGlpIyib1zJrHiukI78yrS/aL/uOH14CY=)
                          42: sR6h0Cn5s-Bq9SjJGOCNFGe2Nh4.roa (hash: Gcl+FQ+1UdjTsp72zIusAoy+k/zDoz9dviOvEiJn6EU=)
                          43: sTU5fBJp-EWdh_BTD1N_DRnGv54.roa (hash: kDUJ3apAD6Z4RTY4CyhZzTpQCvGoDLl/umBo8RSMUaM=)
                          44: uAPoqs4XSc5_GKACeOHF5LLX89k.roa (hash: 0Kc24VcBAtQsQHN2WWJmVuSPxh0vQzVYQwNYhKs4Ue0=)
                          45: v-jvspyAIOF2zU4NrMiOG-KnURQ.roa (hash: AKzSr9rMfOU9kLz3zWKI9iRObXxplMowbVYJ1pCTEVs=)
                          46: v6un0SLKHoyUdlbWhmt_wnpdUDI.roa (hash: QrFjt3OgZToO6oMj5dfqwQ+OO7th5JfOPvzKriOtW0U=)
                          47: wEri72pFsS9Dly7L_lxzY5OEiI4.roa (hash: bHZk0We/xQIz3XiIA/tBI7ytGpmeQt2piWvfbNOjUp8=)
                          48: wJqVatnwz_JACg6Z3PJikK2KuzA.roa (hash: qVtqZA2lMr7M1sPO5Sj/r63rOcaQEXbeL0LGhouPaLE=)
                          49: y0k0ikvekbGdKC42Wx53vvJWs58.roa (hash: aHtCxHWTyZV0fo1WWYLzoswzW2IzqLy7KE+msLBfGcA=)
                          50: yKP2nA7yymgE29-Up47_8mTwpbs.roa (hash: /Z6lbsZFXfhtYtUn2xJeLeR9w1jkClj8BOOR/WhoB0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:ed:e1:a9:aa:d8:b5:64:ed:ad:04:1b:01:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Mar 25 18:00:44 2026 GMT
            Not After : Mar 26 18:00:44 2026 GMT
        Subject: CN=03b8e89d3a786cc765bea7f3fb00343c395c98c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:3f:19:11:2c:22:07:70:52:c1:bb:75:43:
                    3b:c6:fb:44:75:39:10:f1:23:68:43:69:a2:e2:cb:
                    6e:e4:92:a3:37:68:1d:b8:a2:1a:6e:03:1e:c6:09:
                    52:33:9b:b4:ad:a0:94:30:b5:c3:c5:72:d9:91:c3:
                    b3:5b:0b:2e:79:01:6a:ec:63:55:d0:b3:6e:2a:1f:
                    21:e3:74:4b:8f:d1:5a:ec:95:2c:96:28:81:a1:1b:
                    6b:63:9f:4a:f7:b4:df:2d:31:cc:f4:c8:6f:7c:7e:
                    f8:01:34:83:b2:e0:96:87:3d:4c:5e:32:0b:8f:1f:
                    59:bb:9c:71:57:89:d8:0c:0b:f6:f2:67:57:ee:fa:
                    b9:2f:ab:42:91:b6:83:1f:c5:7c:d1:f6:f1:77:46:
                    f4:e4:f6:d9:21:79:83:51:9e:68:91:11:75:e0:69:
                    43:eb:29:32:eb:62:1e:1d:ea:5a:42:7c:19:61:2c:
                    08:10:b0:fc:5a:42:d6:11:32:27:d5:02:b1:bc:cd:
                    f5:4f:f7:9a:03:08:cd:5c:39:32:8b:3b:82:01:cf:
                    07:f6:19:e0:ad:70:85:96:a8:4a:42:9f:4b:8d:29:
                    14:b8:e2:1a:68:58:1c:db:c8:9e:12:48:24:a2:fa:
                    77:35:bb:3e:d0:4b:91:bd:59:bd:7b:33:29:a3:52:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B8:E8:9D:3A:78:6C:C7:65:BE:A7:F3:FB:00:34:3C:39:5C:98:C7
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:22:ff:d0:dc:ac:b0:c2:18:d1:49:f8:13:52:60:a4:d2:45:
         8f:19:7a:17:26:f3:ff:f5:d1:4d:80:47:60:c1:d0:93:38:e9:
         44:09:b6:5f:a7:b6:f6:7f:aa:07:e1:93:1a:6c:e3:63:08:3a:
         d3:f9:0a:11:aa:fa:cd:75:17:ed:f5:8c:54:ad:41:7b:94:4a:
         33:a0:bf:f6:52:d4:bb:60:b8:87:c6:54:be:08:e8:95:c3:0a:
         36:dd:6f:78:a8:bf:fa:29:02:1f:91:8f:c4:00:e4:35:ec:6d:
         c6:23:41:51:fa:a9:37:6b:22:ee:13:c5:20:57:61:5b:a2:ed:
         fc:ff:7c:e7:fe:c3:d1:8a:0a:0d:f9:5e:9e:b2:15:e7:03:79:
         14:ea:57:69:6b:e7:b0:9f:3f:ee:78:ef:a1:22:d7:43:6a:ca:
         1a:d0:03:a4:1c:02:82:b7:eb:7d:fa:03:a0:fb:ab:63:c0:67:
         5c:41:71:33:4c:3b:4a:c0:a6:63:6d:d0:20:bc:f4:56:ac:78:
         b4:f4:e1:87:02:4a:6b:11:44:99:6c:d8:e3:8d:64:b0:f4:88:
         c8:78:3c:47:ec:97:f6:63:b8:99:5f:2a:62:2f:1e:85:4d:07:
         f5:ec:c6:27:37:1e:21:a6:02:46:8d:fc:93:de:d8:08:7e:75:
         09:0a:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----