Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          /bVwaxd+KvmghAA17W9Iya39/bR3bcPbSCpJTjGWtfc=
Subject key identifier:   1E:AB:97:99:99:1C:24:7E:CD:F5:E1:45:3C:33:29:60:AD:C5:83:8E
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019D27729A94D4C7478355B7059EDBC173AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          04E8
Signing time:             Thu 26 Mar 2026 00:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:54 +0000
Files and hashes:         1: 14uGQ8WMqrRLKyUZ9kqWu4j1e8M.roa (hash: Qnr3eRkYvbDJQKaS1S3aGvCVrdkDT01CmCbfF6l/2Gg=)
                          2: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          3: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          4: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          5: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          6: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          7: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          8: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          9: B90wLC90Rj0MQGZL0STOoi505J0.roa (hash: Lezj4c9FnHyrfbbbklEmIeFidZD8OuQTzFH9GxN7llU=)
                          10: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          11: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          12: EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (hash: iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U=)
                          13: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          14: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: V3QO0/oN6u+QzCJWaqjP/40KXweEz58ANAtelgazGjM=)
                          15: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          16: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          17: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          18: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          19: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          20: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          21: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          22: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          23: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          24: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          25: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          26: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          27: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          28: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          29: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          30: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          31: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          32: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          33: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          34: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          35: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          36: jPU42eSfoA2tlNgN2hIojOiHe30.roa (hash: /L4zqco4TkMw5ksHGNn7iEBvLxKh4kpSoFBetJiOpEM=)
                          37: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          38: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          39: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          40: sHHPkO0J7VTcXTXF-RIeT7s1g3g.roa (hash: D58Ex9z4eGz7TddXigGeJ8b4dWofKWGtUoeIVLJ3MoA=)
                          41: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          42: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          43: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          44: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          45: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:9a:94:d4:c7:47:83:55:b7:05:9e:db:c1:73:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Mar 26 00:01:54 2026 GMT
            Not After : Mar 27 00:01:54 2026 GMT
        Subject: CN=1eab9799991c247ecdf5e1453c332960adc5838e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:ca:ef:43:c7:7c:9d:ba:3a:a5:53:af:49:
                    d3:85:88:36:39:9c:78:11:c1:00:59:48:17:8b:1a:
                    bc:4d:b0:a0:45:d1:2c:bb:0d:bb:e5:9a:34:fa:0a:
                    76:f8:8d:98:61:a4:77:29:cd:1c:41:8a:3c:8c:9f:
                    1c:a4:fb:1f:22:83:5f:76:fc:aa:68:f7:4b:78:d0:
                    b5:8d:49:50:af:41:95:f9:cc:52:90:59:a0:67:6e:
                    46:63:dc:0e:14:92:e2:f0:a4:07:ba:2d:2e:34:9e:
                    f4:3e:98:4a:76:b9:22:04:05:2e:b7:2f:fa:49:37:
                    d9:4f:de:65:8c:3c:68:c2:1b:17:5b:ca:1d:95:86:
                    b2:c8:8d:7d:2b:ab:e9:54:47:ba:26:e3:9c:1c:7a:
                    0b:7f:48:49:f7:4d:a5:2e:0e:8b:af:00:be:02:7d:
                    0d:af:18:10:3b:1e:3c:1e:b0:63:47:2f:97:2d:e8:
                    92:f4:65:c5:57:6b:27:13:53:34:79:77:58:d5:c8:
                    7d:85:90:5c:7d:f1:29:ae:7c:4c:19:f4:e5:16:ef:
                    c5:6c:3d:8d:31:bc:29:f2:25:61:64:e7:74:3e:7a:
                    c3:3d:6e:db:05:ca:de:7d:cc:3a:b3:3c:95:e3:af:
                    25:32:2a:61:2d:6c:c9:d5:8c:63:3f:64:7d:d5:3f:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:97:99:99:1C:24:7E:CD:F5:E1:45:3C:33:29:60:AD:C5:83:8E
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:05:4c:8c:fb:e6:92:fe:c6:54:2c:f0:f6:e4:33:5f:39:5f:
         6c:b6:1e:5c:15:77:13:09:47:5c:84:ad:4c:e2:ab:f7:f3:00:
         8f:f8:86:8a:a7:1b:09:2a:e2:f8:65:88:60:d9:b1:eb:a0:37:
         9a:f1:f0:8a:63:c6:da:f5:52:44:da:87:2b:28:0f:a0:a0:53:
         b4:cd:13:3e:95:01:87:b7:4d:ba:d0:9d:7e:b0:b8:33:d0:53:
         95:b9:3f:15:35:b3:03:a5:c0:3d:61:a3:44:35:89:6b:ab:5a:
         20:6a:8c:f6:e8:0e:3c:34:71:72:94:78:13:26:69:0a:89:1a:
         60:fb:22:54:09:d3:7a:ae:0d:1a:04:22:a9:24:4d:d5:51:9d:
         0b:dc:7f:ba:68:ad:49:f5:0e:2b:65:c2:e0:24:2e:b7:71:c4:
         3a:a3:3b:4c:4d:14:86:d6:f9:45:d9:e0:79:36:27:f3:73:60:
         b5:97:ec:0a:23:72:80:7c:ad:8b:1b:04:c0:61:ec:3c:0e:3b:
         03:16:51:2b:42:98:c6:ec:11:a4:eb:9e:59:1e:a8:af:8b:5c:
         a7:ea:9a:73:34:9e:8b:f7:f5:49:8e:3a:18:d7:83:a5:94:bb:
         1b:d1:18:4a:bf:c5:fb:1d:06:76:e1:37:28:6a:8c:81:49:3a:
         6e:fa:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----