Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
File:                     QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json)
Hash identifier:          aZvvloBykv6BQCQ1LV2qy0X60pk09QO/1vEus/FnJJw=
Subject key identifier:   C5:C8:AB:36:F1:57:A5:A2:3E:0A:8C:9B:0B:AB:E4:C8:D1:F7:3F:A5
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Certificate issuer:       /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial:       01A1DB383C9D4770E1997DCEA99E128C2A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
Manifest number:          020E
Signing time:             Sat 14 Nov 2026 18:00:57 +0000
Manifest this update:     Sat 14 Nov 2026 18:00:57 +0000
Manifest next update:     Sun 15 Nov 2026 18:00:57 +0000
Files and hashes:         1: 1-B55FjQOvL8zo7V6UlPHVfvybr4.roa (hash: TVcKjlLkk7fp4KUduHKT//GpRgEZkUFY0EE7s7Cy4jQ=)
                          2: 1AC-Am43eISVETyEF2dNQSt9YnI.roa (hash: oT5rEDU+aaRokyEN1YVbv/fErnDMEaMVFGMuRPRDRcQ=)
                          3: 2jc6X1j6L9qSYj3Wt1D-x_ZXl5E.roa (hash: CXTxEA04lRKeV0JVniPjpMxduWJ8yC+1/Z9dcSXpurg=)
                          4: 3AHQL_pTKa728-rkkxHITCoJMSM.roa (hash: M/PwxbFJ/3HX3TNsjjopcSlttvR8MumiEMNeI+p91jo=)
                          5: 3F59lvQhRhC7OslYNoZZRT8P80s.roa (hash: HGWAJoWGaUwGoSgUB6fjS2UEyHqI2sqF2GVj3StJwK0=)
                          6: 4EEj2r6-0zg77-9LmRLFaGfhLMY.roa (hash: 5E2E41KFCJgyXV96c5tUCWpJksDB+SLI1u4sOWUbURU=)
                          7: 6TUfKf58-fN3KW6nFQaWxOIahkk.roa (hash: Injv2UTFg7753D1JJEsNCvzvfoWnxa9Oum31XMc7Pxg=)
                          8: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=)
                          9: 6g5rTwxdjOxdQg10ljLDWgGmtCs.roa (hash: wyRTs9gdZoVPosSR+/knefOvfAW3btuipE/yqb6jwUA=)
                          10: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=)
                          11: 6vZTTegX6YLDz_pLGe7ULsGR34I.roa (hash: beGBRVfWKZ1sBOmbXdGHIGRaRygIGv0zdwQaasV8Y9I=)
                          12: Ae52YjgarviYUr6ulMwFP6svWho.roa (hash: O+/eKJxiVIPEeqO59x9dfdyHK7ebwfC6u/uFGp3YTj4=)
                          13: Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa (hash: nzXxYj43d9I7O16caiUA6up/fb49HJG+wWUtle/NK7s=)
                          14: D43_xqLhb1EboLCPrtSgnprQPeI.roa (hash: T/NHgaiw/ue1x+uaaeetFUJUaSZtYO4czdQpvyIpmBc=)
                          15: GJFcsmALdQKB9vC3JT1DxuAOQmU.roa (hash: zS/mj5Wp5KNcMGHabHetSnVhYKeKWeuRer9JOOSFjZI=)
                          16: GRAEM3ZvJSFL1UF_ijNQEykmmA0.roa (hash: sTKvGVL9VFkUTzBzmCaH+hYikj3yVJLB0FeAHK7deZY=)
                          17: LOip2gC88s_tszLEcshnRvxltO0.roa (hash: 81dK2nGzE4f7jnbPtGSDEj8xP2j7b5N0yF2RTqK8VcI=)
                          18: NxbpjVs3Uhaa1iz97O54Wc3fOHs.roa (hash: YWjMNHt7mgfjPZ+Q+D+xYGfu4N2/tU52pkEln1AD3R4=)
                          19: Ny9EP1N9sNAB7CoMtrLREpbE0ok.roa (hash: 1gGn1bu6pUWMyQWcH6DQltbX00J441JEGVYUWWv0lYA=)
                          20: O03AzAgn3SyjEXyAM9_h30THE1A.roa (hash: O1VaWBRYjHEO+x+6ZOSSBIo8uwlZXncJTwaiunrCxe0=)
                          21: P42-f39Ycj7kFfoC0CuRFEk7bHo.roa (hash: bR+WRJBL4XxjO44QVg6g7VWQLOMM0TbDVOVu0w6844g=)
                          22: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=)
                          23: PYxQjm48q_uUA3HuuyDwH2gWIfY.roa (hash: gNBO2Lv64feEqWxJ8cjeU83FZOXvd/n4n/ZIynR193Y=)
                          24: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: oWgw0hCeWqeDUz6M94mDkLhQbeUvePgSFTQJ2RkTKe4=)
                          25: SFmMWiPKyVrk7wDrGQeHBSzSmn8.roa (hash: lmRL2asJRlbY+ZFlr4N0H80+1oPQD8GnG9gTXtfaMv0=)
                          26: SS4txg_2StDwK48AVogbe_LiWKM.roa (hash: w8gGVsrCzxxSwFzeMeWOpEYm1Ij+vG9eYwgs/zG1XYE=)
                          27: SxUr87-6qreBHbSmSHvcsRh6Qe8.roa (hash: PaNA4lL6qatnGjMgyP3uKnj/Wbta4zMHxMks89dqqLo=)
                          28: XPJ8M6LGq48OTmV9cU3bs9WvMpE.roa (hash: P9U4NbPjrTWCDlLyYW1rCv/+UAPZSwzVRyzxAdGUpPg=)
                          29: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=)
                          30: ZokRLAVIZ8gWuG46Nx8ADvD8Xvw.roa (hash: 2qfJJJvlEqlQrgnW0smV1KDHs6FwUNklbT4voZTqzrE=)
                          31: aSJWg-ST9UbPPrb5b9vxQEg4f14.roa (hash: t6CqIivI9aWAxRrG4obyLA56AFTqcrV9T1aH7FVKdtg=)
                          32: c86eWb9Ew_1g2al9riah0YqtD2w.roa (hash: PX0gLMaaPGO7xgw2rdVl+dJ9PAPONtw3c+7ZzUJ5vzM=)
                          33: c8FTZu71b3qtNgx-7zA9OAIXIus.roa (hash: oAkqULPbvawo05mATk6h5M5B7Cu4uAxXoM8U9Qo+Rjo=)
                          34: e8LGb2_gN-VUPF0Dg9Om4aP33k0.roa (hash: 6hablptfQQt05NhOypta75XtRDwXfAbDdsgVc+xWj4E=)
                          35: eZZ0l7D4omH03M4g5G_BNS9pD6Y.roa (hash: 8pTl3SZV9QsJJqkB1lJ+Gbe/ieltVk4M0QLx7Dj22V8=)
                          36: g_6tBe5UBBPm29z-5RqNtjnMIN8.roa (hash: p/w8uApV6MwmBcLKylYrIizvBUbAJWW0yAHYzSe/xGs=)
                          37: h57dulCctxnfLGBA2Rtu-JChbAI.roa (hash: ku3KooDRG/Uaqfq9PL0aR3UzOPGdSaNTirHN83cEaWM=)
                          38: iBXMYCC_Ji9k91omX7Kf05LTquM.roa (hash: WsS8+KYQ7lEr0gz91k5kTOUAL8rkR/wrgSF0++gazAc=)
                          39: iOhcul0Pq3-3KM0DuDh6tYCUz8s.roa (hash: FQvGpFhaa5E8omqPG6e1jTHMTZnzZvsDLP+LKnf4V5Y=)
                          40: j2XfhEI0guJ_Opz1DA4eswC4ITs.roa (hash: D61gWGLlAxMEfS7QvesWMK9711uayTWM1scJTPsRcoM=)
                          41: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=)
                          42: nfEgflgRFjk1frdU0DWH-m7ZHDY.roa (hash: m8FdhhNoZTve0rqbQg7m52Rp3F8V99mDiW1MipX2iMk=)
                          43: oo_E7sQLI4PkSl03ojkux04Mem0.roa (hash: gWqODxTdqbdoy/I6WG0DSbd8N/ueBC5ppcq6Y3bsyow=)
                          44: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=)
                          45: sRieXWXUnmpw3cn_Y3GaLU_4g0s.roa (hash: slJE1f0uUSFtnX/JKVpX4v1mUQMwyhaEmSh+/njVReA=)
                          46: wY7ONsF5zvklZz7fSnr9zaGfVBY.roa (hash: kyOnytaemUju7SS8T/hhKxLe1XOmCVMCq3hHMsJ9O2I=)
                          47: zhVIATy6RaKJ9NsMT7jT08uRwoY.roa (hash: WIrcfCMCPEQa2w76ufg9kRLp+sMzFSM7Tk10LB1VXA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:3c:9d:47:70:e1:99:7d:ce:a9:9e:12:8c:2a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
        Validity
            Not Before: Nov 14 18:00:57 2026 GMT
            Not After : Nov 15 18:00:57 2026 GMT
        Subject: CN=c5c8ab36f157a5a23e0a8c9b0babe4c8d1f73fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:58:f0:70:1d:ee:8b:09:ea:7d:95:1a:d5:
                    f6:c1:68:8c:10:af:f0:4b:d0:29:2f:3e:15:cc:8e:
                    e6:f0:12:86:3d:f2:c5:63:d5:89:e2:c5:72:6b:f9:
                    3a:58:09:28:30:17:94:3d:94:6a:19:74:e4:79:34:
                    ce:aa:a1:25:7e:6b:41:27:7c:6a:4e:94:03:89:dc:
                    52:66:ea:24:f7:b5:80:54:8e:06:0e:c8:50:75:a5:
                    f3:c0:1a:ad:b4:36:15:21:50:4c:b8:aa:a2:31:8f:
                    8d:1f:c5:1d:a5:4a:4f:54:9f:24:65:85:31:cb:5a:
                    ba:8d:4b:60:ee:a4:70:e2:b3:7d:25:8b:43:c7:c3:
                    f4:52:39:b0:a4:5e:6e:62:d2:92:5e:4d:b9:10:e0:
                    d1:f3:c4:79:b9:9f:91:a2:53:66:ed:d5:c2:87:a2:
                    7a:04:a3:f2:cb:0e:26:61:b5:e3:86:3f:f3:80:42:
                    0b:6d:62:2f:b4:fc:59:14:cc:8d:bd:21:9c:78:43:
                    0c:bc:3b:92:7d:2d:a0:64:bf:ce:38:33:45:5f:e1:
                    a8:4e:05:04:68:58:00:ab:90:58:2d:1e:dc:fb:c9:
                    f6:d6:2f:3e:c5:96:a4:4c:0b:e2:5f:47:1f:23:d3:
                    63:34:88:8b:77:04:e0:91:fa:67:96:3e:00:02:99:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C8:AB:36:F1:57:A5:A2:3E:0A:8C:9B:0B:AB:E4:C8:D1:F7:3F:A5
            X509v3 Authority Key Identifier:
                keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:74:6c:74:3c:a0:4f:a9:6e:62:45:27:67:ca:a3:96:a9:1d:
         d9:fe:f6:b8:4b:d0:4c:e5:35:06:9c:67:c5:13:25:80:80:54:
         f7:56:f5:34:4e:31:4b:6e:97:3f:e9:f0:db:eb:fc:26:40:cc:
         03:ae:59:8e:81:6d:3f:49:f5:08:f4:50:08:12:47:b0:46:41:
         de:01:a3:71:1c:0b:f4:d0:c5:a6:3a:4c:56:ca:39:65:50:14:
         0a:c5:fe:aa:17:81:ab:c6:17:5e:bb:9a:58:1d:43:e4:24:23:
         5c:5d:37:3e:6e:b2:a1:0a:29:a2:7c:f0:33:22:08:be:8d:7a:
         74:9b:a3:37:f5:06:ec:c0:62:ac:27:5b:17:17:c4:72:4e:7f:
         c9:e5:1d:5a:e1:0a:c3:5b:50:27:59:30:b8:cf:cb:7d:ba:9e:
         e9:80:ab:4f:2d:4a:bd:ac:f6:a8:8e:f0:eb:a4:90:57:01:32:
         1a:8b:e7:99:82:d3:96:53:cb:49:80:47:fd:9b:f2:23:ca:68:
         0d:bb:f4:df:79:07:0a:b0:b5:10:0a:3b:32:2b:19:50:39:40:
         ab:11:de:c8:ce:f6:8d:46:30:a7:1f:ae:2f:24:36:7f:b3:47:
         f3:0a:c4:be:18:92:e2:a2:47:74:7b:9e:e0:1f:87:cc:96:1d:
         22:8f:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----