Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          KKN9EhpGsNtMJLsqATOYOc4FQ3r5sG+56yYOvs92+Ws=
Subject key identifier:   79:C2:03:A0:DB:6F:E9:5C:80:90:50:B9:E6:7E:E3:F0:F2:0D:76:A9
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019D31F4F7D5090FD499A0E3468D3D67D037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          18E9
Signing time:             Sat 28 Mar 2026 01:00:30 +0000
Manifest this update:     Sat 28 Mar 2026 01:00:30 +0000
Manifest next update:     Sun 29 Mar 2026 01:00:30 +0000
Files and hashes:         1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=)
                          2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=)
                          3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=)
                          4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=)
                          5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=)
                          6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=)
                          7: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=)
                          8: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=)
                          9: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=)
                          10: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=)
                          11: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=)
                          12: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=)
                          13: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=)
                          14: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=)
                          15: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=)
                          16: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=)
                          17: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=)
                          18: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=)
                          19: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=)
                          20: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=)
                          21: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=)
                          22: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: 4nNMpq2sQGdmis7jgAbkibdytjqBCisu6jaiME4CEBE=)
                          23: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=)
                          24: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=)
                          25: hf-LXtiPSASNfLU-opAc0imYKDc.roa (hash: PJYOakcn0oxNr7y/9yoGBcKD4KrbPhwTqw8RW0ojmKE=)
                          26: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=)
                          27: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=)
                          28: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=)
                          29: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=)
                          30: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:f4:f7:d5:09:0f:d4:99:a0:e3:46:8d:3d:67:d0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Mar 28 01:00:30 2026 GMT
            Not After : Mar 29 01:00:30 2026 GMT
        Subject: CN=79c203a0db6fe95c809050b9e67ee3f0f20d76a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:46:f3:ed:c0:3a:80:40:27:f5:2d:ae:69:
                    29:64:7a:c3:b2:66:d3:c2:66:8f:74:ff:bc:18:25:
                    64:a5:66:69:91:60:4d:31:26:59:2e:33:76:54:ad:
                    fc:37:40:36:de:13:ab:d5:db:66:5d:b8:f5:5d:be:
                    30:0e:a3:20:b0:e1:2a:20:d7:9d:b0:31:18:11:40:
                    58:24:10:a7:83:52:33:c5:b5:a8:96:6f:95:09:fc:
                    1c:f8:5c:81:8c:a6:75:96:78:14:7e:a9:9e:0e:32:
                    95:52:7e:61:7f:af:3a:70:3d:01:79:19:d8:c8:06:
                    cc:28:7d:60:c5:c8:67:3b:fc:a4:86:15:10:64:4e:
                    74:59:3c:22:65:fc:af:93:38:4a:95:be:1d:28:7e:
                    9f:12:65:14:6c:d2:f7:15:a3:5e:fe:cc:06:39:75:
                    ce:59:40:a8:17:bc:95:d2:92:7c:ca:c4:0a:59:0d:
                    26:fd:17:82:88:71:ec:5a:09:4b:2e:c1:71:01:ac:
                    a9:1d:87:b2:d4:fe:5d:37:f5:76:39:5c:06:27:8f:
                    03:e8:9d:88:f1:aa:76:4e:f6:b8:a5:06:bb:49:fa:
                    c3:69:c9:77:23:ff:bb:7e:47:e2:4d:ed:b8:46:de:
                    64:75:1d:6f:e6:e0:5d:f2:a7:57:ba:b5:b6:3c:54:
                    c3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:03:A0:DB:6F:E9:5C:80:90:50:B9:E6:7E:E3:F0:F2:0D:76:A9
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:e7:8c:3b:f2:7c:f6:1d:69:82:00:89:91:f7:b6:de:9c:
         9f:f2:6b:ec:0b:f1:d6:b4:29:32:a3:04:43:97:4c:8a:48:92:
         6e:8e:ad:43:80:3c:24:79:4d:18:9b:17:1d:42:95:87:76:54:
         5a:1c:04:56:c2:93:35:fa:7b:37:56:f5:a5:35:b2:04:28:34:
         fe:b5:05:66:95:7d:b1:0d:29:91:49:3e:9e:97:55:98:24:7f:
         9f:42:da:e4:4e:29:f1:32:f1:19:07:62:4d:13:66:b3:3f:24:
         50:60:15:2a:c8:26:be:b0:a9:a2:83:d6:c2:22:fb:12:6d:99:
         a3:69:9f:e2:f2:bb:78:04:66:d0:2f:f5:21:35:f8:38:4f:fe:
         6d:71:08:4b:9c:cd:77:31:b4:37:0d:bc:2f:73:6c:96:e6:11:
         0c:bd:29:d7:2f:f2:6f:12:7d:54:a9:ff:e7:e8:3f:44:72:4a:
         c7:85:e7:35:f3:cd:31:be:9b:fa:9c:98:d8:e0:de:c8:96:f4:
         ab:cb:b2:b4:8a:0d:43:d2:57:d2:90:99:f5:58:da:bf:12:43:
         d5:01:e7:7d:17:e6:1d:f2:0c:19:7f:57:ae:58:8e:b0:c8:c6:
         5b:9b:34:09:a7:48:4d:15:11:5f:f2:7c:6f:3e:de:76:7b:2b:
         07:b4:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:07 2026 by rpki-client