Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          5btEOVAgrqQMyK40he9GYUuFEhjbA0L9Wz1pvp9jqms=
Subject key identifier:   F7:EF:03:98:8F:8C:EA:17:C4:2F:A8:72:D6:9F:E1:86:94:71:39:75
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019E1CEB5286D23D8B2DB5DF7329C2A36CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1963
Signing time:             Tue 12 May 2026 16:00:44 +0000
Manifest this update:     Tue 12 May 2026 16:00:44 +0000
Manifest next update:     Wed 13 May 2026 16:00:44 +0000
Files and hashes:         1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=)
                          2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=)
                          3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=)
                          4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=)
                          5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=)
                          6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=)
                          7: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=)
                          8: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=)
                          9: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=)
                          10: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=)
                          11: E7gVR0qJHj_FrMEXG4Yo1G8ig-8.roa (hash: cyGASec5FeaBbarjWYsO54pBqOVobPBGS0ac9+UHUHc=)
                          12: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=)
                          13: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=)
                          14: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=)
                          15: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=)
                          16: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=)
                          17: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=)
                          18: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=)
                          19: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=)
                          20: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=)
                          21: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=)
                          22: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=)
                          23: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: Hjp7oRaVKNrp0KK8IIH7pYgNOR/3E6LNeB131bjpOx4=)
                          24: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=)
                          25: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=)
                          26: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=)
                          27: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=)
                          28: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=)
                          29: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=)
                          30: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=)
                          31: vyj8IOJOHNzTxgRX65R19o7LjU4.roa (hash: 3hTYsnPUXOWnFlyu/vwqxhKvcZltcMLiA35+JAhcAoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:52:86:d2:3d:8b:2d:b5:df:73:29:c2:a3:6c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: May 12 16:00:44 2026 GMT
            Not After : May 13 16:00:44 2026 GMT
        Subject: CN=f7ef03988f8cea17c42fa872d69fe18694713975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:79:60:52:7f:37:9f:5a:de:7c:fc:e9:cb:
                    7f:bd:e5:9a:af:46:f8:53:db:12:f0:a5:82:ba:f3:
                    84:7c:a8:17:5b:ba:4d:96:46:c2:51:61:7c:4e:52:
                    b1:a9:89:3e:dc:3f:1f:0a:73:5c:dd:6b:d8:30:c4:
                    1d:72:bd:31:3f:2d:19:17:57:c9:b4:92:b3:84:4f:
                    d6:cf:b9:42:f7:8b:0a:6a:b4:fd:d4:63:c3:fa:ab:
                    7c:b0:1c:e5:5b:68:d2:02:53:e3:06:3f:c9:b1:c5:
                    01:22:b3:9d:14:20:72:21:19:46:e3:05:62:3e:85:
                    e3:bb:f5:c7:8b:8f:3a:6e:ff:be:56:3a:35:a8:32:
                    f5:19:3e:d0:94:29:82:fe:1a:4b:f4:1b:49:70:df:
                    90:8c:95:d4:81:7a:8b:dc:82:fb:90:cb:65:68:ac:
                    47:ba:c7:0b:da:83:57:94:7d:55:90:73:34:3b:82:
                    e4:98:e0:d7:e5:a4:2f:f5:c8:ad:7e:19:aa:67:00:
                    85:88:1c:03:ab:f4:d2:94:bb:c7:02:71:08:7e:70:
                    ea:63:b9:5e:f5:57:45:31:7c:ea:a4:77:5b:40:61:
                    ee:3c:a6:ad:96:fa:76:4a:40:18:c0:7c:35:44:db:
                    e9:19:d5:d1:94:d6:6d:6e:1a:2b:34:77:95:fa:53:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:03:98:8F:8C:EA:17:C4:2F:A8:72:D6:9F:E1:86:94:71:39:75
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:09:10:d6:8f:6b:ae:c1:3e:f4:e9:0a:01:ee:d0:c8:33:
         c1:ab:5e:d4:49:47:6b:c4:b4:6d:bd:6d:89:5d:cc:8f:25:12:
         51:c7:9e:f3:c7:d5:d5:83:69:0e:63:a3:19:f6:14:f6:37:87:
         e6:dc:e8:84:0e:93:a1:8d:24:ea:17:e6:5a:7a:4f:96:54:4f:
         20:b3:bf:52:09:d6:cc:fb:49:a0:d8:4a:b1:b8:38:97:89:02:
         33:89:4c:b4:4a:a1:58:0a:00:3b:e8:3a:e1:2e:b3:f5:47:8e:
         60:cb:88:50:b6:14:ee:5d:15:7d:96:67:7d:4f:54:6f:4d:2a:
         2c:ba:89:1e:1b:ee:8b:d5:c9:f7:07:3a:d9:66:33:1e:64:43:
         64:73:4d:3d:e7:41:f4:7b:04:be:68:3e:03:6e:58:65:9d:6c:
         ec:87:c2:9d:d1:a8:2d:f9:42:de:c1:8b:c8:49:33:71:50:00:
         90:7c:af:5f:4b:6e:e0:4f:ca:a5:36:82:20:cb:07:6c:ea:fd:
         e6:ce:9d:ef:86:94:83:15:30:ad:9a:ed:3d:3d:8d:d6:9a:8a:
         f6:19:ba:81:d8:b6:ba:5f:f8:83:76:c7:51:04:00:63:1b:30:
         f5:5f:e8:db:c5:2c:6c:df:44:ae:bb:cd:72:b2:ed:a9:1d:7f:
         68:01:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:18:32 2026 by rpki-client