Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          dVwGkalajrxIqFkXybsUulO3kj6ZfuLx5vAxjDWPRgk=
Subject key identifier:   26:AE:1C:6E:CC:2B:C9:D0:47:50:2D:8C:67:82:2B:4A:5D:64:67:F0
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019EB8B48C14A1D5AB44D605BFE42AA1CE83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          17E4
Signing time:             Thu 11 Jun 2026 22:01:40 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:40 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:40 +0000
Files and hashes:         1: 0Lm7esoKkHareAs6Ls8vjEmxa3Q.roa (hash: x+lTP2mMfmYdH0ZyCDCtnT35GU+4XuQiyxHUZ4mGGfo=)
                          2: 0jhcYyFON8-mm7dD2TW1JZrlYvQ.roa (hash: FaXeXFusaj/38DF8I3C32Nrq3u5cS6g46vBxQVKmlSI=)
                          3: 1-MX61ORDAEgGzStxHPqb31eQIkM.roa (hash: cgOhBiY8skFAOtiWyBzOjuYndSHYI+GF0dLm5wWs2X8=)
                          4: 1-l5uVc54PydSELuogxMSOlvZknc.roa (hash: IqbYRdGYfwB0/Ape3iNBhfXkFPQtJCX9oUdgHc+bBrQ=)
                          5: 3GpQDK6RUjxER6WqFkD6MrfTePE.roa (hash: oMZnSqlrIwX0HF6cXDzl5mTixP+9NujvpL/rC6+j6+I=)
                          6: 3nrBO5sN2ydgeQAybOfYJbnytMk.roa (hash: Zw/gRLsYG0xWKmlMFeUVC7H8FkwaHfFstqGc6SQAVFY=)
                          7: 3wCNNSuWzSSwYQwg_CL9pzACFMM.roa (hash: HF8Fm/z5VIt/9WuJvChaK+4H6Qn8FFsO9P/WD6aF2K0=)
                          8: 5hxJVaW1ITHjqTzVJE_yCZQu6TY.roa (hash: 4jHQruBZmL2C+S6zlzONMLh0unhRvxQBys9HI6W8e9c=)
                          9: 61rQFUGqJg0nLTLj-Rrzy9qHIPI.roa (hash: g3jur0hhvVqeoUrencrp2/jQZ48qi0hd7qQhX0ZdtvQ=)
                          10: 75MkeVAB6wqfTbbl9R4hRrGVFvs.roa (hash: SDpqmU4lJ+MDSgO6M3+78G3BfOWJYqo0dHAIvZ9Ho+A=)
                          11: 9TJMpeYqsoOoDUusQBPckUuMx5w.roa (hash: glgiITvixFtsZGf3Fx9yb2ESkrKPhP/O4mnFOL1v/4c=)
                          12: CRj57suiWLnitfcdYAQ0fpq77m8.roa (hash: BM0sP2DTYDAmY/abV0dJE1uW3k/F6/Bydu5DJZuP9K0=)
                          13: Cawa-DODLcgEccenA7kSlmsMJQk.roa (hash: iTOAQgX2G9bRdF7X+s3MxrFF2agAxk0qoBnqwrYlVYk=)
                          14: EMGYlLFyG7va5tHSqgNvuA_a5nA.roa (hash: K4h7GbaJUcJNo0E5HuiTdnv50fqxOcqcCoCjsxIgI2I=)
                          15: FCwIxiEEDY1PleIvLIa6TTqCKsw.roa (hash: lecQNWWmvhO3cnwmwlTqpFfyjhIxcOjNyiOGPXfVcKA=)
                          16: GjSR40LYx6Uk1tSZXchrDAV5_FM.roa (hash: dmPBoCrxSTJGl6a45mJDmt04LJWy+gct5xWGz1rrJag=)
                          17: GvLMsK1YIlG3H3ud3AEcdujFVoA.roa (hash: BSzH67VCZLLTTNw1xUILHi1JzYZa1Ek/ANs66qlglA4=)
                          18: HizlzTiqTuK5yatK99t0S4irGGY.roa (hash: e6yJe+XRznL1kEYGrcT8TWqS3RNROSK/qwM9VbNmNQM=)
                          19: IF9Q2mJv-D2RGLIuOuKfNMWVngw.roa (hash: kjzPy/2bPn68qL6lDttpNzisPWOLObsMw4ZdNbjMTQs=)
                          20: JRgE3d1rNe9vs44GRHF6SwRVXtE.roa (hash: Tw5mid4PGhap1bN/JiXsmMDZEWrQouLEemZWuia7EY4=)
                          21: KCMg1rWAyjF2aUsKSYcyVlgvIjs.roa (hash: LRsU+6j0QZMSSik/ispHex4V9d57wSM/OoTJAU9IlEI=)
                          22: KcmV8oBRoGzjxOHt-8ic3_JKEog.roa (hash: I0SFj3nuJizf26jnbqDeLC1lOQjufyA0x0s3y7ZnVXg=)
                          23: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: h7e4pFm+gBMzdpUBDRDVeQocctNKd0hdHxNqxtOBlqE=)
                          24: MPHNqx3HfJMj0eCK6sDL2cRhO24.roa (hash: q5C2xphEnKrAzqKaBfkvfZ6Po1hLeV+9/fLgpIoxUg8=)
                          25: MVdaz8ics8Sd-XffD7C430qY11I.roa (hash: xtPCUH6KPnYcKU0oSSaYFdckSNDB0iw7+CjSZPjS4rE=)
                          26: QaDdxTDIKujsHj1_R2vhxiuywYo.roa (hash: cYzKZHRBZg4cQMpG2FirPav999wiYn13B4xqmO7W52M=)
                          27: R1ohmYJEu56Bfs07T3EgDidDkJI.roa (hash: Y1jRS/ZVpA6RpVUuvHtsb5WhLGj0fmu9R54h10BXmEE=)
                          28: SgsTOpfz4GV5ysHaU_hkxTEuBfY.roa (hash: 6wqRkJqmJOrf7latD4lpHfKJuj57gPHrqy5yXyHp9PQ=)
                          29: Vos0YXlrvSISzNrKBPqS7zLPjkY.roa (hash: B60nLXQoRs5gI3OiafhBiz9AYmOTRBwAZAW2+lTtGio=)
                          30: Wbq3ETax87bNgr0IS2yPIgugFIw.roa (hash: rzQKsoxByu4D7B4LcyGQotg64vsqqzgntIgDVwaTWwY=)
                          31: Yl-c_Z4vHEK-iI9aMfFocbI8cWU.roa (hash: cDP8W9SA7kri+7+m28tZHCLpb7Hu7PBPYZaCs2lbGOk=)
                          32: ZlgR9Wr6dRwYYKCu_QgGesPkRUo.roa (hash: F/KTa7KhD4sbza9rvdpPEqF/Bd5rYWcbJdnRE9lkwd4=)
                          33: _U_w6bXH111HMDU_sQ6-CKmlsuM.roa (hash: O+NWacU5mxgiI23XoSRRPRaw31TaJyyv5c/Hgp1qWl4=)
                          34: _qeKgQV4YyvDP3FhgdytthiDJXQ.roa (hash: 94DaY/N+Pi5r/GoDumGOEfU7J+SovdZjttg7Ii1+hmc=)
                          35: _v2WHlFRDcYhLkjXUloV_hg-H_k.roa (hash: 2xB0wD+Tur4/gI83e6PeVkTwe5048HzykjHm5uoJNv0=)
                          36: b1SYoSctQ6aIsIAy0MojkuPYIOk.roa (hash: xgNc0NfLxyarAEUTAARhWGBOZXXjIfuwJ9TfgP17+Ss=)
                          37: bFT_Z4_-ysHNs5WuSzbJw1AU8jo.roa (hash: KsQGBoDh+Ca9uE3jShzCM613jUL/H5/LE3nQG31F4hQ=)
                          38: fdsXyKST1NSooA0SOdWNXyrQKIE.roa (hash: q49gBnA2IZuUpW1nTeMLqaXrULLEsizhuzjfeilzgRw=)
                          39: fwZq6psMq56Ml0BVrit_Wp9BQ4A.roa (hash: aIQPnLzBx7/fEcGBfohS/yOvrVJole1RPiyfkmAvLQg=)
                          40: j-xoCug8oSXkLy-zRPrQvCr6fM0.roa (hash: Ey2qMtymo6/7vUVDP3c3+HbS2Exk1vQ0aziEB5/WRwc=)
                          41: kkM-u8aI9NOPkDtX2Tyi0THikGY.roa (hash: ehAaGwGwW1/CYWh/qR4IoHFBzAdnsXoWmuDDawEf07k=)
                          42: kvzJ4z4u71EvbDjK364raJ6WEGY.roa (hash: X7jFBMafkq6TdXlHD8jdf2lu7z2MV7abkwkmrenDNww=)
                          43: lWq-fTyJH_c8x_RL0HQZdlijhM4.roa (hash: NVgGyE+t6UpHRgsptpairBBdU4cY7oezcTyDp8PGFvk=)
                          44: nT3CPzgOXFPIxgCiJvzaGFj4iPQ.roa (hash: JRupVB/8+FWibeOM3qCsVYRvWGj1OBxjlkAaV4mHw1k=)
                          45: p239cBbOLA6sibvWSilUs4XV_LU.roa (hash: 2wD/G4UoqtbRToicOl2l4uFB7WjdllylTPbWqZtpZ5c=)
                          46: pJAVbgi9uaf5nf8_qEz50NNIhnQ.roa (hash: qyo9WsdMQTxh9RhYGvavCPJWOZfI7qs/fZyRhZ+/now=)
                          47: pq9eJdbCOIfrvaynnbQZJhA8zQw.roa (hash: t54wtf6PQVEtTTtm1PsZ+Xtd8yxn24JYaMP23lf02Rw=)
                          48: rlmsd6PpCLGDar5RoisaMe8IHhI.roa (hash: 87NJGu3xmNWRFtTUSOeFPV+lS8Rn45UJIMOhad/Hf98=)
                          49: t0_-P-p1FyY1ODpwO0YUkJBxj8c.roa (hash: g7MSzOZksmuKAgTRnCXrR4HOBteag1BykLmwHFt8BuA=)
                          50: th2pTn-En0EvqF1fUXxC_GzD4e4.roa (hash: YWsreN1mrS6/tFSiQgn3+FJfJIWQ+GiL364NxHSL7es=)
                          51: vMZUucYgT5z0znQZnRF-dVJeRiE.roa (hash: W7+gTHKhQj/8XXemyZ/NzWsuUf16BLgdFCj756C84Vo=)
                          52: yz1pKtQyMgtptdlncZbKN2T4oYY.roa (hash: Ae387dsOHzGBlCorX2l0mMZpwYKnxEqAqoAymjWiIOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:8c:14:a1:d5:ab:44:d6:05:bf:e4:2a:a1:ce:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jun 11 22:01:40 2026 GMT
            Not After : Jun 12 22:01:40 2026 GMT
        Subject: CN=26ae1c6ecc2bc9d047502d8c67822b4a5d6467f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:26:cb:04:dc:90:6a:60:06:22:76:cd:b9:
                    79:25:a0:ea:ae:44:23:cf:4a:a4:a9:a7:b9:34:6c:
                    0e:99:32:d9:67:63:5a:d0:25:c7:bb:6a:28:1b:b8:
                    9c:4b:ad:1a:bf:55:54:02:0d:f9:d7:f1:77:1b:90:
                    47:89:a4:ee:b5:22:fe:35:89:70:9d:c9:91:8e:12:
                    bc:64:a7:fa:d5:2a:bc:af:11:fa:6f:74:f6:49:62:
                    65:ce:a4:d7:1d:e8:5c:a7:9c:f4:e3:48:d3:4b:a5:
                    01:dd:72:ba:ad:11:b5:69:26:1f:14:6b:71:3d:3e:
                    d1:c1:df:49:9c:c8:4d:7d:c2:ff:df:81:4d:26:dd:
                    de:9d:39:9b:35:9f:16:f0:75:1a:f9:05:87:5c:1e:
                    3e:06:f5:b6:be:ec:ce:44:ff:14:db:54:bb:b0:d6:
                    f9:a0:ae:23:00:10:c9:e2:9b:f2:43:4e:3f:82:d7:
                    03:d7:7a:a9:dd:fa:5a:bc:ed:4d:13:c2:87:60:4f:
                    a4:50:12:d3:83:ef:5c:59:a6:fd:0c:c7:a7:d2:d3:
                    1a:53:e3:96:12:16:25:f5:47:90:75:ea:ff:0c:d5:
                    19:eb:ea:45:ce:6d:d2:52:61:4d:0f:da:35:70:cd:
                    d4:e2:d9:b1:bd:4d:2d:39:a8:48:14:76:60:8f:bc:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:1C:6E:CC:2B:C9:D0:47:50:2D:8C:67:82:2B:4A:5D:64:67:F0
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:75:c2:32:14:e9:68:86:df:43:25:e1:d4:84:7a:9d:8a:40:
         65:8e:df:4c:69:96:77:ac:5b:91:dc:d9:f3:bc:ae:15:12:a2:
         79:66:45:52:db:7f:ac:13:16:1d:24:07:74:26:13:f9:b8:0e:
         a5:61:de:db:9f:f1:f5:f0:ae:bf:76:50:e8:ab:87:a4:8f:fc:
         cc:92:15:28:d4:d0:36:22:22:90:11:3c:99:79:9b:58:47:73:
         a1:0f:4f:e4:2a:d1:c3:4f:e2:27:50:08:59:bb:11:21:6b:69:
         5a:07:3c:9d:4e:f7:64:99:7b:02:ff:f1:ff:16:80:8e:4a:f2:
         c3:35:26:5e:e0:6b:d8:7e:23:5e:7e:80:56:1d:00:60:7e:56:
         15:d8:42:87:a8:0e:39:d4:61:a9:fb:0d:36:cc:a6:4c:a1:77:
         91:1b:a3:6c:5e:c6:9a:ed:e0:f2:15:55:b5:6a:a2:75:96:21:
         6c:a9:95:2c:9b:67:87:9c:2a:03:1c:38:e6:cf:03:84:2b:5b:
         3e:ae:a5:8a:9e:34:93:a7:80:22:7a:05:20:c7:5d:bb:43:61:
         a5:43:59:01:dd:8b:d1:5a:f5:a6:7e:19:27:57:3f:f6:8f:3d:
         67:58:15:64:cb:65:5b:3f:0d:44:d7:92:34:aa:30:4d:fb:82:
         ae:cd:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----