Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          p/3z7+Hl/4CdTwllP+xJHQXzpnAVu8jQAzbk89UFVcU=
Subject key identifier:   CF:00:CE:58:85:05:CF:5C:B4:1E:81:36:CD:24:56:BC:77:1C:57:12
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019DB21047ECA144863956C0146C17B58060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          1A71
Signing time:             Tue 21 Apr 2026 22:01:44 +0000
Manifest this update:     Tue 21 Apr 2026 22:01:44 +0000
Manifest next update:     Wed 22 Apr 2026 22:01:44 +0000
Files and hashes:         1: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (hash: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=)
                          2: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (hash: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY=)
                          3: 2F6KjJmnh4fG2o31oMeDLzlhe3M.roa (hash: U3NzVWajOAPyyw0TujhCrhB+YyvG3V+w8CS/ITzJ3lQ=)
                          4: 34KmZ8VrdL0919mvZ699Gx_xpwQ.roa (hash: Q5D7jFgCzQNL3luiUnYO7ELZV2sJxrboi490AwwO1mY=)
                          5: 7j2_NbelXGkPqeH8Kkeh1ym9_DA.roa (hash: JZe6w9UDx2mGbUG+2NzB+MVQw/jPj68z/y/0hvVfhLU=)
                          6: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (hash: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU=)
                          7: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (hash: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE=)
                          8: 9--7k8s2vBgfv9cOtklxxBdlhTg.roa (hash: JcI1d/J1LHsYTNe6jH8TPu1qVojYT6V7vlT9I10CzUc=)
                          9: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (hash: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU=)
                          10: AY3FW2IB9nexvx9xT55P4qXch9w.roa (hash: APNMELOEu+Yhf/JJ7/H7Cc0dJp9lEZ5EZz4w5dHfwFc=)
                          11: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (hash: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw=)
                          12: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (hash: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds=)
                          13: DsLRswrIL2bjarddWXxgMaYz0pk.roa (hash: cLYKT6oBtCkgrNFlRquRG12LDkvlkhXPXiMWFdBt32w=)
                          14: E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa (hash: bIj2Xc2XKCsJfzUcbvZ5kW4+OYzoOdbLVfr+TNdbU8c=)
                          15: EUp63jBa0leP1OvOcpdNWMC3CUU.roa (hash: uQ1Dw8PQCHKdGUd6o5BdHl0j+XMq3ml+07QGhhX1os4=)
                          16: F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (hash: WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=)
                          17: FYUqU8QWOLIjFef4sxjXi2SRgiE.roa (hash: YKJ2KcRNhHoxqeVVhOtsB2AOrHfzUODw+6sEzqJPF4k=)
                          18: Iv5goV36XyJf8h8Jg9f5HpjvVkY.roa (hash: /qW7a3x4Bqdh0z0vzoFyz5jEY3aTbOB6BSfGATNwGVI=)
                          19: J0gDIkrpboJuRwLiO8mRarT4dVM.roa (hash: KNGfnvH9hN8MLBIB5K0MLNABNs+jOG4jng+kKwDoCrM=)
                          20: K1et99aGlCbRN0atD8laA6wCpoM.roa (hash: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=)
                          21: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (hash: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE=)
                          22: LOHkKboHHj98Sud03cU5OIAfDEA.roa (hash: jTKW2wbQOoCIA97EofLg3elq1L7+ob1lcwso1uyxnO0=)
                          23: Lq1_kC7K6rSER7BBOksIzNMYSkk.roa (hash: PUuNNwZQh6bBg3pgTnG0BSz1bnW6aW1AJW36sfA609k=)
                          24: PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa (hash: mMckO0VWsJIoTMSpV0U2xVZQdIMSSosg9qAEuX4Cl34=)
                          25: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (hash: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic=)
                          26: Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (hash: cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=)
                          27: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (hash: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg=)
                          28: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (hash: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk=)
                          29: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (hash: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo=)
                          30: bsA14uz-YOXsaSFd_5h3VNt_UOk.roa (hash: IXOAQlZ/L2ESEYgfrmyIYrixLqYgar9WBc4G2uIdJEk=)
                          31: h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (hash: 9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=)
                          32: hGFaHcwrovzGAIYRLQIthoUbz9I.roa (hash: EW//8vzHeEI6MBxbWRLHvlhu2IW8hbQriarbUOI8bI4=)
                          33: jwLZoY1l9QraxwasgyAPNL-Lmi0.roa (hash: jB+O1Mki2gVeU0ChD+Q4PPmvQH8u/BH5X6sQaqc9dwI=)
                          34: kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa (hash: KdvanUmTfifS1E7RiGOchWirNpaIWYJ9mP4hoPbCkcI=)
                          35: kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (hash: uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=)
                          36: lHNKO7sNNTzQ5Qf7iXFu2MykVlY.roa (hash: gSBFoF7U8vP8sddt6bGyOP5IVVcu/X14ckwK7nmTGi4=)
                          37: mREkMg5h2CoIwruTXu13t8R24-k.roa (hash: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=)
                          38: mWE26VhH4aZItoNdm61WGalJaz0.roa (hash: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=)
                          39: nfPxS_G9gcj7ar4S7u_X74zr1JM.roa (hash: iHcyW/2KJt0+hDcs3hP5eiwUvwY+CugIYpFmJVOKT2Q=)
                          40: t_QY2lM7jBaSD55UnlYp2CJKlqw.roa (hash: KJk9RhNUyjLDjBZyhKz+Gi6pVQ35sT30ueaJl0wPtqY=)
                          41: tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa (hash: njzm6lCAV+EE4DxRZf3PtyDknOGT9/aOviQx8BhHPt4=)
                          42: tv--uDVRTnOlBD4wLkX6klTWyHk.roa (hash: qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=)
                          43: ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa (hash: S6htXVqvYivJ/J0tyQH0JXgWVjrdc9WIOkcpLunur6E=)
                          44: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: 4jTytHM4NFKW5To7XegPdLC2xfl/HRALCc0pQHmibdk=)
                          45: ye5JAz107-QVpFyi481T0DZx4h0.roa (hash: r2POUNpr2WCW9cC/BotLIDBkPCKZVoCCOPc5NI5c8Vk=)
                          46: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (hash: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 14:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:10:47:ec:a1:44:86:39:56:c0:14:6c:17:b5:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Apr 21 22:01:44 2026 GMT
            Not After : Apr 22 22:01:44 2026 GMT
        Subject: CN=cf00ce588505cf5cb41e8136cd2456bc771c5712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:c8:be:05:36:34:89:44:19:ab:de:d2:d8:
                    0f:d7:1f:ea:b6:ea:9c:fa:20:32:0a:bf:16:dd:4c:
                    bc:1f:89:1d:53:a1:93:93:9d:96:a7:f6:d1:87:af:
                    e2:27:75:ca:31:d0:45:9a:f4:4f:45:38:60:f7:af:
                    f7:50:a7:cf:7c:bb:13:25:9b:22:f7:e6:48:2d:0a:
                    dc:ed:3d:bc:c6:c1:aa:4f:89:53:e2:d6:f5:90:69:
                    08:b0:81:a8:9b:fc:7d:0f:3f:24:dc:0c:5e:af:94:
                    b5:75:2c:91:48:83:4e:b3:19:8f:b6:9c:b6:d9:2a:
                    d1:08:5d:4d:ee:0b:f6:0b:a4:5e:3b:a3:8f:8a:65:
                    a1:28:28:4c:d5:76:ae:6e:2e:20:9c:78:94:25:88:
                    91:25:55:b5:dc:e2:85:99:be:f3:13:a6:95:60:c0:
                    21:91:cd:4a:d7:9f:2d:ed:c8:94:a5:80:c2:53:35:
                    3c:59:c4:d6:99:ba:8a:3b:81:a3:9f:78:c3:cc:93:
                    b5:7b:be:a9:61:42:86:51:e3:d1:8d:67:9a:71:7e:
                    f2:56:8c:98:9e:48:fa:ea:a6:62:3e:bb:12:76:ac:
                    b1:a2:8b:d6:6d:9e:68:cd:d1:a4:97:ee:af:0a:62:
                    0d:cf:41:ff:ac:fe:e8:68:bd:d4:84:90:00:3b:7b:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:00:CE:58:85:05:CF:5C:B4:1E:81:36:CD:24:56:BC:77:1C:57:12
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:85:d9:fa:5a:e1:c2:b0:8b:63:fd:5b:d6:6f:af:52:f7:
         c9:37:9e:c2:b0:2c:9f:5d:b6:d2:1d:24:13:e8:90:c3:20:b9:
         92:e0:f1:da:2b:28:f1:b1:85:96:27:1d:c8:21:33:3a:e0:2b:
         5b:85:1a:51:c5:1a:26:f1:a5:ec:54:b9:02:3d:d4:ed:7b:ca:
         38:61:c1:1d:c6:60:44:a7:6f:95:a3:46:8e:64:fc:ff:a9:12:
         6f:8e:02:c4:0c:2a:8b:93:8b:1a:87:da:52:5b:f5:75:36:d3:
         49:55:63:d0:ed:45:d8:8f:1b:71:72:55:80:1e:92:0a:98:f4:
         6e:c5:82:9f:db:4a:ac:94:c5:42:55:4c:1a:71:79:89:65:60:
         ab:ef:7e:3c:13:fc:57:cc:36:86:a9:34:72:ce:e1:0c:35:d8:
         35:8c:ca:f7:28:37:cb:e7:9b:e0:04:43:54:94:b3:10:96:d7:
         41:65:ab:86:cf:77:9d:c4:53:18:f7:b4:05:be:f0:64:7d:29:
         4a:af:f9:92:ea:33:98:8f:f6:d0:2b:67:24:e6:da:72:aa:4b:
         63:16:df:10:4a:c1:f8:b2:61:3a:46:47:ce:43:b0:79:fb:c1:
         9d:6b:64:b5:6f:bb:d6:eb:2d:09:c5:1d:2e:b3:73:c7:3f:fd:
         32:55:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----