Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          FsSqMGHIci8bzljlg/adVlZ9mpG8FhAikeVA7nfsR1Q=
Subject key identifier:   4A:1E:B0:81:28:56:9D:CA:21:99:0C:09:D6:20:53:BE:85:8D:F9:DA
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       019EBCFE9D011C24DED5165616E13849C287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          199F
Signing time:             Fri 12 Jun 2026 18:01:03 +0000
Manifest this update:     Fri 12 Jun 2026 18:01:03 +0000
Manifest next update:     Sat 13 Jun 2026 18:01:03 +0000
Files and hashes:         1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=)
                          2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=)
                          3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=)
                          4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=)
                          5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=)
                          6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=)
                          7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=)
                          8: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=)
                          9: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=)
                          10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=)
                          11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=)
                          12: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=)
                          13: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=)
                          14: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=)
                          15: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=)
                          16: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=)
                          17: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=)
                          18: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=)
                          19: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=)
                          20: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=)
                          21: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=)
                          22: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=)
                          23: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=)
                          24: ZjiYZgyUyGbsMqMk6TlW1sfkzSw.roa (hash: SquU6V0h1qjRAFh6dK52pQTVF5CX1sx9oQRtEcOh8ks=)
                          25: _iSoJoSQU2rWRPQsCDM8n6gmZr0.roa (hash: jprC0r9ZYRJlUMCI1TbisXmvXfahkQeehe5ckHPPRcM=)
                          26: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=)
                          27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=)
                          28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=)
                          29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 7XNSb0WEIDYy9hMygxO6dz4XDJ5ErdDpSPUbOUFZhB0=)
                          30: jKMbEYpcNPxKWCIMI-LubBs0DH0.roa (hash: MYW0L6JQHwowkFpc6oaF9/EWozaJk4IrXDYZ8vBuxfM=)
                          31: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=)
                          32: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=)
                          33: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=)
                          34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=)
                          35: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=)
                          36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=)
                          37: xe5Lcg3JTJHR_eWIXGRcFm9VxKM.roa (hash: 125ShwFH043Mwx/YVzTZ+aTSmLm1FUB4/5PjVBfP5So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bc:fe:9d:01:1c:24:de:d5:16:56:16:e1:38:49:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Jun 12 18:01:03 2026 GMT
            Not After : Jun 13 18:01:03 2026 GMT
        Subject: CN=4a1eb08128569dca21990c09d62053be858df9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:fb:c7:95:64:f7:fa:13:7e:dc:cd:38:19:
                    d0:10:95:e5:15:bf:3b:93:35:01:8f:54:b5:7c:a0:
                    03:1a:73:2f:79:c7:56:db:68:3f:85:58:d4:84:17:
                    2c:d7:b8:31:1c:64:14:79:ae:4a:6f:1a:5d:15:40:
                    25:6c:ec:af:84:48:4b:34:75:b8:59:3a:98:6b:74:
                    89:1e:33:2c:3c:09:4a:49:e6:ab:fa:a1:77:ad:9c:
                    63:d7:e6:1d:80:32:b9:5f:fc:3e:82:fd:2b:9b:d0:
                    51:3d:30:24:dd:1a:f0:11:6f:94:57:2e:5c:c5:c2:
                    b6:e8:5b:60:c9:27:d1:38:8e:b7:eb:b9:06:b8:5d:
                    a7:1c:40:97:8e:b9:8a:2f:45:3c:1d:24:28:d3:5d:
                    da:d8:f8:26:aa:b6:f6:11:98:c4:1d:69:73:5a:fa:
                    02:c4:2b:80:bc:dd:66:67:1d:04:ac:11:9b:61:46:
                    05:f9:aa:81:7f:70:75:72:ed:7d:83:23:7f:cb:38:
                    74:bc:15:80:e8:47:84:eb:0d:7b:e7:72:1b:14:d6:
                    a9:ae:80:fe:b1:b4:9a:b6:6f:a4:ff:51:b3:dc:ff:
                    60:ff:f9:f0:72:fa:a5:d7:a6:b4:59:c0:2c:f3:e1:
                    29:01:14:10:74:8c:76:0a:f4:03:33:b3:45:40:a1:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1E:B0:81:28:56:9D:CA:21:99:0C:09:D6:20:53:BE:85:8D:F9:DA
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b4:f3:01:7b:3c:e6:67:90:15:a7:63:46:73:fe:9c:2d:5b:
         71:4c:4e:e0:4e:82:a1:19:a0:8e:03:b1:91:e0:1b:31:82:2b:
         7f:32:89:d2:f3:2b:8c:b5:fe:db:ab:91:a7:42:33:7c:f4:7c:
         84:0a:3b:25:76:eb:41:0d:ec:c6:e2:a7:83:87:c1:78:3d:89:
         c5:cc:80:f7:9f:6e:10:03:0c:ec:58:d2:b2:0e:9b:ae:7f:b0:
         9f:cf:47:7e:8f:90:5d:76:c2:51:aa:83:5e:a4:c6:63:d2:22:
         47:db:d3:7a:b7:de:8e:3d:bb:f4:4b:a3:1b:dc:08:5c:f6:a4:
         df:55:af:58:d5:85:bb:fc:3b:00:24:a3:41:53:73:db:2e:b2:
         ef:79:66:0e:9d:0c:8f:bc:2d:77:91:14:45:93:48:0e:3c:6a:
         e8:6f:fe:ec:7b:59:4e:7b:17:2e:47:f3:50:92:fd:e7:c3:45:
         ae:b2:32:54:c0:45:31:88:75:f1:8f:c1:19:d6:2a:c0:f9:5c:
         78:49:c3:e6:c9:6a:51:56:0b:7e:28:cf:8b:73:ee:87:2b:cd:
         e7:52:38:cb:70:a1:e2:3d:47:5a:ce:ca:7b:49:8d:55:7f:f8:
         2f:96:18:00:62:9f:70:0a:48:22:3d:53:ba:3b:3f:9c:36:4e:
         65:4a:c2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ68/p0BHCTe1RZWFuE4ScKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYwNjEyMTgwMTAzWhcNMjYwNjEzMTgwMTAzWjAzMTEwLwYDVQQD
Eyg0YTFlYjA4MTI4NTY5ZGNhMjE5OTBjMDlkNjIwNTNiZTg1OGRmOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW37x5Vk9/oTftzNOBnQEJXlFb87
kzUBj1S1fKADGnMvecdW22g/hVjUhBcs17gxHGQUea5KbxpdFUAlbOyvhEhLNHW4
WTqYa3SJHjMsPAlKSear+qF3rZxj1+YdgDK5X/w+gv0rm9BRPTAk3RrwEW+UVy5c
xcK26FtgySfROI6367kGuF2nHECXjrmKL0U8HSQo013a2Pgmqrb2EZjEHWlzWvoC
xCuAvN1mZx0ErBGbYUYF+aqBf3B1cu19gyN/yzh0vBWA6EeE6w1753IbFNaproD+
sbSatm+k/1Gz3P9g//nwcvql16a0WcAs8+EpARQQdIx2CvQDM7NFQKFb8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoesIEoVp3KIZkMCdYgU76FjfnaMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbTzAXs8
5meQFadjRnP+nC1bcUxO4E6CoRmgjgOxkeAbMYIrfzKJ0vMrjLX+26uRp0IzfPR8
hAo7JXbrQQ3sxuKng4fBeD2JxcyA959uEAMM7FjSsg6brn+wn89Hfo+QXXbCUaqD
XqTGY9IiR9vTerfejj279EujG9wIXPak31WvWNWFu/w7ACSjQVNz2y6y73lmDp0M
j7wtd5EURZNIDjxq6G/+7HtZTnsXLkfzUJL958NFrrIyVMBFMYh18Y/BGdYqwPlc
eEnD5slqUVYLfijPi3PuhyvN51I4y3Ch4j1HWs7Ke0mNVX/4L5YYAGKfcApIIj1T
ujs/nDZOZUrCXg==
-----END CERTIFICATE-----