Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
File:                     F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft (raw, json)
Hash identifier:          O4/jnONNHghXGI5gw/S9o5j33yLAUNQtB3Rz2svHF/Y=
Subject key identifier:   86:5F:07:C1:C9:C0:1C:BA:60:8D:B7:3F:04:01:F9:28:69:EF:4F:E2
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019DAF4584E0072AB97A875A2ECC360AE460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
Manifest number:          19D8
Signing time:             Tue 21 Apr 2026 09:01:01 +0000
Manifest this update:     Tue 21 Apr 2026 09:01:01 +0000
Manifest next update:     Wed 22 Apr 2026 09:01:01 +0000
Files and hashes:         1: 03Mih_2YY7tpUjieJYA2mgfYQuA.roa (hash: jAK3fN8sE3VxLVUgr3/MUVTjToB6n+5sp7J0sxvOd4A=)
                          2: 1-xvFQsYF1ACrkwFkYXh3ZXCwRkA.roa (hash: QLzY+LmmnbVQIrKZK8QkWqBQkK5BSlk4zEcv9wc7iYc=)
                          3: 1aWxXojxlPq74qAFpvNIhVm6Yo0.roa (hash: Vs98bPoKRCwq3srHgo8sSxiEURtBVrLpEy1zrtUqPOs=)
                          4: 22YYHd1x3nivkW5Zbs9zhqY28Wo.roa (hash: tYKcXnWvTf9KWdm7yF+anejo/i/mRiPg5XHu87OXjqQ=)
                          5: 273yYIBbogtiT7VaT2amUMKtB0Y.roa (hash: 8JEoiBOYv9v8w4eCGr3DLwQXwlI8A4A+5VaAQ2ATkcQ=)
                          6: 2H_skqhovBQMey1glVXvd3CvdbA.roa (hash: z7TT1bo7CwKpf1V/kSKR6NUcpIpdl9gypdxBd/KE4Kc=)
                          7: 3hJRJSC3BsAdn2mwPHaxe4AaeN8.roa (hash: POoJzGzbfihOGJQFqlbPOD1wro4qF5Rd0io4pLyb6vI=)
                          8: 6yxT7E_fdeCTQ-SymYhV5m-tiWQ.roa (hash: J8COtkEejDGS53ctyJGexs9JjOIjhVnFEmRqNL9+E3c=)
                          9: A-PKAsAt6U9m4e4FSz7nhNKV-SU.roa (hash: ZhWCPnnKAwtC+5yK5gPGvINc5ydB9wqxxUyKz7wF0Rk=)
                          10: A1gp9ThJTs9BAY44TLsL84W7lkA.roa (hash: H7t1Tw8vv7r2W9QMQ0rHi7uDdhUtFiCTDLnI2GLJ3sE=)
                          11: Agm4zUXj9MGziDlMu1Ne9f8fVUU.roa (hash: ogbA0PGLY5PUkErlr8tqpMezV5wpt1rH4NQJrPw4+a4=)
                          12: B98Na_a83Vv6WOdnNK9X7tvtcj0.roa (hash: PXmyFKP/K4gTc4J+g6Mr+MdcQlhc12c0wCEqSEbX9pE=)
                          13: BspvOWyaA8GFCA1fJ7jCXD7tIjg.roa (hash: 2U/cEiEXfM/V9obW2VJzDgequjDHigSdc4MigkHUA08=)
                          14: CSHq2VNBK49Kb5yEHr25AHq4oM0.roa (hash: ALFbBIwmoB68OFvOKrRtrEVl5gFCkjA3RWGyNMCVHII=)
                          15: E3UJEYiaxbMTtZ_2hAT8poKl7sg.roa (hash: ygE8qvePsxWg9Xvncz86dFtUBEUiBduj+gCFOAd6d1g=)
                          16: F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl (hash: leEbhCNTcDbfw2f3RmQgjP4GRYTa9rii2I9Ny8QPda4=)
                          17: G2x8NDr9LHSkINrH0XgS_O7t-Ac.roa (hash: 7q25uWkfgn8bVTorZp4GW1kItUx8sXbKUKO01jUtesY=)
                          18: GHmOBTWpGXiBAX4RNuz2xairNfE.roa (hash: OuocCGewS3iYlKIOMFVODKlPgpbRYcHe7MtuSN6Zz0c=)
                          19: IscdJhK13SbGg-mO1awIT1zVlIY.roa (hash: mxiYgDjEWzo4ikBAEks0u5o4/f6cJ0vesNp9+NA9oW0=)
                          20: KH8LENjvb_hDAkYd5Y9VqmLvZbA.roa (hash: 6ro3aWnqmxCVVCKjzbOp7B4bK8vKFAr7qEV9bOj4954=)
                          21: Npo8-tJ5nr2BUTjjLCDMJJ4s_pc.roa (hash: 6DwvFmdHhl2Ua3ttystglYQQ+J2GIudV9o2uv2/5PsI=)
                          22: OCsj8o8eDq-LupOAwwodUcUkFoE.roa (hash: I7mQhZroNcx8tyoLXEVqIIDtlPXhFZMX+/Snr3zvglw=)
                          23: R46DRTPv8iZIYEiwOKWyx6duD0U.roa (hash: 1AhT49aVAgbdfWqou+7as68mSeLbCUzDmWkPGSl9lV4=)
                          24: SaVR4Q7HaKuonygX4BiiyKQj2f8.roa (hash: YedsxVbqbTDUov0rCr6YDh/qHzCnuBf/6uUWas1ywUE=)
                          25: U4TxPsVTa7fVhEoJHiqaFCDJadQ.roa (hash: TUqXRMJgLOSn2/O8sMVIs8GuCwrxlUKOQLqWYOYh/YE=)
                          26: U5bL1XUWpyqR9zj1AtedsmjrxgY.roa (hash: GK03uc0PHnXu/AnANUZOoM5k0hlXQwfi3sn5VuB2sHo=)
                          27: UtiFZtL_HZNhvCp3NE4gj8KHJk0.roa (hash: SZjDJdSP9xhfFY4NmPF1GoIqEJcEkNvbLODMn5V8ot8=)
                          28: VVtTstTN4L17i5mCI5qP-a5-wes.roa (hash: ZjuU+N/LKCmee8MQhz24MLht129W9qLFn+OWhEoVN8Q=)
                          29: VdgIb8kO5dnUNXZRr0fvY1Q0RX4.roa (hash: NcCuPlNVIJY5jC4bds1YB5qryN+VBbS5rO/OUdDUeNY=)
                          30: Vs1DHp_Ytqjv6-x0Cfj7O5cxIoQ.roa (hash: pY2foHYXUULi03p9Fhs4PL4PCT/ekZHTe2pJ20mlpk8=)
                          31: ZqAlJlzaXgESLP-KZ0ud_hfqmBs.roa (hash: Uy7NxbxFoiKiRSVhLx/XifhLj8jSJNJ1KoRrFMrwT0o=)
                          32: Zvb7SBKHsAU3EmJUt7-IFoJVFJ8.roa (hash: 0Z2iU2FmufTy50JcKoi7RDnhXiwYp01rDNe706CWXgs=)
                          33: _WPBbQoR07m5MJBqc2lND0I5bd4.roa (hash: YndcL8i+jg3Aa2qefXDBKCmE6+xIFguVpi7p+tmvHIM=)
                          34: _xVkrUedo2BlTf2yVRcNixO70fU.roa (hash: XWlnQ9LpA++K4KyrXTVlrtrb25pSBUMvSNc5QyzpVek=)
                          35: aQ_XEUx76hk1UHalxNyjhtBxOVI.roa (hash: 8RhlrZVLnBwHNsWqD6T6RLEy/kcOZeRX0ChN8Bdzjl4=)
                          36: bVTuo8Ua3g-TyKuMDhWJl9Dvstw.roa (hash: WIkVU+skIaxRI8MrZFEEe8oIF0mlOk9UbWKDn45Rtlo=)
                          37: c5YWHdt2Gz-x1KJU2pIEZCsnlU4.roa (hash: JBOLeyHiPdmo6FIkKJVhSmJ1QXdC6ktgHW6RGieImJo=)
                          38: ct32c3c8R0sly7tm8M6qk_mBdLI.roa (hash: 8krsnGKmfckNjjctBsXzlQJfV5GWpwB3R4O+YYwcuRQ=)
                          39: dA33_XtJFILspndoUVbmhq6cetE.roa (hash: E+I1B1oVN9sljJqRNtt6wq3uPChs0BZBmrrLJeCfQoo=)
                          40: eBDU0UYp5PO8yer2A5myHoVG-EY.roa (hash: E8gIvf1jz3hHMb5MZIeqe32IoG0IP4c5+roo1nWbduo=)
                          41: fCIIjCzR14do1xCeHcVIxLStLbU.roa (hash: HCdC0u8y/wrHMyAuBedtz6USGypEvfS1r4TQ/Hwg6Ck=)
                          42: hFDHqxfu3ELJrEt10jkgGJU4BX0.roa (hash: dLRNM5NMConG84Ak5QkK3PCTAVyQZ+OJnQPTtaatifI=)
                          43: is0EnvWxBPEcQc-uhA6pSD4wVsE.roa (hash: TG7LCQSxU7K04L4wepceEoYh58uTf5CY2c5WyD4xo9Y=)
                          44: kevWuWuM59mqNl7Ud5xuwS9qh-o.roa (hash: lAJBhSuuq2cd8rRZEptb6EgrJibsHsepnjUaWWi3bi0=)
                          45: lib7_B2JV_2EGPQ1T0ZpbPWfJTA.roa (hash: rUiyyTFZWCCjkpfeSLadPYcL1VdSJNSmUlEu3qf9KgQ=)
                          46: mdiaixFAtKVAle_yc71OzgrqZsU.roa (hash: 0nHaPy4PrdxcDSuC6ptpYXCuhhdlY8U2HfrfuEFTI+o=)
                          47: oI30TaQkzDahr37tajkMEIXKAzY.roa (hash: RTVxMi/95yqVwuSHeUZOXHWC2+rI43AVkGKRhOOCHw8=)
                          48: oSWAW_xtfRP1kJjTdeT7-EMsHhs.roa (hash: VrDqucHuEE6dnVKOl90iq4hpJn4sjUlsylTzaYP83Dw=)
                          49: qffi0MxUdevXw7Nd9dw7Zq2HdFg.roa (hash: +JFsuK7Pe3sn5/5q4f3WK5DOq4OHJjFdBWYzWhmxms8=)
                          50: qvsyr7mOIlBTfAgYW7FZ8m3NyLA.roa (hash: aFBnBBs0nc2fVrxhesGmQ/aq1LQzrkJBa+ZqrGcBpho=)
                          51: t1BI9o0fu5dZsx5cOKNWg_1EVU0.roa (hash: gLkYe0ayFDVojDNPYqtHF+6Yrh/6vonPub2qN2J89DE=)
                          52: wSJGaLX9QwZTUmdhk4ASNVFogD0.roa (hash: 4zfy1/MhvkcOTenheY8J7j2BRrkVWE52j25oAI0/Qvc=)
                          53: x5MutTEPnbgd_uNRyErQKDRWB0E.roa (hash: WexIfZdXr/x9MMXBE3muUtfyGm2FP/27sMxk42yDt7I=)
                          54: zszDY8EXcW-NR0428bjppMBC0l8.roa (hash: bccTrdZww9/RmWqt/6W5qfbow/tDyIJgG1Aw75wfKK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:af:45:84:e0:07:2a:b9:7a:87:5a:2e:cc:36:0a:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Apr 21 09:01:01 2026 GMT
            Not After : Apr 22 09:01:01 2026 GMT
        Subject: CN=865f07c1c9c01cba608db73f0401f92869ef4fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:81:6b:dd:11:5f:8f:89:96:d5:70:04:77:
                    7d:ef:b0:11:30:4e:32:7e:ae:ce:9f:ac:fc:86:c4:
                    99:73:d8:9c:d6:bf:55:7a:e1:f2:60:24:d5:9e:f7:
                    6f:f3:bd:1a:ce:3a:5b:43:c4:68:d4:8f:9b:2b:d3:
                    d6:22:37:fa:0e:db:bb:fd:46:2a:fc:61:2e:14:d9:
                    a6:30:b9:ba:f6:c0:90:57:32:ad:82:0d:1a:db:eb:
                    6a:9e:c5:31:9a:e5:e1:a2:8e:b8:2f:61:8e:6b:11:
                    be:5d:b1:48:d6:f6:d2:f4:df:ac:9a:fe:99:01:7e:
                    e4:ec:8e:15:7f:48:78:7e:49:8f:ad:36:1d:5a:2d:
                    68:25:4f:98:25:51:a8:81:e3:a8:c6:b0:af:38:ae:
                    06:14:30:82:23:4b:fc:d5:c5:a1:cb:34:a9:69:45:
                    8e:dd:47:d0:d0:07:79:a5:f1:a3:92:85:cb:6d:91:
                    42:3c:3c:c2:ff:76:76:93:61:ad:01:0b:3f:c7:33:
                    db:7a:ab:e3:4f:2c:11:00:ce:9b:56:ff:0c:4c:d8:
                    a6:7a:c0:1b:6a:b1:d5:60:a2:66:d9:3f:ad:c2:c8:
                    3e:0d:47:8b:56:fb:9d:b9:46:94:f5:10:ae:f7:b5:
                    e2:57:60:af:05:d1:71:b8:63:65:de:54:57:b3:d1:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5F:07:C1:C9:C0:1C:BA:60:8D:B7:3F:04:01:F9:28:69:EF:4F:E2
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:0d:c2:bd:10:2e:61:e2:8d:43:75:fb:3c:00:c2:e1:5b:
         60:14:4a:44:dc:f6:26:f3:49:90:92:08:fa:d0:4e:36:3e:e5:
         16:54:94:8d:0d:e6:77:66:b5:3c:44:5b:a9:bf:82:12:8e:71:
         e5:8f:2d:82:03:18:7a:cd:22:7a:d9:e6:cf:4a:5e:ee:66:6d:
         3c:bc:4d:93:8c:69:3f:66:f0:33:b0:4f:7e:be:6d:9d:be:ab:
         c9:3e:f3:a6:54:bf:37:ca:80:dc:5b:cd:17:a6:ea:7a:b9:ae:
         e1:06:40:94:97:15:35:d2:74:d4:bc:49:86:87:9d:4a:7b:29:
         38:bd:cb:a6:d1:da:48:e9:f8:69:de:ab:a8:b7:83:31:78:17:
         7d:4c:ec:7d:57:96:72:25:22:43:7a:af:65:be:a6:c8:86:f0:
         93:40:36:63:b8:68:0f:b4:16:d8:81:ae:df:9d:f9:86:53:81:
         a2:22:44:a6:10:9b:50:a9:72:e3:5e:c2:a4:df:c8:44:86:5c:
         f7:b8:55:45:c0:c8:3f:a5:04:68:8d:23:08:70:e3:16:39:72:
         66:f5:df:13:cd:7d:b3:5a:47:0d:a9:ce:3b:ed:9e:cf:84:50:
         ba:a5:5d:c1:72:97:8d:f1:21:4b:05:30:84:e0:3c:66:c3:fb:
         4f:94:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:14:45 2026 by rpki-client