Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          +Sq3QPvlRbwqwtJV0xvYJOYYms5aeKqinQ77VpvIIA0=
Subject key identifier:   6B:03:F6:1C:83:3E:09:4E:CC:86:64:FD:BC:99:4F:72:1C:07:79:3A
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       019DCD18916402DFE8C52A5995F7B7333948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          16BB
Signing time:             Mon 27 Apr 2026 04:00:32 +0000
Manifest this update:     Mon 27 Apr 2026 04:00:32 +0000
Manifest next update:     Tue 28 Apr 2026 04:00:32 +0000
Files and hashes:         1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          2: 7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa (hash: WflkvzVUJUW28OrasYS+BvErnK7oO9Zw/lOlmQjDvko=)
                          3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          4: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
                          5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: 7O0fo1rOEJktgkFPnRN3IYsjIdXv5yNArc81rkB8guc=)
                          6: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          7: Jgwn3B02uc3mfVfMOZv45UmGgtY.roa (hash: nMSpgFycYN/khqI7U1mF+BBHpG7nf5LdJdR+FjJMiU0=)
                          8: NJmIrLuW3F1xzrQA80p3Jc3p0-4.roa (hash: awtacVA1C8Oyf3wZvaBRHDbSqrMV+Fily6lvWQSoYE0=)
                          9: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          10: SJwzlxfcwICTklf_s8R-67YCyso.roa (hash: DnW64AJKW4oEI9+a5JkKiYx8I8xhqSSHPF/uy8PPKlk=)
                          11: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          12: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          13: USckjRPQ_sgN8RwnHK3U3VXM6gM.roa (hash: onchtlkk/ceaTRNFJVm1mVaJjKm5MQyUt2/lXHM/Vb0=)
                          14: UWnvj61RxMXCdGTXgUybwOUFpkE.roa (hash: UQXxnIOrFfoWsnkN1Vg3gQakqcKwTGfkenZBJ3YxlPc=)
                          15: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=)
                          16: XXSTcRkCx2FdQaklbV11MSDD0ZY.roa (hash: mmZMZr+HshOcyt7jbdu8TgJJ6khX6PBndh04iVbROEE=)
                          17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
                          19: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          20: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          21: h96UmOpvP2IiuRa1zdcgkZqRdgo.roa (hash: RVWvN7ouN/57gofsCcbTG1pWvWa8tMFeSDqaezJgkLg=)
                          22: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          23: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
                          24: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=)
                          25: l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa (hash: HR6ptQCMdThZ1PMDVclOOHeHNKKZwAZroNYyVK4P37c=)
                          26: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          27: lpxyiakpbRTIUo2enZ3s4fYROM4.roa (hash: Mb9/ObCKM9DfZRe9GVLf6ZU5PIlqLwTAzoyTNFiylcI=)
                          28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          29: pMQVecamDodQSmBw-UmLqkRzTyk.roa (hash: EmfM/FtUUlT/f5+MPBX6UPv6rg0dkI+I1HJgurEQFXU=)
                          30: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          31: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          32: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
                          33: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          34: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
                          35: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
                          36: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:18:91:64:02:df:e8:c5:2a:59:95:f7:b7:33:39:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Apr 27 04:00:32 2026 GMT
            Not After : Apr 28 04:00:32 2026 GMT
        Subject: CN=6b03f61c833e094ecc8664fdbc994f721c07793a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:62:92:d5:36:66:9d:ec:26:c0:15:0a:51:
                    18:15:23:cb:d8:c9:1c:2b:6b:08:52:c7:23:29:1a:
                    9a:83:4f:cd:8b:46:2f:41:cf:78:83:56:8f:ee:44:
                    b9:0a:70:b3:03:7a:4d:9e:db:c4:9d:57:69:3a:cc:
                    74:c7:6f:a5:fc:5e:73:96:39:3c:ea:8d:67:8c:eb:
                    9f:6e:ae:f6:8c:40:45:fb:fe:bd:af:58:4d:f6:31:
                    42:9f:92:e0:2d:2d:84:7d:7d:22:66:17:9b:6c:bb:
                    0c:67:20:ed:b5:70:78:33:ab:83:8f:a5:0c:89:fe:
                    f7:04:53:d3:db:3f:a2:89:e6:fa:76:55:dd:25:ae:
                    31:0c:37:be:38:a7:df:e6:bb:9c:ae:9d:3e:8c:6e:
                    0a:8b:4c:06:7c:42:5d:18:7c:9c:9d:26:96:84:86:
                    ce:2f:de:3b:57:43:6e:28:71:2f:29:bc:43:de:87:
                    1b:a4:97:00:1a:99:df:1b:cf:cf:7b:79:a4:5c:ee:
                    1c:1f:aa:19:70:fd:de:08:bc:50:75:d4:48:28:61:
                    7c:68:30:6c:45:91:1c:0f:2b:20:8e:6e:16:07:5c:
                    f6:aa:81:65:a2:0e:d9:4e:b0:7c:4c:ed:6c:f4:63:
                    92:7a:12:13:53:25:5f:b0:e1:22:20:ad:8a:f3:74:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:03:F6:1C:83:3E:09:4E:CC:86:64:FD:BC:99:4F:72:1C:07:79:3A
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:31:74:4e:11:a2:69:64:f6:fc:a4:33:74:e6:4c:33:aa:1c:
         80:c2:2f:53:d3:35:39:11:d2:48:a1:e9:75:a7:2c:32:03:b1:
         ed:3a:de:e4:00:e3:14:1c:ea:cd:5c:18:f1:61:79:ef:34:89:
         ea:09:36:37:ae:d7:4d:35:49:6b:b5:5b:19:cc:18:67:8a:11:
         ed:48:70:12:c0:58:05:ae:a8:98:02:f6:71:6d:44:4d:28:ad:
         af:d6:c3:71:37:c2:94:1c:08:dc:b1:39:d3:51:ef:5b:2f:8c:
         db:71:b4:19:b0:75:b0:c4:fb:c2:f7:56:93:80:2e:99:2a:35:
         4a:ac:ef:c1:27:a1:a5:9f:84:ac:ec:41:db:e7:a6:58:75:0f:
         79:bb:91:e7:c6:d4:c9:7a:c9:3d:ab:af:6f:76:e6:9a:44:cf:
         76:c5:b2:c8:dc:00:47:3e:b4:56:ff:a4:b7:4a:11:bc:6f:a6:
         b8:e5:6a:25:2c:8f:97:99:08:5a:63:e9:cd:3b:26:67:55:54:
         35:56:d5:55:21:1d:76:f8:47:cc:59:05:ab:32:d1:98:ae:c0:
         40:79:dc:98:db:fa:a4:61:2e:35:3b:f3:f7:9f:e5:9f:27:8a:
         23:97:7e:c7:3c:4c:3c:99:7c:b3:bc:67:a6:4b:9c:ab:f5:46:
         87:e1:2f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NGJFkAt/oxSpZlfe3MzlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwNDI3MDQwMDMyWhcNMjYwNDI4MDQwMDMyWjAzMTEwLwYDVQQD
Eyg2YjAzZjYxYzgzM2UwOTRlY2M4NjY0ZmRiYzk5NGY3MjFjMDc3OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR5iktU2Zp3sJsAVClEYFSPL2Mkc
K2sIUscjKRqag0/Ni0YvQc94g1aP7kS5CnCzA3pNntvEnVdpOsx0x2+l/F5zljk8
6o1njOufbq72jEBF+/69r1hN9jFCn5LgLS2EfX0iZhebbLsMZyDttXB4M6uDj6UM
if73BFPT2z+iieb6dlXdJa4xDDe+OKff5rucrp0+jG4Ki0wGfEJdGHycnSaWhIbO
L947V0NuKHEvKbxD3ocbpJcAGpnfG8/Pe3mkXO4cH6oZcP3eCLxQddRIKGF8aDBs
RZEcDysgjm4WB1z2qoFlog7ZTrB8TO1s9GOSehITUyVfsOEiIK2K83QVdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsD9hyDPglOzIZk/byZT3IcB3k6MB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzF0ThGi
aWT2/KQzdOZMM6ocgMIvU9M1ORHSSKHpdacsMgOx7Tre5ADjFBzqzVwY8WF57zSJ
6gk2N67XTTVJa7VbGcwYZ4oR7UhwEsBYBa6omAL2cW1ETSitr9bDcTfClBwI3LE5
01HvWy+M23G0GbB1sMT7wvdWk4AumSo1SqzvwSehpZ+ErOxB2+emWHUPebuR58bU
yXrJPauvb3bmmkTPdsWyyNwARz60Vv+kt0oRvG+muOVqJSyPl5kIWmPpzTsmZ1VU
NVbVVSEddvhHzFkFqzLRmK7AQHncmNv6pGEuNTvz95/lnyeKI5d+xzxMPJl8s7xn
pkucq/VGh+Evtg==
-----END CERTIFICATE-----