Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          jotDBDrxAvFbHSVPM80wi58trD/p+etz21Cl7SQmOMI=
Subject key identifier:   E6:6C:0A:62:B4:D5:CC:7F:C9:52:37:DA:AA:42:76:10:74:B8:1A:7C
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       01A08A1F12DBC3051E2B266E697C3AD4E973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          1888
Signing time:             Thu 10 Sep 2026 07:01:27 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:27 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:27 +0000
Files and hashes:         1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          2: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=)
                          3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=)
                          5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
                          6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: WySMirMxKwMUujN4U5IOM72MqxtobXVFN9Ggr8Yc8UM=)
                          7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=)
                          9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=)
                          10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=)
                          12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=)
                          13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=)
                          15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          16: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=)
                          17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
                          19: aOll2yIzGlTioL_5KcotM1hRg6I.roa (hash: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=)
                          20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=)
                          21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=)
                          25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
                          26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=)
                          27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          29: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=)
                          30: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=)
                          31: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (hash: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=)
                          32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
                          35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
                          37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
                          38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1f:12:db:c3:05:1e:2b:26:6e:69:7c:3a:d4:e9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Sep 10 07:01:27 2026 GMT
            Not After : Sep 11 07:01:27 2026 GMT
        Subject: CN=e66c0a62b4d5cc7fc95237daaa42761074b81a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8b:c2:9e:40:3c:d7:57:f5:44:fc:ae:a3:02:
                    e7:e7:e7:e3:a7:f4:73:37:cd:77:3a:92:15:83:3c:
                    95:4e:8f:64:3c:2e:09:e4:64:fb:8e:b8:5f:5f:b4:
                    74:26:de:e8:47:54:09:2a:30:68:69:2d:76:a6:69:
                    f9:8d:f8:bf:d2:6c:3a:b6:f9:44:01:d3:b5:2d:42:
                    d0:dc:8b:cc:58:2d:6a:eb:c1:ab:fe:cb:fe:1e:10:
                    44:84:e9:92:c5:34:15:09:30:e9:f6:d6:d4:6c:45:
                    52:37:7a:b1:f9:0b:cc:ac:79:36:c0:5b:d5:6b:44:
                    9f:c6:e7:1a:ce:a2:4a:76:0f:a7:95:ef:45:b2:eb:
                    39:15:e6:fd:f6:55:cd:5b:e0:5c:cb:78:52:9a:f7:
                    19:ce:73:79:2d:65:76:c8:c3:68:1c:c7:02:0c:fb:
                    4d:9b:cf:0c:d7:dd:e7:60:d2:7d:f5:81:12:72:be:
                    9a:c5:e2:03:82:fc:57:4c:79:19:43:c4:6d:8d:23:
                    2a:74:dd:38:79:b3:0e:e2:bb:61:90:c1:bd:fc:cd:
                    02:4c:22:a9:18:ea:3f:3e:fd:46:1b:aa:cd:a0:1e:
                    a3:52:da:a5:d9:4f:0e:98:dd:64:b9:06:69:f6:94:
                    14:6c:35:a6:46:0c:43:08:3a:ce:b8:ed:58:a1:57:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:0A:62:B4:D5:CC:7F:C9:52:37:DA:AA:42:76:10:74:B8:1A:7C
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:8c:42:f6:9e:75:ca:a8:28:47:36:4b:6b:59:63:a9:1a:
         31:24:60:6b:88:0a:32:90:53:ff:84:c5:0f:ba:30:76:37:b1:
         e0:47:7e:4e:06:5b:e3:9e:ae:3f:55:e9:c3:51:fe:2e:a6:5a:
         92:f3:09:1b:5c:97:4b:ec:3f:96:6d:88:62:78:84:59:1c:a2:
         67:c8:7b:c4:10:1d:a5:4e:c2:87:31:7d:58:c9:61:ee:f5:3d:
         74:f0:d5:d4:e3:b0:22:ce:a6:aa:3a:46:d6:63:fc:e4:ee:4d:
         5c:e1:29:8a:10:93:9d:23:47:71:bf:1e:77:1c:c4:ad:fd:cd:
         de:a9:f4:cb:dc:20:d2:12:f1:ca:c0:c7:ca:aa:c9:e2:7a:2b:
         8d:d0:95:6a:35:df:ce:0b:dc:46:62:96:7e:82:3c:47:7a:37:
         7c:de:ba:f1:5d:aa:79:c0:ed:34:9d:31:46:07:d8:59:4d:f0:
         7d:2e:45:47:6e:3e:fd:fe:2e:d8:e5:c6:22:13:42:90:bb:92:
         12:03:1b:58:57:60:c0:75:a1:01:ef:f0:3b:14:16:e9:6c:bd:
         e9:0c:8f:5d:94:f5:ff:a9:b4:26:8b:d2:61:9d:2d:fb:1e:9a:
         dd:5f:06:17:8f:5c:89:5b:cb:24:63:c0:c4:7a:4f:d9:09:6a:
         80:e2:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:46:00 2026 by rpki-client