Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          qzWWvvNlossXhiMxUTPVKPQCVJMB3d0OtzN5HM2HEPk=
Subject key identifier:   60:F2:E9:6C:B1:29:53:17:48:E1:56:9E:69:77:C1:2B:CC:24:57:5C
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019CE447819DEDC091E610C157A2A3562250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          188C
Signing time:             Thu 12 Mar 2026 23:00:17 +0000
Manifest this update:     Thu 12 Mar 2026 23:00:17 +0000
Manifest next update:     Fri 13 Mar 2026 23:00:17 +0000
Files and hashes:         1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
                          2: 5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa (hash: 6qzHpGrxdIjiu8z1NvLGeZSk8yFo48qK9MNsjEijr88=)
                          3: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
                          4: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
                          5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
                          6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: iVlDpT+Xk2GAUoVSujjXrN0DysJgVGyuhwkfV9Gp1KA=)
                          7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
                          8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
                          9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
                          10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
                          11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
                          12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
                          13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
                          14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
                          15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
                          16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
                          17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
                          18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
                          19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
                          20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
                          21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
                          22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
                          23: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (hash: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw=)
                          24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
                          25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
                          26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
                          27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
                          28: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
                          29: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
                          30: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:47:81:9d:ed:c0:91:e6:10:c1:57:a2:a3:56:22:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Mar 12 23:00:17 2026 GMT
            Not After : Mar 13 23:00:17 2026 GMT
        Subject: CN=60f2e96cb129531748e1569e6977c12bcc24575c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:f3:49:49:5a:6e:8f:c9:dd:6a:5c:c6:b8:
                    71:b9:b0:be:24:4c:8e:74:9b:15:83:02:17:f0:47:
                    0a:63:e9:2b:cd:fe:05:f1:cf:fe:7c:cd:72:a9:0e:
                    e0:d8:fd:39:3d:9b:32:c8:8a:dc:9c:33:52:f1:59:
                    f8:b7:7b:fe:36:d5:b8:a9:5d:4a:7a:dc:23:07:9e:
                    02:b3:b5:59:fb:c9:fc:0f:11:35:06:08:b7:fd:ff:
                    3e:52:eb:d2:ac:1d:60:7f:65:85:46:59:00:9f:94:
                    64:a8:7f:18:cf:3a:b6:a5:65:28:33:42:75:cb:2a:
                    8f:ae:6a:c9:76:5a:e4:12:6d:7c:b4:8a:51:d7:b5:
                    df:0b:e5:db:9f:23:9b:cd:64:9a:d9:0d:01:74:68:
                    19:ae:92:c7:87:22:49:26:e9:d5:39:a4:ea:43:c0:
                    57:35:ad:eb:ce:51:eb:bf:0b:4f:14:e5:2c:8d:b2:
                    22:b4:2c:cd:98:41:5e:be:55:14:68:75:99:4e:4a:
                    e6:13:8a:3b:f3:6c:be:08:be:87:cb:37:d3:52:f5:
                    6b:d0:5a:cc:58:1b:f0:01:ee:d4:ea:7d:32:1c:ed:
                    2f:af:49:a0:be:93:c2:52:15:c0:d9:27:98:44:ae:
                    84:f2:5c:af:a5:fd:a3:d5:51:ad:28:85:c6:f2:78:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F2:E9:6C:B1:29:53:17:48:E1:56:9E:69:77:C1:2B:CC:24:57:5C
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5a:76:5f:9e:d8:33:85:51:85:e8:28:a7:be:19:c2:49:0a:
         8c:e4:a9:0c:1f:95:63:7e:cb:b2:68:b4:a8:16:ef:c6:ec:96:
         4b:f3:75:3f:44:59:8a:4f:b3:fd:64:87:5c:bb:e3:14:e9:26:
         b2:8b:ef:19:0b:c1:89:1d:6d:a4:b2:7f:a4:8e:5b:43:32:fa:
         7e:75:6b:9e:a7:43:29:8b:d5:5b:49:dd:ab:f2:ff:46:22:ea:
         65:c3:8d:fb:93:38:d0:72:c7:88:8c:d3:0c:19:9f:bc:a0:83:
         87:da:9d:a4:74:5b:02:de:3d:c1:c1:72:b5:64:55:d9:4d:5c:
         ed:1a:26:44:60:7a:df:9f:d6:49:d3:78:92:29:50:6a:24:b8:
         6d:59:18:3e:f8:7e:df:a9:ab:f6:b1:c3:52:91:fc:c3:e6:9f:
         5d:cd:a6:8d:31:3a:97:6e:c1:0a:3e:15:9f:cf:e4:cc:94:22:
         db:1d:d4:6d:25:b0:dd:8e:71:3c:f7:10:be:08:ff:8e:d7:77:
         9a:59:8e:03:fe:cb:c3:b1:36:e9:44:03:4b:fd:85:69:f7:f4:
         76:71:92:12:3b:b2:4f:a6:89:ca:ee:27:78:d0:92:fc:ca:15:
         9d:0c:6f:7f:af:93:2e:8f:53:a0:a5:b2:11:1c:94:d2:51:9f:
         fe:f2:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:29 2026 by rpki-client