Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          j7BIXmhtb09SswgtZz08Iq4ZfNG/JgM7fEnCY1aRH5I=
Subject key identifier:   C3:72:CA:FD:C1:A5:42:7A:D3:59:DF:BC:2D:74:AC:FB:FF:75:40:67
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019DCED0B29F0CAA4B1396D6873BB0E2766F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0CA3
Signing time:             Mon 27 Apr 2026 12:01:16 +0000
Manifest this update:     Mon 27 Apr 2026 12:01:16 +0000
Manifest next update:     Tue 28 Apr 2026 12:01:16 +0000
Files and hashes:         1: 5HW8zLPLznfqUxUNyTpDFY9vGw0.roa (hash: jK18epl37v4PqkLcmNcS8ap8X/7NG9axWJ770xDMXcY=)
                          2: B8sy3_ktMjmvz_Vx32lg_nQccTc.roa (hash: bK5/40BeY6wg8mqdMQ18mLOTKqKSB1YnA9Zq5nJtUEs=)
                          3: ECtLWMVzwOZgCeREOIEtd2ceymI.roa (hash: fHGaNvUIUj3FjoH0hKJ1fC57VETbpNrkjc9oXVCr5zU=)
                          4: F743Yhy2Kn_kF745KRVYgrkdMeo.roa (hash: szQfhB+zJsnW1gIc3ei9F3Cljh+wqTrql840+VUgJIM=)
                          5: FfXhF1YKrA0XtrAmczYs_lVEp4M.roa (hash: koCh9hxPoPb3+Vr+SRdOs2qO7w2WiTLso0/yEctUc68=)
                          6: FnEFmJCKdHk7bysnxmMOnQ1m2-E.roa (hash: 601aDMLF6shq3cPPa6X6iOVdRo8AE66iVQ59SXSNf6I=)
                          7: Gasfj6rzEe3-zsj4Lj91Mc98mKk.roa (hash: 4yFVsWASC2DVldLBh1GiEJzBLWl9NLqEFtgBbzD84bE=)
                          8: HadOqbA-zW7zuAMsfZ5snCO_uJI.roa (hash: c383oFdITf3uYihF/VSMwy3YXg/GVpIdA63Ws7pcO3U=)
                          9: K3K_I-Dc8ENn6TfKPBPKLKot-Ck.roa (hash: kwAP+l26jz5UjvHCOYHXO8LDdJVxpPlMT5Wh19k0w8Q=)
                          10: NCHumvKgs7NfR8041SZJklVd2qI.roa (hash: F8xI+1meNgniC7FEVl+GsQ49N42uPqVuC2fo0vtO9Yo=)
                          11: NbOSHl-maqtSswfVh22N2HzFBks.roa (hash: B+1iWPfnnXvEUNfYtxq3DMNfsrMFykPwhCyoIYzPDmM=)
                          12: NbcI4f3nr-LlP0WjObSw1c3DwAo.roa (hash: Z70k402H+gXJoea55XT/D7IkMhxZNkwbcIeLQcU3ovo=)
                          13: S2uqhGd5VIemjik2qHeVybZJomc.roa (hash: XK9+/uD+Iw2orGdtdQp1Ic0RyG3Erof5uesouhGwg38=)
                          14: SHL6FVDG0VEncJW7x1poREbu2IQ.roa (hash: nawwSLwOYFJ3f74rT00gDboZL4tjWG7XdXoJmwFGVTQ=)
                          15: T8vj1RSK3XjGjOyucs5SLVUbGP8.roa (hash: p4wvYNFnRzMTOmgEcHUG95lgnAhpAaiJ0fl+AHDV7M4=)
                          16: TIKuMxTZ67ljS1MEaKEd5nJm30g.roa (hash: i6fwhPwwZDpXVV8+0MCSm5gIe8Cd4dJDq48e6EPNPVA=)
                          17: Utz02hbZJOPW1CQ4EsVXUO4T38o.roa (hash: keQ25esGP45+zRwUb+W3bNxJ1oalBtqRIrRFzpRrWDA=)
                          18: V8qIhpXdZxJGz0OWGyQg8p_ezWM.roa (hash: qbt0XoIUIGmTpXeLSAtggT8OM9weWSdYMLurKyj8ASg=)
                          19: WFDBbvRDi-eiY4Z7SoKbpPKiU3c.roa (hash: BnsEIW4rKKjSae4ZFuOrsK7zlfaSefyGTIAaHnaM8ZU=)
                          20: YNOoVHCcWGOrumTIt4QqkF1fRy0.roa (hash: D1/rRmk3LZamsgxPE84rp8oQbA0nmq0KIGoH4OKfkko=)
                          21: ZQnjKzMiLPska4NwmS-KarsB6hc.roa (hash: VaTyMYTVE9hwdwkKtBVMYjo3+Z7dKMCqeU0/sZhoqXQ=)
                          22: aVqBDFRHvQquH4WOMH7SkguLIW0.roa (hash: xqz8kq1PxD+Yc0TBepDBB8uWliWrri11n4EFK4fu+vI=)
                          23: d0nUCyy8HLeWP-PCCXeY0G5DHew.roa (hash: j33DDEUgls9Qo7DMMSTZC6ONvqVPRISMZMWPrGVz7XI=)
                          24: eDrzAi9GXEThXh3no2isq2mC-CU.roa (hash: ie+gOn7WFCYqk08KjmqkWdVS8AJtXsDT2UQNmYU+Lto=)
                          25: fOoxZZXoKfFKbUE_dojmHZZTrYE.roa (hash: gdRRDFEZsVqAvwZiFRI39sMYXzD71uw48Ip6EXeGQbw=)
                          26: frGFEFnYHlwmSdEkEqNzcEerZos.roa (hash: CqpfiWHaI8Kpucdq3i4AO0nS9qt5T6lpy/A13dF/CwU=)
                          27: guFbtlOz-cVdnWuwUwSINPp7svQ.roa (hash: BNaICbUM99PP5akZrL/wYa4QckctHFIRaBrJZEL3Ams=)
                          28: j2nemTtzASTAmjXz2bu-htaMQRc.roa (hash: Y3E7xQZmw4Uilx70CdzT+WofEpiS4ELYiTPizMYwt58=)
                          29: jOpQFZewmPq2pi8ogPmFximkzeg.roa (hash: FOMOmzLBvdOaek+CYOQB+g3G3vMvPUuHvzObKY0ixQw=)
                          30: jaBG7e9Cb4KBqFZY1U62rAci_ls.roa (hash: FJmJRU9u8joLPmDJQpVlYHO82qpK/PwuXfnAZz3bSv4=)
                          31: jm8-QyC64SKLapzPwKdGSEmZh-U.roa (hash: K7cfnaOIUk4PYAiHfabhksTWW34e4ilJQVdDrMouZJA=)
                          32: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: mwQHDid/2awhhBOFG2SfLrJ4H5eTgk9NBeeuH+tWt30=)
                          33: jtbJmQG6scpQKy9LQshvC4S6vVo.roa (hash: WGTdvOmB94rKqvZ1x2HJ/agkaGLiBbn3XIVZyM7FJ4Y=)
                          34: kDsPNHHspf1J3vE5ZjTU5waPI4A.roa (hash: jHkCWaVOXIfrgVbY6k4D78W/CE+PQ282fNnCY/tP3ys=)
                          35: kJBGk5-GhB4a1moWN-Nb8HzFpAo.roa (hash: 6m7P2TxWpJieVpLMXXVCsKxcqw2u2ZTPI2S9tg50SPA=)
                          36: koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa (hash: vHwbWKarLLDrFkXHBPDr+Eb8BnaoGU6cB871++he+oc=)
                          37: lj4RgfhoyG5FiDBGDcvbHwFSisE.roa (hash: G/rcqCrsUKzf0c9Y+MEtsvNLT/iwh/sn4otQrQpHRRA=)
                          38: mFGlMTudwn7ALdrNv8GvOwztHCc.roa (hash: umuXgH6LuLdmDkv0+oZev5T0HPHguUPdHaZV3FGnLJk=)
                          39: oDkuZgiVBUC0oZUhkN_q5YvTU_k.roa (hash: 5H6SIrAPK+aOMKRs0Kuie5rBYh412cqHeWTDl57w1EI=)
                          40: pr3f_Vyx9e_vf_-0bQjNPiE6gmI.roa (hash: 8UYNtf7B63yOwod177cqEevQ5oC6um/ojCWeUy8Lku4=)
                          41: q9UCiHUCBS94qPU1QBAGbZ80Jqs.roa (hash: tANGaCvjNSRnjvMKOyr9yjsokMbVWAtZxPPxrnZVq4g=)
                          42: qUsAx2DraAMa8Y5SzlSNQuP2bY8.roa (hash: V4y7uRpiHHEvs+KyRNbN4UiObrLMrthyO3Rv6xbOhyQ=)
                          43: rmfOCXUngu6VbsrOjC8BylUA3Gg.roa (hash: 2tWzXgc3FToTGxYr/7T7kqlA+8uMb6f05pi0Ge4rIx4=)
                          44: sMuPRhM3gm7Vt9eFvsdY_aFefBE.roa (hash: 4QbL6nvh7OKwUhNWNYgcJJ0/aWzLIjGEL86HbnwWag8=)
                          45: sums97Uvm7TdFRWjmVcnOwUzGJ0.roa (hash: RYDFTe1U6hfRaniHkflaE3dJG498svgy21eDqy+x7AM=)
                          46: t1vvR2etKWem9U1A-ahbjlUHopg.roa (hash: G0AJWIVPkm4mok9di6lghZD1/XZGAXhTR1Pi6vIGk0I=)
                          47: tVJRDA7z5sm7NAIsKk575LLXPNg.roa (hash: 1H7jdw1y+xYAKD0ybAH4QLFbZsrp7cdvs2lYlwRNPUY=)
                          48: xTRu_tyayD9TCcxsinHLfOj03pc.roa (hash: +uoJZ25NPRo6h6sjEmam2SV9RmTRqXG+rOsQfHYwAF0=)
                          49: za-LnExB795o0ADlEf73NRgBV8g.roa (hash: lixci9OgIWVaYV96kzzTCwvRA6VguOmrjErH/pjJQdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:b2:9f:0c:aa:4b:13:96:d6:87:3b:b0:e2:76:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Apr 27 12:01:16 2026 GMT
            Not After : Apr 28 12:01:16 2026 GMT
        Subject: CN=c372cafdc1a5427ad359dfbc2d74acfbff754067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:c7:db:c4:d8:e5:05:fa:8f:e0:76:ca:55:
                    fc:bb:f1:e1:c9:89:53:17:4a:c6:6b:a4:3c:1c:27:
                    6a:8d:8d:2f:ca:fa:51:3a:35:c1:c6:09:f9:c6:fc:
                    bc:39:32:c4:7c:a9:2b:61:bf:56:01:7d:4f:6f:ee:
                    5d:23:37:18:0f:2e:c4:ad:66:f3:ad:0e:18:08:4a:
                    83:40:9c:80:d7:51:08:b6:7c:8f:e6:17:b2:b2:33:
                    46:6b:73:04:c7:4d:a2:fc:dc:07:8b:99:57:a9:9e:
                    1a:ec:32:ca:da:9c:82:d9:db:df:4d:13:0d:2f:04:
                    f8:54:ee:c6:60:5b:2a:77:c1:dc:2f:d1:ed:1d:c1:
                    cc:a8:37:24:57:a5:f5:76:a1:4e:c6:46:4c:51:4e:
                    36:5e:93:9a:df:bf:05:38:eb:e4:3a:de:3e:d4:88:
                    34:e3:c8:12:95:b3:32:c1:ef:b5:29:c5:2a:39:bd:
                    07:02:ba:44:37:a8:1a:8a:20:35:75:35:80:c3:ae:
                    46:39:f7:47:2d:93:e2:9e:d2:60:5c:11:c2:1c:ec:
                    a0:e5:52:c3:9c:3f:d1:31:02:24:06:03:be:90:3b:
                    68:9b:a0:47:4e:ca:04:96:eb:e4:0a:44:44:17:0c:
                    ba:9d:44:74:a3:e3:6d:c6:16:e3:63:91:c3:b5:44:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:72:CA:FD:C1:A5:42:7A:D3:59:DF:BC:2D:74:AC:FB:FF:75:40:67
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:fa:3a:4f:91:33:19:34:47:07:f5:66:61:c7:c5:9e:47:
         2f:65:a2:30:a7:71:e9:a8:47:75:58:65:1a:2a:80:d7:85:8b:
         28:14:7a:48:b1:e0:18:98:eb:06:ba:3c:ab:6d:74:03:6e:ac:
         42:22:d6:4c:89:9e:26:59:07:44:b8:12:e5:f8:f6:07:2b:9f:
         e5:7d:32:b0:2e:36:e8:11:76:1b:4d:59:cd:de:15:90:0b:e6:
         99:eb:fc:8f:a3:31:14:98:31:a2:03:6b:5f:ed:09:41:f0:d6:
         8c:8b:ec:6c:5d:87:4a:1d:a2:46:36:d9:70:a7:a2:15:7d:75:
         51:5e:42:99:1b:40:12:89:f2:8b:84:9b:eb:ff:9f:8b:f3:b3:
         c2:b7:78:3f:85:c5:eb:41:f4:df:2a:11:9f:f0:17:7e:49:77:
         2e:5f:54:e7:55:86:9a:cc:4a:78:6b:d2:8a:b6:d8:fd:35:da:
         71:97:37:47:31:2b:f2:27:35:c7:23:3a:78:5e:3b:af:f1:6e:
         c3:64:8e:b5:3e:ed:d2:76:99:da:cd:a5:5f:dc:8c:93:56:78:
         dd:9e:2c:07:ba:c0:ee:b3:cc:66:00:60:cb:17:fa:7a:d4:28:
         1c:cb:2d:e1:52:bb:f9:b6:31:b1:e3:99:37:e4:80:a0:72:3b:
         1a:20:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----