Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File:                     hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier:          kZ0q84PJrVUZ7MBycJrdEjA8L159AhZUeJzCKYJ1QU4=
Subject key identifier:   58:15:B5:91:86:7B:55:1F:74:B6:69:BB:96:41:95:D7:9B:8D:08:20
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019F11C05EDBB44BFB36151815FEBDDE10B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number:          1209
Signing time:             Mon 29 Jun 2026 05:00:47 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:47 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:47 +0000
Files and hashes:         1: 0ew4m4ItSCVepyc29nNm9tAEIKM.roa (hash: qJf794gHKOzylfCxvXi/18OeXDgu/UQKuPAemY2FauU=)
                          2: 5H1OpW-AycH1O-bkgqM8Yvh65T0.roa (hash: d9gll8e31C0axgcql2tfiqAMsE0s3zsOdBZT3TwLDh4=)
                          3: 8OnV91N_zqcbSEf40E1ouE7GeJs.roa (hash: m6ppgYlMTCPYh8z67jY4eoshyn8bp37m9v5Ohrm1dI0=)
                          4: 912ggk5y8hlaC5Oq1RcqiznaZVo.roa (hash: DjODdr6zI59Yx4ri8xsDh4PbCcxOZi8hGkYTMA91hDs=)
                          5: 9kJoijXp_W2x-CNIVGU2gTyIHu4.roa (hash: g/JnEpQSh0oe6cxDrcijYpkgjg+0UyJYEEJmxmRejxg=)
                          6: BWPseGVRi3l-zfC0baLeQvt8npw.roa (hash: S5E2qZZQYizqFQAAmmLpDPTTQwoCIm+hzIsTiWyQI/w=)
                          7: D4jQ64CPf3ChQqrGC5CjuKJAtKk.roa (hash: HUWd5q+dWVXaDmL/ynWKy6UbQqXoypWgmhL40Z/VQnI=)
                          8: Dz_xAtS_XW35D61yLERn3HqqTl4.roa (hash: tE44UbfHA1S8bb6yZPuiKFoXcbPWrwD3Vwt3MEGtAV8=)
                          9: Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa (hash: 3RHPyWH6kpXSP5rfHQPf6P61NWqvSrxvQJZ4KT7Fy8g=)
                          10: IpZt3R636ZD03S5nVfJoWLfdThw.roa (hash: 2lYw7bc2aQ4JwU9fCqx9mE7G9ukNJ7HxjNeKB5KC5KI=)
                          11: KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa (hash: s0iOSLMdSnE0XfkwKLxNI9H4430lKBoEen6MwmkygC8=)
                          12: KyZkiVRwovZC3LrfusqaW75r1Kk.roa (hash: Lb1GKS5ZorjNu583mkwjyw6Qxq2DeQxnAy7pzrOkcOM=)
                          13: NZhAdOiHD1zio5nnxiLQXypL-04.roa (hash: cXPsSX6LaAvczX/mV2tPPsm8l4OjqgM1mQ6UY42I7C0=)
                          14: N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa (hash: byrWfo1ZH5Y1FyKu4vOI/ViN8X+7h1tAmf+YhOXuZ/k=)
                          15: PlTPJtrSm59MicMXGc0T5QFobVk.roa (hash: vxokb71Ck6MbAwg9eWOIXGy43vgQiWwgqzqyuy/N+p8=)
                          16: QS2YfmJsmgaN4NK2AXvh-V9gXVA.roa (hash: 5ZLCC0mXDbdajebs22UeArfWPlsHeHgp/0frCCZOu78=)
                          17: RTDS83BZPr8GOwxlBuZwrgifhpE.roa (hash: dlJ9uDPjVjDJVz0OiQ96/4glzXs5xczVqBOYnJ5HiV4=)
                          18: RbJmDHOG8CdfIUm4-yXshwbt3fU.roa (hash: 8rpXsYWlJfCS6Vck7t+jkmI8ojM9CDZBlR9NO0Um754=)
                          19: VlqgFVIoOR9-G2wJsL8MxPVQAWA.roa (hash: dAKmS3ffO585YXonTbK1C2xZs3hm3oFut9oOO9E3T3s=)
                          20: WLvpNSFQRhdWZaC9I_Ah1bgcC0I.roa (hash: PDyeHlRCszFX07KKXj3dedhf6EgMf4av9amiMdMXQ3U=)
                          21: WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa (hash: YcgwHssC0IerMr07yjE5xNvbp7mTIbDmtcrXLuP8XiQ=)
                          22: YvQ0mb9xL1me3FE2T2kfrR62qHw.roa (hash: YA4zjb2nMxYTedW1G+JpN82HAbrqmEFmZX4LL6ddxjo=)
                          23: ae2K9tmAIRZd8cJcNm_F_NfRfI4.roa (hash: oNt4Xcrn0Ecxv4Mw9KGJgnzzWpMIqz/MDYN4HT/YRYk=)
                          24: c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa (hash: xfIMp+34y6MSA9eYmpp36aGhUYMtBbTbqNw42uiP6Hc=)
                          25: d5r0W7DTPQ3gTqs_-NBseisWlCo.roa (hash: d47i9og2b8C2O7tuxenulALhI1Vd+GOyXorTmCH8MG8=)
                          26: g3ftKCOekd6MZAoyD7J4SL4FblQ.roa (hash: s+hLkIL+pR6iQslHmvl1kgMv8MT83YoyoUr7i6yvI1M=)
                          27: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: GVh8ZV5D6jyrDscgnDHKSco8mX56HrIKIVQ50GnEJOw=)
                          28: kvMWdnWiB8O4z6UGidzk9YiNNds.roa (hash: qQo2451yWLYIM5XcxKIaEg78mQdIPydPLkoRnJCOxSg=)
                          29: lHYwXThCBP7FlBWtS7W6i19LI5U.roa (hash: U/OGFWU5CJfOEtNnO7YwqzY/UYqJfO4+HxhHERKhfbc=)
                          30: lZ1qvLI02CD8UXhaq52LvdNAKcY.roa (hash: /Ub1OWh7+9Ly/PwiA4DBQeFni2XC79IYKxPRK7AiJsc=)
                          31: mei8xgH0X4b3oYs1JzOkVwZUqgE.roa (hash: 6r1vzQ4PHdBXGDQPN9IegVfc1dZJl95MXIt8jdby3Ao=)
                          32: mxRDtABpFcklfSsg3aqlEhdyVAo.roa (hash: +8omy9Xwwaces0V4gWLaq7H+IkKX2MYQDc4o2Yp+Bmc=)
                          33: pAIBYyl03DB7XvIHrbS3QzCtJmw.roa (hash: GQ6FPXE4A+w0U7jvziiqaUGlGRv8mE2hgF7AEFVUJmU=)
                          34: rnIbzC-rnzZRuZ0gE9Ol9qXNpB8.roa (hash: yNGtVyB4AnZrAbIlabLdkD82cw/2NFn/z89D1weqzjo=)
                          35: seCjwUfGeZdQIEL762INXIQGvuo.roa (hash: K/UAMD30hNnbAtpW3PPYRC2bTFBict6use4t0t2OfjY=)
                          36: tFdZOVm-PrcIf_Tv6ZA86VKLE0A.roa (hash: f+mSSCLTTZwRD7r4dreo2vc8CPrb2fYZFXUXgRgCL9E=)
                          37: u0WEwYM28nVJWjjYbM_J1vAHVxo.roa (hash: ipopkQY+H/Upmbbpfts+dH7hizt7AcAZwXiPE0WuDhc=)
                          38: uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa (hash: feZaV8ykSWDhxYFCGXR1xId5z2ls9ece6Z9cvczsEoE=)
                          39: wJAlBUmYe42KOx2tCaF06o0t0pg.roa (hash: aknTSx/FaTXyVrp5NgiU7vXETTnusgRJTCtXz2lhJZg=)
                          40: xHusoPKod-9ku7rZw8cealGeT28.roa (hash: 7YrQt4ZeBYedxpBakuCTTQk0fE7OEPDPBMWW4QTkzWo=)
                          41: xZ2nAeLyC0ezaqseLjJkV22U5mE.roa (hash: oxTigerjyhGYgfgpErnFxoqmId6FySfGh3aATIsx2pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:5e:db:b4:4b:fb:36:15:18:15:fe:bd:de:10:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jun 29 05:00:47 2026 GMT
            Not After : Jun 30 05:00:47 2026 GMT
        Subject: CN=5815b591867b551f74b669bb964195d79b8d0820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:30:c0:e5:2c:8a:30:63:7e:90:12:3a:dc:
                    de:aa:30:ba:61:ca:cb:26:f6:c8:20:17:fe:78:5a:
                    9f:cc:f1:68:07:03:77:77:b1:f7:b3:9f:57:f2:ab:
                    f1:af:e8:7c:4c:3e:ad:d7:7d:57:4e:ff:18:67:28:
                    06:a8:99:89:7f:57:af:53:b6:04:36:0d:20:f7:63:
                    bd:99:db:81:bc:39:62:35:8e:c1:28:44:76:43:d8:
                    8e:00:c4:8b:a5:f9:13:0e:94:87:3f:9e:4b:02:e9:
                    16:35:35:23:c6:2d:73:a3:31:09:6a:12:d6:6d:cb:
                    8a:a7:d7:92:ca:a1:72:74:07:ce:7d:f9:b6:2d:5f:
                    a9:d5:3d:5f:1e:fc:22:65:4b:02:5e:5c:9c:57:c4:
                    15:be:9e:14:0b:de:c4:dd:0f:c5:41:f8:6f:72:cd:
                    6c:bc:ee:ed:a1:48:30:f0:c2:f5:b7:bf:d7:3a:a8:
                    1e:ec:48:1d:8d:40:27:04:c2:00:dc:a1:31:d0:21:
                    60:01:6d:1a:de:41:a6:dc:77:8e:26:21:6b:35:b8:
                    98:14:7b:b0:1e:a4:96:23:12:2c:30:3e:00:37:f9:
                    92:38:7b:2c:c6:15:a3:ab:3b:bb:d6:c2:a7:2b:a7:
                    c8:94:7a:c0:ce:83:00:a4:de:2e:9d:31:5d:ed:33:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:B5:91:86:7B:55:1F:74:B6:69:BB:96:41:95:D7:9B:8D:08:20
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:5c:bf:a7:4d:4f:77:52:9f:06:d0:1c:6d:b5:5b:8d:4f:
         e3:1c:8a:b1:bb:6b:ef:bb:1d:7d:03:7f:a4:d7:3b:98:d6:85:
         b7:3b:1b:ff:ab:b7:d3:d0:31:bc:a6:69:b9:08:75:94:8b:81:
         b1:0a:a6:6b:ad:70:91:2d:30:3d:3d:c2:93:85:0d:94:cd:00:
         b8:40:10:f2:37:a0:f8:75:46:2b:b0:59:4c:b5:ea:38:85:6a:
         27:88:38:08:4b:67:b7:e6:38:ff:c7:5b:ec:40:79:14:05:90:
         e6:cd:e9:fb:d9:d0:59:31:21:c0:1c:6c:74:db:af:a1:c1:5e:
         00:8b:9e:8d:59:23:f5:e9:91:ce:0a:70:f1:12:e6:9e:00:ee:
         d3:df:3f:1c:5f:a1:58:18:f8:0b:9b:13:b1:32:ae:6c:f9:22:
         5b:97:02:20:4b:2a:4f:87:f1:33:e1:f3:40:cc:c2:fd:33:1d:
         1c:83:b3:57:c1:85:ea:1a:c2:42:18:d8:65:fe:af:57:40:66:
         ee:fb:83:f4:f2:48:f5:e9:12:a1:fe:94:13:74:1c:79:a2:40:
         44:72:e7:8b:83:32:d8:f0:be:fb:17:3d:52:be:b7:04:39:43:
         f8:5a:cc:10:6f:40:9c:ec:7d:99:22:68:42:da:90:34:a1:e0:
         94:fb:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----