Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          g2IQgaWZAvWNY2shC0F1K78niBPuQAnbyhBjw/PgVrY=
Subject key identifier:   B5:3A:DE:09:FF:01:5D:D9:C7:4C:1A:D3:5A:11:6E:78:5B:3A:AE:0B
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       019F09CDE626004CB16601FAB35355ED03C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          05FB
Signing time:             Sat 27 Jun 2026 15:58:36 +0000
Manifest this update:     Sat 27 Jun 2026 15:58:36 +0000
Manifest next update:     Sun 28 Jun 2026 15:58:36 +0000
Files and hashes:         1: 0IAwiAjMTItOOMcHdx5gKsGtGeY.roa (hash: FhxZfor3bf8rubbZwwQ6rFcyxbTms18uoz9k5T9vvbc=)
                          2: 2JApo5p90Arsl26Gr5UvJQxa6Xc.roa (hash: c4Re3HvVRik6tpHEscFpP+AIIFwDcZYtSk363VU1mH0=)
                          3: 6YdauMxwtaJ2XapsEhB4s_XIetk.roa (hash: OrJfyq6brZkbyt8ajKBE0Bg6XcJ1it9g0va1TyaaubM=)
                          4: AYkWJ2EzQ38eprzb4Om54W15fWI.roa (hash: SEH9hhcS7jqHlKMNVxwzcAf2Fo3jV98mT68L1vDpun8=)
                          5: AkTKpD9hNqiV_5_c6-DMcTgYskc.roa (hash: G2QKxBnm98oc52v99fqhnVJF48h7SOnkbCMrYYDKSd8=)
                          6: CHH3xJ1lzUgyXtbZUmGWR88D-U8.roa (hash: 2I73e56GrDAgMRYeThyxeJT4zvfxFJwpu15CsggS6j8=)
                          7: EU4-k_dmoDtT6xsabRBT9rKM3WM.roa (hash: xe16JBa3iMBkXMbX5oFSDFjVcgVZ+AomLF7FFbZY5PY=)
                          8: FUd3_uiRDwfAHqvhswYvKQHbfb4.roa (hash: JisBSYC59fG7+pF5YDGsAkRI8Xm3kc5i0eweb5iAKgk=)
                          9: Fa_E9m89fUIJZtCefkFZ2jvyFO8.roa (hash: ZAwAoX5HJyrrbaR8aOzdSIPtrO8DX2Vvq7HjudQe7SU=)
                          10: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (hash: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M=)
                          11: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (hash: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ=)
                          12: J84D708JiRdF1Cj0OhAXFyT-dDw.roa (hash: h5yfNRw8lKCbHsVms6lwRL8YMmiaidYr9RU7tr43vl0=)
                          13: Nd9KOFXDH4nonVF3CLoZj0Hyts8.roa (hash: cGMmKZgE701PzM2RG0kAHzIsPSvLqz8JKOXln6VOjQk=)
                          14: P7WwGvvwFXmh4fABYUJ_msVvLKE.roa (hash: kL4yU4YOV5dM2KF8KvUrRfIMnadarcJ9PnrgsHV1qjQ=)
                          15: PySi_r05c6LXRDl03Ybqx22kdU8.roa (hash: 1VLm01zFwPWJ5jikHjHKoIVo1U6YTTKzr44kY/GZkZM=)
                          16: QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa (hash: xbQrT4SCRDGICNyiKtX8aOdkuj5ohxB0sU4mS/MuyaM=)
                          17: T3CGjfK93JB4yv3aSmt2hZVJ5-k.roa (hash: 5/8YsK2cfD8hBwYS8trgRORWrt/LLjKKpPwdSNrbCbY=)
                          18: TI5iSboBSb34nvWw9YkvdmtfqTQ.roa (hash: KNRYvE/OPg2DjdlYs3zFozRnYM1t7S8Ks/ErR9B5Qyg=)
                          19: UmIn3HEWiK2GDmhIr6ww95r-n2c.roa (hash: YoVJhQktjcmU6U7jw0e4jjVpOHdbKEvs6zK7O0/6/qE=)
                          20: WyRZi-sUZh3MOog_wYfb0oI7ZOM.roa (hash: f+3hTIxoh26vj1UBcI228DyDUVmvEok49GU3m+OSU2I=)
                          21: X8i9J58_ThC0Mj7eqSqJMQj4v-s.roa (hash: OMLzVnErANW2DCbY7lo8hbX+X2anfgc7ZLaNfl8lBss=)
                          22: X8sdbycHT12fl8v3f4JjpsnZTG0.roa (hash: 35gVkSTJeST2VThCOqua4110t4pi9FQFLTgTaz5Gffk=)
                          23: XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa (hash: 5KFbFF9jJpeEzZqgnXb4J0jAscVydeWpilyaP+Yf3mo=)
                          24: aHikDoY7PTlE63g8681nazruKQI.roa (hash: ze8lLrQN/ERMv9fQP68OAX0YeYGfw8cezJvf2Z6IrAU=)
                          25: algNXeBnWxlc8W_yfgEXDKVh734.roa (hash: +8v/ZEG/pBK5GYXIEpGkYZzjhYA72COaS0gR5SOoPO0=)
                          26: cuZj8eYZctJvbxdMgAXJDVanMaQ.roa (hash: RPSnYZMixt6Uuo3FTDTuvO1zf/RtU59/JgKhacEXRt4=)
                          27: dH_1OzAPPrfylvenJVqfoXRFDIE.roa (hash: j8nt7xmODifPjkHjnPEW6mSS5TaB2f9JmW3fq4nu5ko=)
                          28: dIkIIwMJlVngPHY00W7so9kXee8.roa (hash: TIHdrgcUvKTPC7X6t/4o0xwh0i5oON/QpQCpMxfjv30=)
                          29: eBZBMiz3QYerwG6SbFbZrVwDKWQ.roa (hash: 5lkHlJfFYTvBVC8dPVFzykNqImx18wCe+3jtaUjAX8o=)
                          30: f5P6u6aM_WBX6oou1dbKJRmkC4Q.roa (hash: gQ8lTmP0GdnTrpE2PnSmuAmpkOeYje54eg1h9FeBLxM=)
                          31: fMSedJSqv9C6sYPgIeTBDq0FJhE.roa (hash: zAkJp90Xulr6wHS8heu3SwA9t6lCNg9Bdvap7WsW6UQ=)
                          32: hVZvZmnVG3vImv8u5xBAfUbmOJE.roa (hash: IX++zAzSiaacYYsA4R2ARxccQ5OWLEdk2sTnOt7Nhdk=)
                          33: hrzUT60RppU12sijbO5nUnIsLDE.roa (hash: +JirVR+wIPZ5lVwuA3SZmdQkTSTYsXEklEIVJFUFJXU=)
                          34: iIt06y_hUdGc8HNkpEJC_WYDW5w.roa (hash: G0N9HxEnblWUsnq9try/TNSpWeFRaa0FkNLO3f6+MRE=)
                          35: iurf5I7OwjJvxaeg-v3lapvW0ng.roa (hash: nvYBXAiP6Ei+Kjhf/1Hl6QUpDaIRspIu82KYWDIJ5D0=)
                          36: jG3Dh9NK1AwrjwwGGFY5wkmMz3c.roa (hash: S6/q0DnQXdPfHXdd6Go0CjgaE+46cnNpdsH/zK3Wgnw=)
                          37: kJ4OAD2Svd5bJYqmvYEji53-_z4.roa (hash: t8SioCeXtK9DLdCYfNYnzqNqAYLRXhIt2Q9QBJ+7cUw=)
                          38: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: +biJgl11taOEPh2WoFH1+TTsGG6na85sWj4Ro7UPgxM=)
                          39: kdFcmqLC4vZTSXT32gV8EUP-QNE.roa (hash: yQWODWgTn25H8wdYnnKejMNbzxFwWRHY5/TfEd/0N+w=)
                          40: lve0auYv79eq4qzf0mQ_AhIFFns.roa (hash: oj/7DGlqpIcXpi2JkuKZTadf3KCrdph45/36BvOdoGU=)
                          41: moI9DeBg2QtdD9wbIRCAeujYiCY.roa (hash: xrfXx1gOpxEvA3MW11AUhiF0Qid/L5JA+RuF8pfxLv0=)
                          42: sqdXQjfm4onO1QiOFsXJu-JeMZs.roa (hash: Qw1x6srQqo+v0XYWJ9z2CM3xz/OxwTMeNmtDU3qoGRM=)
                          43: usONDL8T4fgTBytzqulEpYviayY.roa (hash: Azu+8j0Xu9e6mdLb/nqd9cTH4O1l40KtbUavU6T1tq8=)
                          44: wUeG7HGNdVl0Gnd5NjwAqvNucmY.roa (hash: YEN8L1c4TKxs75gQCQvaBGhz7S7GUfbutjpdYlRXeu8=)
                          45: ypjfFzQ0QqPSs16bFYUPfxcJ65U.roa (hash: HysO/GVC8GjAoGltPAZRh0sGuDRiRjVIRsqeK/65o5M=)
                          46: zdoGHslQfORCsHysfL1MQ89qhoc.roa (hash: +ESbnqbtl8DXZybkOl6R7iRbJ8xjLZddtqGX/YhKd1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:09:cd:e6:26:00:4c:b1:66:01:fa:b3:53:55:ed:03:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Jun 27 15:58:36 2026 GMT
            Not After : Jun 28 15:58:36 2026 GMT
        Subject: CN=b53ade09ff015dd9c74c1ad35a116e785b3aae0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:3f:67:f1:9e:dd:f8:d7:f1:8d:b7:36:a3:
                    95:60:47:53:c7:ad:60:44:97:b2:65:bd:45:b0:55:
                    c8:5f:2e:b7:7f:c7:05:5c:5a:fb:93:26:85:51:a7:
                    ca:6b:d9:e1:ec:55:c4:f0:11:ab:ae:8b:48:98:78:
                    c4:72:d8:dd:7a:8d:00:a8:9c:65:87:57:e7:2e:b3:
                    fb:75:d9:1e:e5:1f:6e:2d:78:1d:1e:5e:37:3a:40:
                    74:15:c4:86:c1:2e:ed:21:a4:47:3e:3b:67:0b:b4:
                    02:16:07:43:a3:87:e9:2e:6e:bf:10:47:5f:3d:ae:
                    bd:53:5f:2b:ca:77:24:9f:77:d7:d4:c3:71:13:75:
                    09:92:14:e2:02:cd:4e:65:df:a9:13:60:e9:24:f5:
                    ec:ce:76:7f:04:75:6f:97:f4:ed:4f:24:68:1e:d0:
                    9b:fe:90:9f:53:3b:51:7e:62:1b:dd:8c:42:c6:eb:
                    4e:98:a9:9e:88:e6:b5:81:5f:1a:76:3f:f5:b4:94:
                    97:7f:22:51:b1:7c:c9:75:42:f5:15:29:58:5a:4e:
                    04:fb:52:9a:b0:37:65:ac:d8:15:00:e4:dc:32:41:
                    4d:dd:2b:9b:3a:16:88:c0:50:84:0f:67:59:00:8f:
                    f8:7c:6b:5a:06:0a:e1:08:f5:31:e5:52:ee:d2:1c:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:DE:09:FF:01:5D:D9:C7:4C:1A:D3:5A:11:6E:78:5B:3A:AE:0B
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:c1:34:fb:77:99:a2:93:07:81:96:d6:24:eb:64:c9:c2:
         0f:38:f2:f1:ab:c9:6f:43:5b:db:60:55:75:02:52:1d:94:a0:
         51:43:ec:35:9b:f5:e6:8f:88:26:41:1a:8b:34:4c:aa:ad:a7:
         f0:7c:b4:a4:19:dd:92:e0:8f:af:f0:f9:0f:c5:4d:39:d2:50:
         e9:8d:0e:08:4c:e2:19:8a:28:c0:29:11:7f:41:2f:1a:85:38:
         43:0e:6e:f3:00:ec:0f:4f:a1:33:6a:3e:50:5b:81:47:d7:8f:
         e0:59:c6:eb:1d:59:55:91:d5:ea:71:df:33:89:42:cb:3f:bf:
         40:f3:99:5a:e0:4e:06:dd:fb:70:3f:74:2d:65:2d:50:7c:c1:
         63:f7:31:28:d2:41:53:34:a0:d6:8d:0b:68:72:be:1e:d0:50:
         fe:96:cd:d2:10:b6:98:04:62:71:b7:dd:17:ac:a5:ad:f6:e3:
         52:5a:ed:f7:01:87:09:e9:9b:a1:f7:2d:27:56:ee:06:16:1e:
         16:83:cd:c0:b0:3c:d8:c6:e5:cf:80:79:e8:8b:d1:13:08:57:
         52:93:82:2b:69:ce:d6:7c:13:96:77:21:51:de:49:de:5b:91:
         39:28:0a:d8:51:43:0f:11:05:3c:a9:d6:01:e8:10:3a:03:29:
         92:9e:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----