Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          rj3mDFq/TSUNyqx4y158bff+kA4HlD9GXk81okLrbpw=
Subject key identifier:   A2:7C:04:EF:1E:90:58:83:FD:19:59:29:2C:07:6B:0C:45:4B:A2:45
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019CE1EBE986F26280DE1FDE86DEFBCF1EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          04C4
Signing time:             Thu 12 Mar 2026 12:01:00 +0000
Manifest this update:     Thu 12 Mar 2026 12:01:00 +0000
Manifest next update:     Fri 13 Mar 2026 12:01:00 +0000
Files and hashes:         1: 14uGQ8WMqrRLKyUZ9kqWu4j1e8M.roa (hash: Qnr3eRkYvbDJQKaS1S3aGvCVrdkDT01CmCbfF6l/2Gg=)
                          2: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          3: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          4: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          5: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          6: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          7: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          8: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          9: B90wLC90Rj0MQGZL0STOoi505J0.roa (hash: Lezj4c9FnHyrfbbbklEmIeFidZD8OuQTzFH9GxN7llU=)
                          10: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          11: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          12: EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (hash: iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U=)
                          13: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          14: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: tc84GaVn0tC2spGUYa0eXBXAgpazN9N/iTaXke8EG1M=)
                          15: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          16: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          17: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          18: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          19: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          20: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          21: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          22: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          23: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          24: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          25: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          26: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          27: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          28: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          29: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          30: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          31: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          32: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          33: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          34: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          35: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          36: jPU42eSfoA2tlNgN2hIojOiHe30.roa (hash: /L4zqco4TkMw5ksHGNn7iEBvLxKh4kpSoFBetJiOpEM=)
                          37: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          38: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          39: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          40: sHHPkO0J7VTcXTXF-RIeT7s1g3g.roa (hash: D58Ex9z4eGz7TddXigGeJ8b4dWofKWGtUoeIVLJ3MoA=)
                          41: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          42: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          43: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          44: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          45: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:eb:e9:86:f2:62:80:de:1f:de:86:de:fb:cf:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Mar 12 12:01:00 2026 GMT
            Not After : Mar 13 12:01:00 2026 GMT
        Subject: CN=a27c04ef1e905883fd1959292c076b0c454ba245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:a1:87:31:53:be:d6:c9:aa:d1:84:e9:fe:
                    d2:45:52:6e:8e:a5:b1:b9:8f:f4:3c:a2:87:92:f0:
                    19:7e:f4:4b:9c:23:bd:14:87:23:53:7d:73:79:a2:
                    2a:e2:5c:ae:ae:70:4f:82:e7:7f:f9:21:03:cd:38:
                    74:83:82:59:5e:41:e1:ec:82:3a:39:18:58:9f:ed:
                    25:4f:fe:f6:5c:08:6a:e2:75:f5:14:60:61:66:22:
                    c6:fe:16:d5:eb:c7:69:aa:5b:8b:33:f8:ef:f4:af:
                    a0:de:61:0c:67:98:0a:d3:8f:14:db:e2:e6:b5:91:
                    58:ec:66:5e:d7:b6:78:77:43:26:8f:87:31:4d:08:
                    99:66:48:b7:c7:69:43:42:55:91:44:8e:76:38:10:
                    af:0d:07:19:ab:c6:c0:32:e1:3e:d9:6f:fd:3a:8a:
                    c1:8b:13:fc:88:2b:84:4f:1d:d9:ac:5b:ee:05:b1:
                    25:4d:9b:ab:0d:b5:0e:cd:a9:ea:41:63:e9:77:95:
                    09:2e:1a:35:71:b0:a1:5f:79:59:dd:3d:da:a9:f7:
                    e1:01:1d:0c:99:be:57:44:db:e7:fe:23:ad:3a:82:
                    1e:f9:51:7c:e0:1e:86:bb:26:71:55:fb:c4:4b:bb:
                    61:13:79:c8:f9:cb:a1:23:9c:7c:f8:ca:f5:4c:dc:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7C:04:EF:1E:90:58:83:FD:19:59:29:2C:07:6B:0C:45:4B:A2:45
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:6d:1a:ea:bd:71:60:b0:22:0f:83:66:f6:28:57:a1:ed:
         13:12:ef:f4:99:0a:0b:6e:37:0c:d2:76:62:36:14:c9:43:52:
         ff:ec:2f:a9:34:28:a2:f2:dd:8a:36:5f:ae:2d:78:40:33:9b:
         1e:14:f2:6f:09:7c:2f:ce:73:8e:04:d4:54:12:21:da:cc:ad:
         6d:9e:72:40:68:32:3a:65:d8:75:18:29:09:8b:9b:77:b9:04:
         e8:c0:51:b0:f4:4f:6e:a5:96:2e:d0:1f:3d:c5:4b:88:ff:7c:
         61:d8:c9:9c:cf:64:9e:69:8c:74:07:9a:54:30:50:dd:71:e4:
         09:e0:95:8e:8c:2f:c6:15:cd:9b:5f:6b:0d:3f:b7:0b:44:28:
         93:01:04:f8:95:00:0c:e6:b4:fc:c1:c3:a6:04:7f:26:37:1c:
         18:f7:2e:6d:6f:59:a1:1b:f2:ce:d1:91:05:27:f3:bd:07:14:
         07:c5:d6:2a:ab:4f:58:3a:5a:09:78:c5:d7:b6:cd:5f:0d:ed:
         19:f4:09:38:39:86:52:14:b6:e6:f9:02:e4:c7:5b:a8:e9:d6:
         02:19:e8:09:ff:88:5d:8f:76:50:a5:74:ce:cb:e1:af:e2:96:
         9f:2d:de:ea:81:f5:47:cb:61:27:b5:75:b1:be:2a:37:c1:53:
         0f:82:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----