Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          lZ/6sG9sWEypyF4xOP90o9D3OK1uUM+pQ8fAbozv/Lk=
Subject key identifier:   10:E2:94:84:AF:2E:35:DF:B3:D5:41:D5:F4:18:A4:A6:02:DA:9B:44
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019FA0A873C89547FB0FD45FEADE7543B88F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          0643
Signing time:             Sun 26 Jul 2026 23:00:21 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:21 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:21 +0000
Files and hashes:         1: 1XOVFtdJcgt7Jzeb_Cx2E1cQki0.roa (hash: V3/JIwKQ8T7G7dLTEO2APuASZDQkBNIcmYWWkSqMFa0=)
                          2: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          3: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          4: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          5: 3NYKAVMXxVgf7TsAiwdPWywZQKs.roa (hash: g8rK7SnoDVJphE9pbIeGL2s6IpfHenSTeQYH+yMvx+E=)
                          6: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          7: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          8: 7pth_lTZD9gsICPhQEW97xKIM6k.roa (hash: se10HW0vAKpZ/FyK6hpEkEmCRTmIFPVzCSzDZc5rBOU=)
                          9: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          10: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          11: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          12: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          13: DYTxErCnEMTTEM07deYL9OTZj2s.roa (hash: 3nh1MYG2w1UUT4lKUmSiAJfITKZmSXnTTY1vGqzp+TE=)
                          14: F7WYsIxqqzriF50vyErOo4yduxs.roa (hash: UzLANsa4cvItOv2fxNqau8ra2px2e8RIpMmdipONeLg=)
                          15: GCyqvuoIZajxaCMA5AGnKxXrf44.roa (hash: 7+IYj0mwkXD09LidnWg7fLKgRz56zO9scadgs8zfXsQ=)
                          16: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          17: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: xAbXtmslXJNaXl1m+DTsn1L157Nd8YopxkmTDaGG26s=)
                          18: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          19: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          20: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          21: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          22: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          23: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          24: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          25: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          26: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          27: SKMTpDTs-7W1IfKgrVSczpPe7Ro.roa (hash: 7HIKEr6ciachQ4AIa6q8fnCWBYbi7WLje3/zszJmxks=)
                          28: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          29: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          30: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          31: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          32: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          33: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          34: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          35: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          36: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          37: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          38: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          39: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          40: kHVXVhV-oDdMKrZ_tvvbXzZUuGs.roa (hash: AOdYhnaRy3xhsfOQ1QXZVlRft2TeKdQsihBblXVoCrw=)
                          41: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          42: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          43: kc7Kfx6EAzUNR1fudBe9Aw5IRgw.roa (hash: wJrT2BB12mn5gXQveAogodqeQtpxZp1yzX5xTILo2ys=)
                          44: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          45: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          46: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          47: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          48: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          49: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:73:c8:95:47:fb:0f:d4:5f:ea:de:75:43:b8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Jul 26 23:00:21 2026 GMT
            Not After : Jul 27 23:00:21 2026 GMT
        Subject: CN=10e29484af2e35dfb3d541d5f418a4a602da9b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:c4:5f:b9:51:2a:4a:02:9a:5b:06:16:b6:
                    61:fa:66:97:76:22:21:b3:46:60:af:5d:fa:d5:80:
                    9c:0a:c0:72:2c:fc:cd:86:85:24:67:b0:24:91:48:
                    df:2d:5e:f2:a1:8a:88:2c:9c:a8:aa:cc:5b:1b:41:
                    33:9f:43:2e:70:b7:90:15:23:32:53:6a:65:2c:53:
                    d3:b7:72:ba:15:a3:da:02:33:59:be:c5:32:7b:51:
                    44:00:de:25:9f:39:87:54:cc:be:40:82:66:61:f5:
                    57:f0:65:a4:3f:26:14:81:c6:31:cc:c2:58:9b:a3:
                    51:87:76:4b:2e:c7:e0:4e:b8:ca:82:42:e0:0b:15:
                    1e:56:ad:7c:72:f5:46:9b:c3:16:e1:40:84:ec:58:
                    e9:ca:9a:f6:3c:70:fd:c1:c8:9e:93:21:14:98:f9:
                    bf:08:1a:26:a5:58:ae:12:d0:ca:bd:3b:c5:c2:25:
                    6a:f8:46:17:27:ff:7d:80:93:61:34:34:fa:8b:f1:
                    6b:aa:dc:6c:9b:c8:e9:30:31:31:6e:53:e2:2a:3b:
                    3c:35:27:5a:5b:df:c6:ea:f8:1d:64:85:1a:c4:15:
                    5f:a2:93:90:69:5b:b8:ae:84:5f:4b:b5:a2:e7:2b:
                    51:d6:ff:19:dd:86:c5:ad:e7:15:62:b1:9d:99:08:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E2:94:84:AF:2E:35:DF:B3:D5:41:D5:F4:18:A4:A6:02:DA:9B:44
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e4:85:03:2e:06:94:6d:cc:fc:d0:9d:aa:13:c6:4f:0d:42:
         08:dc:b1:0f:d1:2f:70:79:ae:fc:67:2e:3e:6b:54:0c:e6:5b:
         57:3b:5f:d5:96:29:20:33:9c:47:d3:af:80:05:0d:0f:cd:20:
         e7:f2:06:9f:46:5e:68:ce:71:6f:e1:c1:ca:80:13:ac:9f:31:
         d6:4b:db:b6:0a:69:bd:8b:d3:14:16:ce:46:0d:72:83:62:b3:
         5e:0b:71:6d:66:f8:5a:91:67:f5:74:99:cd:5d:3d:ef:29:74:
         56:11:ec:27:2a:64:49:d1:77:1d:1b:dd:e9:58:ac:c2:f5:9a:
         af:86:04:10:4a:33:21:87:ef:3d:fd:41:50:7a:87:d7:03:df:
         b1:dc:36:fb:ae:41:34:c5:6a:aa:ce:93:48:cc:91:e2:5e:1f:
         d0:26:90:ef:df:8e:92:d2:a4:d7:bf:d0:c2:6e:91:9c:56:24:
         6d:a5:18:2f:55:d8:a8:ed:72:79:d0:11:0c:d4:7c:39:ff:3f:
         47:15:17:b7:31:66:7f:fa:1e:d0:b5:4c:03:17:8d:7c:eb:b0:
         c9:e9:a2:9e:50:25:bd:d7:c4:db:68:dd:24:97:be:e8:38:8d:
         f9:3d:7e:72:d2:24:0e:b3:75:75:ab:d3:72:62:b9:78:4a:49:
         24:3c:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----