Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          ZyVx8xK9zC7aeN0knIv1k6z9m1TCuQ13YSljBHVy374=
Subject key identifier:   5D:66:B1:43:CC:BE:D3:BA:65:C3:54:F0:11:CF:36:37:4D:75:DF:21
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019DCDF5061925E6F73C0B387E54AB436F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          0543
Signing time:             Mon 27 Apr 2026 08:01:20 +0000
Manifest this update:     Mon 27 Apr 2026 08:01:20 +0000
Manifest next update:     Tue 28 Apr 2026 08:01:20 +0000
Files and hashes:         1: 14uGQ8WMqrRLKyUZ9kqWu4j1e8M.roa (hash: Qnr3eRkYvbDJQKaS1S3aGvCVrdkDT01CmCbfF6l/2Gg=)
                          2: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          3: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          4: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          5: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          6: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          7: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          8: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          9: B90wLC90Rj0MQGZL0STOoi505J0.roa (hash: Lezj4c9FnHyrfbbbklEmIeFidZD8OuQTzFH9GxN7llU=)
                          10: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          11: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          12: EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (hash: iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U=)
                          13: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          14: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: /N0SckWWvbvahZLeRo9FcVqvAjNxQdKlR0OllXK+uMw=)
                          15: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          16: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          17: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          18: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          19: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          20: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          21: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          22: O6JvXty2j7ym5Y2G4RCSXIEljDk.roa (hash: 1TbYuTRfPFEykzqEYVvRle4iVH9R2gCf3kkotExpOo8=)
                          23: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          24: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          25: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          26: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          27: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          28: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          29: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          30: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          31: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          32: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          33: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          34: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          35: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          36: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          37: jPU42eSfoA2tlNgN2hIojOiHe30.roa (hash: /L4zqco4TkMw5ksHGNn7iEBvLxKh4kpSoFBetJiOpEM=)
                          38: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          39: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          40: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          41: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          42: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          43: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          44: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          45: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:f5:06:19:25:e6:f7:3c:0b:38:7e:54:ab:43:6f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Apr 27 08:01:20 2026 GMT
            Not After : Apr 28 08:01:20 2026 GMT
        Subject: CN=5d66b143ccbed3ba65c354f011cf36374d75df21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:49:0f:c8:7a:59:f2:36:f1:6b:b6:f7:cb:70:
                    73:61:12:73:a5:cf:c3:41:26:c5:84:67:9e:bd:d2:
                    92:b3:74:c4:32:38:3a:37:07:31:50:db:0e:19:d4:
                    eb:8d:1d:59:4d:f6:6b:e8:af:cb:bc:06:26:ff:61:
                    da:6f:28:5a:86:35:31:9f:95:e7:59:4a:a6:c9:b2:
                    30:30:e3:f3:63:8d:02:e0:10:ca:78:23:06:4e:af:
                    2c:33:c4:0b:d3:ee:22:c8:87:93:6d:61:26:54:27:
                    22:3c:dc:ce:d5:65:4d:e8:a5:18:16:91:1f:e2:4a:
                    a3:e2:5f:08:af:89:9b:fc:c7:a2:17:3b:a5:22:da:
                    14:39:c3:8a:43:dd:dc:8e:53:a2:2d:78:80:42:8d:
                    01:21:4f:c5:a5:fa:fd:2e:76:98:fa:f2:83:0d:ed:
                    17:17:9d:85:3d:4f:d6:f5:2e:9b:ad:a9:8f:db:d1:
                    ec:43:18:39:54:e1:4a:09:88:2e:a0:63:c6:6d:0e:
                    2a:90:37:57:c8:d6:9b:34:ae:e4:f5:b4:be:70:e6:
                    3a:5d:3a:2f:e5:af:ea:c6:03:a8:bb:20:5f:c2:7c:
                    26:be:79:fa:c6:e5:25:f4:a2:e2:f5:15:42:87:06:
                    53:1a:5f:2b:bc:55:8f:8a:44:d1:0d:02:47:ac:03:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:66:B1:43:CC:BE:D3:BA:65:C3:54:F0:11:CF:36:37:4D:75:DF:21
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:80:3f:63:ad:a6:7b:7e:e6:1e:7f:b9:b0:18:d3:95:91:03:
         88:40:6e:6f:2d:72:eb:e9:54:d5:90:e0:f7:d8:c4:16:8e:59:
         92:56:97:a9:fb:aa:08:65:1c:b7:05:44:6f:ff:38:1b:ba:4e:
         52:a1:31:6b:15:38:be:6a:55:e3:b4:67:cd:2d:d1:e5:06:3b:
         7d:29:d1:f5:d0:76:12:91:49:f2:6f:ba:8c:ef:fa:f4:7a:72:
         e1:99:9e:d8:86:45:51:0c:e5:90:08:00:db:d2:68:68:9d:ec:
         b1:80:81:6c:1d:84:51:c6:6a:f6:4a:3e:8c:30:26:fc:c8:45:
         d1:92:7f:bc:be:0b:03:fb:f1:44:24:e4:4b:b4:4e:02:b1:d2:
         50:24:6f:e5:ee:e8:49:c1:76:53:23:b9:d6:b6:13:5e:e3:22:
         b0:5f:46:ef:2e:07:1c:e8:5a:e5:d6:ef:40:4c:9e:91:9f:ee:
         94:5b:c0:ac:04:76:9e:0f:1e:d1:02:7c:c6:9d:85:7a:6f:06:
         10:d9:41:95:a9:ac:0a:f9:d2:5f:ab:28:3b:04:dc:3f:76:06:
         16:e3:80:b7:20:e1:6e:17:ad:2d:c6:4a:a7:14:dc:82:c5:d1:
         db:61:3c:19:f3:a6:6f:54:ce:b0:1c:ee:e7:c2:3b:cf:eb:57:
         b0:e0:17:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----