Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
File:                     Gspj3ySLet893QfowtPu3QLO-TM.mft (raw, json)
Hash identifier:          5hScEXRw6GKp5Dk7RO+BZo+CVO+q+12AMwZ8uDL0Xpk=
Subject key identifier:   BE:7B:E4:F9:49:94:EB:D5:2B:6B:4A:6B:3E:E8:A9:56:85:FE:10:AE
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       019DCC3D9159848265585A31E704C444E6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
Manifest number:          18EA
Signing time:             Mon 27 Apr 2026 00:01:20 +0000
Manifest this update:     Mon 27 Apr 2026 00:01:20 +0000
Manifest next update:     Tue 28 Apr 2026 00:01:20 +0000
Files and hashes:         1: 0Hs6xXZQUGxSsH4dzIqj6tSXXQQ.roa (hash: umayU6ghzrIw9gzcxshCYwefqVjQhRaUnYXDxZxTVZY=)
                          2: 0N--KoxInsnsXzGcwfmNBlxfs78.roa (hash: 7AEcbAbb6sKMf8LE9K99/qvnVr+OpcWbi+hxS/gOhss=)
                          3: 0sGzuUbpwHk-gTWE19LdNSa8hCA.roa (hash: Uc9SjpHv9neMuUpGJ/PzOOSFL0wei8qez1EKlcWoBL4=)
                          4: 1-kUUMwb8kgGIPx1rcb-0zSN8KzA.roa (hash: 0op+31WFr/z/J1Osq9KZJ+GqF3Ia0/sNPRRDCJ99Rso=)
                          5: 1p24e4_xnCRiG8MIistc15VowrI.roa (hash: VnVP9pYukjZRX2qF6kkl0NQ/5BX9gnfFczG7434pxE4=)
                          6: 2Gr9nf875xWi7fctytC9cFGwMlw.roa (hash: +86dA0zm6T8zPgqQDLCfGSSKKmAaxpAHQ1PUmhacNes=)
                          7: 5azhurYs2HtaD0E6ugl_bxZHIqM.roa (hash: d5ir/UeW/eIZ5SafaVTlv4vz6rGk04lLUzIPwKHNYBs=)
                          8: 5yMdib-0sOswI0lZXAuoUHXXHVA.roa (hash: 5aP/kmB4CNB8EVL6XcgZn/Qsj+a9mFR0w4XcjiN0sUQ=)
                          9: 6yVWhhQWfzj2sbvx8_GIlONHBiY.roa (hash: gy7S4MewOgzjZJmXLphYMThB+PJuj/0KSl7GoYmvutQ=)
                          10: 8Nzbql_0L1Sqe6QwC_4FVwreWNg.roa (hash: 4gCR519ZeBzC3kk6VwY+ThTPU0hs0GWYjUpi1seUwSM=)
                          11: 8YEFvbEwVLH9qWllGkk7g4NlnI0.roa (hash: II2QPPzjTL1kCxQBuVajcyo2dWvGe95JioEGL2xzIuI=)
                          12: 9YOLRf7UgvHm6WSS32OxNs7-BB8.roa (hash: +uQTUHAyt2piiMZ3fQyBEk2qIxPYqqYIm7wQHSwnXVw=)
                          13: A8FQMW7_pJShj3pKjFQFZpYYroc.roa (hash: OPhgIyUnvcK9G6uaVUcWSc5r7urFF1UNgOW7ZVhgohY=)
                          14: AHDIp8270zSqh_FTyxhRg8w5gN8.roa (hash: FOrKrk+AlkMU+F2AuO8VhR8dhWWnyB1iwg8bXCReV/A=)
                          15: Eb2QZpAtEmdDYzcM38VUBuHTsRU.roa (hash: Sod1B79aMwwZVivyAqO+s7l8S7cXwaQDAAMG0+CxZNU=)
                          16: F9ptmhFRKM_6FVfNisudgBAGWS4.roa (hash: d7zM61XXfq12gKotkFKa6Eui7hLn3eJKdpx9VEf7iSo=)
                          17: FBXfctEgUEE-S-dd_yWnTE1RG6E.roa (hash: rE0ZErAPOBAQk49VT2i9Zl+euws9XDKoSIpvW9WnBUc=)
                          18: FJHnrMa1dYYOqNs96iJ0reJRrPA.roa (hash: P7ZEMcXCOturCWpxMhG2fWwEb2tWeTFlPPEgjheX0us=)
                          19: Gspj3ySLet893QfowtPu3QLO-TM.crl (hash: CTb7webRKrMlxAl0a6Y40B2/fkoW0GsjBvXmGu/XPzk=)
                          20: H7HNq0uVvHEc2pdTq24Uay9oG4g.roa (hash: YT/HdAwhRTIgKLX4kHKvlxM1QPuScdICfXWYIcHvb3M=)
                          21: IWKw_ZEu1EZRORuZiGmI2s0AHTI.roa (hash: tNIkQWe0p3ZEhypZifxp8CXBvaq3p1TZN8n90ivbpfs=)
                          22: KViFsa9YRaLKA4GWafGn1yNMV_U.roa (hash: B0mTA1OlEJ3ztWIPorFTiSWLF6mCqTxIFSfVTWL1JmE=)
                          23: KvL7yxkGls1fjcwm5IXbdVf-RGs.roa (hash: VuJaI3L/iNCvZlLQqiE8dBetnHe7flMiDf6yX91ASL8=)
                          24: MNKEeRezng_8QTmq4YL4taxomtw.roa (hash: 5bNxkSV5NuMCGAxHqkk6a1uStmjIi3vs4rOLnNPZWw8=)
                          25: MXg1tPcwD8vd6hGP-DmQwVHABDE.roa (hash: Mz7oxjlr/sXGTRHHjBwrCGFNPHjZFHzWbzfjTgLpT0o=)
                          26: OSjRZ1PSSlJuUv_feSDSX8D5qss.roa (hash: 9j2P3ndf7PqtASAbOJiA9us6tk9fCukKTlRIi2ivlN0=)
                          27: QDyWUj617nvzS_e0H1UiLEZ53bo.roa (hash: vwc+n9oPZjgCNNTq8fQPzWHHGfEYwO1q71t3KXyXP4M=)
                          28: QEW7nL_XFY7-pqU9RE8stFDsft4.roa (hash: 7pAJQsO5s42ZP6VLMYiZZGH7bu2YJMD5N8HmIIw2Wi8=)
                          29: QkKnlkQLz4dPGUFFiK8lN22X6dg.roa (hash: dvWueaMUeQqIss2AZGQBpfEX4bUWEPbUAAHBb4DyPrI=)
                          30: SDDpCfEvPP3Fzd7OmIbOls11ROY.roa (hash: ZKfz6rEjEgr4JLEIhQ4IpeeIKddetOb6XRdvez+f4cg=)
                          31: T9eEaGkDUEd1uoMcLdi7rlGJ5OM.roa (hash: cNuIxWplIagqnFYWoprdCxty/m7H7kGPbcgqUU9fyfQ=)
                          32: TQrtuJqVJ0yT9DG7MEeC7YVamP0.roa (hash: F3JOsifgipj8NSl+bt/0MEJ3mxQ+tdxtpprOlwYgUAw=)
                          33: TV34wvad5IaMfPoWisvwqDtCaA0.roa (hash: GqkdisDL97UF2sXcw6/14uHKglsSF+BfgwwUNizcOOs=)
                          34: Wh_WGuWdedhCdqZqjThQGaM1w4o.roa (hash: TDzn9Zqz5rle6yhiWfswdL6rCeqSKjFPMelBLgNL/WY=)
                          35: YffuXjhVQjavHnYAkO1SBFOknv0.roa (hash: r0Yqg3OZ8ifF1zMpVGTo+94M47rPgX/zR8wnUc9/nTM=)
                          36: ZDEDd_YeOToI9AaWJsRc80GXXYs.roa (hash: Lpl7sYdvpM/141Giex7RwhFqbe2pOY8JAQElcXsooE8=)
                          37: ZEDfVTNeg4Y0ef7ALZ2obXiMEOU.roa (hash: 9LBmxkEFLS3B5qGhxSIOAUgF8/Bgd781ng14JgpxwnU=)
                          38: bzKAo4zECLyu2L68XcJoXTVMySI.roa (hash: kP2zT2S/KNqpadzxZxu4vmptHfecZRfN1dTF3IoZRnE=)
                          39: eegmillnUrrJX368FbgMsZEqXL4.roa (hash: lIi0pRsutKGBHDePIXuG+nLC+yHQscKpxT17lvHe/ZA=)
                          40: fmk12XAjixK4ydvA-uHC3Nd-HXA.roa (hash: V8WR3uqu+EJZvisPVRoiAC+MR0oSKaCJPL8TILpliqM=)
                          41: ibXi0-8aUsVXGB09qV0j95JgrIY.roa (hash: TLsVKyeWQpt6Te+i4gVhEctps4GC1gxgoIzygpugufY=)
                          42: j6U8UeQBWA_aLfPt7pNFJYn4QrQ.roa (hash: 1EQgGCqazRRAiTlQ7Ite/fQRLC5x0EAah5dgfCndlK4=)
                          43: kaVISpwOiZKA5ta06OCxyBxR49A.roa (hash: VNZtrnciQ6Gc5y4H0ppJqHERZaAXg4qGMfFH99dOFts=)
                          44: lF-gIvCkM8tz1TF_ELmeC8qsyJI.roa (hash: kqf9SUhWQk8Xudy6smsadsinO1weOTkBy/JpJTjE9Wo=)
                          45: l_JTrDcsGivAKV47IA0MU-LY3-s.roa (hash: fJFedkJWiTy36a6wHwmDpftvwiJNe4RqkgEep1LXVB4=)
                          46: mI1HuOhEOlv2NEwmoDVlsD32_LE.roa (hash: QQYFVZtioyeC38QfOVBXY9H09adCRxKF9pUyi9nJ2dg=)
                          47: n5-40dHB96Mo9oDqm-GTLr6Okwk.roa (hash: lm7wMW2ZxjDGB62whvPGpRFJFIr6hVtb6E5bunii3pE=)
                          48: upR_lK-5XXoDUtPSSxCn92_SAOI.roa (hash: t2z7Rhn7V36DttkdEurpdQgeLWm8rmO0F3dEVSCXcg4=)
                          49: wtSW0mdpPXDvDrTPRt1ZsBOC7C8.roa (hash: oQqGpeKyZXjl5Dm+Xl8ln8xs8GXfn3cG1TVN/vo2Um8=)
                          50: xNOIKjGSTePbf9yIDHP0r14ahbk.roa (hash: mKTeNI4JyDtyq3nQb5OAL/Aez0IKHOXg8GqBdkPRFCs=)
                          51: ypfoqyQ6MVOm9gf4IkYc0sZzQIg.roa (hash: FT/m6DC8TKrUtX5et2py7Wv8QLWxnA/o9r7a55GLtYU=)
                          52: zHnDEFfooX5eWswmYMgnmUr239Q.roa (hash: 6sSrtzj+rZgcnikGhRhQB2rZMRHaUhRbv8S7ikZnZx0=)
                          53: zXIsfH_Pa5jSNX6yQyXZtUc8scs.roa (hash: i/P4c06e2ra2sLZfA/FbWL5pY4bEtjGz0gTkGbKY8bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:3d:91:59:84:82:65:58:5a:31:e7:04:c4:44:e6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: Apr 27 00:01:20 2026 GMT
            Not After : Apr 28 00:01:20 2026 GMT
        Subject: CN=be7be4f94994ebd52b6b4a6b3ee8a95685fe10ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:2e:d3:df:bb:25:a6:b4:74:34:47:dc:ac:
                    9d:cc:c6:24:a9:4c:a5:56:08:e8:8c:ca:46:b1:89:
                    4f:50:0e:d4:47:53:b1:1e:a5:12:d2:24:25:48:67:
                    bb:e2:65:4d:af:98:1f:ad:0f:28:05:f0:06:7f:fa:
                    30:ff:f9:ff:d1:78:a3:1b:d1:d6:b1:1d:43:ce:d7:
                    63:90:33:5e:c8:3c:5b:f4:9f:24:89:6c:26:b9:5c:
                    8e:0a:61:a8:3c:dd:b8:49:74:54:35:ed:f1:53:7f:
                    22:92:6c:a9:c9:19:ab:7c:99:21:9d:d5:8e:ce:13:
                    a4:36:1c:51:ec:8d:56:d7:06:c6:a8:8f:18:e9:14:
                    d7:e5:65:a0:0e:b4:ef:00:d7:a9:17:a7:fe:99:69:
                    21:ec:72:a9:eb:a8:61:a7:a8:ed:a3:26:0d:74:33:
                    b7:1f:cd:b9:4f:09:ce:6f:3d:f4:90:67:7c:d9:12:
                    0d:57:ff:6b:a1:13:c1:3b:1f:3b:77:c0:20:23:36:
                    73:fa:61:7a:f2:d9:5e:02:a9:09:04:21:1f:6a:bc:
                    e3:12:ca:b4:f2:15:b0:24:c0:7e:aa:98:e8:e9:21:
                    1b:d6:06:bc:8e:31:c6:d8:b2:80:d1:18:45:ca:3c:
                    df:4c:44:8c:5f:75:38:3e:be:a6:33:da:d9:f2:98:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7B:E4:F9:49:94:EB:D5:2B:6B:4A:6B:3E:E8:A9:56:85:FE:10:AE
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:65:88:2c:7d:81:b8:29:3d:94:44:08:be:f2:16:8b:ee:3c:
         cf:5c:bc:bb:42:93:1d:eb:bc:e1:b2:1c:d6:c7:d7:46:60:fa:
         14:82:8f:f5:9d:09:5b:68:c5:71:47:cc:33:2f:02:84:81:92:
         68:75:d8:18:78:65:4e:61:9d:e3:01:99:fb:78:e6:76:6d:92:
         c3:16:6b:94:e6:0a:bb:54:44:6e:8a:8f:32:cf:96:a4:82:04:
         4b:74:75:c9:b8:1b:74:22:d8:fd:3a:36:3a:1b:91:48:19:ba:
         63:1d:37:2d:6d:ee:3b:d3:e3:b3:c3:c3:05:4a:e3:16:d9:1f:
         8b:90:cc:20:9e:18:46:8d:56:f2:05:d3:74:40:75:25:da:f3:
         36:42:37:50:6c:b9:8c:89:2c:ae:58:d5:c7:b0:60:0a:e6:39:
         e4:fc:4e:e0:24:ea:3d:09:a1:e0:88:fc:37:5b:ed:c0:0f:75:
         0f:56:06:89:90:65:ca:09:64:b6:fc:79:0d:a4:6a:fa:a9:89:
         58:75:e5:19:56:f9:9c:a4:01:28:7c:0d:c5:27:b0:f4:df:8b:
         d8:23:28:20:28:a3:e3:be:77:0d:5a:6f:5f:a1:0c:37:6c:f7:
         f8:f3:0a:9f:86:dc:77:db:3b:97:0c:5d:51:45:96:39:c7:f8:
         64:6c:bd:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPZFZhIJlWFox5wTERObGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjYwNDI3MDAwMTIwWhcNMjYwNDI4MDAwMTIwWjAzMTEwLwYDVQQD
EyhiZTdiZTRmOTQ5OTRlYmQ1MmI2YjRhNmIzZWU4YTk1Njg1ZmUxMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlsu09+7Jaa0dDRH3KydzMYkqUyl
VgjojMpGsYlPUA7UR1OxHqUS0iQlSGe74mVNr5gfrQ8oBfAGf/ow//n/0XijG9HW
sR1DztdjkDNeyDxb9J8kiWwmuVyOCmGoPN24SXRUNe3xU38ikmypyRmrfJkhndWO
zhOkNhxR7I1W1wbGqI8Y6RTX5WWgDrTvANepF6f+mWkh7HKp66hhp6jtoyYNdDO3
H825TwnObz30kGd82RINV/9roRPBOx87d8AgIzZz+mF68tleAqkJBCEfarzjEsq0
8hWwJMB+qpjo6SEb1ga8jjHG2LKA0RhFyjzfTESMX3U4Pr6mM9rZ8pjqgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL575PlJlOvVK2tKaz7oqVaF/hCuMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmWILH2B
uCk9lEQIvvIWi+48z1y8u0KTHeu84bIc1sfXRmD6FIKP9Z0JW2jFcUfMMy8ChIGS
aHXYGHhlTmGd4wGZ+3jmdm2SwxZrlOYKu1REboqPMs+WpIIES3R1ybgbdCLY/To2
OhuRSBm6Yx03LW3uO9Pjs8PDBUrjFtkfi5DMIJ4YRo1W8gXTdEB1JdrzNkI3UGy5
jIksrljVx7BgCuY55PxO4CTqPQmh4Ij8N1vtwA91D1YGiZBlyglktvx5DaRq+qmJ
WHXlGVb5nKQBKHwNxSew9N+L2CMoICij4753DVpvX6EMN2z3+PMKn4bcd9s7lwxd
UUWWOcf4ZGy9BA==
-----END CERTIFICATE-----