Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.mft (raw, json)
Hash identifier:          S8PMivsoPT3lxgfMZefZMtiM4nsh2KT+R0XHfiu+zcQ=
Subject key identifier:   13:93:2B:4D:86:CD:D7:26:09:18:38:54:59:F7:10:BD:6A:80:D3:5D
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01A0C40DAB3A849274183A4384ADAA0DAFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
Manifest number:          18F3
Signing time:             Mon 21 Sep 2026 13:00:25 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:25 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:25 +0000
Files and hashes:         1: 0Lm7esoKkHareAs6Ls8vjEmxa3Q.roa (hash: x+lTP2mMfmYdH0ZyCDCtnT35GU+4XuQiyxHUZ4mGGfo=)
                          2: 0jhcYyFON8-mm7dD2TW1JZrlYvQ.roa (hash: FaXeXFusaj/38DF8I3C32Nrq3u5cS6g46vBxQVKmlSI=)
                          3: 1-MX61ORDAEgGzStxHPqb31eQIkM.roa (hash: cgOhBiY8skFAOtiWyBzOjuYndSHYI+GF0dLm5wWs2X8=)
                          4: 1-l5uVc54PydSELuogxMSOlvZknc.roa (hash: IqbYRdGYfwB0/Ape3iNBhfXkFPQtJCX9oUdgHc+bBrQ=)
                          5: 3GpQDK6RUjxER6WqFkD6MrfTePE.roa (hash: oMZnSqlrIwX0HF6cXDzl5mTixP+9NujvpL/rC6+j6+I=)
                          6: 3nrBO5sN2ydgeQAybOfYJbnytMk.roa (hash: Zw/gRLsYG0xWKmlMFeUVC7H8FkwaHfFstqGc6SQAVFY=)
                          7: 3wCNNSuWzSSwYQwg_CL9pzACFMM.roa (hash: HF8Fm/z5VIt/9WuJvChaK+4H6Qn8FFsO9P/WD6aF2K0=)
                          8: 5hxJVaW1ITHjqTzVJE_yCZQu6TY.roa (hash: 4jHQruBZmL2C+S6zlzONMLh0unhRvxQBys9HI6W8e9c=)
                          9: 61rQFUGqJg0nLTLj-Rrzy9qHIPI.roa (hash: g3jur0hhvVqeoUrencrp2/jQZ48qi0hd7qQhX0ZdtvQ=)
                          10: 75MkeVAB6wqfTbbl9R4hRrGVFvs.roa (hash: SDpqmU4lJ+MDSgO6M3+78G3BfOWJYqo0dHAIvZ9Ho+A=)
                          11: 9TJMpeYqsoOoDUusQBPckUuMx5w.roa (hash: glgiITvixFtsZGf3Fx9yb2ESkrKPhP/O4mnFOL1v/4c=)
                          12: CRj57suiWLnitfcdYAQ0fpq77m8.roa (hash: BM0sP2DTYDAmY/abV0dJE1uW3k/F6/Bydu5DJZuP9K0=)
                          13: Cawa-DODLcgEccenA7kSlmsMJQk.roa (hash: iTOAQgX2G9bRdF7X+s3MxrFF2agAxk0qoBnqwrYlVYk=)
                          14: EMGYlLFyG7va5tHSqgNvuA_a5nA.roa (hash: K4h7GbaJUcJNo0E5HuiTdnv50fqxOcqcCoCjsxIgI2I=)
                          15: FCwIxiEEDY1PleIvLIa6TTqCKsw.roa (hash: lecQNWWmvhO3cnwmwlTqpFfyjhIxcOjNyiOGPXfVcKA=)
                          16: GjSR40LYx6Uk1tSZXchrDAV5_FM.roa (hash: dmPBoCrxSTJGl6a45mJDmt04LJWy+gct5xWGz1rrJag=)
                          17: GvLMsK1YIlG3H3ud3AEcdujFVoA.roa (hash: BSzH67VCZLLTTNw1xUILHi1JzYZa1Ek/ANs66qlglA4=)
                          18: HizlzTiqTuK5yatK99t0S4irGGY.roa (hash: e6yJe+XRznL1kEYGrcT8TWqS3RNROSK/qwM9VbNmNQM=)
                          19: IF9Q2mJv-D2RGLIuOuKfNMWVngw.roa (hash: kjzPy/2bPn68qL6lDttpNzisPWOLObsMw4ZdNbjMTQs=)
                          20: JRgE3d1rNe9vs44GRHF6SwRVXtE.roa (hash: Tw5mid4PGhap1bN/JiXsmMDZEWrQouLEemZWuia7EY4=)
                          21: KCMg1rWAyjF2aUsKSYcyVlgvIjs.roa (hash: LRsU+6j0QZMSSik/ispHex4V9d57wSM/OoTJAU9IlEI=)
                          22: KcmV8oBRoGzjxOHt-8ic3_JKEog.roa (hash: I0SFj3nuJizf26jnbqDeLC1lOQjufyA0x0s3y7ZnVXg=)
                          23: MMQJYT_qCitELOES6cvbSF4BGI8.crl (hash: WZ8P7cafQehSRtOo4W+5UjgXbeiA4YY7z03kEk+mhYo=)
                          24: MPHNqx3HfJMj0eCK6sDL2cRhO24.roa (hash: q5C2xphEnKrAzqKaBfkvfZ6Po1hLeV+9/fLgpIoxUg8=)
                          25: MVdaz8ics8Sd-XffD7C430qY11I.roa (hash: xtPCUH6KPnYcKU0oSSaYFdckSNDB0iw7+CjSZPjS4rE=)
                          26: QaDdxTDIKujsHj1_R2vhxiuywYo.roa (hash: cYzKZHRBZg4cQMpG2FirPav999wiYn13B4xqmO7W52M=)
                          27: R1ohmYJEu56Bfs07T3EgDidDkJI.roa (hash: Y1jRS/ZVpA6RpVUuvHtsb5WhLGj0fmu9R54h10BXmEE=)
                          28: SgsTOpfz4GV5ysHaU_hkxTEuBfY.roa (hash: 6wqRkJqmJOrf7latD4lpHfKJuj57gPHrqy5yXyHp9PQ=)
                          29: Vos0YXlrvSISzNrKBPqS7zLPjkY.roa (hash: B60nLXQoRs5gI3OiafhBiz9AYmOTRBwAZAW2+lTtGio=)
                          30: Wbq3ETax87bNgr0IS2yPIgugFIw.roa (hash: rzQKsoxByu4D7B4LcyGQotg64vsqqzgntIgDVwaTWwY=)
                          31: Yl-c_Z4vHEK-iI9aMfFocbI8cWU.roa (hash: cDP8W9SA7kri+7+m28tZHCLpb7Hu7PBPYZaCs2lbGOk=)
                          32: ZlgR9Wr6dRwYYKCu_QgGesPkRUo.roa (hash: F/KTa7KhD4sbza9rvdpPEqF/Bd5rYWcbJdnRE9lkwd4=)
                          33: _U_w6bXH111HMDU_sQ6-CKmlsuM.roa (hash: O+NWacU5mxgiI23XoSRRPRaw31TaJyyv5c/Hgp1qWl4=)
                          34: _qeKgQV4YyvDP3FhgdytthiDJXQ.roa (hash: 94DaY/N+Pi5r/GoDumGOEfU7J+SovdZjttg7Ii1+hmc=)
                          35: _v2WHlFRDcYhLkjXUloV_hg-H_k.roa (hash: 2xB0wD+Tur4/gI83e6PeVkTwe5048HzykjHm5uoJNv0=)
                          36: b1SYoSctQ6aIsIAy0MojkuPYIOk.roa (hash: xgNc0NfLxyarAEUTAARhWGBOZXXjIfuwJ9TfgP17+Ss=)
                          37: bFT_Z4_-ysHNs5WuSzbJw1AU8jo.roa (hash: KsQGBoDh+Ca9uE3jShzCM613jUL/H5/LE3nQG31F4hQ=)
                          38: fdsXyKST1NSooA0SOdWNXyrQKIE.roa (hash: q49gBnA2IZuUpW1nTeMLqaXrULLEsizhuzjfeilzgRw=)
                          39: fwZq6psMq56Ml0BVrit_Wp9BQ4A.roa (hash: aIQPnLzBx7/fEcGBfohS/yOvrVJole1RPiyfkmAvLQg=)
                          40: j-xoCug8oSXkLy-zRPrQvCr6fM0.roa (hash: Ey2qMtymo6/7vUVDP3c3+HbS2Exk1vQ0aziEB5/WRwc=)
                          41: kkM-u8aI9NOPkDtX2Tyi0THikGY.roa (hash: ehAaGwGwW1/CYWh/qR4IoHFBzAdnsXoWmuDDawEf07k=)
                          42: kvzJ4z4u71EvbDjK364raJ6WEGY.roa (hash: X7jFBMafkq6TdXlHD8jdf2lu7z2MV7abkwkmrenDNww=)
                          43: lWq-fTyJH_c8x_RL0HQZdlijhM4.roa (hash: NVgGyE+t6UpHRgsptpairBBdU4cY7oezcTyDp8PGFvk=)
                          44: nT3CPzgOXFPIxgCiJvzaGFj4iPQ.roa (hash: JRupVB/8+FWibeOM3qCsVYRvWGj1OBxjlkAaV4mHw1k=)
                          45: p239cBbOLA6sibvWSilUs4XV_LU.roa (hash: 2wD/G4UoqtbRToicOl2l4uFB7WjdllylTPbWqZtpZ5c=)
                          46: pJAVbgi9uaf5nf8_qEz50NNIhnQ.roa (hash: qyo9WsdMQTxh9RhYGvavCPJWOZfI7qs/fZyRhZ+/now=)
                          47: pq9eJdbCOIfrvaynnbQZJhA8zQw.roa (hash: t54wtf6PQVEtTTtm1PsZ+Xtd8yxn24JYaMP23lf02Rw=)
                          48: rlmsd6PpCLGDar5RoisaMe8IHhI.roa (hash: 87NJGu3xmNWRFtTUSOeFPV+lS8Rn45UJIMOhad/Hf98=)
                          49: t0_-P-p1FyY1ODpwO0YUkJBxj8c.roa (hash: g7MSzOZksmuKAgTRnCXrR4HOBteag1BykLmwHFt8BuA=)
                          50: th2pTn-En0EvqF1fUXxC_GzD4e4.roa (hash: YWsreN1mrS6/tFSiQgn3+FJfJIWQ+GiL364NxHSL7es=)
                          51: vMZUucYgT5z0znQZnRF-dVJeRiE.roa (hash: W7+gTHKhQj/8XXemyZ/NzWsuUf16BLgdFCj756C84Vo=)
                          52: yz1pKtQyMgtptdlncZbKN2T4oYY.roa (hash: Ae387dsOHzGBlCorX2l0mMZpwYKnxEqAqoAymjWiIOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:ab:3a:84:92:74:18:3a:43:84:ad:aa:0d:af:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Sep 21 13:00:25 2026 GMT
            Not After : Sep 22 13:00:25 2026 GMT
        Subject: CN=13932b4d86cdd7260918385459f710bd6a80d35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:54:dc:a3:ad:44:80:1b:f2:87:b3:24:ab:
                    4b:63:4e:49:d5:f2:96:e3:39:3f:2c:b7:36:6d:37:
                    e4:22:54:8d:f2:52:22:4f:d0:6b:e3:af:2d:c1:4c:
                    ec:d8:bf:b7:e7:3f:dc:68:68:d6:28:94:75:59:8a:
                    f0:f0:49:0b:45:68:68:a7:a3:77:4e:82:22:c7:8b:
                    6d:d9:9b:6c:d9:43:5b:e2:ec:99:a3:f9:4a:e1:6e:
                    cd:58:a4:4b:9c:09:e2:54:f1:b8:6d:bd:7c:16:a6:
                    53:a6:f7:41:d9:1e:5e:f5:44:45:6e:37:33:21:30:
                    aa:98:88:e0:a6:fa:1d:79:29:c8:be:b9:b3:1e:28:
                    d0:52:b1:21:c1:65:8c:2d:93:61:73:56:c8:64:6a:
                    9f:36:0f:e5:94:c9:c7:2e:8c:64:8f:1b:8d:82:7f:
                    78:6c:64:e3:bc:c7:b8:00:1d:c4:95:93:59:23:3d:
                    8a:fe:81:ed:56:c3:6d:6a:9b:ab:16:e0:32:0d:a2:
                    b3:ea:5e:7a:b0:40:1a:07:2a:bc:9b:d4:89:5f:a0:
                    4b:3d:79:7b:ed:06:fc:21:00:83:53:4b:a5:27:d7:
                    a6:72:a8:f1:b8:26:66:df:e8:59:eb:87:70:d0:28:
                    cc:70:55:36:ca:ed:53:42:cb:5d:1d:8a:73:12:fb:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:2B:4D:86:CD:D7:26:09:18:38:54:59:F7:10:BD:6A:80:D3:5D
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d0:a0:fb:e9:a6:b2:1e:99:b9:43:0a:92:6b:95:f8:49:c9:
         9c:00:4f:06:ba:31:6d:c5:38:5d:11:e6:13:8a:24:4c:20:80:
         e9:77:d9:f2:ca:89:81:7e:52:da:d9:e7:12:6a:20:d8:93:5e:
         53:25:dd:c1:ce:78:b0:c1:b2:71:f6:d4:f8:15:ad:c5:f3:1c:
         4d:8f:09:cf:db:82:27:50:bd:9c:f2:14:37:ad:d5:17:78:25:
         ad:7d:6b:00:83:12:8a:de:41:59:f0:7f:fc:05:81:77:2d:a4:
         2e:7b:3e:3c:b5:e8:ac:50:09:1e:ac:df:76:84:ac:a2:52:e7:
         44:82:56:ef:88:03:6f:bd:cd:12:d9:24:0c:dd:8a:c6:10:cb:
         03:b4:dc:5d:b6:31:c7:20:18:05:43:e8:80:e0:99:01:ee:ae:
         d6:dc:95:0b:36:a1:c8:30:bd:76:fa:e9:df:a7:35:10:8c:80:
         27:28:68:42:48:6a:9c:88:ca:17:aa:7e:cf:13:d0:d9:1c:ea:
         db:3c:20:65:71:14:2e:d5:79:96:71:e7:8b:84:9e:af:47:ce:
         a4:01:d6:6a:5a:05:60:82:8a:65:bf:14:1c:fa:2a:9a:74:8a:
         a1:bf:56:63:c1:bb:dd:c4:7f:6c:1d:88:47:16:a6:29:ac:45:
         e9:ac:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:53:22 2026 by rpki-client