Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          bWTpdZxXHFRhH2knwPiLOyQmOgBDAtEZ2u6OXVDTmjY=
Subject key identifier:   21:7B:9E:7F:B4:BE:7D:BA:6D:6B:B5:D7:C9:97:35:B2:CF:FB:A3:88
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019D98F4F1B587D70B4D40185EF621B25B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          1A64
Signing time:             Fri 17 Apr 2026 01:01:22 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:22 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:22 +0000
Files and hashes:         1: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (hash: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=)
                          2: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (hash: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY=)
                          3: 2F6KjJmnh4fG2o31oMeDLzlhe3M.roa (hash: U3NzVWajOAPyyw0TujhCrhB+YyvG3V+w8CS/ITzJ3lQ=)
                          4: 34KmZ8VrdL0919mvZ699Gx_xpwQ.roa (hash: Q5D7jFgCzQNL3luiUnYO7ELZV2sJxrboi490AwwO1mY=)
                          5: 7j2_NbelXGkPqeH8Kkeh1ym9_DA.roa (hash: JZe6w9UDx2mGbUG+2NzB+MVQw/jPj68z/y/0hvVfhLU=)
                          6: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (hash: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU=)
                          7: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (hash: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE=)
                          8: 9--7k8s2vBgfv9cOtklxxBdlhTg.roa (hash: JcI1d/J1LHsYTNe6jH8TPu1qVojYT6V7vlT9I10CzUc=)
                          9: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (hash: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU=)
                          10: AY3FW2IB9nexvx9xT55P4qXch9w.roa (hash: APNMELOEu+Yhf/JJ7/H7Cc0dJp9lEZ5EZz4w5dHfwFc=)
                          11: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (hash: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw=)
                          12: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (hash: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds=)
                          13: DsLRswrIL2bjarddWXxgMaYz0pk.roa (hash: cLYKT6oBtCkgrNFlRquRG12LDkvlkhXPXiMWFdBt32w=)
                          14: E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa (hash: bIj2Xc2XKCsJfzUcbvZ5kW4+OYzoOdbLVfr+TNdbU8c=)
                          15: EUp63jBa0leP1OvOcpdNWMC3CUU.roa (hash: uQ1Dw8PQCHKdGUd6o5BdHl0j+XMq3ml+07QGhhX1os4=)
                          16: F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (hash: WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=)
                          17: FYUqU8QWOLIjFef4sxjXi2SRgiE.roa (hash: YKJ2KcRNhHoxqeVVhOtsB2AOrHfzUODw+6sEzqJPF4k=)
                          18: Iv5goV36XyJf8h8Jg9f5HpjvVkY.roa (hash: /qW7a3x4Bqdh0z0vzoFyz5jEY3aTbOB6BSfGATNwGVI=)
                          19: J0gDIkrpboJuRwLiO8mRarT4dVM.roa (hash: KNGfnvH9hN8MLBIB5K0MLNABNs+jOG4jng+kKwDoCrM=)
                          20: K1et99aGlCbRN0atD8laA6wCpoM.roa (hash: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=)
                          21: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (hash: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE=)
                          22: LOHkKboHHj98Sud03cU5OIAfDEA.roa (hash: jTKW2wbQOoCIA97EofLg3elq1L7+ob1lcwso1uyxnO0=)
                          23: Lq1_kC7K6rSER7BBOksIzNMYSkk.roa (hash: PUuNNwZQh6bBg3pgTnG0BSz1bnW6aW1AJW36sfA609k=)
                          24: PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa (hash: mMckO0VWsJIoTMSpV0U2xVZQdIMSSosg9qAEuX4Cl34=)
                          25: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (hash: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic=)
                          26: Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (hash: cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=)
                          27: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (hash: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg=)
                          28: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (hash: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk=)
                          29: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (hash: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo=)
                          30: bsA14uz-YOXsaSFd_5h3VNt_UOk.roa (hash: IXOAQlZ/L2ESEYgfrmyIYrixLqYgar9WBc4G2uIdJEk=)
                          31: h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (hash: 9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=)
                          32: hGFaHcwrovzGAIYRLQIthoUbz9I.roa (hash: EW//8vzHeEI6MBxbWRLHvlhu2IW8hbQriarbUOI8bI4=)
                          33: jwLZoY1l9QraxwasgyAPNL-Lmi0.roa (hash: jB+O1Mki2gVeU0ChD+Q4PPmvQH8u/BH5X6sQaqc9dwI=)
                          34: kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa (hash: KdvanUmTfifS1E7RiGOchWirNpaIWYJ9mP4hoPbCkcI=)
                          35: kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (hash: uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=)
                          36: lHNKO7sNNTzQ5Qf7iXFu2MykVlY.roa (hash: gSBFoF7U8vP8sddt6bGyOP5IVVcu/X14ckwK7nmTGi4=)
                          37: mREkMg5h2CoIwruTXu13t8R24-k.roa (hash: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=)
                          38: mWE26VhH4aZItoNdm61WGalJaz0.roa (hash: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=)
                          39: nfPxS_G9gcj7ar4S7u_X74zr1JM.roa (hash: iHcyW/2KJt0+hDcs3hP5eiwUvwY+CugIYpFmJVOKT2Q=)
                          40: t_QY2lM7jBaSD55UnlYp2CJKlqw.roa (hash: KJk9RhNUyjLDjBZyhKz+Gi6pVQ35sT30ueaJl0wPtqY=)
                          41: tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa (hash: njzm6lCAV+EE4DxRZf3PtyDknOGT9/aOviQx8BhHPt4=)
                          42: tv--uDVRTnOlBD4wLkX6klTWyHk.roa (hash: qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=)
                          43: ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa (hash: S6htXVqvYivJ/J0tyQH0JXgWVjrdc9WIOkcpLunur6E=)
                          44: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: PU6P95IqJ4laXVdcnBNeAy3SjYWh8g1Is4yTw98qm0Q=)
                          45: ye5JAz107-QVpFyi481T0DZx4h0.roa (hash: r2POUNpr2WCW9cC/BotLIDBkPCKZVoCCOPc5NI5c8Vk=)
                          46: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (hash: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:f1:b5:87:d7:0b:4d:40:18:5e:f6:21:b2:5b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Apr 17 01:01:22 2026 GMT
            Not After : Apr 18 01:01:22 2026 GMT
        Subject: CN=217b9e7fb4be7dba6d6bb5d7c99735b2cffba388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:e7:4a:50:ae:ef:4d:b2:4f:82:c6:40:9d:
                    bb:eb:aa:7c:1d:cc:90:22:83:dc:bb:43:c8:64:ec:
                    b3:49:b4:65:5e:4b:8d:cf:d4:da:67:a5:6e:ec:c9:
                    fe:56:6d:47:65:f5:27:bb:db:79:7d:e0:e6:ce:1e:
                    aa:48:a5:a6:10:cd:fd:84:31:33:8f:0a:50:e8:86:
                    17:d8:2c:0d:60:c5:30:9d:41:0d:c1:05:8b:dc:d1:
                    a9:10:eb:a3:6b:04:f4:e3:d9:a0:43:ab:ca:15:61:
                    34:c3:9b:6f:2b:0c:3c:75:0b:60:2a:c9:0b:dc:6a:
                    fd:67:10:53:2a:85:e7:68:37:34:78:29:53:74:a2:
                    c0:ab:4e:19:d9:4a:1e:e8:49:75:fd:3c:cb:7c:bd:
                    71:ae:3f:36:9f:7e:7d:e1:f5:a5:2b:3e:97:ce:3b:
                    4b:c9:18:01:41:47:7c:a4:ba:00:64:f2:21:40:5a:
                    b1:fa:5a:ed:d1:1a:de:75:e7:d5:31:dc:7c:3b:8a:
                    15:63:f1:b7:fb:98:b1:6c:c6:76:0b:f9:5e:9a:e7:
                    9f:4a:30:85:c9:d3:d9:49:db:e2:0a:e8:a4:fe:52:
                    8a:eb:01:96:58:5b:a7:2f:61:f2:40:80:51:ac:cf:
                    cd:22:a4:6f:ca:fe:64:07:73:c7:f6:f2:bb:15:f3:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7B:9E:7F:B4:BE:7D:BA:6D:6B:B5:D7:C9:97:35:B2:CF:FB:A3:88
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ee:b4:2f:f3:64:48:60:7b:33:d7:0c:36:96:ef:95:b9:9e:
         3f:4f:11:21:b9:b6:11:91:25:75:f7:cd:41:89:d2:72:d4:36:
         7c:cd:57:86:12:b0:25:6b:01:4f:df:03:dd:c4:24:38:eb:a8:
         9a:87:b7:4c:45:9b:58:c7:4b:ab:df:7f:6b:25:94:68:f4:8e:
         d3:00:85:da:f6:c5:ed:23:88:a8:4e:ef:b3:89:31:cc:84:7a:
         7d:dd:16:fa:5d:c7:86:06:c6:a1:7e:ab:dd:ce:f2:94:26:4d:
         db:aa:1c:63:f2:91:66:dd:9c:e6:da:08:e4:cb:c4:11:1a:9b:
         24:df:cc:65:4a:d0:85:ad:dc:f8:cf:95:9f:f1:b9:0d:65:ec:
         fd:95:e5:29:ea:cd:05:05:e6:87:51:ed:66:4a:21:af:c2:a0:
         ac:b2:90:06:73:93:bf:53:69:97:d4:e2:b9:a9:e6:70:d1:40:
         01:fd:2e:af:c3:2d:3b:3a:d7:b3:87:cc:20:48:ea:3c:91:3e:
         58:1a:88:89:d7:37:58:ac:f2:10:81:d8:6c:1f:00:39:15:90:
         1e:e8:f3:53:bf:81:b4:03:ec:3c:03:b5:40:be:57:8b:af:b0:
         f1:d7:4b:34:cd:1f:17:b7:8b:d0:42:5e:f7:55:26:dc:85:9b:
         da:74:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----