Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          HQDiFfvodcud51xBqAgxe7wATcpQbQ7XJKm8RjUCIZc=
Subject key identifier:   D3:6F:60:F0:36:78:93:61:50:87:18:3C:B7:64:E9:71:57:4F:60:A8
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       019CAAFD7E44876F366EEE3FFD6A9AE459AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          15EB
Signing time:             Sun 01 Mar 2026 20:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:05 +0000
Files and hashes:         1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
                          2: 590jpJtvHm4aq9pkOcasjjPKR5w.roa (hash: wNrNH6FKCaxwz0q75agrzuG0OijfKBZxBY6JT4ecZe4=)
                          3: 5C9_ixUcHdAFSFNXrsPXYEsthX8.roa (hash: EJq268SpN9myvhA37sM5KIFt2t6hL5j65NEljkhYCyk=)
                          4: 7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa (hash: WflkvzVUJUW28OrasYS+BvErnK7oO9Zw/lOlmQjDvko=)
                          5: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
                          6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: pPQUHNtVPdKP08rKByrHUvvGyLQ6Hs5b+6eU1HsDRC8=)
                          7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
                          8: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
                          9: REV3W8PYUxFJpyQqeipP60uquIM.roa (hash: R/O4LVj/Nn1LD5Jt4pXt5pWCeAyMFWEfHCC2WmVvLdo=)
                          10: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
                          11: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
                          12: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=)
                          13: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
                          14: YvO8XpjqdR123-pki8Y2K83Kr8I.roa (hash: VnHtYU8K0lWWvKwLKXL5UAluzd841pXdLH1T2y3y24I=)
                          15: awEaR3mu_nadZa6gupzUMmxDjJc.roa (hash: /ZCqGj+NSGdaXR4Sc3N2f3ysSnVFG7540bZGMgnvEn4=)
                          16: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
                          17: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
                          18: ccnMCuhn6ybYxRsGTA2e1jMu_As.roa (hash: /BPcjY1JXLBg9JebhD/t+8MY/IcUITQ9QS8ydvPweo8=)
                          19: h96UmOpvP2IiuRa1zdcgkZqRdgo.roa (hash: RVWvN7ouN/57gofsCcbTG1pWvWa8tMFeSDqaezJgkLg=)
                          20: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
                          21: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=)
                          22: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
                          23: lsMaKp3sC1c5czFXsxQDmNP9xmk.roa (hash: Dsgi94SjJOM3Yr7EX5Jzgm7yi1UrHtc8raZxtMY1V+E=)
                          24: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
                          25: mWZu0c3ccvwxHHlT9SVTQ6oiDK0.roa (hash: brqoqJsgc5iiFOBbdYvb+I1IyHssIw8FjziyxDUxro8=)
                          26: sTcAiGDjiKHna6lur2pzE779bNc.roa (hash: cLA9XssP3qm7fcTPgbm83hwGnuynxSU1F6mH7xNIu+Y=)
                          27: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
                          28: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
                          29: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
                          30: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:7e:44:87:6f:36:6e:ee:3f:fd:6a:9a:e4:59:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Mar  1 20:01:05 2026 GMT
            Not After : Mar  2 20:01:05 2026 GMT
        Subject: CN=d36f60f0367893615087183cb764e971574f60a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:c6:dd:7d:2e:3d:1e:f1:22:0d:74:63:81:
                    41:eb:f3:f2:1f:53:19:da:6b:53:60:62:43:84:fe:
                    08:a0:09:23:53:af:91:7f:58:62:04:f9:69:f1:d1:
                    da:3f:44:28:96:6c:dc:31:d0:c8:99:ca:4e:a0:35:
                    f9:70:69:dc:35:75:d6:6e:a1:9c:57:64:17:2f:a7:
                    84:7e:b0:65:1f:86:e8:01:0e:b3:06:8f:36:e3:91:
                    b8:da:c7:2f:18:2e:d8:b0:3e:1f:89:10:82:07:f2:
                    fc:64:57:75:98:b5:dc:94:98:da:c6:c8:e7:1c:97:
                    e2:7d:68:05:33:fb:e1:b9:38:ea:39:0f:b6:80:91:
                    ee:ff:a7:ca:84:e2:7b:e3:0a:11:ee:8d:3a:8a:30:
                    98:02:5a:0d:8a:cc:c1:64:0a:4d:55:63:58:da:68:
                    b7:9c:94:1f:45:be:40:bf:76:f1:19:77:05:33:7a:
                    00:6f:ab:9e:34:fb:ad:7b:82:ea:00:c7:72:c4:79:
                    ed:a3:18:6e:3e:53:bd:57:b9:0e:7f:bd:95:fc:44:
                    5a:3d:17:3d:09:1d:03:d5:c8:58:55:d2:bb:9a:8b:
                    19:48:a3:ca:5a:95:f6:41:de:01:6d:c7:a4:56:de:
                    3b:9e:7b:5c:01:2e:37:1d:8d:52:87:bf:46:e6:39:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:60:F0:36:78:93:61:50:87:18:3C:B7:64:E9:71:57:4F:60:A8
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:fb:e7:99:c1:2f:42:29:38:e3:46:c2:7d:65:24:44:58:
         e3:18:47:75:06:93:10:0d:02:b1:75:fa:4c:d9:f6:0e:1f:d4:
         69:06:af:2e:17:e1:47:02:e9:21:44:80:bb:32:26:f4:8d:3a:
         08:b6:a8:67:22:83:db:eb:6f:41:2f:ec:46:9c:de:46:12:2e:
         ab:86:c3:b9:c9:15:95:5e:ce:44:53:db:59:b9:a5:c4:ed:a5:
         4d:22:ba:21:8e:b3:2b:9b:53:d6:8e:ae:46:e7:06:ac:e0:ef:
         91:68:98:b6:28:12:a9:84:da:90:b3:91:d4:8a:c5:35:c5:37:
         6b:69:b7:91:d4:67:32:4d:62:58:dd:fd:ed:ce:1d:47:77:d8:
         a5:49:ec:4a:c1:b9:d9:99:76:6c:0e:78:d9:54:f4:09:d9:f2:
         0b:a8:d1:d2:91:5e:bd:fb:88:62:43:02:15:91:1e:42:7f:dc:
         b8:53:ab:a4:6d:98:20:00:6d:f4:5b:94:b6:02:83:cf:51:16:
         3c:e2:be:b8:91:2a:c5:ef:05:6a:af:59:19:a8:73:bd:6b:d3:
         e3:25:1f:3d:6c:f9:c6:84:07:46:4c:8a:ab:99:8f:25:8a:0e:
         f5:11:38:f8:e7:78:cb:9b:ba:f2:dc:0f:9a:fb:42:43:fc:7a:
         bd:85:86:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/X5Eh282bu4//Wqa5FmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwMzAxMjAwMTA1WhcNMjYwMzAyMjAwMTA1WjAzMTEwLwYDVQQD
EyhkMzZmNjBmMDM2Nzg5MzYxNTA4NzE4M2NiNzY0ZTk3MTU3NGY2MGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfrG3X0uPR7xIg10Y4FB6/PyH1MZ
2mtTYGJDhP4IoAkjU6+Rf1hiBPlp8dHaP0QolmzcMdDImcpOoDX5cGncNXXWbqGc
V2QXL6eEfrBlH4boAQ6zBo8245G42scvGC7YsD4fiRCCB/L8ZFd1mLXclJjaxsjn
HJfifWgFM/vhuTjqOQ+2gJHu/6fKhOJ74woR7o06ijCYAloNiszBZApNVWNY2mi3
nJQfRb5Av3bxGXcFM3oAb6ueNPute4LqAMdyxHntoxhuPlO9V7kOf72V/ERaPRc9
CR0D1chYVdK7mosZSKPKWpX2Qd4BbcekVt47nntcAS43HY1Sh79G5jkLdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNvYPA2eJNhUIcYPLdk6XFXT2CoMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7/755nB
L0IpOONGwn1lJERY4xhHdQaTEA0CsXX6TNn2Dh/UaQavLhfhRwLpIUSAuzIm9I06
CLaoZyKD2+tvQS/sRpzeRhIuq4bDuckVlV7ORFPbWbmlxO2lTSK6IY6zK5tT1o6u
RucGrODvkWiYtigSqYTakLOR1IrFNcU3a2m3kdRnMk1iWN397c4dR3fYpUnsSsG5
2Zl2bA542VT0CdnyC6jR0pFevfuIYkMCFZEeQn/cuFOrpG2YIABt9FuUtgKDz1EW
POK+uJEqxe8Faq9ZGahzvWvT4yUfPWz5xoQHRkyKq5mPJYoO9RE4+Od4y5u68twP
mvtCQ/x6vYWGYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:28 2026 by rpki-client