Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          JxDJGiKEoR7PibkjZdhIyr4l7+QE4SQDN77PHsT3bvc=
Subject key identifier:   FE:39:19:F6:A5:47:7F:7E:D2:0E:11:D1:A5:02:75:19:E8:89:5C:E8
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019CAC4748BA9F49E200879FD884A7E27087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          186F
Signing time:             Mon 02 Mar 2026 02:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:18 +0000
Files and hashes:         1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
                          2: 5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa (hash: 6qzHpGrxdIjiu8z1NvLGeZSk8yFo48qK9MNsjEijr88=)
                          3: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
                          4: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
                          5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
                          6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: ck6/3Obu6OOxk3ogHOW6z7gOv4DJCqNHaYTE3pfyyx4=)
                          7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
                          8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
                          9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
                          10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
                          11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
                          12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
                          13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
                          14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
                          15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
                          16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
                          17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
                          18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
                          19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
                          20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
                          21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
                          22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
                          23: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (hash: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw=)
                          24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
                          25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
                          26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
                          27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
                          28: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
                          29: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
                          30: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:48:ba:9f:49:e2:00:87:9f:d8:84:a7:e2:70:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Mar  2 02:01:18 2026 GMT
            Not After : Mar  3 02:01:18 2026 GMT
        Subject: CN=fe3919f6a5477f7ed20e11d1a5027519e8895ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:4c:b4:2f:f4:be:78:c6:30:6f:07:80:7d:
                    e8:99:45:88:09:c9:a2:6b:d4:6e:19:6c:84:b6:b3:
                    33:e2:8b:da:48:61:ec:7c:99:fb:82:f4:9c:51:77:
                    95:33:fe:f9:0e:55:4d:11:f6:77:f7:1a:34:65:bf:
                    d7:35:b2:84:37:24:ea:be:62:0c:1d:48:21:a5:89:
                    9b:1b:1b:b5:8f:e0:76:17:a5:33:eb:98:c6:23:73:
                    96:2c:29:8b:b9:b3:43:03:59:bd:91:e6:79:9d:55:
                    81:b1:d1:a9:b0:25:e8:c6:74:bd:af:a3:aa:fa:88:
                    eb:4a:6b:0e:b5:0f:b9:a6:6e:b6:04:c6:63:04:e8:
                    2f:b1:71:5f:49:25:4b:08:56:08:3b:f2:57:ab:c9:
                    cd:1b:18:93:66:e8:ba:d7:a8:a3:43:c3:40:8a:70:
                    6c:e0:e8:1f:55:b2:d7:c7:a6:9f:21:30:25:33:9f:
                    6d:40:2b:aa:9d:96:69:17:cf:ee:ab:c7:c2:fd:4d:
                    7f:b8:88:7d:90:69:93:1f:ef:d7:c0:75:a4:25:4a:
                    0a:07:78:55:cf:44:5f:c3:3d:11:0b:ab:62:3a:89:
                    84:3a:d5:58:35:9d:ab:1b:ab:84:94:11:eb:b0:1b:
                    ba:95:63:5b:8b:34:38:b7:80:dc:49:b7:b7:13:dc:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:39:19:F6:A5:47:7F:7E:D2:0E:11:D1:A5:02:75:19:E8:89:5C:E8
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:67:7d:70:43:ed:74:60:b5:8b:90:a6:96:5e:f3:c0:b1:
         21:cf:ba:64:34:2a:c8:dd:71:73:e8:05:9f:13:0f:8a:3e:72:
         ad:7f:84:e6:5d:28:f8:32:15:ae:cc:2f:68:9b:c8:85:c1:c3:
         1e:8a:da:66:f8:b0:a8:d4:c8:9d:e9:3d:bd:b2:10:c6:b8:04:
         49:79:98:0b:9a:43:ea:dd:b9:2c:a0:e8:1f:ea:33:d5:2f:c8:
         3c:86:1c:ee:84:cb:25:a2:2e:38:e9:4a:89:6b:2c:28:f4:f4:
         9b:2e:2c:60:dc:d8:ed:19:1e:13:48:2f:b0:52:78:5a:1d:19:
         e7:0f:4f:53:58:ca:10:0a:3f:9d:80:60:12:b4:b1:bf:0c:ea:
         6b:c9:3e:50:34:eb:5a:e3:3c:d3:ed:31:79:cb:11:34:d1:59:
         ec:3b:6d:c5:14:54:24:23:a4:8c:45:0b:54:fc:96:48:d3:60:
         a0:05:a7:83:2e:82:a2:6d:72:7e:dc:b0:2b:d6:78:f8:9c:2c:
         99:05:71:c3:e0:14:39:c3:15:01:06:89:41:a1:50:74:84:34:
         a3:c2:61:54:6a:20:9e:58:93:62:f4:1b:f8:68:bd:2c:d3:c2:
         e2:e8:c1:8d:f7:95:9a:49:32:41:bf:7d:e5:42:dc:81:bb:03:
         1d:b7:c1:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR0i6n0niAIef2ISn4nCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjYwMzAyMDIwMTE4WhcNMjYwMzAzMDIwMTE4WjAzMTEwLwYDVQQD
EyhmZTM5MTlmNmE1NDc3ZjdlZDIwZTExZDFhNTAyNzUxOWU4ODk1Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA5MtC/0vnjGMG8HgH3omUWICcmi
a9RuGWyEtrMz4ovaSGHsfJn7gvScUXeVM/75DlVNEfZ39xo0Zb/XNbKENyTqvmIM
HUghpYmbGxu1j+B2F6Uz65jGI3OWLCmLubNDA1m9keZ5nVWBsdGpsCXoxnS9r6Oq
+ojrSmsOtQ+5pm62BMZjBOgvsXFfSSVLCFYIO/JXq8nNGxiTZui616ijQ8NAinBs
4OgfVbLXx6afITAlM59tQCuqnZZpF8/uq8fC/U1/uIh9kGmTH+/XwHWkJUoKB3hV
z0Rfwz0RC6tiOomEOtVYNZ2rG6uElBHrsBu6lWNbizQ4t4DcSbe3E9xVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP45GfalR39+0g4R0aUCdRnoiVzoMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLdnfXBD
7XRgtYuQppZe88CxIc+6ZDQqyN1xc+gFnxMPij5yrX+E5l0o+DIVrswvaJvIhcHD
HoraZviwqNTInek9vbIQxrgESXmYC5pD6t25LKDoH+oz1S/IPIYc7oTLJaIuOOlK
iWssKPT0my4sYNzY7RkeE0gvsFJ4Wh0Z5w9PU1jKEAo/nYBgErSxvwzqa8k+UDTr
WuM80+0xecsRNNFZ7DttxRRUJCOkjEULVPyWSNNgoAWngy6Com1yftywK9Z4+Jws
mQVxw+AUOcMVAQaJQaFQdIQ0o8JhVGognliTYvQb+Gi9LNPC4ujBjfeVmkkyQb99
5ULcgbsDHbfBkQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:15 2026 by rpki-client