Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          86yjxtSzyk+uPGZuyZuWHk1naRdljPetsxNYfN78XMA=
Subject key identifier:   FA:7D:E4:52:8B:22:32:0F:58:2A:A2:C0:08:38:DF:5E:11:E3:14:42
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019D99631523AB5DB54F7BAE44E654E05F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          0523
Signing time:             Fri 17 Apr 2026 03:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:40 +0000
Files and hashes:         1: 14uGQ8WMqrRLKyUZ9kqWu4j1e8M.roa (hash: Qnr3eRkYvbDJQKaS1S3aGvCVrdkDT01CmCbfF6l/2Gg=)
                          2: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          3: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          4: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          5: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          6: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          7: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          8: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          9: B90wLC90Rj0MQGZL0STOoi505J0.roa (hash: Lezj4c9FnHyrfbbbklEmIeFidZD8OuQTzFH9GxN7llU=)
                          10: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          11: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          12: EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (hash: iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U=)
                          13: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          14: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: 1DsAsFTKOh0QjBgJVh+pQ6zQ2LSiuXdLyMHyaeV5K/o=)
                          15: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          16: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          17: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          18: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          19: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          20: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          21: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          22: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          23: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          24: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          25: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          26: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          27: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          28: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          29: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          30: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          31: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          32: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          33: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          34: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          35: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          36: jPU42eSfoA2tlNgN2hIojOiHe30.roa (hash: /L4zqco4TkMw5ksHGNn7iEBvLxKh4kpSoFBetJiOpEM=)
                          37: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          38: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          39: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          40: sHHPkO0J7VTcXTXF-RIeT7s1g3g.roa (hash: D58Ex9z4eGz7TddXigGeJ8b4dWofKWGtUoeIVLJ3MoA=)
                          41: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          42: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          43: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          44: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          45: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:15:23:ab:5d:b5:4f:7b:ae:44:e6:54:e0:5f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Apr 17 03:01:40 2026 GMT
            Not After : Apr 18 03:01:40 2026 GMT
        Subject: CN=fa7de4528b22320f582aa2c00838df5e11e31442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:a7:a7:6e:fa:4f:cb:c8:00:44:9f:f5:19:
                    5d:73:f0:49:b1:76:64:6d:c4:c5:2c:15:2f:f1:92:
                    bd:89:4d:92:4f:05:27:76:7f:42:e0:1a:d3:ef:cc:
                    91:51:b5:e8:31:04:e1:5c:28:58:27:fd:cc:55:3e:
                    f2:9f:63:1b:ce:68:8b:99:77:25:16:ca:0d:07:5f:
                    8a:6f:8f:15:c0:ce:3f:a0:60:75:38:aa:4c:be:56:
                    63:5f:f2:d8:b6:e6:6e:84:9a:ab:0a:e1:b5:0f:e4:
                    e8:19:a8:82:f5:db:54:30:58:f5:11:2d:0b:f0:22:
                    fa:84:c9:75:5d:bc:2d:50:7d:2f:32:db:6a:e0:28:
                    f2:0d:37:e5:21:d2:9d:52:4b:2a:af:0d:52:da:2c:
                    24:1b:87:b9:66:2d:72:e4:7f:95:2a:3c:35:de:21:
                    b4:80:50:15:89:5b:17:2f:6f:7f:15:4c:b2:b9:96:
                    1a:b7:73:c1:a2:8d:b8:5c:f8:61:d0:7c:69:38:87:
                    d2:d4:24:18:b5:46:c0:4d:47:0f:53:0a:77:39:65:
                    47:07:f3:3a:c5:2e:2a:10:fb:96:2a:74:05:8c:d5:
                    28:e2:d5:cb:e8:a3:63:9e:00:4d:0c:c2:61:5d:f2:
                    83:de:d0:ee:98:7a:ce:98:fa:83:20:30:e5:0d:c2:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7D:E4:52:8B:22:32:0F:58:2A:A2:C0:08:38:DF:5E:11:E3:14:42
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:20:9e:23:21:46:1d:6c:9e:30:31:81:ad:3d:c3:f1:5c:
         e0:ad:fd:04:2f:c4:eb:11:e9:90:b1:26:88:0c:e1:c8:e0:73:
         b5:a2:77:80:de:47:67:82:ab:30:f6:46:a0:04:90:42:b9:45:
         1f:be:96:a5:5b:eb:ee:c7:e8:b8:1a:95:24:ae:b3:f7:10:b0:
         ce:b6:12:2e:71:b2:de:ec:4d:72:2a:e2:01:ec:6a:af:ac:cd:
         be:6a:a7:e7:50:a4:b9:39:bf:12:fd:ce:0a:b1:d3:9c:ef:6c:
         50:a4:c2:20:3e:29:6e:8d:ac:13:e2:cd:cf:37:53:61:20:33:
         20:15:6c:d9:23:c5:55:c5:ef:6a:f0:e1:89:ce:b7:a1:21:77:
         ef:d8:f1:a4:32:e8:fa:e9:3b:4b:27:a1:4c:0b:9f:8d:4a:24:
         85:0d:ce:ea:a0:9c:13:89:64:77:2b:2e:72:45:43:59:b7:07:
         f5:5b:47:5a:e5:40:7b:44:5c:3d:62:df:0a:47:02:f8:a3:8f:
         71:17:f7:7b:e4:29:bd:cb:f4:3d:43:2b:a6:d9:1a:0f:46:6d:
         f8:5e:45:de:b7:10:21:62:d4:e2:32:36:aa:e9:ca:f9:20:3a:
         50:5a:e4:24:8d:3d:a6:d8:39:fd:3d:3a:6d:78:bc:02:06:85:
         fc:c2:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----