Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          Bc9x6tfCckWJzFq1yBeZ8x8dGWZa9f9YgKRfYAajwfg=
Subject key identifier:   1D:B2:DA:62:F7:6D:6A:54:D4:34:B3:24:50:85:6B:44:BA:20:A7:0E
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019DA4F8BD411D837DFAA4EF8D60E25693C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          0529
Signing time:             Sun 19 Apr 2026 09:00:57 +0000
Manifest this update:     Sun 19 Apr 2026 09:00:57 +0000
Manifest next update:     Mon 20 Apr 2026 09:00:57 +0000
Files and hashes:         1: 14uGQ8WMqrRLKyUZ9kqWu4j1e8M.roa (hash: Qnr3eRkYvbDJQKaS1S3aGvCVrdkDT01CmCbfF6l/2Gg=)
                          2: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          3: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          4: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          5: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          6: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          7: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          8: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          9: B90wLC90Rj0MQGZL0STOoi505J0.roa (hash: Lezj4c9FnHyrfbbbklEmIeFidZD8OuQTzFH9GxN7llU=)
                          10: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          11: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          12: EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (hash: iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U=)
                          13: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          14: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: gdgZuop7IjDkuN9n+3M8lCUgfLES9WJ7fg1TY6mydXQ=)
                          15: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          16: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          17: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          18: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          19: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          20: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          21: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          22: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          23: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          24: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          25: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          26: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          27: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          28: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          29: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          30: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          31: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          32: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          33: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          34: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          35: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          36: jPU42eSfoA2tlNgN2hIojOiHe30.roa (hash: /L4zqco4TkMw5ksHGNn7iEBvLxKh4kpSoFBetJiOpEM=)
                          37: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          38: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          39: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          40: sHHPkO0J7VTcXTXF-RIeT7s1g3g.roa (hash: D58Ex9z4eGz7TddXigGeJ8b4dWofKWGtUoeIVLJ3MoA=)
                          41: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          42: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          43: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          44: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          45: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f8:bd:41:1d:83:7d:fa:a4:ef:8d:60:e2:56:93:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Apr 19 09:00:57 2026 GMT
            Not After : Apr 20 09:00:57 2026 GMT
        Subject: CN=1db2da62f76d6a54d434b32450856b44ba20a70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:9b:b9:ee:a3:42:02:be:5d:af:f9:49:d9:
                    9a:f7:d5:5a:77:3a:4a:46:f1:4d:c6:24:3b:2d:e0:
                    a2:ae:c7:19:b6:6c:e5:41:e6:87:08:e0:50:93:13:
                    89:bb:61:3c:04:a0:22:1d:f5:c6:a7:4c:86:82:6b:
                    83:0d:00:e8:9c:8a:cf:64:2b:17:57:ce:79:11:f5:
                    d8:a1:a9:72:57:01:0c:78:fa:8c:de:2e:ed:24:06:
                    9b:65:06:d7:5a:c0:fc:5b:29:cf:08:ff:bf:db:5c:
                    8c:ca:84:b4:d9:f4:08:47:4d:df:d9:ff:18:78:e5:
                    fc:8a:ce:c5:0d:55:d2:cf:f0:2d:65:ac:39:1b:8d:
                    2e:41:b8:6d:e6:96:6a:84:09:ca:5e:0e:a4:73:d6:
                    63:75:ac:52:ef:08:01:07:b8:30:b6:90:6c:00:a4:
                    53:e6:0d:8e:b0:bc:f4:ee:c3:c6:5b:d8:33:65:18:
                    aa:4b:e5:ec:2e:e6:30:5a:03:ca:eb:65:90:07:ed:
                    91:ed:98:d2:38:75:50:a0:f7:2f:78:d0:80:48:9f:
                    67:55:70:81:96:1a:bb:f4:fa:45:b2:70:a0:77:b0:
                    44:a4:10:fd:85:1c:a6:2f:1d:50:eb:ce:93:c1:8b:
                    1b:b4:dc:a9:b3:79:1c:0e:85:81:93:1e:f1:ec:de:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:DA:62:F7:6D:6A:54:D4:34:B3:24:50:85:6B:44:BA:20:A7:0E
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:37:39:aa:b1:fa:47:a5:13:2d:ed:2a:d9:10:02:d0:44:5e:
         12:dc:4e:fc:1c:68:b5:aa:b5:46:f3:e1:d7:f5:38:e7:52:9b:
         51:42:33:4b:7f:f3:d0:b5:75:4a:79:f1:23:ae:e0:3a:9a:ca:
         9a:28:3d:28:7b:f3:27:65:db:aa:13:ad:d2:e5:ff:94:43:ce:
         3f:80:6e:15:12:c9:59:10:ce:ec:4a:62:b0:97:cf:7c:90:54:
         c1:c6:a2:63:5f:54:7c:b4:0a:57:d6:07:17:57:74:b2:62:89:
         d3:b0:2f:bf:49:c4:fe:98:7d:ef:39:e2:73:42:c0:bd:35:eb:
         1b:ed:0d:31:46:b2:22:35:67:fe:33:b5:08:c4:f1:7c:e1:6f:
         e8:27:63:fd:fe:1b:4d:55:eb:1b:2e:86:c8:ce:b9:5f:eb:d6:
         90:38:60:bd:2e:bd:02:50:51:58:a3:40:b3:33:04:d0:84:d5:
         ac:e4:c3:45:7a:d1:b8:ba:0c:95:78:1c:c5:71:43:71:de:94:
         44:43:ea:15:4a:52:0a:d2:81:89:9a:47:39:11:eb:32:67:50:
         39:cb:ed:b2:51:a8:94:ad:64:6c:6a:f7:4e:a9:84:46:61:d7:
         fa:9b:fe:25:73:09:69:36:52:a9:42:bb:26:e8:0e:2d:9c:a8:
         06:bd:08:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+L1BHYN9+qTvjWDiVpPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy
OGI4N2UwHhcNMjYwNDE5MDkwMDU3WhcNMjYwNDIwMDkwMDU3WjAzMTEwLwYDVQQD
EygxZGIyZGE2MmY3NmQ2YTU0ZDQzNGIzMjQ1MDg1NmI0NGJhMjBhNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiSbue6jQgK+Xa/5Sdma99VadzpK
RvFNxiQ7LeCirscZtmzlQeaHCOBQkxOJu2E8BKAiHfXGp0yGgmuDDQDonIrPZCsX
V855EfXYoalyVwEMePqM3i7tJAabZQbXWsD8WynPCP+/21yMyoS02fQIR03f2f8Y
eOX8is7FDVXSz/AtZaw5G40uQbht5pZqhAnKXg6kc9ZjdaxS7wgBB7gwtpBsAKRT
5g2OsLz07sPGW9gzZRiqS+XsLuYwWgPK62WQB+2R7ZjSOHVQoPcveNCASJ9nVXCB
lhq79PpFsnCgd7BEpBD9hRymLx1Q686TwYsbtNyps3kcDoWBkx7x7N6LKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2y2mL3bWpU1DSzJFCFa0S6IKcOMB8GA1UdIwQY
MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt
YjQ1NDBjNzRjOTRiLzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi
LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjc5qrH6
R6UTLe0q2RAC0EReEtxO/Bxotaq1RvPh1/U451KbUUIzS3/z0LV1SnnxI67gOprK
mig9KHvzJ2XbqhOt0uX/lEPOP4BuFRLJWRDO7EpisJfPfJBUwcaiY19UfLQKV9YH
F1d0smKJ07Avv0nE/ph97znic0LAvTXrG+0NMUayIjVn/jO1CMTxfOFv6Cdj/f4b
TVXrGy6GyM65X+vWkDhgvS69AlBRWKNAszME0ITVrOTDRXrRuLoMlXgcxXFDcd6U
REPqFUpSCtKBiZpHORHrMmdQOcvtslGolK1kbGr3TqmERmHX+pv+JXMJaTZSqUK7
JugOLZyoBr0IfQ==
-----END CERTIFICATE-----