Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
File:                     ffEy3xPkvlPYJQyMSEICZO72wUw.mft (raw, json)
Hash identifier:          6ahEnJQZzw7TmJYEDPKf2ijfOg4XR8IoNlBULXj2RHw=
Subject key identifier:   63:44:5E:29:3D:51:FE:E0:C5:0D:65:C3:38:CD:17:B8:0C:51:3E:9D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       019D9A74D68D0C0CF3178006B4737C25363D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
Manifest number:          18F4
Signing time:             Fri 17 Apr 2026 08:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:41 +0000
Files and hashes:         1: 1-4comhwHdavycedG5af_NJHeVMI.roa (hash: 5qWlsLXDCrFmr9a26dr0gVGLlb4iZ7b+LmGljRk0f8M=)
                          2: 2BAj2yNVBB9Ev29x0JnI5pjY0DY.roa (hash: C7WqvAG4TV6woujjMJ/K/2cinKEEkZ4WkuUPwQJzEyE=)
                          3: 3R5oD25q8ASU9J1x-IPhjpfW5lU.roa (hash: sFq24exEIQ3gwJ1y1cbivjeqJul4IsZanZzpZo/9X2k=)
                          4: 5X2HMKIwoWjPQrJSOgXwCfR9WFQ.roa (hash: Lnef119KZpGhPNrqg8r/PadlU1mmGHZIiXMz5ZSsb6Y=)
                          5: 6hmaFV9jZHUcH1iQEHoAEka2t_A.roa (hash: UL9Iu2DQB97jVnXQQoV3u5Hmjd8xH9DJ3iagfVBUVSg=)
                          6: 8K6yEDV0GauQRpR6Sz-mkYqf9kA.roa (hash: YFRdhlSOv6gfDujKBW+Exh92T4B9OKrIe8impdCqMJI=)
                          7: 8iuwSKbcD40JlrWc-UFGLUuEj8g.roa (hash: 6fOJSxE+CIikpa4WVDqWmdZFK3k2eETcYaoppQLIdkI=)
                          8: 9byo0_23K-pPagHkBEh9rEJVYn4.roa (hash: QnNz0j7vOzWCez4Rl0/thDpiJUI/ItzPOoJw8bCwA4E=)
                          9: 9d7R4B921poYOUCch4EUtyiJ_Ag.roa (hash: QKpiWx2I5mpXI/7+RHEcqA/fsL2GLYe/E020xVaN1UM=)
                          10: 9mJ_jPfo-pyvEX3fuvZsQyvPapc.roa (hash: JlO2a5doMxY6Lc2f9Y9l2GvdDf+o4rfwJprnFnjxRH0=)
                          11: BO427x2c7jIqTdgpqBoUV4GBfMs.roa (hash: Z+LPI5HQTMc7FwlY1uBiG1UEgvyt8D5Gy5/1/idKBvQ=)
                          12: BQZ6Oso9XyIw-_fRReCon2Q2CO0.roa (hash: Vk7BTUVJlS3mqXlydk0orpTB0WzRZDycZ8OJYxRVsjw=)
                          13: ByeONhKPbtfcZIgmOWUkHqOuix4.roa (hash: ttWur3O9+40ydS2Ly4OWefpaqA3EaxZKhb2MJiO/Prk=)
                          14: CUo08eCGhsUGAERyMcyWLHgw0FY.roa (hash: OZrR5kxOfzyV1paUyeUHWcbrdMnl0Gse1l0uDH06X7I=)
                          15: Db8mCIGfJVU0oHlWlgmVI5YkWiM.roa (hash: UUMtDrWLZuUOVch14S+v8tau5+e/fVW5DmdRag7fXjU=)
                          16: EQqG5pO47lNfEEMJMQXnfFhHy0g.roa (hash: oqfH/2bzTNUQ0aWLtfdu9eQeVvBb2v0lxrHYYZEWqOM=)
                          17: GrG7vPu708RcvR9EyQrpPJIP9FA.roa (hash: wSkBFPUkGNeEscBpQyvJ2k6O4BBwKNzgZko0/pGwIN8=)
                          18: HtmUv1MImlT_Q2Ld2vBonJv4FQk.roa (hash: rdQWy4NfeGzGEtDfCEAH9I7qgIEMNI8fOB5dq3BSkR0=)
                          19: IDazm0i-YL73zhAR97qXr397VAU.roa (hash: grUltrPQixzf/EBMLv3w9ETYdkHP09w+MFIu5/yc/TU=)
                          20: LQ_UIvfDgJ4bWRqpBkYtedt__s0.roa (hash: 3p7xDB4HYyDUah8fRasyl1V8TZZX8wHpIxxT1mwg3dE=)
                          21: M4cDIpRWsEUHm5a4sTzRttlAuvk.roa (hash: q9zjX7dOD7oaVX47BAp2xiQ0yxG0DW0f2ZWOvHM7Mbc=)
                          22: MBsdxh-LXbNXykKWto175FvyeUQ.roa (hash: BP/WY6c9buETJzS18HNplpCeUeRUolXnAY6xufbABdU=)
                          23: OB9NvslZkXFzxy32PcpXI2EyQZQ.roa (hash: q4LuPvxaGGvRgBUk1E4OV+I9UNu1yAKIJx/K7ECFDzE=)
                          24: P8KmbZWWgRdk-XM7xUKLxYGxAmE.roa (hash: bwi5QGQZIafQpR432V7tvQOrPpYLc/VPfEkf1pEmD3c=)
                          25: T8EMDfdTagVi8bf6NhEesbphXJM.roa (hash: 6hI+AFXo6hDL1fXoGqP37i5aqqR9mXhECfOEwKoiPow=)
                          26: UfCAkeXS16U-O0tnGDUi2biM96c.roa (hash: rKJ1KQWN6U0GI2Z4ebJcTGG2Hqs65XmTgZkq/7LOYI0=)
                          27: Uiq4tI4aFo8MuCH2Wj2ZUXl_8Mw.roa (hash: AECglWV3pbtawdnaRrEiiI/NUJmfjgabGaryHLABawI=)
                          28: VtsQqODOgBOBhgToCFu24GJli1U.roa (hash: OaJ4X+o78i0uLl2uzsMi+XQ+i+kff2xbksXiCJsUpcE=)
                          29: ZiaCd-XqJjaKPgBcQHbbtH_qliQ.roa (hash: sf1FkJQh5KYSlRVuT4SsB3yCgRn3WQbS7zmnzb3jc5E=)
                          30: _KaR4wLwZ7labGWt6arnKIQd96w.roa (hash: nGupux0rLke8QsDU9pv8mG8OuJgGPA7rc9IB5osDncU=)
                          31: dfuNshyma_Nem6DMpPCtDr7EzSw.roa (hash: 6tyMeZp4EGk3XnSVadagS0JLq5sNS5bexT4gfycy7UU=)
                          32: ffEy3xPkvlPYJQyMSEICZO72wUw.crl (hash: KbQIliz2Z65rRw3PkFxppFCluzyM3eHHcir78rmgINA=)
                          33: gKz1-Mt7Jzv749qmMArquMsARKQ.roa (hash: VGdRm8WsxCojNaCRCyyIwadV6IxmzEv1hZx2rLAE99E=)
                          34: gZtg_MDg7U_9YxcpljwnuIyUhqM.roa (hash: jHewOm49wVW4fvno6jYv6CwHUX/j4MlAWi9l9F1uvH8=)
                          35: gvcCAe9K6U4m6beyZ2h_rYZRE_w.roa (hash: o0yjHQjjZGVG8PAPR1psf9bfDnlgb5ytOsSX82j9YlY=)
                          36: ki2sLtb1kOWwRxC06ynnzw2LhWE.roa (hash: fHmG3zfIJ6DVQiynfpYmHirBXvs2fFUtg5pSjvN/3u4=)
                          37: nIRK_5BNBnw0BOToPD9Ug32Jo3s.roa (hash: x9G1Iq+NtdVi63p//emczmZZMCgqQAa74W6f9TfCdmE=)
                          38: qB15O1-jns9cCJruWrN8kl5vYPI.roa (hash: sCMQ1QDWGule+jMAKLoXn+v3opLMdZQ1xTIi9AoaLA0=)
                          39: qcq-5L5ItDTVwFQKgCtK_jcEX4k.roa (hash: RVNxPTWiH8kAxJ7TFlnJ6K1cNzawOicZ15SsJo3W/tc=)
                          40: r0DKP13mPB-xssYLayXGx9SRXqU.roa (hash: NgBO3Fd7UXEUj0OE/dq4bFMuMpxXZFFmnu/MxIzs/t0=)
                          41: roOXBhGFAF86gv52BSTW1-GJ5Ww.roa (hash: sU4TCChOSQ9hmPCHcaruiP1ZI0w7ReNQ3FWvH2HypdM=)
                          42: sWGnDVwimopkL3RZ1VddUdr6UVQ.roa (hash: 3ebBFe3M69O9ovZ86/tHdRoJbVlqNSPTb4bi7x1ufJQ=)
                          43: tC-SnLwiFD2qkUWb34ZJlHrEwL0.roa (hash: W2oX38Ug4hCN4nWmTJExGxqNgP/EzMkmtz9vGCWN0AQ=)
                          44: tp8BPVq0KjTwHXYUIw4XFpeAYL8.roa (hash: nECNwtss5M0OS89DUiXg8f0rEwC5xat+BWJ+gmhlIhU=)
                          45: uOeb2HXnksoFhAKr1737Vt2QvvQ.roa (hash: Thz8AYTCFqxx1Z8s09Xc2JfhFGugEC9hFmozDHQPEmo=)
                          46: vo_904xTbu-Z-e7AuWMIWjqgSQQ.roa (hash: 1p2W4XwoRIWC/E307zPmQjLc2d7vud+9t26XZ5xVWME=)
                          47: zHQC9oODWJyuv4dCSJ0cQpeKY9w.roa (hash: qm0isQLc/mdcuOloWYUWp+10DgtUEWS3AI4xGI8keoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:d6:8d:0c:0c:f3:17:80:06:b4:73:7c:25:36:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Apr 17 08:00:41 2026 GMT
            Not After : Apr 18 08:00:41 2026 GMT
        Subject: CN=63445e293d51fee0c50d65c338cd17b80c513e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:e5:a5:91:d3:06:0f:38:1f:f5:f2:a9:43:
                    bb:db:e0:eb:9d:a6:0c:de:fa:34:55:10:33:43:79:
                    95:1a:7d:a0:46:1a:63:b7:6f:6e:a3:83:99:3d:44:
                    2f:47:7a:64:3d:65:ce:c0:13:d5:5f:72:99:c1:d0:
                    65:f0:4a:e2:47:f0:99:5d:45:49:80:d0:c0:76:2e:
                    b1:81:13:1f:f5:4f:ad:af:b1:f2:13:88:02:34:a5:
                    e2:6f:58:19:57:f8:d1:17:e4:b7:1d:02:d3:c3:db:
                    58:cd:de:ff:30:39:35:f0:41:93:a9:70:5f:8c:d4:
                    3f:c4:49:3b:bb:0f:9a:4e:db:38:ed:50:54:56:f1:
                    4e:de:3a:46:43:7a:87:21:d8:fc:f6:89:f4:84:4f:
                    12:73:92:ae:27:ee:68:40:68:74:b3:c4:1b:74:b1:
                    ac:6d:c4:f0:34:7b:28:9d:2f:2b:04:0a:ef:46:30:
                    01:61:0d:57:3b:96:0e:e9:54:b9:13:37:08:f5:35:
                    9c:f1:26:1b:dd:cd:39:9c:a9:68:ce:da:62:71:97:
                    72:83:98:37:9e:32:86:41:e5:0e:ee:5c:c1:5d:39:
                    19:66:f1:4a:32:8b:54:6c:93:d5:a9:4e:1b:d2:74:
                    ce:3f:f0:b4:91:f4:a4:dd:38:eb:55:ac:82:fd:b6:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:5E:29:3D:51:FE:E0:C5:0D:65:C3:38:CD:17:B8:0C:51:3E:9D
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:95:81:00:b3:4c:2a:b8:89:7d:57:4c:24:b9:d0:d1:a7:
         3a:b3:4b:9d:9a:5d:40:52:b9:5f:14:e6:9b:b7:c2:bf:f8:df:
         05:a8:94:e8:4c:c7:7c:3e:9e:85:73:f4:f9:83:f6:15:5e:b3:
         42:53:c3:af:f4:35:35:2c:eb:ce:05:c7:54:20:7d:0f:72:65:
         b5:f2:ce:03:6a:21:1b:f0:a7:f6:30:e0:3b:4f:32:cd:ba:fd:
         5a:96:71:0d:81:fa:ad:0a:ae:fc:04:d8:f0:89:36:eb:ce:98:
         0e:8a:4f:80:a0:d6:ad:33:d4:91:53:c4:f3:c4:f2:76:c3:8c:
         7b:65:ed:b8:79:09:6f:1c:4c:d1:f6:27:f3:a6:31:5d:83:2a:
         70:89:07:40:e0:d6:94:78:f5:00:f7:05:3e:6f:8c:21:9c:b0:
         d9:d8:db:5e:ae:eb:5d:b5:64:a5:55:2a:db:80:53:24:95:49:
         52:f4:a9:93:9c:84:35:fe:dc:ae:ce:97:33:c2:90:0e:a2:52:
         63:d3:d1:fe:61:d0:8c:fd:39:77:fc:0d:ed:50:24:b5:2b:bd:
         46:63:ec:df:46:f9:59:be:28:75:28:71:41:26:25:30:bb:1c:
         c1:2c:fd:21:76:0e:58:04:f5:4b:f9:35:eb:1d:1c:54:5e:0e:
         41:74:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:39 2026 by rpki-client