Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          Zw+Yz1khgm7PfVg9QwXtDWndrrQwEUTeDu9q0c+xkQY=
Subject key identifier:   7D:3C:2C:1F:F9:48:4A:D2:D0:5D:76:CC:4B:1B:B6:42:2E:0A:38:94
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       019CAC0FE676D77CAA66D3F6D209C3D913F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          1594
Signing time:             Mon 02 Mar 2026 01:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:48 +0000
Files and hashes:         1: 1-xKIBkpa7T0veSSTKBuORX_yg6I.roa (hash: fYNjN1Yuj4o1fOt/7nwc1/53oKDoa+n/LUtvQGqIcIw=)
                          2: 17C_vnF79Z0SjoScCQYs0Qbx30M.roa (hash: 8O33ZZG4CQkBtT5Vng3e75/g1VOrRLzBwAenPZwIQiA=)
                          3: 2WDRTRevv9-ox1rCwwOijTgm38Y.roa (hash: sBwwjQ4mnAUEOPtAO/AFlM1FAiCnDmaJW98VIqoVkfU=)
                          4: 33HmxX5laer88g91bQT40p7G6N8.roa (hash: WQtp+MeWQU34zoXSdinNrezoDYcPmqBxgQ9qGR9RXWI=)
                          5: 3ytiWjmFt3rYZft34LBPp9IPn8M.roa (hash: t6Z85iFlhPkY9Mi/GJk5DDB2tSPS3ygni+I6/1lEoxk=)
                          6: 6Dm3L1A6fwNf5cdJCg_KzTtfF4U.roa (hash: JWGAhkB/RVPvN6u4alw1RrRc1axraV68/7+Pht7ruCE=)
                          7: 6qoBSrrhi2VKQ2-x91iDJmcoOhQ.roa (hash: urnXFLFxbktUpf/FnGonIt+QH0Pj4s4eEnHDC6hX/xw=)
                          8: 8Xitw9UVRcrb76gpVaumne_jEwU.roa (hash: 0hgIFdKgGSQcfkWMig/zds4qJYEy+FkP6hC1G39jOFE=)
                          9: 9T5_OTvwktW8zRDsIc_oghwfJK4.roa (hash: DN/iAPUdkXHSXPrEJqQVCF4jzwo8vDZFSIr5wO/Xikc=)
                          10: B60g_m0QJwYIuA9KKm-uF1NhLIM.roa (hash: 9NtMYll9Etxivck/4newooAS+FDFrk33e9AIEWgcc8E=)
                          11: BjY0UIUDYHmtHwBNhaObIWAI358.roa (hash: OvPE9LHEEN/9/jOSuoQZt3aJ0JqPRafOAp/r5JidHtY=)
                          12: EHgktTf6m7_fov1qGoLd_G4GBHE.roa (hash: qTES87h7tbtM80VYUBu7n7wmyWPsetKC04PB5cOHzdk=)
                          13: HUq5r-QJOoCJ1eLD0wrmN9WulXU.roa (hash: rohOtLkiJZ2lqEQyOwpJqZMVus71D3p6WIHeG55/DBA=)
                          14: KdL2r09wZul28eEPN4dewnB7ukk.roa (hash: 9pOERGjcNeBDTiqWkoEOFlhoH/O5h5mU1iEJxp7N/4Q=)
                          15: Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa (hash: lxo8eRRdaXgJpksSvue5GrOKiD1mj5NmMU6shXOSuVQ=)
                          16: LoYqb50w0fBtfcHsb6vmg_Jp5HM.roa (hash: 5JEsLkJAmr1UNeD7WuJILvN07Z2E4VXvHyU2P3noRJQ=)
                          17: LtPnBk6NSxo0XNLt66J042Sgc0I.roa (hash: Ss/KW/qryEzrYA7hPSNoI8jm1o8wvpp7Ys+hj0l/oCk=)
                          18: OfxjuwiEKWgdwrg-K1K-c5_VgLQ.roa (hash: UWtmb6ZbxoAUabXWP2QO5S1E8N0sWVkGkKY+3/ZZOw8=)
                          19: OwThGODJImZhpEQ6VocAEXk08Wk.roa (hash: 9GWZM8UI6vesEnw5NwOVO4E8dLD1yeWhQTR6JXudaTE=)
                          20: QEVT0nsNdMK5970-VuCNIO7bYg4.roa (hash: H3kWdOUjD4rqnPFsu+zJAwLiJasUXrKvsMvw+jYrgQg=)
                          21: QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa (hash: /qvtVd1S67G22sI9goTW79cQnSWlwGWhyntkNwAyihc=)
                          22: UE_hgXeXCUPJYDw6I06aW1aAkJ0.roa (hash: B5wHSL8kle+kiYR4U2yvdOPBll+rksc+6BTwGU5+ZZw=)
                          23: UNKE0U9fY4vtLgLGDaMWV30529Q.roa (hash: hBRRFxInMVI2iUc7x3mm7CzMk2hrGE/9PAlOKvXi7I4=)
                          24: WmaJm0jDrpyJX9Q-LqqqCt-uwIA.roa (hash: eCuLoI4rD6y1bR6VEKccwXQk5/tx5hypqNKOEMMl80A=)
                          25: X0LNnZh_zA1JruTsm1BTGzpgxgI.roa (hash: bbY9kDefslrSJOAVec3/5z33iFHF4a4duJ420QtZ6Qs=)
                          26: ZI085fx17wglNov032bXlk10RTg.roa (hash: j5Ko4ezz0l/Zfw3a/ZhaxENbSPKBPqajPZNL6E/+Gv0=)
                          27: ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa (hash: ucM3NjRsgstMASAi+QcIMApg7HelzidJ5g1y41234cs=)
                          28: _FggjIBA5t8sjfRqZsrKE_Ymbdo.roa (hash: 9HysWDZxGXfzPsUoHmbEgdNxnq26KBNjoD5DlM7apJc=)
                          29: bEtFnc7rnzCNJYBVd6ns7_KpUB4.roa (hash: PfuSivsRFYIl84wqTHOi1o/Y41ISwKTYQsUGOVnvA8c=)
                          30: bWrf5HBRWkC5tRtfjrT7kJyrpno.roa (hash: /I5eLM8VzNgvUAvbvfb6xY95ux9WGp/lCmpzrs9JDzo=)
                          31: cMPrRmSojB9SkGby8eR98Ete7yU.roa (hash: oFwh+VPxKC/FGJBIY58aOrYkh1H3RAArQ9XcD617oH8=)
                          32: cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa (hash: kafroNNbYDnc2h6nBm4gxZIlVlKGznDzvdAVuH5RGlI=)
                          33: evRG__ex8JGxNVzyfa2c0uYKq_0.roa (hash: 93Yx357YevAnWmJ/tXlOKW8HTJL/2XO97iLj27xdMN4=)
                          34: fCRl6H2tV2dYneBgV0uiC_W_S-w.roa (hash: QOoL0BKgGIl6PJSa1c+JHlWw89Yfva3b2J8N7HowCT4=)
                          35: ffSjroyzqFmTGGvAwWqAlu0UGW8.roa (hash: B45lJtGrx/EaXLRfo0U3/fbwEmEU4k3M8ZS2wUMBPgE=)
                          36: fv_FIWsQ6j6A0tVez5uEd3louso.roa (hash: 2YyDYTFacwqXQWkGL6XcsPB1oMsulqFc48OJziLkM3k=)
                          37: hAJCIirAsZk8GUXF7WubyM8TjKI.roa (hash: j6pH65MDKZ3nETHCyHm0OLZKv7Eb9miovENp+54ETCc=)
                          38: iarmlWK_D1F2Y519OMWB6VCc31g.roa (hash: WFVbmq4d03vzZGnbmXlce/4IUJO9Lw5GHMqxL1YbJaE=)
                          39: j9orTwG1Vgweag4E9VIs_WouzoE.roa (hash: dRvoLFD35EV9+pViQgulgami++djop0zIxFnFUcf+is=)
                          40: jD6mM0pl55Gkfup6YBb23hzuzk0.roa (hash: gYpmzgS3WeGkMeLq1vK2W75gJCmA3gbQBsEJ6rVnTeg=)
                          41: kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa (hash: M3kl/dW1izCba43Gvn97MkBlbANqv5CR/FlI8KEINZc=)
                          42: l1pzlCUbLYSwaiCGAir9wNYcTTE.roa (hash: t1UtwzLw1x5tIwxUqO3rM2BmFbhBkbvupvjPzA3M+14=)
                          43: n0NR6OiiSRVLpNipRarNfvBQVBQ.roa (hash: x7+Hnm6izCIj5uo7DZZ8rAC8clBtC3HKKYVdoqJqJww=)
                          44: n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa (hash: KE5qMKf48PX3z96z/KseHOWj4bf+7DR79w93dsatrG0=)
                          45: o0zFW0tgu0SNCajq1-Pj04reASE.roa (hash: XI8Y+MP7U7GXabQcnglenR9AR3VDKkEoKmwdTMvnwSA=)
                          46: pP92nXUgnFxyzmxr642WITYfjR8.roa (hash: TqxUp210JvwrsHlKUxm5AHk6pYYpaSVTd52yZrfvpuk=)
                          47: s9bHtYw6qGInBE6Pd4y6dDNszho.roa (hash: DuL4nvwJ3GhqWQoioLF44KGKjnyU3aqouWmY/jU6w4Q=)
                          48: t7fjwmK42FWZE7y1k_7IUkx6rYI.roa (hash: An31yl38X+FtV1bD85RaGjnhQAZUGGTmiLxRfjuQc/E=)
                          49: ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa (hash: GJO6QjXLjOfr5Iv9d1ph8RhzI9Z4NmCWHQkusa8M8lI=)
                          50: vxHiN8XYZlqNx9pegdEwtdXJzX4.roa (hash: DRRytWcqFbSlVtkcmI8YNqgxFW5pXUdMhy1Q5V9THDo=)
                          51: x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa (hash: T+4iofAbDpf5avC4l/+tJIoT9rhbeVtFuRCldw4lWGM=)
                          52: xDz0O2A-gElcx4WUvd4FQFxf7ec.roa (hash: IWTlwoJDvqtW6cYxdSIvliokYo9KclfeEgazhnMIeYs=)
                          53: xREJbZysiuR_7AfAbkb-_mvdCJU.roa (hash: ge+uzdtNTlkRHujnITIjJNysWOPLtwdYoaqf4cikYBQ=)
                          54: xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa (hash: TDnyAyMix8iNzerKPVy27tm7TC9mUARhadLzqmvLY58=)
                          55: yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa (hash: 8kj3LqF1iVRGrMYtJSTCYp1IezJP4n7oP1W8pfH6tR0=)
                          56: ytt2iIs36bszj8mftd5slrzDQco.roa (hash: YI/YKXK40yzzg8HNrk8zo8zko1P2F7J9FfpMEZCi7rY=)
                          57: zGv39sxT-IgxK9wQigpzw1dL81k.roa (hash: +TgYlQl9Z+mDQd/s9Yb0REr9Dx/C5mDs1i0ouWI4Pcw=)
                          58: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: yCrNbjEKEb9+SwxmV+R61cNQIa21JZyl4qOpwZgbsTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e6:76:d7:7c:aa:66:d3:f6:d2:09:c3:d9:13:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Mar  2 01:00:48 2026 GMT
            Not After : Mar  3 01:00:48 2026 GMT
        Subject: CN=7d3c2c1ff9484ad2d05d76cc4b1bb6422e0a3894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:28:06:4f:8f:be:d9:93:ce:a6:b3:24:1d:78:
                    44:76:7b:ee:91:96:86:c0:7e:cc:f6:02:a2:72:75:
                    97:4b:9b:53:b4:3d:69:43:10:bf:0f:2c:b8:50:6f:
                    db:1f:23:2a:e6:04:07:34:a0:4c:48:e2:16:6a:86:
                    ef:b4:fb:45:b5:6f:6c:82:b7:02:b1:77:4c:22:84:
                    a9:a0:30:5d:f0:9c:3c:f4:2b:e6:20:d2:6e:5c:a1:
                    27:9e:94:12:44:7c:8e:69:2b:e0:70:1c:4c:8c:fa:
                    09:95:23:9b:f4:2f:f4:eb:c5:14:2a:b1:83:3a:03:
                    94:9d:b1:a0:97:a0:ba:8e:05:33:b2:d1:0e:38:a5:
                    36:b3:76:13:52:18:c2:e1:ce:9c:fa:7a:81:7f:ae:
                    95:db:0a:29:15:06:87:0b:6b:9a:d5:6d:88:3d:c2:
                    9f:7f:ce:41:3b:cd:61:c5:18:b2:64:43:12:3b:7a:
                    6f:44:c0:d4:2d:f1:17:24:c5:64:f2:8e:14:cc:64:
                    88:b8:18:9b:9d:64:4c:f4:45:a8:a6:a7:11:55:cb:
                    a7:b4:15:cb:7b:b7:54:75:89:cd:5c:3a:93:6a:d0:
                    fe:6e:51:fc:9c:52:88:1d:8c:dd:d3:66:34:e4:4e:
                    95:57:56:fe:a3:33:8e:33:1f:53:b1:1f:1e:f7:bd:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:2C:1F:F9:48:4A:D2:D0:5D:76:CC:4B:1B:B6:42:2E:0A:38:94
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:f7:c1:6e:0a:ab:2c:68:6f:fe:0b:89:6b:9b:21:19:81:
         48:d0:50:f8:ad:df:7c:dd:9f:a0:e6:20:a9:5a:2e:68:df:9b:
         b6:10:68:ac:c8:06:bd:f3:6f:e9:4f:56:4c:ae:af:54:31:44:
         f5:02:25:19:72:8e:c6:e1:d6:53:77:92:e9:ab:e3:cf:22:27:
         72:50:61:c6:e3:67:51:9a:9d:d2:d6:c4:70:f0:8e:2f:ef:20:
         17:4d:56:5e:42:16:97:08:46:95:54:ee:62:84:6a:61:02:57:
         fe:68:32:f9:7e:47:b8:40:d7:a3:1d:b2:86:00:b4:50:b1:e1:
         ec:6f:f6:2b:4e:aa:73:a9:4d:3c:a8:36:d0:06:c0:b6:02:72:
         8f:df:e7:82:3e:b6:de:dc:a5:ae:49:d7:ea:16:99:51:bf:20:
         da:b8:f8:5e:92:96:15:92:48:30:92:15:41:1f:26:6a:06:0e:
         fa:1b:63:90:c3:7b:82:4f:48:d5:ce:c7:d0:98:06:d1:d7:90:
         a5:8f:b3:69:3d:7a:92:6a:71:65:27:ec:2a:2d:9a:e7:2d:cd:
         da:4c:2f:3a:34:ef:f4:73:0b:65:24:eb:61:09:87:92:44:90:
         36:29:79:ca:90:05:29:86:ea:31:10:f9:2d:4a:69:20:b9:5c:
         e4:e8:df:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+Z213yqZtP20gnD2RPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwMzAyMDEwMDQ4WhcNMjYwMzAzMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZDNjMmMxZmY5NDg0YWQyZDA1ZDc2Y2M0YjFiYjY0MjJlMGEzODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SgGT4++2ZPOprMkHXhEdnvukZaG
wH7M9gKicnWXS5tTtD1pQxC/Dyy4UG/bHyMq5gQHNKBMSOIWaobvtPtFtW9sgrcC
sXdMIoSpoDBd8Jw89CvmINJuXKEnnpQSRHyOaSvgcBxMjPoJlSOb9C/068UUKrGD
OgOUnbGgl6C6jgUzstEOOKU2s3YTUhjC4c6c+nqBf66V2wopFQaHC2ua1W2IPcKf
f85BO81hxRiyZEMSO3pvRMDULfEXJMVk8o4UzGSIuBibnWRM9EWopqcRVcuntBXL
e7dUdYnNXDqTatD+blH8nFKIHYzd02Y05E6VV1b+ozOOMx9TsR8e970fXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH08LB/5SErS0F12zEsbtkIuCjiUMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtT3wW4K
qyxob/4LiWubIRmBSNBQ+K3ffN2foOYgqVouaN+bthBorMgGvfNv6U9WTK6vVDFE
9QIlGXKOxuHWU3eS6avjzyInclBhxuNnUZqd0tbEcPCOL+8gF01WXkIWlwhGlVTu
YoRqYQJX/mgy+X5HuEDXox2yhgC0ULHh7G/2K06qc6lNPKg20AbAtgJyj9/ngj62
3tylrknX6haZUb8g2rj4XpKWFZJIMJIVQR8magYO+htjkMN7gk9I1c7H0JgG0deQ
pY+zaT16kmpxZSfsKi2a5y3N2kwvOjTv9HMLZSTrYQmHkkSQNil5ypAFKYbqMRD5
LUppILlc5OjfYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:48 2026 by rpki-client