Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          ergPts6BDavHOcFJbpvKGrg5aRUMZprAjbM8VwXkvgk=
Subject key identifier:   3F:75:5E:24:71:B2:E1:AC:CC:85:97:1B:DA:3C:1E:DC:36:CD:74:55
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019D9C2CE444EBE4C841F65EA7853D71D963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1940
Signing time:             Fri 17 Apr 2026 16:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:20 +0000
Files and hashes:         1: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=)
                          2: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=)
                          3: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=)
                          4: 65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa (hash: AD4zC7meiWbh1Y7ei46GISC0uTS4fKqWlAroEgp7qMg=)
                          5: AT7FQLG2UUjyo3d4e6IRvENj5-w.roa (hash: gZF293cO6fOokcvSru3HZunk3gWSY7f3PELfdlKOb8E=)
                          6: Cw32mQUu9N5LemNb8nabq99WmVI.roa (hash: DnQF/AlxbCxiA0bPejrXp12aS1lxxoSPGE2EUoo4xu4=)
                          7: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=)
                          8: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=)
                          9: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=)
                          10: FfVdOGIdFleEMtx09zm4sKNqfYI.roa (hash: E/kxLTcHU7eGclPBrpVwsj12tDSrx+K6Wq1WP4DeY4o=)
                          11: Hzswp8TTjFLBLtq_0yz3CxRyH5I.roa (hash: MP4gqKAVDOE83sn9DN5h59teDQEElcryGm3TvZLWgnM=)
                          12: IQugLkmDTYD9u_WH9tCCumwQmBA.roa (hash: QMUguI7DpxWzcD9mynZtBw9X+EUJdVDnjDiCcMj6Ijk=)
                          13: JKIHwL24wYeRbIQkMf1HZ6STLiI.roa (hash: sDMrJ8+x30BMRZ/quC856/uc/e00xr9A8ozSxWzFDVw=)
                          14: JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa (hash: UMtm5NsMwoDqBk1AdmB+70baCvbkR79TUj4KCkxO3RI=)
                          15: Jbdgr8MRrMn2ctpZqmGbDv1TOe8.roa (hash: 7kHoBxC5LM1XhA9j1iE63mn9gnRUO14PlRYGHfs2BQ4=)
                          16: Oznd7O4v0fl0yKCvpuYhUuQ7204.roa (hash: ldWUtJPO/Fk5ou2pZE7B4or/0nqqkTNzZKegpBoxYyE=)
                          17: PS9MTZzdBifx0im1Vrq3VgjsS5s.roa (hash: 0ux5UJNrhxWM198AZ/GNCpoKgSg8gWm9eiQUOhAki7I=)
                          18: SuktG5ygfNWoaIU5AmVI9f2QHqc.roa (hash: njMvgmOx4SGfZ8RPEr0/GOcVp5Xe/qHE6LYm5ovrTVQ=)
                          19: TpP8go9gxjsA4n1kC2kuJQbokBE.roa (hash: 7lExTFrNOgtfm66T9jsBGx9Cjl+c6H6zYjBrnH5qrXg=)
                          20: YYro5ffGY8__zi5PmVjqRei7Zi8.roa (hash: v6CR7E1/nVT3Cmi4Wb+H0VJhjtdKWQon2xJxBGFWHgY=)
                          21: bacvdVF-mElsZUlEdLazOE_1oOY.roa (hash: FGfP8bcGwI1++B9gaklilu/nWe/ECV5HCwb4gl+nVuc=)
                          22: cRMMmUZgqzUQd25OKpUxYhdCYUM.roa (hash: wBSRErqkIg2BFQNnSVE0S8H+9j4m+l+Nn56XXp01ZRE=)
                          23: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=)
                          24: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=)
                          25: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=)
                          26: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=)
                          27: kkpzUVvG-LYlCr9E3iHqRQp1DOE.roa (hash: LNEmIC3JpFWK673pT5gv8QslZm2bZ9FioJO226un0sU=)
                          28: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=)
                          29: mccO93c7K5NtlXGtNCpYDCBgqEo.roa (hash: DZ0UFzP9xfuYksTTPV2SFmxQJ2jKhIpRMqx1kEHoKiQ=)
                          30: mtF7UfulfCEQmT-SEuYgmuFmmWQ.roa (hash: 5ANJgQCOwSKwEx5D7iuCUBqpavWPoRF9Ues/5qDZT2I=)
                          31: nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa (hash: b5roqxrC5hM3q/j7Y7kUe7Tu2I31wiF3qmJCqWlG9jo=)
                          32: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=)
                          33: oiBa91T-6TshSnnJbJJgNlbw-W4.roa (hash: /fOoDD7jW7j76AriVOk5RIvTKIODzOTB/JdvoQUMItg=)
                          34: sL2S2uE1FuPrLXqM3EeCBZkuRgk.roa (hash: DvKW0qyOEQNSqBl1D5orEKAC7TVGVsPkW9YFeQ7MT7M=)
                          35: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=)
                          36: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=)
                          37: xB8G2Wpa-bPT0379AYe1B0JaZCA.roa (hash: XnvuBDsm7nE5D21D99HgDtqbUAjTfFnm+Hp6IwSPINI=)
                          38: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: xTzMtPm70uLybsh1+S5aQqR/r31UhV22goxG7sqhGr4=)
                          39: yA4JiVwMsPC8b_lAalSRE5XDqvI.roa (hash: 7JkBIxqsxmSvyJK9Es3ixzE0LnajlyCTLaUIqQjK5pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:e4:44:eb:e4:c8:41:f6:5e:a7:85:3d:71:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Apr 17 16:01:20 2026 GMT
            Not After : Apr 18 16:01:20 2026 GMT
        Subject: CN=3f755e2471b2e1accc85971bda3c1edc36cd7455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:5c:46:43:d8:17:f6:ba:9b:a1:72:fa:28:
                    e9:8e:54:cc:db:29:7c:88:43:65:b7:a6:ef:49:e4:
                    2f:8c:7c:a3:4c:83:76:18:81:69:f2:07:13:b1:2e:
                    38:e8:b3:08:aa:c3:b4:36:f2:62:82:35:d5:4f:42:
                    28:3f:b0:e3:11:33:43:bf:f9:cc:8c:43:05:ec:f7:
                    c6:54:7d:8c:15:57:19:0f:be:e6:9c:3f:5f:7c:55:
                    ff:43:3f:b4:14:86:46:11:53:dd:b1:37:7b:f0:54:
                    3c:a1:a8:f3:55:e9:f8:89:cc:30:13:fa:bb:76:ee:
                    94:d3:51:88:87:2a:b4:42:df:2a:3c:f8:6a:1f:4e:
                    32:a7:91:b4:eb:e9:8b:11:1e:48:78:c6:aa:24:11:
                    16:f6:2f:7d:0f:9a:ec:c3:ab:e1:69:a5:f4:31:44:
                    e5:98:c0:9f:86:fa:b7:11:1e:68:58:cc:a2:f6:2d:
                    da:89:0f:6f:f3:f8:13:70:13:4d:bc:ba:b1:ed:c3:
                    dc:3e:f1:d3:eb:25:f0:8d:60:e5:ee:8c:a6:e1:bd:
                    3a:9f:a8:1d:53:98:1c:c7:ee:5b:e7:d3:7e:8a:0f:
                    07:34:82:24:fe:43:6c:24:89:52:db:ac:37:7e:a4:
                    c1:7c:c1:18:9a:9f:12:62:f6:a9:1c:2d:d3:d5:9e:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:5E:24:71:B2:E1:AC:CC:85:97:1B:DA:3C:1E:DC:36:CD:74:55
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:16:b3:09:95:fe:f9:5f:3f:df:8f:d8:af:0a:ce:5a:f0:02:
         5d:e7:09:4a:ae:8b:f6:bd:1f:7d:0e:35:d5:3e:a7:bb:51:a6:
         31:e9:29:0e:96:70:99:f3:91:0d:d9:46:7a:81:dc:9b:02:e8:
         21:b8:7d:8e:63:a8:0d:d6:2a:7c:e6:a2:ad:a4:61:37:66:61:
         42:7c:32:3e:3a:b5:77:a8:ce:34:69:10:75:9b:bf:10:92:a4:
         02:ed:b5:96:59:ac:f6:38:87:67:fe:94:fb:26:e3:45:33:b9:
         6b:45:da:b7:f3:7c:28:ee:72:69:ec:21:0f:3b:b4:78:a5:48:
         ae:ff:9e:fd:d8:9c:5d:b0:11:3a:97:d8:1c:75:10:b7:01:83:
         43:f0:fb:df:26:cd:20:32:41:0d:fc:77:15:c9:79:0d:64:5f:
         b8:68:d2:d8:a7:b4:80:78:e1:af:46:2d:48:6c:9f:db:14:99:
         08:b2:2a:94:4a:6f:58:d6:b7:3b:6a:62:96:f0:23:00:57:e6:
         c7:79:b9:76:bc:40:02:30:6e:e8:c9:e9:ec:b0:9a:17:c8:d5:
         f6:1a:f4:ef:5e:00:0d:c3:7e:7e:ea:67:75:4f:7a:23:85:85:
         60:65:3c:03:17:62:d3:e2:3f:7e:ab:7f:77:6c:e4:5b:1a:12:
         a8:c2:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----