Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File:                     dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier:          D7fVD9+MhdpStQyZoM+P7GOPM9ct2wQ757sR6at+sgY=
Subject key identifier:   90:46:C3:57:1D:9D:9D:6A:BD:49:EF:3A:34:4B:62:E6:E8:EB:FB:29
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019D9998FA4CAE01D253230F336793F8A000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number:          1159
Signing time:             Fri 17 Apr 2026 04:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:32 +0000
Files and hashes:         1: 0sIEUkqEuEuah5snwOEtEaxPaYE.roa (hash: /mxXa9/sDwHidvSWMCNn+Onl2+SHGU2kNlwneM+xeYY=)
                          2: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (hash: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg=)
                          3: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (hash: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4=)
                          4: 1Waoar8xJafvNKM98KbPPpZpO10.roa (hash: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0=)
                          5: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (hash: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU=)
                          6: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (hash: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw=)
                          7: 4Hry2GHWIQNsyjQrTIx9fQN6gB4.roa (hash: gzVtaF4oZV0YS7EVbW+xgNO11PuUAiMDYx+s9V8pZcs=)
                          8: 4K4j5oQFSESAEQ1MeIZKTFbsAF4.roa (hash: tdptIJFs3hE/+xYFJONNmLlkIg39nNkov9RWYsn/iuo=)
                          9: 4T3IbnYh4saIcnPZM7_bM8SrdUk.roa (hash: bQElEoR/i/ETSq5yQpPm2JLHUn2xQq3oHlgi8Prxj7o=)
                          10: 5kD8ebFyAYRBjL9zZDM_BA0rydU.roa (hash: gNWk6zOUThu7OX+sSIk81C3W9qGJqn3Q5HaYYpqkaQc=)
                          11: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (hash: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI=)
                          12: 8lO_H4hOHoON1dWUWaop2xG_b_I.roa (hash: 90AyhJi0wELEqJw6BDuoQqDPuxv8jeJRieXX/c/ZuCo=)
                          13: Cg5-4-MPHdR8rHLYCSeMDcuN3WA.roa (hash: Cib4HxTsrIRtaj55BTF6+WAR6MahtZRAFeprgaqN1EU=)
                          14: DbHsIS1wsGD5VENgKaURW87eGBM.roa (hash: Pg7LFkTLHIS+tij3rt6g9Emn9DJ6nvCMWnQoCISIDpo=)
                          15: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (hash: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok=)
                          16: En94w1aoQT2Df-plLIO5o_mJDiE.roa (hash: T1Z8KGa2hhTOXx23lLVrR7iImIAiFGfiumitd/czjbE=)
                          17: GfvrudqQtadcfEHpprwynTfNYIA.roa (hash: ReY30DmSZMs/0/wYnNlZrGqTcQIT5Z9nTZMHFV2s+iY=)
                          18: HEEBNvj21luiVf4won7bq4ZQmKE.roa (hash: udPIy2ibL7Vj2lt8/UkNkqdezAjsD65iSObaDZOKY84=)
                          19: HSTLkhClz6LRADHXHrCQqqSC04s.roa (hash: s8VSLrC5qvSowdJpecSp5doTo7LDHBtmqawdvNkdw/I=)
                          20: J5hS-MwRa0Pp1Ax-eXmJXTFPUAI.roa (hash: 0OShF4FaS2H4QHgvZ8CoH/llz34UbR5B713YVNSs1JE=)
                          21: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (hash: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c=)
                          22: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (hash: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg=)
                          23: KBQCvdZ1Fih2U9PEnXZaHYZQKaQ.roa (hash: aJ2vN0uyC0Hga0lux0w4oAz9DV1ub2HSd8DIya7fmtI=)
                          24: LnnTovLuI750TfHC0xewXl7THNU.roa (hash: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A=)
                          25: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (hash: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg=)
                          26: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (hash: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4=)
                          27: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (hash: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8=)
                          28: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (hash: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw=)
                          29: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (hash: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4=)
                          30: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (hash: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM=)
                          31: Ub75tOZdOg2xdvFErJ88k7KaSUs.roa (hash: AsFVQQMMcv5/BxrT0qGoB9Hl+vwn3+3VyS/clSKWb8w=)
                          32: WzVSfSCn9MA71szaeG3UuHYtodU.roa (hash: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY=)
                          33: Xf46Pw2tgmQ6pve1qLg9BZ7i_dI.roa (hash: D+T6tWOFOaWIc3tUG494jBawlfeKBbjhnuioC/+eLKw=)
                          34: XpKA71gUP1e7UUjZfSVd57bX570.roa (hash: 6PtbKEpVQwlUQzyUCiZ3HIGqzJT0phPeJKaGDFOYcU4=)
                          35: Y77lZEjMBzMzMT32ddXL4QtjN5Y.roa (hash: zzyV8SctE+KAdmnw/zoC5QVggHbeNAKkJ+yHounflSo=)
                          36: aU79596Umtw5a2Y_Rg03LRPN1BA.roa (hash: Bph1g6U7CLK3f0xOwmuRbjpNfRPSDtTfRbBVZmBYogI=)
                          37: cK89N5HfyZS7jF6HhZwkXV8Y2Bo.roa (hash: JcqlClpjnKH1fpiTqdXi9LCmWrDRy3adS44+Dzy+IYc=)
                          38: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: W6zpl72mhzd9+6diKno68+Z2G2z4eCokPH74/d48PUE=)
                          39: eky6-LpQgOOydbqURbVuuJt2ctI.roa (hash: 6VZfENHMhEaf4B4YFATqkxoG5kkgdt2vo9zrQ4oHQMw=)
                          40: hOBQ2pkA-0KSRD9W7HYv7T_EUBs.roa (hash: WyYXRQPNi7imcTjkFnUupixWz7zRkOa+LoRgnw8jDP0=)
                          41: hSaax3PNMqT-lY0FA2NBN-L2Y6k.roa (hash: TL8+SkkJk80gm8fQRrJdTYhaB9ZhdsTEkaDJpoXwUDg=)
                          42: hdJu7f4kSdt-uKkfr1zrXBPa9Ks.roa (hash: GG98Q1bl7OyANKUpp9Wym8WZdgAzVgCTFjDl+3fraHo=)
                          43: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (hash: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc=)
                          44: iuklIzN3cd1myy3SDGqaIIPCfVQ.roa (hash: 3qfnX7bi5LJVGXxA1CUbsRAXKqiE2M+t9Nh2aQQGCqc=)
                          45: jypXh21hN7YdEpy4dXX0h1grdhA.roa (hash: 2PCWogNS3NDeaLLtCqO6S4RyV1g0zZ01LBa4NOA2iZI=)
                          46: nj2pOoHsnxLSwBMEz46es6E8aJQ.roa (hash: 9ocmHznuYBwRl00/FYysmNA+ri8ZhVq4SmmJlDSAi+M=)
                          47: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (hash: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM=)
                          48: o_xmKrPL1_AoZs8GvOPm1dKIyhY.roa (hash: bZaaKprcnpy1yZ3w1Gq+0Y+GwujtgYnOL+MJw5ekemQ=)
                          49: qCxbncErzk4900gAaePx5yenewA.roa (hash: GQ8NXjQ+vN1fWJvNU40z0ytK/A56AMCqS+vkok7OXnY=)
                          50: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (hash: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE=)
                          51: rTjtK4kd5FTfdJFJSUArFI8MS8Q.roa (hash: Un76IkUhsZ/KMC4lE24h6KaJekiyoVD23z4hKrGSH4s=)
                          52: rby-gGvDas1Xa9334DJTczkmtYc.roa (hash: h/3pkwNZ0gwBP4ba5gjKhseXzTn04Qnwy4D9dTEdSQ8=)
                          53: tdaCTk5QRVdicj0QuaDdSd6pJjo.roa (hash: 7xOTzrfWW4EN0rCBfaTQHYFLvtO6j6UDwvQylOWAlk4=)
                          54: wwKe_5nbJkCZEay725-TDTyy8Og.roa (hash: pMdRZjm2+fkkArj9Ia/EQLb5RslFHxVSqKZVI19kX04=)
                          55: xSlSopVrA7ar-AzHU43kvDoRkZo.roa (hash: EIL/MjiMscFzU/GPSjw2hRcZh5VxPz7Q7L9p0rCpFC0=)
                          56: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (hash: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:fa:4c:ae:01:d2:53:23:0f:33:67:93:f8:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Apr 17 04:00:32 2026 GMT
            Not After : Apr 18 04:00:32 2026 GMT
        Subject: CN=9046c3571d9d9d6abd49ef3a344b62e6e8ebfb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:03:2b:8c:38:50:d0:60:eb:58:85:66:e6:
                    4e:a7:9e:d8:b6:e5:38:0c:bd:25:d5:ae:28:bb:c4:
                    f3:c1:a5:ff:2f:45:69:54:59:00:4a:da:58:94:5e:
                    dd:76:30:70:14:e6:7b:62:83:9d:cb:98:92:20:a6:
                    48:8c:aa:00:c7:7a:a7:3a:94:f5:fe:d1:b6:be:30:
                    ce:37:95:d3:9a:24:ca:9c:46:bf:20:a4:f4:0e:65:
                    dd:d2:8b:d5:87:07:37:5c:1e:0b:d1:35:72:e0:f3:
                    93:82:5b:c7:fa:f7:b4:2f:4d:07:bb:93:15:e9:c2:
                    58:9e:5b:e6:c1:3d:de:ae:07:32:73:af:8d:07:b6:
                    eb:b0:39:70:b4:47:fe:db:10:c2:c3:e1:01:15:ba:
                    ba:ce:d8:4c:ab:b0:f9:5b:ca:06:7d:2a:c2:f8:d4:
                    9c:eb:ca:2d:c9:99:56:21:5d:db:32:4b:dd:e9:b5:
                    57:09:e7:c1:fd:a5:1d:11:2c:75:db:00:ea:ac:21:
                    e9:7f:2c:94:3c:ad:85:5c:60:49:ac:ce:96:e9:21:
                    ce:07:28:10:40:84:9d:3c:d3:14:0b:d4:4f:e9:74:
                    a9:eb:65:1b:15:d8:62:76:0b:09:0d:32:df:98:67:
                    92:ec:7c:b4:8b:3d:92:b2:b6:50:d4:5f:bb:1c:fe:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:46:C3:57:1D:9D:9D:6A:BD:49:EF:3A:34:4B:62:E6:E8:EB:FB:29
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1a:e3:bd:e4:9a:ed:2f:a8:58:41:39:46:0a:36:83:49:bd:
         59:dc:8d:2e:c0:5d:7a:76:ac:57:42:c6:b6:72:f4:f1:1e:a2:
         6e:34:4c:e1:42:58:6e:04:58:dc:bc:b4:ee:05:53:cd:60:8f:
         46:0a:17:3c:cc:91:94:7c:18:09:d0:7c:fc:81:cf:78:61:92:
         18:bb:da:6b:07:a9:9a:0a:5b:50:b9:b6:c6:fd:35:6d:75:12:
         fa:c4:41:92:b0:4b:6a:58:ba:39:89:09:ee:5d:ff:f8:50:8a:
         7e:02:40:0d:b3:b7:24:4d:b1:75:44:a7:af:7c:79:ed:b9:45:
         8e:23:f4:03:2d:ae:71:8f:f9:8e:3c:9b:ee:03:88:6e:53:83:
         59:fa:94:60:6e:2c:9a:af:26:19:31:7d:f9:61:92:f2:62:fd:
         c5:6a:7b:80:fa:4a:da:45:a0:9a:54:19:5b:de:bb:03:ae:63:
         94:b2:c3:4b:ba:67:9d:7c:2f:65:76:93:35:b2:a8:f5:5f:01:
         94:58:51:0a:3d:6b:92:e4:35:19:22:69:ca:bb:69:78:31:bc:
         05:5e:95:a5:24:76:d3:40:64:84:b1:0e:ea:e6:03:ab:57:22:
         05:85:f5:88:22:fd:cc:4f:90:dd:e3:4b:b1:8f:33:1f:bb:36:
         43:f4:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----