Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
File:                     rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json)
Hash identifier:          LyLrGbIza4JEchGRZEQd5kio+3q/RAnCfyzL9NKKbeQ=
Subject key identifier:   5B:32:0B:F6:5F:14:57:F7:E6:33:28:74:D3:17:F2:77:E6:77:F5:57
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019D27E07D08C4AF155E30E6E892CEA093AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
Manifest number:          18B2
Signing time:             Thu 26 Mar 2026 02:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:56 +0000
Files and hashes:         1: 3a7_WjUjHvmaDKMR_0n-V2J4S48.roa (hash: HAXb7MwMLIlHkvY0JciFwEcWW+cBxNegwhoL5MEj+Y4=)
                          2: 4GnNaMU7ozZwZhW2J2112doh_tw.roa (hash: WMA3aYgk7G+X7flrtEOgH24fD1TLzYLGipLG5KR0H5o=)
                          3: 5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa (hash: RJ3VX8HghkzCma3QJ9QJO8+1DyrcpupoHfpYlwCMq0M=)
                          4: 7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa (hash: 7ShADED+6ABWdUZq+N0c2d9qFBvXvIfuwCNn0VPe6D8=)
                          5: 93sTot__pOvELS3ZJJ_0IKYI80A.roa (hash: cd3DiMi4zFZH02Z5vN9iUfleyfgwEhyhgnSYBKXSIqA=)
                          6: AVErlpP2VhysTwGtrB64czf3NqI.roa (hash: UMyN7o51qi8PMB0e1ciRLYkKAE3KUtpoBs5v/wpa8yo=)
                          7: CILl_zyXusNg3CeT5TPh9rVx7SE.roa (hash: FdMkKAGOUUSgyKvsP1F6/x5+Yu144fskvlYf4TyAXN0=)
                          8: G_n5RA6W3ZkloaFthEn-Fh-sCzM.roa (hash: c9qFmEiCdxto7E6131yKqNFNOUJFon6l2MhL2xlVtPs=)
                          9: IPJjNe_cB3zjIZyONYjGoBmmxrw.roa (hash: g27Ahx8NQ/P8ycHloD1dj7SU+EOwFLKNLXOaBXz5Lxw=)
                          10: JowNFbKi_vYoTRs26ptdtrIOuaM.roa (hash: TJWkhhs28sV5YlSQhf17WgqKXSfgnNIE8e2Aaqdz+vY=)
                          11: L5CGhyyEcuDPtwlMoB7T0ykBOW0.roa (hash: KmUkqVbBWAmW4Wsgbx+66HRsHh83JXR5eCNYk4qTJ3c=)
                          12: MInmjTvW1jbn8HVs4d7pziBXvog.roa (hash: sqeC1+d5oRvHYURRaJApXOy7p3KmwZMMfOX3s+0N5no=)
                          13: NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa (hash: cCvYyHI6VXA2SHqtxY6FdqOa8OINU3B57RbzyCoIYmY=)
                          14: UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa (hash: C2S4KpTLma+Nr0C/LgZeLhVTXWrhyD4esp1prszfICc=)
                          15: UQs_v6zqbOmXSl8dyqIq5u6i-_o.roa (hash: 4jx6EXQhbefzVsskhUYOXoXxrxUb8CxFEYfTlZeZuSU=)
                          16: YnRIz2LAVm6T1ngHwYknchOMZ5g.roa (hash: O08Dnht2tycilQ0sCxxQOH4+isy3TkZ0CpI/HxIUNRM=)
                          17: c7D8z87seThahzJGV1xxzUC68yM.roa (hash: lEtNJalbVark+w9kQtFPEtaaKlnnHtxsb3MXywog3UE=)
                          18: cMVqOn9_O511UMJeh_8L-Q0ryD4.roa (hash: GPsJ34P/KBtvf2V8PpxfXTPLlIXgJHes62O2Gn8/mMM=)
                          19: eFpBdg6bsZMOceMMDBSJPbKerRQ.roa (hash: 0CNpt//WjjkQ9s80RqkgFSsUKxYW7IA+iSGJkuAzflc=)
                          20: gfHF0_9tC_g86XlB0EGuBJeEcF4.roa (hash: dW+/GSUe21Y9vzGs6gA/zL83gMId3e6+CsIQ8ML4Lxk=)
                          21: kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa (hash: kI7ZNlTpRra3MpODVxn5O1XIoHdEb9TeHKIqmZcOjSw=)
                          22: oV0JLOMHWgEPodfJD7fettcMDKo.roa (hash: 8byXH6iwa9ptsygTXF7KrIJlXXNBNYRMHn/3mZG+lWQ=)
                          23: pKdyppPaHYtR-oyAX_dINAizQCw.roa (hash: 0aaYkpeViKdlLjKyoydpc47P1Ji22FZ3Tvk3MaL7ELU=)
                          24: qv25HuVkGD25YIg_oR2WSTGPtS8.roa (hash: AhkATBPCei80O9bXQPoD49GvTRXEmbOiuSx3aLVtzx4=)
                          25: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: qI0Xv/hLm1TERvou3SowQCeW01H+2HGKSdb7wi4bkyk=)
                          26: uLFuSxmniVdOOB-xJoPZwASxLt4.roa (hash: FLb2IX6npCXvVAUlOdGVEYczSWz0bZw/0vsaAGxi3UI=)
                          27: v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa (hash: gmtuefqcnpBpqJUGEwxDDhZb8NTc6oQgtAx5ttlsZSs=)
                          28: xjnYzgBcenqcxEq_xCvUmgvi1LI.roa (hash: Z9ZiuEMfsOlYoKUCQ/ZjnzpK4neZkRT5jBddWL6d7fM=)
                          29: yLV7lfd30bAjDnQWLnJQ_McSKtA.roa (hash: LMA6JBfDwM4DNAaRQWUraFrUGqg8Vgx8QA0i7GxUahs=)
                          30: z8jkcsVGt66_sClw6OoCA4fxiD0.roa (hash: O/OxXPCdKehv6qCJUwydClm29EJLOL6Thakr4fdICZo=)
                          31: zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa (hash: C+8e5I+GbSwAG5M+lCl7ucBJaBL9QyOfEWbG2V8egMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:7d:08:c4:af:15:5e:30:e6:e8:92:ce:a0:93:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Mar 26 02:01:56 2026 GMT
            Not After : Mar 27 02:01:56 2026 GMT
        Subject: CN=5b320bf65f1457f7e6332874d317f277e677f557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:bf:b9:8e:09:c3:ab:94:7d:78:d0:29:63:
                    e2:e7:ef:42:9e:cd:a1:fa:1e:98:9d:24:e8:1d:3f:
                    72:0b:7d:09:10:ff:ad:f9:ac:c5:77:7d:cf:ab:06:
                    08:79:fd:10:06:ff:0b:85:3e:cf:b2:ee:36:8f:6d:
                    a4:9d:ca:d6:62:ed:4e:55:91:cc:dd:e2:4f:7a:89:
                    7b:a1:12:b2:4c:98:67:ba:f6:94:3f:b7:da:8b:cf:
                    52:0d:37:fd:00:d2:9b:5b:66:67:a6:5d:f5:c7:5e:
                    5d:d2:2e:35:f3:9d:79:d8:ca:c3:a1:04:eb:8e:f0:
                    cc:d9:87:ca:30:9d:69:15:4c:71:5c:0a:b9:6d:37:
                    31:04:c5:05:64:b4:4a:05:b5:32:a9:c6:27:58:76:
                    89:58:f2:1e:9c:9c:16:92:fd:db:86:31:8e:03:0f:
                    bd:d2:9f:1a:14:6a:5e:20:f7:a2:67:2d:1f:cc:99:
                    e9:5a:73:77:9b:8d:05:cf:dc:83:7c:52:2f:22:ec:
                    5c:a2:38:8f:ae:74:22:15:37:69:b4:c9:97:8c:95:
                    f7:c9:a6:01:a9:b0:bf:46:70:70:7c:e5:32:1e:a2:
                    69:a0:72:a5:c7:b5:1b:37:2a:41:e9:86:bb:3a:fa:
                    4b:aa:4c:50:0e:6a:5f:79:9b:59:a1:92:8b:3a:ac:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:32:0B:F6:5F:14:57:F7:E6:33:28:74:D3:17:F2:77:E6:77:F5:57
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:75:c0:9d:43:86:7f:68:2c:2a:c4:51:de:e5:fa:96:41:26:
         a4:4a:c2:b7:79:94:d5:3a:45:d1:22:62:84:6a:f5:0e:60:40:
         a5:33:88:9d:0b:7c:3f:93:83:32:45:e2:8c:2a:2e:84:0d:6b:
         83:3a:69:7b:3d:94:4b:ac:d8:ea:a3:34:13:a6:4f:fb:66:d2:
         a5:29:6f:6e:95:df:2e:85:96:0b:e0:ec:b4:91:19:83:ec:1f:
         16:77:52:7d:f5:08:ce:a8:6b:f5:90:be:30:5d:55:c5:ba:bb:
         69:cd:72:a4:49:33:25:65:ad:e9:f3:34:ac:2e:01:16:6a:80:
         7c:bf:31:59:c1:31:cc:0c:64:a3:33:23:e9:36:10:db:24:51:
         68:3f:52:8f:df:d2:4a:b2:af:40:d7:cf:fb:ba:33:0a:e1:38:
         b2:d2:67:3b:0f:c2:f0:4f:cd:a7:f5:77:46:65:00:b3:b8:9b:
         12:e2:78:a1:4a:f6:9f:2e:68:6c:38:1a:84:39:d4:f2:81:a0:
         d3:7b:bf:77:f1:de:02:c0:85:32:d0:dc:8b:28:42:90:df:1c:
         6b:9e:c7:a5:e9:88:26:5d:f7:c5:ff:3f:83:a9:ec:8e:22:32:
         c7:95:e9:92:76:f0:dd:61:62:4d:4d:9f:3c:bf:1c:5b:9e:6c:
         eb:f3:fc:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4H0IxK8VXjDm6JLOoJOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjYwMzI2MDIwMTU2WhcNMjYwMzI3MDIwMTU2WjAzMTEwLwYDVQQD
Eyg1YjMyMGJmNjVmMTQ1N2Y3ZTYzMzI4NzRkMzE3ZjI3N2U2NzdmNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi2/uY4Jw6uUfXjQKWPi5+9Cns2h
+h6YnSToHT9yC30JEP+t+azFd33PqwYIef0QBv8LhT7Psu42j22kncrWYu1OVZHM
3eJPeol7oRKyTJhnuvaUP7fai89SDTf9ANKbW2Znpl31x15d0i4185152MrDoQTr
jvDM2YfKMJ1pFUxxXAq5bTcxBMUFZLRKBbUyqcYnWHaJWPIenJwWkv3bhjGOAw+9
0p8aFGpeIPeiZy0fzJnpWnN3m40Fz9yDfFIvIuxcojiPrnQiFTdptMmXjJX3yaYB
qbC/RnBwfOUyHqJpoHKlx7UbNypB6Ya7OvpLqkxQDmpfeZtZoZKLOqxO8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsyC/ZfFFf35jModNMX8nfmd/VXMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3XAnUOG
f2gsKsRR3uX6lkEmpErCt3mU1TpF0SJihGr1DmBApTOInQt8P5ODMkXijCouhA1r
gzppez2US6zY6qM0E6ZP+2bSpSlvbpXfLoWWC+DstJEZg+wfFndSffUIzqhr9ZC+
MF1Vxbq7ac1ypEkzJWWt6fM0rC4BFmqAfL8xWcExzAxkozMj6TYQ2yRRaD9Sj9/S
SrKvQNfP+7ozCuE4stJnOw/C8E/Np/V3RmUAs7ibEuJ4oUr2ny5obDgahDnU8oGg
03u/d/HeAsCFMtDciyhCkN8ca57HpemIJl33xf8/g6nsjiIyx5Xpknbw3WFiTU2f
PL8cW55s6/P8Ng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:47 2026 by rpki-client