Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          c300bdyIBJ48MwsiZArTQY9svMBooA1daTsK1wxSMiY=
Subject key identifier:   9C:26:D3:5A:40:CF:87:F4:19:ED:61:3C:BE:3F:52:C4:61:B3:20:C8
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       019D33087573B74B3EFD9C9D64EC400551EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          18BB
Signing time:             Sat 28 Mar 2026 06:01:25 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:25 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:25 +0000
Files and hashes:         1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
                          2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: +WZGYIAkSBlTuHTy2UqEkc6K1qnLbmba5LOOIAfj+iM=)
                          4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
                          5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
                          6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
                          7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
                          8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
                          9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
                          10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
                          11: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (hash: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc=)
                          12: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
                          13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
                          14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
                          15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
                          16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
                          17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
                          18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
                          19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
                          20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
                          21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:75:73:b7:4b:3e:fd:9c:9d:64:ec:40:05:51:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Mar 28 06:01:25 2026 GMT
            Not After : Mar 29 06:01:25 2026 GMT
        Subject: CN=9c26d35a40cf87f419ed613cbe3f52c461b320c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:b0:a7:d8:89:6b:ca:3e:1d:19:1a:36:08:
                    d5:cd:8f:ea:58:3d:f2:d6:05:c6:c8:41:ba:d9:9f:
                    00:e1:f9:fe:74:4a:7e:b9:ab:54:15:47:ca:14:a2:
                    23:00:23:75:3f:a6:1c:c0:87:91:c2:17:c8:54:0a:
                    46:17:74:0c:a5:f1:66:08:ab:09:f8:7d:e5:eb:e4:
                    47:1d:57:72:83:f0:b7:cf:ca:e3:38:d5:75:bc:be:
                    41:8f:7f:cc:d8:f7:61:9a:db:dc:3e:e6:b2:ab:1f:
                    12:30:9a:d6:de:c3:4c:17:06:3c:20:ba:fc:81:7e:
                    6f:67:6b:51:ac:47:c7:9c:35:34:c5:2e:aa:4c:df:
                    dc:df:2e:40:c1:79:ee:72:86:cc:a2:e4:b0:9e:e7:
                    80:fc:79:3f:77:23:40:0a:22:64:cf:12:c4:23:45:
                    8f:3e:2c:16:e6:47:80:62:74:49:2e:27:62:6f:00:
                    42:9b:a0:95:89:99:8a:15:27:26:7c:9d:f1:ec:3e:
                    68:d7:7c:da:ca:95:3d:7e:8e:d3:47:ee:32:6a:dd:
                    b9:3a:a8:07:d8:81:5e:0c:6b:a4:b1:9a:92:46:c6:
                    6a:e4:b5:20:99:67:9f:68:80:34:31:ab:e1:67:ec:
                    cb:e8:5c:07:6c:20:7a:67:b5:56:8d:83:2a:1f:b9:
                    47:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:26:D3:5A:40:CF:87:F4:19:ED:61:3C:BE:3F:52:C4:61:B3:20:C8
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a7:5e:c8:5a:dd:6f:3f:0e:98:1a:d7:3a:de:df:b0:6f:d6:
         3b:1e:11:3a:4e:e2:ec:08:d6:ba:22:5c:dd:af:98:ad:90:d1:
         fa:6d:0f:54:c6:0d:28:de:fa:00:70:84:99:57:01:84:eb:75:
         20:af:7a:c2:09:0a:53:4c:e6:ff:9b:ba:f1:02:f6:4d:d2:8d:
         a9:09:fd:71:28:f6:cc:d9:97:05:4c:45:92:ca:be:f9:e2:78:
         31:6f:af:fc:75:62:f2:37:89:df:ec:e8:a5:79:09:95:89:74:
         40:27:a4:40:dd:f6:86:64:10:a2:84:ab:fe:76:24:9b:9a:c4:
         89:68:56:08:23:b5:64:3f:f0:60:7e:e0:08:ae:ab:59:39:67:
         81:6f:2e:41:84:eb:87:38:76:55:3d:07:94:4b:7f:3d:af:17:
         01:87:39:88:65:e3:34:ce:a5:2d:15:34:40:22:76:36:17:d5:
         e8:18:31:2e:c6:1f:4b:9b:49:d0:77:e8:6f:0d:ac:fe:f2:d5:
         d1:cc:1d:a9:df:fc:21:a7:be:94:92:31:45:91:df:c0:f9:73:
         23:f9:46:66:e2:fd:e1:74:aa:7b:34:b2:e8:f3:8c:77:9c:e9:
         39:59:d8:7e:a5:29:ab:e2:06:7b:de:0a:10:9c:ee:a8:b9:c0:
         c6:38:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:53 2026 by rpki-client