Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          3d7Q7dDg2DLSll4p0/cjTlB91wUap6Nckl2sUtpnMHQ=
Subject key identifier:   1D:D4:11:6E:11:A0:33:2E:0A:9D:3C:3D:C1:52:8E:E3:6B:CB:58:DF
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019E20918C44CB1B8B78F54CE5062D1D0E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          12B5
Signing time:             Wed 13 May 2026 09:01:09 +0000
Manifest this update:     Wed 13 May 2026 09:01:09 +0000
Manifest next update:     Thu 14 May 2026 09:01:09 +0000
Files and hashes:         1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
                          2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
                          3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
                          4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
                          5: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
                          6: 8pNY12YDpGrnDKduWHlcW7mEsQE.roa (hash: zQP2Qnvl73y+y1TLtAVLaO6F1EdYkhaAokyupxVYD9g=)
                          7: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
                          8: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=)
                          9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
                          10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
                          11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
                          12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
                          13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
                          14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
                          15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
                          16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=)
                          17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
                          18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
                          19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
                          20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
                          21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
                          22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: Js/ZjaytGAtTb99mlpSJtHE46OJnx3FkVe0aelGM32I=)
                          23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
                          24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
                          25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
                          26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
                          27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:8c:44:cb:1b:8b:78:f5:4c:e5:06:2d:1d:0e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: May 13 09:01:09 2026 GMT
            Not After : May 14 09:01:09 2026 GMT
        Subject: CN=1dd4116e11a0332e0a9d3c3dc1528ee36bcb58df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:34:b0:e2:0b:32:e4:7d:48:8b:2a:40:b9:75:
                    93:5d:53:80:1e:14:96:00:2f:82:e9:30:06:5c:32:
                    67:83:02:97:6e:fa:ba:ef:ab:80:de:b6:a9:25:95:
                    ee:60:17:fd:a3:c9:68:f2:8e:c6:9e:3d:71:50:05:
                    ae:c5:c0:f7:81:16:ad:dd:cc:a6:43:28:a9:88:65:
                    64:e0:b0:fe:58:22:dd:a2:47:90:7d:f6:ce:20:21:
                    08:98:67:98:43:c1:23:08:27:89:66:ca:cb:35:9f:
                    5f:be:12:f3:01:7f:60:23:33:58:c4:d2:2a:d8:20:
                    39:30:1f:fa:09:61:44:ba:5a:91:02:17:b4:f9:6c:
                    3b:34:ff:4a:19:09:20:49:b0:ba:c6:8a:74:9c:a8:
                    85:fd:e6:5a:0c:88:57:c3:d8:cb:08:b3:ae:cf:42:
                    0b:07:5c:d9:8c:a6:6b:8f:81:1e:f2:31:1f:d8:34:
                    1d:9a:0b:65:b8:e9:be:41:a5:8c:c4:99:0d:f7:f4:
                    05:b7:11:99:6c:66:c8:73:d3:b4:ed:9c:53:3e:b8:
                    1e:f0:a0:c3:76:1f:e1:e9:f6:25:66:8c:21:5d:c7:
                    63:b8:0b:8c:88:90:20:1d:74:7a:f8:8e:cb:90:e4:
                    82:47:4a:34:1f:45:88:7c:bd:f6:6d:a3:5c:12:36:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:11:6E:11:A0:33:2E:0A:9D:3C:3D:C1:52:8E:E3:6B:CB:58:DF
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:56:42:70:0d:f8:09:38:7d:0a:d1:aa:96:27:16:bb:3e:4b:
         ce:59:dd:f4:94:03:d8:ce:26:17:7e:3f:3f:51:fa:09:3a:72:
         fe:2e:62:86:9f:f0:54:38:72:4e:7d:d7:f1:be:37:ff:52:d9:
         c1:54:25:92:dc:40:e0:f6:ea:c4:b5:96:ab:d5:42:4c:69:be:
         03:a3:fe:ea:7e:2b:5c:d3:d9:c2:13:7f:d6:e8:94:50:cb:70:
         b9:1d:2c:c5:46:7f:db:28:1a:71:62:b1:35:ba:dd:5d:9e:ec:
         7c:58:3e:8c:e6:bb:ad:9e:24:6f:b4:bb:73:59:b7:0e:48:7c:
         f7:63:5a:4d:47:7c:d2:66:f9:25:51:71:d1:59:a2:21:af:de:
         5c:05:f8:78:9b:9a:dd:eb:78:0f:63:17:47:55:fb:39:b6:ab:
         ab:d9:b6:71:fd:ff:0d:ce:f0:ac:43:5d:81:a0:5f:df:70:81:
         16:20:b5:c6:ad:40:f9:31:9b:23:4c:cc:79:78:f6:2c:e4:a4:
         10:ea:df:f3:be:77:c3:63:6c:f5:2b:19:33:4b:81:5f:33:0e:
         03:27:73:d1:66:99:6f:d7:fb:06:ee:d9:fb:8b:2d:a4:e3:4b:
         6e:dc:9e:33:6b:ce:26:aa:43:5a:5b:af:15:a6:db:a0:99:96:
         4d:38:fc:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkYxEyxuLePVM5QYtHQ5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjYwNTEzMDkwMTA5WhcNMjYwNTE0MDkwMTA5WjAzMTEwLwYDVQQD
EygxZGQ0MTE2ZTExYTAzMzJlMGE5ZDNjM2RjMTUyOGVlMzZiY2I1OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TSw4gsy5H1IiypAuXWTXVOAHhSW
AC+C6TAGXDJngwKXbvq676uA3rapJZXuYBf9o8lo8o7Gnj1xUAWuxcD3gRat3cym
QyipiGVk4LD+WCLdokeQffbOICEImGeYQ8EjCCeJZsrLNZ9fvhLzAX9gIzNYxNIq
2CA5MB/6CWFEulqRAhe0+Ww7NP9KGQkgSbC6xop0nKiF/eZaDIhXw9jLCLOuz0IL
B1zZjKZrj4Ee8jEf2DQdmgtluOm+QaWMxJkN9/QFtxGZbGbIc9O07ZxTPrge8KDD
dh/h6fYlZowhXcdjuAuMiJAgHXR6+I7LkOSCR0o0H0WIfL32baNcEjZ+PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3UEW4RoDMuCp08PcFSjuNry1jfMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlZCcA34
CTh9CtGqlicWuz5Lzlnd9JQD2M4mF34/P1H6CTpy/i5ihp/wVDhyTn3X8b43/1LZ
wVQlktxA4PbqxLWWq9VCTGm+A6P+6n4rXNPZwhN/1uiUUMtwuR0sxUZ/2ygacWKx
NbrdXZ7sfFg+jOa7rZ4kb7S7c1m3Dkh892NaTUd80mb5JVFx0VmiIa/eXAX4eJua
3et4D2MXR1X7Obarq9m2cf3/Dc7wrENdgaBf33CBFiC1xq1A+TGbI0zMeXj2LOSk
EOrf8753w2Ns9SsZM0uBXzMOAydz0WaZb9f7Bu7Z+4stpONLbtyeM2vOJqpDWluv
FabboJmWTTj83w==
-----END CERTIFICATE-----
Generated at Wed May 13 13:51:42 2026 by rpki-client