Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
File:                     c8adBFg1AMXvgRNoMSN1k-C7hs4.mft (raw, json)
Hash identifier:          sVlcQQKm0YRZyAhKN7AFVh2uKeBeJPg5IfXacEejpSU=
Subject key identifier:   24:DD:43:20:73:BD:E5:05:E0:5B:7E:C9:9C:3E:0C:3D:49:53:A4:1E
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019E1D59666E4FE2415C7CF27035328C9006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
Manifest number:          1810
Signing time:             Tue 12 May 2026 18:00:58 +0000
Manifest this update:     Tue 12 May 2026 18:00:58 +0000
Manifest next update:     Wed 13 May 2026 18:00:58 +0000
Files and hashes:         1: 8rt3dNF1Y-UD8pslNNECjOgnA8M.roa (hash: HTf1rOzS+Uk4sV5A/XyKRNzC8UFpKCauz1q4F0X0Hbs=)
                          2: 9LWJR2We5UNR7Cghi_bhxu2hbrY.roa (hash: jvw7c9J3PzjDWbINNPneqLQ5M3uAcSm7AvEU2gk66OQ=)
                          3: BOy8bjeQqnx_uV0jutEMNXR_WPo.roa (hash: 70vK5SKBAtveQ1NtI1ZYPVa3PkWIvV39eB9naTN+Scs=)
                          4: BoiSOiReGPVFpaCDNopU0mejeCQ.roa (hash: 0tmjyfqR/wWKsdfVfBknQh+f8N7AXW4sMVDk/ZH0HQw=)
                          5: CHO44I77w6VJL2zUa_ZJ10zZ9ss.roa (hash: HsjNONuC8AMl+Rb5jGemSs1a+5XI6RVmsEVzIB2O0GE=)
                          6: DEoshG7eFPeY0S4yiXHA0qmeYz4.roa (hash: /yw5l05SyglUs5cn26JsT7BxKWTQinjgne8eANoGKSI=)
                          7: H2CZmJ8TDDqCgA3UVKEHT5Ab9kE.roa (hash: T+a/89d5cshzqqSDb6PeIMfbHVvttHGT8MXGuBRaCIo=)
                          8: I-GjkQ_hqVjvNgwm_hRHJom0auY.roa (hash: mQ7Bxf1OJGwo25bULYXidE7+dzB23OlvOXV8iAAJoSs=)
                          9: N9fOb5o_lEC84F_KqcX-cFrp5vc.roa (hash: EFcD7czYRge4Jz7yZcyL00HN/fp+QSX09dQR2RLa4Ws=)
                          10: PNkKw2xJH8Do6hBPz76HNUSe_0c.roa (hash: ZRWM9d4kjtShN3wXm5ejMvvbYNTiLa0407wdRrmMin4=)
                          11: UmkrjjPaHaPikKI8Z3Nj8SyWcLk.roa (hash: TvN33x275X/FmjCbENZwqGJ9bae0mAfGge9ECd0RS+w=)
                          12: V28H0ZfckG6mvV8fgEWARHQ005Q.roa (hash: a7hGbUrG8AhoVOElPdPYhppzpINkuZLIOxOAlEQmwD4=)
                          13: XkgtF5TJXyTSJIWtLmqXy1umma0.roa (hash: 6DX8XaBTIwdbkM7giwExjG/pLuL/Ylj36OiOnK70kBc=)
                          14: ZwfYtQdpPsN9KHpPY5fXnHwXUYg.roa (hash: 2C5kdsdsC9MylZkl1qPNwxfNrw/IRAEIjKuvYWD7gp0=)
                          15: bftxVTMBqmZ6jPfVxW6kFOFKymo.roa (hash: uHX6W7OLzeKUzqa71O/+0xZStq8/3p0C2HUdy8v01Ak=)
                          16: c8adBFg1AMXvgRNoMSN1k-C7hs4.crl (hash: FEbUJZS/p8iEcPcSuW2mhyX5hc8LuYhd9h33CO8OnfU=)
                          17: d1u-Dzyr_t0RmBShLjl4edCmUcs.roa (hash: lNOhFh7Zl1UrYDhugl2dxLEKvoqzQdXOk76Xwkj1T+g=)
                          18: h7j_XeidAY79jAhSX0ZS8eKKhNg.roa (hash: 0lP7/+qCZQ2USC/4n0jZyparf6g2b1/fasoIlkULaUU=)
                          19: jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa (hash: K0akq9Iq9DZmiNN1Axy2fJVUiCY4NzycyW1Nu6gD96Q=)
                          20: mAZN186AZNftU_Zg2CXS4zTpCt4.roa (hash: dTLe+Ec800fz9ppzyI+ChHfdMm/9zY/t5BE66vhSZbs=)
                          21: oCbAeYqdQHysgnvekIPnmC9jZA8.roa (hash: tT/00eXln6mQVEeggw5rLSVO3yyyNvI7r5tRv7ldnxc=)
                          22: se-Qem5rJr8oCbujcy6SXQimEMI.roa (hash: 2C2enc9vSbe6rKeL+ulj+b8i2Ke0SbcuF5nYArYI8Rc=)
                          23: u385ri2O2FA0gs-a8Bv1qP66Iag.roa (hash: irHgjUHRkkYaiRFdrgPZK/IkaqPzLXY5DRUnkCoUmLY=)
                          24: vQV03iV3rdbTa3cqwOLtMBcLIHs.roa (hash: JF/KUD14AZw4Baz3TB98zDXIAFH0m6LYZz9MIpkz9Bs=)
                          25: x2nu8-2ccqjHsn1Ou3xyH7-cq8s.roa (hash: VvtZkNuoab+ENXcc3Od+jJPAmDYauKnKrGrmB70oZj8=)
                          26: xt2hck0iNiJOY_MIM20wT5NCLGo.roa (hash: //y/D2+vgTBgPbt/2pbGmTN0KjJEuqOi0kceT5bVYPs=)
                          27: yXyl6rmr2OG4ysFVc6BBs7WvTX4.roa (hash: 4toGGVNx2ljsjTVCORql5iR1nnetEL/SsCRf34jeAvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:66:6e:4f:e2:41:5c:7c:f2:70:35:32:8c:90:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: May 12 18:00:58 2026 GMT
            Not After : May 13 18:00:58 2026 GMT
        Subject: CN=24dd432073bde505e05b7ec99c3e0c3d4953a41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:8a:ed:c6:44:99:88:4a:36:b2:7c:0e:e7:
                    b3:99:b2:ae:8e:d0:9a:9e:2b:ab:c5:5b:b7:08:92:
                    dc:42:61:82:a3:d9:6c:2d:06:80:ef:d7:ce:d8:bc:
                    cf:44:a6:ea:fb:2c:26:76:ec:52:ca:22:2d:e6:c1:
                    16:d0:2a:e4:bc:41:dd:c0:eb:20:b7:09:81:8b:ac:
                    5c:41:33:eb:1a:fe:4d:1d:25:76:82:a8:7c:83:3a:
                    8b:a6:3a:9a:36:b4:3d:d8:e8:0a:1f:d8:dd:82:31:
                    5b:1b:d5:5c:f3:cd:83:d2:42:bc:2c:ad:b5:c9:10:
                    72:09:20:60:4c:63:54:fd:d0:6f:cc:e0:a6:35:da:
                    55:64:76:d8:1d:da:3e:b7:72:70:73:bd:9a:b8:9e:
                    fd:bf:78:64:77:74:ce:22:0a:5d:fe:2e:8c:0f:3f:
                    fc:aa:bf:f6:98:13:76:9b:9b:03:46:96:a8:fb:e6:
                    14:e2:e9:6c:98:a6:af:72:d4:fa:aa:51:bf:a6:22:
                    e9:47:dc:f2:1c:cc:28:aa:a7:d5:3a:98:5b:75:35:
                    ba:47:fc:98:50:54:df:ee:8a:d3:a9:52:0e:43:82:
                    f3:41:cc:cb:fd:5a:db:42:7b:a6:3e:26:8c:0b:5c:
                    3e:b3:c1:34:87:2a:86:9a:92:96:23:a9:12:0c:75:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DD:43:20:73:BD:E5:05:E0:5B:7E:C9:9C:3E:0C:3D:49:53:A4:1E
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:88:f6:38:76:c0:c2:64:87:a2:e1:0e:2f:7c:df:12:22:
         ad:7c:f2:dd:bc:91:ce:ed:05:04:85:fb:70:af:99:a4:53:0a:
         66:1b:f1:eb:dd:56:f3:75:1b:d8:f5:bc:dd:6e:3f:09:2f:76:
         76:97:04:53:2f:04:91:0d:4f:ef:7f:0e:07:43:cc:1b:14:39:
         02:40:56:86:fc:a6:a8:bc:8e:5d:18:47:6e:6b:98:a6:ae:ab:
         cf:ca:63:38:ed:d5:50:26:2c:42:dd:3f:ef:81:e9:b7:bc:7a:
         af:06:c8:92:44:b6:f9:11:d2:8b:f7:8e:29:f9:e3:3a:d2:88:
         ef:32:42:9b:72:e0:41:fe:38:5d:36:16:36:28:fa:d6:40:b0:
         6b:0e:55:ed:db:27:d3:0e:eb:9d:c8:09:31:f5:8e:ed:90:f2:
         df:9d:58:9e:aa:fa:e2:6a:88:d5:f3:13:9f:c2:db:07:15:8a:
         8a:22:c5:84:a1:d3:67:68:b4:31:d9:91:41:2a:ba:73:87:7f:
         1b:b2:f6:d2:0f:de:70:10:19:df:ba:25:ea:70:b4:0f:e0:c5:
         d8:23:46:10:dd:e8:12:8b:72:7a:07:b5:60:b7:33:4e:b9:9e:
         d5:9c:f5:ac:75:80:c9:b3:b4:b3:42:28:5e:2a:17:ba:66:37:
         1d:62:c5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWWZuT+JBXHzycDUyjJAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjYwNTEyMTgwMDU4WhcNMjYwNTEzMTgwMDU4WjAzMTEwLwYDVQQD
EygyNGRkNDMyMDczYmRlNTA1ZTA1YjdlYzk5YzNlMGMzZDQ5NTNhNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2uK7cZEmYhKNrJ8DuezmbKujtCa
niurxVu3CJLcQmGCo9lsLQaA79fO2LzPRKbq+ywmduxSyiIt5sEW0CrkvEHdwOsg
twmBi6xcQTPrGv5NHSV2gqh8gzqLpjqaNrQ92OgKH9jdgjFbG9Vc882D0kK8LK21
yRByCSBgTGNU/dBvzOCmNdpVZHbYHdo+t3Jwc72auJ79v3hkd3TOIgpd/i6MDz/8
qr/2mBN2m5sDRpao++YU4ulsmKavctT6qlG/piLpR9zyHMwoqqfVOphbdTW6R/yY
UFTf7orTqVIOQ4LzQczL/VrbQnumPiaMC1w+s8E0hyqGmpKWI6kSDHXKjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTdQyBzveUF4Ft+yZw+DD1JU6QeMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvCI9jh2
wMJkh6LhDi983xIirXzy3byRzu0FBIX7cK+ZpFMKZhvx691W83Ub2PW83W4/CS92
dpcEUy8EkQ1P738OB0PMGxQ5AkBWhvymqLyOXRhHbmuYpq6rz8pjOO3VUCYsQt0/
74Hpt7x6rwbIkkS2+RHSi/eOKfnjOtKI7zJCm3LgQf44XTYWNij61kCwaw5V7dsn
0w7rncgJMfWO7ZDy351Ynqr64mqI1fMTn8LbBxWKiiLFhKHTZ2i0MdmRQSq6c4d/
G7L20g/ecBAZ37ol6nC0D+DF2CNGEN3oEotyege1YLczTrme1Zz1rHWAybO0s0Io
XioXumY3HWLFmg==
-----END CERTIFICATE-----
Generated at Tue May 12 23:06:13 2026 by rpki-client