Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          Ekuo0xeI+6A1PIbHSaX9Q9vtfhK4wvpi8yJV5Im/nyI=
Subject key identifier:   81:A3:36:78:9F:9F:3D:DA:68:20:8B:35:E7:4C:B9:7B:12:8C:20:05
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       019E1EA2D749701B472F2F119624173D697F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          18B8
Signing time:             Wed 13 May 2026 00:00:48 +0000
Manifest this update:     Wed 13 May 2026 00:00:48 +0000
Manifest next update:     Thu 14 May 2026 00:00:48 +0000
Files and hashes:         1: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (hash: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=)
                          2: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
                          3: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
                          4: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
                          5: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=)
                          6: 9oxDkWaa5sd9iAaz0WBp0gnuTC0.roa (hash: rpYh/dQFEe2pkMtp7oDMBL7MOw9jhToAYfZxRi3wQ+I=)
                          7: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=)
                          8: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
                          9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: Ux1EjaD+SR7lhaR1P5YJjng4SQAG4GXVaMYyv1YGZDE=)
                          10: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
                          11: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
                          12: SH8U9jyhwwnj6O-2MB6B9qfPeoA.roa (hash: KH6Pob4zCHmHkEXL85meTE0xHiRhBhf5Dz/U5ppUn7Y=)
                          13: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (hash: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ=)
                          14: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
                          15: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
                          16: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
                          17: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=)
                          18: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
                          19: oiFnJz8OW03WCWtsMHubcwWCEnU.roa (hash: NGNeywVT/9a30EqHXW3cwLcQm7wpXQ63rm74pTj5fag=)
                          20: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
                          21: uwQyjvjxI-r1rh-v9UxtJU1WLMY.roa (hash: eAP3wsnG37lrMEGtMd91lAMUBneagoCuBENjELRk9X8=)
                          22: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
                          23: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:d7:49:70:1b:47:2f:2f:11:96:24:17:3d:69:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: May 13 00:00:48 2026 GMT
            Not After : May 14 00:00:48 2026 GMT
        Subject: CN=81a336789f9f3dda68208b35e74cb97b128c2005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:04:14:b6:b9:d1:ef:b8:ae:ad:b6:f4:70:
                    ed:cd:22:e1:6e:ab:47:be:46:9a:e6:a7:a1:6c:0d:
                    31:44:a6:48:d8:4f:a7:fb:1b:27:dd:db:6a:97:73:
                    2c:39:53:3c:4f:1a:7f:01:ba:73:9f:8e:2b:4f:bb:
                    0f:6d:26:71:b9:18:8a:a3:bd:63:92:82:ba:0a:98:
                    2c:0a:69:d7:ae:30:06:d1:62:39:d9:50:77:32:e9:
                    27:5d:8c:1a:af:60:41:4a:95:e1:b7:1b:a6:4a:83:
                    a2:ab:08:66:b6:15:20:e0:69:d7:87:2d:68:99:19:
                    04:aa:d0:9e:f5:73:57:bb:5f:4f:b3:0b:63:57:df:
                    ea:32:6f:88:b8:14:0a:1a:c2:23:45:50:b5:ff:68:
                    ec:db:f7:a7:5c:40:30:48:b7:d2:ed:43:bf:eb:ad:
                    8e:3f:65:b9:e3:14:22:c4:a8:bc:3a:b8:df:ba:30:
                    95:c6:77:ad:b8:9b:15:21:e5:76:28:d2:6e:88:5e:
                    ab:ec:98:5c:08:2f:82:1a:51:40:f3:f8:af:14:69:
                    12:38:8a:bf:a9:20:a8:a6:e2:56:e8:1f:33:3d:90:
                    72:c0:9c:bd:bc:d8:66:54:f4:0b:33:1a:6f:33:e4:
                    b2:1c:fd:b9:e5:ef:fd:12:c8:65:09:5f:6d:60:f0:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A3:36:78:9F:9F:3D:DA:68:20:8B:35:E7:4C:B9:7B:12:8C:20:05
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:54:e4:ba:ab:d2:19:bc:2f:1a:f8:8e:a3:0d:49:68:70:
         0a:fb:84:ec:ff:bd:91:e6:9d:4e:84:c6:18:3c:de:da:22:0b:
         6d:2a:d4:93:e8:82:1f:da:cd:31:9b:60:24:15:0b:3d:ea:b5:
         51:61:04:f4:80:a7:79:eb:bb:df:82:6f:11:80:96:1f:da:81:
         6b:d8:42:66:4a:32:ff:17:48:44:e2:1f:da:ac:2b:17:0a:da:
         f8:26:e3:c8:b5:c0:29:50:f8:dc:a9:67:42:6d:de:e1:89:06:
         ff:31:84:df:ed:2d:42:7f:fd:18:52:15:92:bc:6c:30:9f:a3:
         20:ad:9b:18:bd:f7:93:b1:2d:c9:75:e9:85:d0:d5:9b:57:52:
         ea:5c:4f:9f:f5:ac:4d:84:1b:e9:83:1f:db:25:e3:cd:5b:65:
         65:f0:64:0c:0c:c3:16:88:3d:35:70:b1:46:0e:fe:46:4b:c6:
         bc:63:93:43:d6:08:59:6f:e0:18:73:1a:a1:49:6a:0d:ff:73:
         20:bf:c0:cb:f3:ba:c4:71:c6:f8:3d:0c:06:cf:1a:32:ae:53:
         aa:d3:65:d7:e4:a9:e9:f4:f0:48:d0:11:d1:0e:87:d5:af:82:
         8b:ec:40:e7:a3:14:55:cc:19:3a:13:da:83:44:ce:0b:13:84:
         d5:ff:7f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eotdJcBtHLy8RliQXPWl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwNTEzMDAwMDQ4WhcNMjYwNTE0MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg4MWEzMzY3ODlmOWYzZGRhNjgyMDhiMzVlNzRjYjk3YjEyOGMyMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCIEFLa50e+4rq229HDtzSLhbqtH
vkaa5qehbA0xRKZI2E+n+xsn3dtql3MsOVM8Txp/Abpzn44rT7sPbSZxuRiKo71j
koK6CpgsCmnXrjAG0WI52VB3MuknXYwar2BBSpXhtxumSoOiqwhmthUg4GnXhy1o
mRkEqtCe9XNXu19PswtjV9/qMm+IuBQKGsIjRVC1/2js2/enXEAwSLfS7UO/662O
P2W54xQixKi8OrjfujCVxnetuJsVIeV2KNJuiF6r7JhcCC+CGlFA8/ivFGkSOIq/
qSCopuJW6B8zPZBywJy9vNhmVPQLMxpvM+SyHP255e/9EshlCV9tYPA1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGjNnifnz3aaCCLNedMuXsSjCAFMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7xU5Lqr
0hm8Lxr4jqMNSWhwCvuE7P+9keadToTGGDze2iILbSrUk+iCH9rNMZtgJBULPeq1
UWEE9ICneeu734JvEYCWH9qBa9hCZkoy/xdIROIf2qwrFwra+CbjyLXAKVD43Kln
Qm3e4YkG/zGE3+0tQn/9GFIVkrxsMJ+jIK2bGL33k7EtyXXphdDVm1dS6lxPn/Ws
TYQb6YMf2yXjzVtlZfBkDAzDFog9NXCxRg7+RkvGvGOTQ9YIWW/gGHMaoUlqDf9z
IL/Ay/O6xHHG+D0MBs8aMq5TqtNl1+Sp6fTwSNAR0Q6H1a+Ci+xA56MUVcwZOhPa
g0TOCxOE1f9/Mw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:23:39 2026 by rpki-client