Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          Tqm8xU+Xetp2I6sJrZzZtJrL4z06Noj3rifS3G7m1+c=
Subject key identifier:   14:1B:AE:21:B4:15:9C:4E:E9:13:DB:CC:61:3B:D7:D9:14:63:B1:B0
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019DAD571A0C1D178B9C376A2071AD3CEBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0BC6
Signing time:             Tue 21 Apr 2026 00:00:59 +0000
Manifest this update:     Tue 21 Apr 2026 00:00:59 +0000
Manifest next update:     Wed 22 Apr 2026 00:00:59 +0000
Files and hashes:         1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=)
                          2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=)
                          6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: y5TbqiZ//ifBE7MF7+VJ/F2ms975WrD9lrwHnJclbUo=)
                          14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=)
                          17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=)
                          19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=)
                          24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=)
                          31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
                          32: zjtl5Y0Z3oogjAq5K4uAfLAq8ro.roa (hash: LpQt/bLNnHWYgd6YNiQU8EA6fFlerNrGYNaE8nt6sMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 19:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ad:57:1a:0c:1d:17:8b:9c:37:6a:20:71:ad:3c:eb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Apr 21 00:00:59 2026 GMT
            Not After : Apr 22 00:00:59 2026 GMT
        Subject: CN=141bae21b4159c4ee913dbcc613bd7d91463b1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:be:6e:d7:d0:a2:cc:de:53:2f:67:b7:02:
                    20:30:4b:3c:94:43:b9:d1:87:46:10:b9:9d:23:0b:
                    27:3d:74:63:96:80:1f:8a:94:af:c6:77:7b:52:04:
                    68:88:b6:7f:58:2b:d9:b6:ea:00:11:41:b7:4e:4d:
                    04:e7:4c:e9:a8:3c:08:fc:a2:76:bb:e3:88:65:7f:
                    3c:b0:67:ee:38:0c:f8:0b:82:c9:ae:35:b3:ab:b7:
                    e2:06:41:6e:ba:94:c9:88:61:0f:ba:b1:63:a1:02:
                    8e:ca:86:40:08:73:a3:c3:52:57:d1:d6:73:9e:80:
                    0c:94:45:bd:b1:fb:33:08:e0:1f:e0:c2:a3:9e:34:
                    59:9c:ab:47:4b:6e:13:e0:22:c7:1a:72:a5:0c:4f:
                    b2:06:6e:71:b1:e8:8b:d2:6c:c3:75:c6:b7:9d:c0:
                    da:e0:41:92:fd:31:7c:c2:fb:00:de:46:76:3a:1b:
                    4c:a4:44:f4:09:1c:65:31:71:39:d4:2f:3b:f0:08:
                    98:67:ac:fe:56:96:49:ed:5c:76:cd:eb:c0:bd:b8:
                    3a:03:f5:66:ee:f2:59:6b:f2:45:30:10:ba:03:71:
                    32:5e:69:27:6a:5f:44:7d:dd:00:4f:dc:89:17:bd:
                    d8:00:1f:2a:c8:f6:6b:5c:44:6c:91:36:89:83:17:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1B:AE:21:B4:15:9C:4E:E9:13:DB:CC:61:3B:D7:D9:14:63:B1:B0
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:d6:5f:6f:42:4d:74:94:6e:e3:48:70:64:e9:35:9d:37:
         45:ff:a2:52:dd:ff:4b:da:39:5f:73:9c:df:81:14:d2:24:8e:
         4e:81:61:ef:1e:a6:a6:05:38:c7:d3:ba:1f:dc:b4:7a:ee:2b:
         64:23:61:e6:d3:88:9f:e0:43:0d:5d:7d:18:b0:6d:fe:35:1d:
         77:fb:d0:f7:b9:28:95:00:ed:e7:9c:21:59:53:ae:c1:1d:d5:
         4b:6c:79:fe:3f:aa:5d:d9:c0:63:6d:9e:0d:7c:ac:3a:da:af:
         fa:d3:c1:c9:0f:df:33:87:31:f0:db:89:c8:4a:e2:0e:3f:1a:
         68:62:a3:cc:91:3a:28:48:f4:b3:b6:c9:f9:d0:39:19:d5:ba:
         8c:b4:f2:cb:a3:bd:58:b7:26:7c:ae:42:21:87:da:54:dd:e4:
         a0:dc:ad:ac:ce:a2:08:4d:15:fe:c0:dd:69:a5:4a:72:75:47:
         3a:64:8a:a4:b2:99:7b:fb:fe:33:26:5f:6f:cb:02:0b:47:4d:
         18:be:6c:c6:60:ac:35:e6:8b:a2:b7:ef:63:3c:18:eb:53:93:
         d4:b5:68:c5:62:ad:d1:eb:fa:c7:8d:ef:55:2d:11:02:3b:77:
         d9:0f:35:f6:15:dc:f3:63:7d:04:2d:49:b4:98:58:97:d2:7a:
         e7:5e:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 05:19:26 2026 by rpki-client