Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          aZAdeAwrybPFXHylc4wua19g/AJF0g28lm4V3yLHzMI=
Subject key identifier:   BB:2F:AE:E1:FF:E6:FE:9E:F9:15:C5:14:5F:CD:A5:C0:8A:B8:C8:AC
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019D95190503CE50440AA9816D629FA9FFB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          190A
Signing time:             Thu 16 Apr 2026 07:02:18 +0000
Manifest this update:     Thu 16 Apr 2026 07:02:18 +0000
Manifest next update:     Fri 17 Apr 2026 07:02:18 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: QTsR2YDkcPj3GJ3ybIYC2+AZX5Ts2DP4SBJxB/4jkUI=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 07:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:95:19:05:03:ce:50:44:0a:a9:81:6d:62:9f:a9:ff:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Apr 16 07:02:18 2026 GMT
            Not After : Apr 17 07:02:18 2026 GMT
        Subject: CN=bb2faee1ffe6fe9ef915c5145fcda5c08ab8c8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:f6:8c:cb:48:6d:39:d1:56:40:cf:7e:e9:
                    38:da:4c:0a:84:f4:7e:13:38:8f:e4:28:65:fb:e5:
                    22:0f:cc:55:8b:4b:9f:f2:0b:cb:cc:90:04:b6:07:
                    e1:82:81:23:cc:31:d6:12:d3:d2:b1:ec:f6:95:bb:
                    29:15:cd:ea:e0:3e:1a:b0:65:76:af:1f:fb:5e:52:
                    7c:e7:f1:60:d1:7a:3e:6f:9f:d1:1d:93:0f:eb:a6:
                    8a:73:b2:0d:7d:14:80:0d:bb:cd:b6:bc:fa:2c:ca:
                    ec:fc:e4:f3:17:e2:5a:d6:b6:d5:55:58:ad:76:bf:
                    94:25:69:9c:d1:c4:ca:ef:d1:53:32:93:e3:b9:2a:
                    26:69:14:fb:65:1b:c2:b7:8f:62:84:55:65:b9:88:
                    46:f2:86:a0:37:8a:0f:51:1d:a0:44:38:29:31:c2:
                    61:d3:9b:eb:d4:1e:2d:94:dc:a4:6d:82:19:ac:fe:
                    b0:0a:96:56:3d:c3:8a:b4:85:28:bf:b5:c5:26:b8:
                    23:20:12:4a:f8:99:ad:2e:cc:3f:48:49:5b:e6:ec:
                    fd:ff:50:3c:3b:f7:a5:d8:1f:83:37:09:f3:78:2a:
                    6a:83:de:51:77:da:d6:67:16:bb:0b:a2:4a:f1:f9:
                    43:42:01:a5:f4:05:1c:17:8d:e2:63:47:8b:44:f1:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2F:AE:E1:FF:E6:FE:9E:F9:15:C5:14:5F:CD:A5:C0:8A:B8:C8:AC
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:56:5e:e1:0c:54:4f:fa:d8:0a:ff:2b:60:19:01:f3:c6:70:
         99:83:a1:a5:44:27:53:d0:43:8c:1f:4f:92:cc:4f:40:5e:6a:
         52:e4:9e:23:e6:09:3b:da:c1:fd:c9:c5:65:a3:a8:76:b4:fa:
         c8:d3:62:ca:2d:ba:b4:a3:91:be:2d:e4:37:77:8f:44:2d:09:
         38:f4:39:50:95:a7:86:2c:2a:06:a4:e3:f2:48:9a:01:71:a4:
         9f:0b:25:38:3c:a6:43:3a:d5:a2:c2:a4:13:a5:73:9c:b9:ec:
         ca:9e:83:3a:c4:93:c5:26:10:da:ae:8e:ae:af:52:1c:35:8c:
         5a:8f:42:f5:a1:7b:ea:53:84:60:d8:70:f9:fe:08:7c:02:ff:
         dc:b6:ef:71:1c:8c:97:1e:9d:1b:93:45:dc:c3:e4:10:b1:71:
         84:d1:a9:c0:c4:31:04:a5:31:02:55:a0:c5:db:36:39:87:b5:
         17:9f:9f:06:0e:a6:da:c4:98:10:64:71:70:8b:95:a3:a9:fd:
         aa:63:64:e6:1c:bd:1f:fb:18:3d:cb:97:4c:aa:26:a7:d6:c0:
         17:82:aa:6d:7e:4b:82:63:77:ba:16:a4:00:8f:ec:6b:c9:2b:
         36:80:1a:10:7f:82:24:10:fe:06:65:7a:83:f6:29:3a:07:f5:
         fb:71:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:10:03 2026 by rpki-client