Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          0jBfdxysrkTM4GIV7uS05socg71PXlu6pPqGVHqChZs=
Subject key identifier:   D4:2F:2A:60:9B:5A:57:E8:2F:0B:70:9D:96:C3:44:53:2B:DD:31:24
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019DBDA5928CEC435C916920FD1C8B3A651A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          191F
Signing time:             Fri 24 Apr 2026 04:00:37 +0000
Manifest this update:     Fri 24 Apr 2026 04:00:37 +0000
Manifest next update:     Sat 25 Apr 2026 04:00:37 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: YxhMyuTddjaMYWy+M8Y1BA/A6QRVE7mnefEFI+gWILE=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:bd:a5:92:8c:ec:43:5c:91:69:20:fd:1c:8b:3a:65:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Apr 24 04:00:37 2026 GMT
            Not After : Apr 25 04:00:37 2026 GMT
        Subject: CN=d42f2a609b5a57e82f0b709d96c344532bdd3124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:36:85:66:b4:a3:18:1d:25:96:78:7b:f3:
                    2b:d5:ea:09:60:ba:d3:09:c0:63:5b:c1:a4:52:c3:
                    fc:04:70:78:22:27:5a:f0:22:f7:f0:37:32:cd:c7:
                    a2:b9:95:d3:ee:81:cb:31:6c:84:64:a5:68:39:36:
                    13:ba:94:53:2b:dc:2e:4d:1f:9b:f4:b2:ab:8d:70:
                    f2:94:f5:8b:de:b2:cf:04:2c:09:6a:73:bc:72:60:
                    33:cc:50:43:ed:04:91:91:27:9a:f6:30:b5:14:54:
                    18:a2:b5:97:fb:d1:92:ec:fd:96:47:e9:49:03:9a:
                    39:c2:64:83:25:cc:6b:f5:39:cb:d1:f1:c2:4c:39:
                    9d:89:56:89:47:df:70:2b:fb:af:b2:b8:a8:00:bd:
                    4f:63:f3:32:34:a2:aa:b7:72:c9:52:dc:59:1f:6e:
                    b7:53:be:b9:ae:01:ee:66:4d:82:b3:a2:c6:c4:ad:
                    35:dc:f0:33:a0:a7:4a:57:c5:46:2a:f6:6e:0c:6f:
                    57:64:37:1b:4f:9f:81:88:2c:be:28:8a:40:41:29:
                    3a:66:cf:60:35:87:52:c7:89:6c:cb:10:72:11:d0:
                    7a:d2:fa:01:65:28:35:4d:18:df:0e:52:73:c5:c7:
                    60:2e:6c:0b:18:79:3f:de:8d:8f:cd:6a:00:eb:51:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2F:2A:60:9B:5A:57:E8:2F:0B:70:9D:96:C3:44:53:2B:DD:31:24
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:69:b8:cb:80:67:cd:2b:ad:01:18:98:c7:54:ab:c8:f9:6d:
         eb:2b:3f:fa:c0:f7:df:d0:ab:d2:77:b6:25:35:7d:40:ff:89:
         09:51:27:a9:34:9b:1e:72:61:d9:de:11:e9:e0:83:cf:d6:1d:
         93:d5:a1:7d:76:51:37:18:a8:ba:d4:a9:4f:c2:b9:37:fe:ee:
         05:0d:8c:10:2d:cd:50:3d:37:34:a5:d2:36:2b:f5:fd:5c:89:
         98:24:bd:88:21:95:98:69:51:3b:d7:1d:a9:d7:0e:f8:9a:91:
         fb:1e:dc:87:09:cb:f9:5e:91:b7:aa:52:49:21:87:84:d2:9c:
         96:2b:97:21:a1:40:bb:99:ab:d4:ae:07:04:05:17:62:68:bf:
         d7:6b:97:a3:d3:97:5b:e5:be:79:45:b4:c0:96:4c:a9:9f:da:
         59:1f:fe:ab:68:ba:56:2d:bc:94:e9:00:7c:e7:3a:3b:55:ef:
         06:65:88:87:3f:61:a1:94:01:8e:4d:c3:bd:ba:ec:54:de:7d:
         2a:12:22:fc:1d:fe:32:14:eb:fa:47:b3:c1:b8:8d:67:4a:7d:
         99:bf:c0:29:35:94:60:cf:9c:d0:e2:52:81:36:20:65:37:53:
         6b:62:43:36:2b:ca:0f:e5:7b:8c:70:e7:3a:4f:fe:7f:8f:d1:
         29:5f:76:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ29pZKM7ENckWkg/RyLOmUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjYwNDI0MDQwMDM3WhcNMjYwNDI1MDQwMDM3WjAzMTEwLwYDVQQD
EyhkNDJmMmE2MDliNWE1N2U4MmYwYjcwOWQ5NmMzNDQ1MzJiZGQzMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC42hWa0oxgdJZZ4e/Mr1eoJYLrT
CcBjW8GkUsP8BHB4Iida8CL38DcyzceiuZXT7oHLMWyEZKVoOTYTupRTK9wuTR+b
9LKrjXDylPWL3rLPBCwJanO8cmAzzFBD7QSRkSea9jC1FFQYorWX+9GS7P2WR+lJ
A5o5wmSDJcxr9TnL0fHCTDmdiVaJR99wK/uvsrioAL1PY/MyNKKqt3LJUtxZH263
U765rgHuZk2Cs6LGxK013PAzoKdKV8VGKvZuDG9XZDcbT5+BiCy+KIpAQSk6Zs9g
NYdSx4lsyxByEdB60voBZSg1TRjfDlJzxcdgLmwLGHk/3o2PzWoA61Gc5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQvKmCbWlfoLwtwnZbDRFMr3TEkMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWm4y4Bn
zSutARiYx1SryPlt6ys/+sD339Cr0ne2JTV9QP+JCVEnqTSbHnJh2d4R6eCDz9Yd
k9WhfXZRNxioutSpT8K5N/7uBQ2MEC3NUD03NKXSNiv1/VyJmCS9iCGVmGlRO9cd
qdcO+JqR+x7chwnL+V6Rt6pSSSGHhNKcliuXIaFAu5mr1K4HBAUXYmi/12uXo9OX
W+W+eUW0wJZMqZ/aWR/+q2i6Vi28lOkAfOc6O1XvBmWIhz9hoZQBjk3DvbrsVN59
KhIi/B3+MhTr+kezwbiNZ0p9mb/AKTWUYM+c0OJSgTYgZTdTa2JDNivKD+V7jHDn
Ok/+f4/RKV92lw==
-----END CERTIFICATE-----
Generated at Fri Apr 24 14:02:47 2026 by rpki-client