Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          xG9JdkIsS2wwJexwvnky1rqIeLD2FkocSQCRNEet0QU=
Subject key identifier:   68:BB:C5:E0:61:F9:10:94:D6:83:36:03:84:B8:A4:D3:B0:6D:C0:14
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019DB27D3DB4A93029998D1339ED2DA53409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          19BF
Signing time:             Wed 22 Apr 2026 00:00:45 +0000
Manifest this update:     Wed 22 Apr 2026 00:00:45 +0000
Manifest next update:     Thu 23 Apr 2026 00:00:45 +0000
Files and hashes:         1: 1-9eUDWcxbt2aqbNSlZi8gTl5DCU.roa (hash: p8wctqzFNtkBy6RhhhlaT7VtYKQMWW5FKZWtYRgVcII=)
                          2: 1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa (hash: tXfoCwpHJbuZxjYEzHdSS4wRnSV0yN9so5GmJzrVHLc=)
                          3: 2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa (hash: ync7Bqe2ZS8Us4KTHfLVYTl8WbPdgW2Owp+mtCPVyr4=)
                          4: 2_UvfbsFxKUUaVcrdfYacSKl2L4.roa (hash: L+O8j8f4gfZj97qEmoJdpXmH/Ua6ICqOYh06yVj5Qkw=)
                          5: 5qZtdGGQPYCB4GQr1wjcWz32C6A.roa (hash: aKQ60+nGzkXNMGNGLDuML0KK2apTuxjrP6T8ue86sWs=)
                          6: 6rUWxtK9hflh7SiPi0L1itfKjH0.roa (hash: DcndbDem6DcVRyOX/MWxW3qzvVsFc82BfTKKDpuSwns=)
                          7: 8P_M0aIDtey6z1-uBYdoER49gbI.roa (hash: FSnmoR8GJtfy3UCUFj4zRO9IpsS4G6PEH7oMczL8wlA=)
                          8: A3LobdPOZ7HejpQ_FMCpYizUx_w.roa (hash: ufpnhQSUHaLon4166f4aCj0fe7h4Tal7d8HPyF5uiJg=)
                          9: BBMCp3XI6fUPNGiFtfO0986n1Ko.roa (hash: qMZxyeEgLDpsgSqlkuooSlzn2+QDVRPYCvdIlrpHAto=)
                          10: E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa (hash: rwJ5587Bc7BJP4v6xl5VcHy6DfSAotRzBjDqDy0qIfU=)
                          11: FGLrLKZULm0mhSDMTuKG_6HhyEA.roa (hash: gghYFbteB4VfP78hKwnuTRHlZR7ah9jq0XQbq7TGOa4=)
                          12: M-v28PFLiT56tATmxh_dxjXIz48.roa (hash: wk4xU/TxE3WuvzAmyr1klkvnIlWP+ZayRu5Ot8is1ek=)
                          13: OI8QWVv_chgdmwAWrY8TiiEHfx4.roa (hash: I5/vA6U+NqqViBqDeDmORphsSlyAGX+Zx8sUraJzHAA=)
                          14: OXURxrNe03171n8bX9Y6CdBFZZA.roa (hash: cfxWumMR7w5M2kaXm/XjKT3g/gie/zgJWrUDlK4masI=)
                          15: PddS_JuRiBoo8-dVCXym0acDd9k.roa (hash: vVLJG0UTNRcx2S32EykgHEAids5Zl1wtiFOsx/4Ez4Q=)
                          16: RU1OY7v2nhWXT21hWMhOgsqhF9M.roa (hash: HO8CFdI2T/vSNVqtiw2GDyzzGYeXGauouVL1zqhgbhU=)
                          17: SIiK7KO9qRsYGFDrQF29ZYeRN28.roa (hash: V80trQbO4tDLVeGxGEbPS8GIdLCj2usc5m9tpR0hd4U=)
                          18: TQAaFv5ALTHh63epl7LLu1DH9nc.roa (hash: hUGYLBMhX2Ty5hzrbfSfblaqdRUKpDToGmssIdKl46w=)
                          19: ThU2mBbAHrnyESzRe6tfkZlbjUI.roa (hash: ULNfH10N674XhO/1prWJKP2j9z5MH6CUdMdCXtR/9Gk=)
                          20: V68VgvWFXK8SNckccpiLmpleGX4.roa (hash: yrkbL90m9V1JdVtjSlyfTTPXiIJR9Gk9nvsichDj+6I=)
                          21: WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa (hash: MevGR9qgcVcvlRayBhJVUo3kjeWsQbcikC4WmtwTEw4=)
                          22: Z-YCzchVF5bQH2HicwMC7TiNiIo.roa (hash: S79GiezgHAF6LzHXyznfu+6Fnlx8lKM8RhqxjBgw0Qo=)
                          23: ZNKvFPEQOxElP83PEas3vxV_rd8.roa (hash: Yw7PJJLrozmu0y73W6WqhOH+ocmNk1/zb5Wm1iOru30=)
                          24: Zcxa-wcmGJQEbWCPWNRy_S9kAeA.roa (hash: cR+01K9zK2mMvRiOd2NbvFpy3P7pPHXeI9e4ZoZCoSE=)
                          25: _1qYl_E9z61RVGmZyGtCwxyB0-4.roa (hash: 18SyY5CRP2Y5oEKH9NlPWn4JmOCzEhI4FF2wBT008ig=)
                          26: _Zm8MTF_L7EyQ_6YveeS2IaebTE.roa (hash: VQ+xE18B7YQkYF3RoWjSVJ+ofw9TAXhOCMfHnM466LQ=)
                          27: a-bdMU0PKpZcHud_zlSMCqMPwfc.roa (hash: FjKrhZi7OcCNDSXEQfdLc/TNzOD//gv/lZ5dmyUEaYU=)
                          28: aUWRzQkmamgBj5uYCZs7Snjb2w0.roa (hash: D2dS6ceN+toMKXqgsq9ovyx12/VkAZ6hcbpyGxWkCbw=)
                          29: bMTS2A87aEejzK3eKCQU8zS4Tsc.roa (hash: NSTOiMnZOnB16p7UkLVVaCLUT9cLixKW/555b9iQG/0=)
                          30: hXwiXKPzjzALLb2-aV0H6o80chE.roa (hash: KsKknnspRreD+LtOldSofmy5lxz3mxIMssf2KBvH1MI=)
                          31: htGXjVomK79OKrmcY2KJgs4ezPg.roa (hash: Ecl/Jiy52V1qsICQs2cHZIKGG76jH9NDSw0LPqpC/rA=)
                          32: jkioZ7sMtN29opHHMof3tv_YZR0.roa (hash: z+ea8bYxi98v1D0ZT+9JXvz7vJ4jYL4VA16/BZkZvwM=)
                          33: k6R2EMc1jHcegHcYvsEaV2UvlZA.roa (hash: byoNW/ZgL2eaul6bek1NQxuUanhUUajegKqr92UrXrU=)
                          34: ltLsBfGQArgFTwEJnxowuwYINmQ.roa (hash: L78GTriIbxxRLspWQQO5fmxXcJp+UgccdnRCJHJ1oFM=)
                          35: m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa (hash: DOPMeZOfGq+jzc64BcbcPLyOPAp+75vksjgsOjXMlhQ=)
                          36: mB5IiCH_newq6qbP2kCzfpUSUUw.roa (hash: YhW5V+4PKfLERoAKrC4EG5FsVV0PNU0jPh/XSltcZh8=)
                          37: nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa (hash: nLy78X+XVrYs4fJKoVbx5CKz3kGaFoiDi0xYmsQEn8I=)
                          38: oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa (hash: OZrzmSaMIO4XTjvZmhAaJ6ipcXJYLxmtmBRfg4r1PS4=)
                          39: oSVvPOy3DcS_J21hCHOPnBixIsY.roa (hash: DFtHinQdzCM+BlKU8F5bIFjAI/DQwKU4K4hplb7qoKM=)
                          40: oXr-OXMQDlIYBwTEuUb02K5FEWs.roa (hash: v4KuKroQQAeom7scztrCxWsUL7/efzNpf/MjG5frSpY=)
                          41: q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa (hash: W+o+neEd5lLOipfuBZ07SXEXSqZC2MoxbUXZ+XALuTI=)
                          42: sos9OQo7SQuATzDAO-88fckXZrM.roa (hash: BvLpnURp1OXbUtdg+BiPw0Dsxp8uR19uuIXSDPU3W0k=)
                          43: ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa (hash: kI6+F1DWAcc+3XLZk055UBjOatQ51Syy2IyT4uzsHTY=)
                          44: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: xrBsB2wY6KL37jlipNuvPB35dXVXi4tzlQNqLpys/wQ=)
                          45: v0EgzvwenfUuFzJ1WPOCjKPv3xA.roa (hash: HBF5KdghmC5VF+0k49VIpdG77syNkClmpAWbA/Bfosc=)
                          46: v8SeWykxnCkXQyOZscP2MgpOyZg.roa (hash: O93SDzFlSIJjhC2CFme+MFhBi83g9A1lij8xh+MsV5Q=)
                          47: wb6tluOUZUayN9G05LwXOnEHcWs.roa (hash: jn6hTpf5caV20SdBM51r7krZlI86ZWqMVK8AHsPyORw=)
                          48: wjtu5rouI6o5sivHqgZWiEyWYSQ.roa (hash: dh0LGwDXw+QvpsnUYRFis+d3wj/qLdu8NaoSILnm1ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:7d:3d:b4:a9:30:29:99:8d:13:39:ed:2d:a5:34:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Apr 22 00:00:45 2026 GMT
            Not After : Apr 23 00:00:45 2026 GMT
        Subject: CN=68bbc5e061f91094d683360384b8a4d3b06dc014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:7f:b2:f2:8d:95:d8:08:62:12:aa:e1:6c:
                    62:d0:84:88:26:87:5f:a8:9b:0e:05:4a:94:7b:a6:
                    8e:5d:70:2a:b6:0e:96:6a:4b:0a:06:6b:98:29:17:
                    9e:c5:0c:c6:b8:23:92:37:56:1d:a8:d5:36:ed:a1:
                    77:1e:87:d1:f2:dc:18:8e:b5:32:4e:df:98:c9:32:
                    af:44:88:7e:6b:c6:29:5f:cf:21:62:df:81:28:70:
                    04:59:7e:c1:8c:14:dc:f5:d0:a7:23:f9:3e:87:5f:
                    eb:1f:8f:6e:db:b4:f4:ad:66:74:61:00:39:96:59:
                    3e:b4:3d:5a:eb:bb:e5:f4:84:70:28:a2:57:8e:d9:
                    f1:e7:55:ec:d0:21:4e:79:85:af:03:32:72:db:be:
                    ca:86:2c:87:f0:7d:6b:6d:93:52:c8:49:89:10:65:
                    71:8c:58:d3:e8:11:52:51:b4:71:86:10:f1:a2:38:
                    9e:26:97:03:39:1b:2e:e3:d3:5d:c4:12:0d:40:cb:
                    15:7e:a1:68:5a:60:26:74:d9:c6:be:13:9d:76:5d:
                    a0:32:2f:23:c8:e4:19:d8:dd:25:6b:8e:55:ff:08:
                    17:82:71:d6:b7:98:66:96:67:dd:22:06:14:0c:c4:
                    48:25:11:24:a3:35:94:78:91:13:bb:6b:c6:8b:6a:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BB:C5:E0:61:F9:10:94:D6:83:36:03:84:B8:A4:D3:B0:6D:C0:14
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:62:34:ed:aa:2b:bc:b2:b8:ab:eb:c2:71:7a:c1:af:8c:b7:
         d2:b5:d3:11:01:d2:1d:6a:a4:0f:7d:54:ab:6c:86:6b:16:b7:
         36:43:64:ca:23:e4:5e:52:55:f8:50:68:5c:0f:77:6f:f6:91:
         72:7e:29:c2:03:d5:6d:fd:50:05:49:e1:36:8b:14:30:f8:87:
         7d:9e:8b:96:c2:40:32:86:59:40:44:eb:ad:5e:52:7c:96:f3:
         4e:97:03:af:30:67:d7:cd:51:f5:64:55:68:66:31:1c:60:a7:
         d7:ba:4d:0c:dc:65:30:9d:62:e0:ed:14:37:9c:9d:f1:fd:ce:
         a7:cb:2b:b9:8b:3f:a7:6f:92:74:5f:a2:4d:b1:84:5b:a5:ef:
         03:1d:ce:f1:c4:35:a1:29:49:47:6f:5b:6c:77:4c:b2:a7:dd:
         bc:fc:b4:70:37:8f:46:cc:89:fe:4a:71:1d:9a:a0:85:d6:34:
         b8:20:c9:3d:13:7d:44:0a:0f:b6:67:9a:ca:1e:3a:42:33:2f:
         99:f3:3e:02:f9:cd:32:af:f8:d2:a2:44:1b:5e:0e:18:e7:e2:
         3c:3e:70:50:98:a8:15:c2:39:c2:be:d7:03:8e:f0:78:df:43:
         28:a9:5a:a4:fd:0d:a8:cf:17:e3:0f:95:93:c7:dc:28:21:31:
         8a:40:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:34:34 2026 by rpki-client