Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          VTeZWWy70Kn7JrW7ZPGPUPQ9DyzhCRgE8ByhVwUpx+k=
Subject key identifier:   D1:B5:8E:0D:2B:82:E4:DE:F3:F3:85:97:14:ED:FB:AA:78:F8:96:65
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019DB246E027224B0DC15F4F8E9ACC319884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          1983
Signing time:             Tue 21 Apr 2026 23:01:22 +0000
Manifest this update:     Tue 21 Apr 2026 23:01:22 +0000
Manifest next update:     Wed 22 Apr 2026 23:01:22 +0000
Files and hashes:         1: 0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa (hash: TXGYHpEkbA/gmBzhb7MEKc4sA2Fqy0eb/p6I+gL0THg=)
                          2: 1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa (hash: NLxrLA0OqYxqRmfJGl+OFXBhEszRqDielh1bnhVcZzg=)
                          3: 2KUTocOpAT7sBhebTwh3G4FESlk.roa (hash: qCXP7Gzh5WeYsyND7xGMNVQazeCbTW+xxU01dOva01I=)
                          4: 4Ucriqv55EYMnIzTuWFJEJ0cFbI.roa (hash: lG2vwxva8GrYFGHSt+tYisTRrXaNflBbJwPUhm0hB1k=)
                          5: 4l9EsCgzSHlVTtpywsbUUFtExTk.roa (hash: YL2VEKNHNIjwIMrHgQShXB+ezdUEHsuR+LX2D+OX3sQ=)
                          6: 9-NL_3pPKwjoT10Tknd1fywwh6c.roa (hash: 2AUz3UyBm+hNCRPuqcyUa4lcxCahpjHfjKeNNTVRWhI=)
                          7: AkErl4jlY9bXi8pqa-fwgrweKKU.roa (hash: 0XWDTE5Tv62kIn8zLAqHgpnppEVXV8X+MfUWwrRak7w=)
                          8: CnjhaBCYf7ZnMG3Es2D005bWWPI.roa (hash: vnu28EkHQSIG2pnIVVAMbjcgAHNSaPZ05++SiDjH6LA=)
                          9: DpVlP-CDojfJd8BFvlgfdr3f-T4.roa (hash: eNNDlrOJw2Jo/OW5o5qOgoZ27JzOfR4lVRHbMkq1Bdc=)
                          10: EKuLwMJDazSSbggWLeeqY64f0qk.roa (hash: OfYUgwGcfk/wwvQIpRfbrU+7ZSV91GDPgDRf/++1XoE=)
                          11: F9UQlAebc29GSseukVGk2Ly4-ig.roa (hash: SXDWRzwFnYBqyLhZKjGPwwWVf1aIUUbUr34+3OpNV9g=)
                          12: Fm258hcKsjpIMI7amylXAkeBtU4.roa (hash: CxYZdpQYo2Xh/OoIWujdvOfnnOrO6eV3QzrjFCJmgpY=)
                          13: I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa (hash: 1D2AsC3t5Oo+fCH9DuB+RX3mIGavPSGBYdO7E8JcruM=)
                          14: Ip7B4awbZgfNeXA2x0V50-o-c9A.roa (hash: fF+qKa96LMcpcHr7gUx7PPq8EJWzQoCtAK5cioR9tRU=)
                          15: L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa (hash: v3b+ZpRVqPxC/PxnlvcYscfXPSpsRxuoNmW2s29gQ7E=)
                          16: L1z4gAbmtBr6IFjxlRf2f6QkURo.roa (hash: wfR+HjJDOFvJipZLYW4jdBeVJSrQq986lvQU2WiKhq8=)
                          17: MS8Bv_7T3F3D_VAzb7WSaLcYpfc.roa (hash: lk0a4eNfHng0En9tKf/4Xz/4DH1EMESKWrpSRzXWN9g=)
                          18: N7A86p6PRImcj39W7i3dmRULO6M.roa (hash: aoYmassX8XrXtggl4g+64gU3So7LOrBiC8s9TUO4xas=)
                          19: NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa (hash: mZou46RX6NNyW8lU0qa5tsLs6e+gZ1j+Q57s8qZ9Pp0=)
                          20: OPjyMx8xKL5yf4RsSVANbdPc_Ys.roa (hash: QpXN7MYWDyrIFi5Q477WSj/mfvseLrZe8a2xDC0OcvQ=)
                          21: OtGcmTXxtlAndkCENkgPfZ5qkpY.roa (hash: /n2XdyxLOIwoRSagcNtXKkIFcsp0vWI29IPSu/5Oazw=)
                          22: PuWhap-0muVvQV-0BrycJNZtn1s.roa (hash: cwkFpse9f5j5nHN/rRZOX3pPvRyqmiPVwVbzwBgvaHU=)
                          23: SrXqNvmuvQJBIjB0Di8xUFoZez0.roa (hash: SRA4RELyTLPR3imea02LrnsTj3Gu/dAsOF+7lBcjxe8=)
                          24: WSV7wDu_oOEWknqxauWPGgULCUo.roa (hash: cpJEa6OysfsH+SZFVKbmC8vCj4aMLj4mTs3CNrgU8T4=)
                          25: WgE1MGBGPR7k5rh3nE3hf7taSUw.roa (hash: tpDyS9JuhgZT9rKwZWlbjacZtc36iJXeis37wFMFBNY=)
                          26: XgyNYXwLhPSXrny8NDix9oprHDI.roa (hash: PWGs9rS5sBhLApUjUmFl5ISIFI1Oly8X3m/3XXPeS0g=)
                          27: Zes9PUIGZdo_9LrDP7M15p5oawc.roa (hash: 6bUtaGElpOGGE63DLlZtFA5PJo8DtZ4UODrtR53uq4o=)
                          28: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: Mzu2GdzkExz2hs2qIfkGmb/rtLnd/g3ZM4RzS94TDII=)
                          29: als8bOZv4fKBOCQtVsZ9-tvIHNM.roa (hash: Nm1Cu1BIVmttqtDjEB5m5E1PnL0WvKuShJjAPmq2bJs=)
                          30: eVUCZ2gkOg648kh9IahZkIBOJA8.roa (hash: vMKWl4EbBRXZC+tfwMZgbq5f1CG1UUPRzQXxRawEkC0=)
                          31: fTRzb2cZPSIq__glS6tFSc9lGdI.roa (hash: /O7Vv8jDvx8wOvP3bnJZXgbV+VYFXbf+4qH/zIndzEA=)
                          32: kRm---guYcInSUKq-QookHvNTuM.roa (hash: iGZFzrsQlmqEd4hUxjMucE/uvpD/1KA4uLxkKOBPLhA=)
                          33: kmtJGb31zTt_pJ6GCyTQ9LzmkzE.roa (hash: Q5L6eWKaIz5gBzH7B4mLua9KGWq+PLDJnwr9Kj6N+qo=)
                          34: m4CMglLKx5afVc4xGa4MNQL45e0.roa (hash: aQupodLAGlRxTsd2+5VonhOCOKwRDtVmp6gxInX0RbM=)
                          35: msSEI6HlL5d64JwmuUz8Sr8pWG0.roa (hash: Te8OnG1Rs5zfBbzAKPB1q6JjnhlnmawlvBxGi0xWVuw=)
                          36: mv252XC-r2Fp7WH9gax3y1kCf_w.roa (hash: TyOu2J6Gg6ncup4jNkEuboP+B2/EiWFPV9rxEB3IXsY=)
                          37: n9jXeCQebePRp-nZqBI8SlNOL0A.roa (hash: iRFY1MascouzPY6CQ9pd/hkDj4KxTl5LRhZinPt+4Z8=)
                          38: p-MPHuSWGSGKU-iV508LoDaNCco.roa (hash: 37cZvENTegpVmdQDSXghqou7ADx6Hi6odF6Ut6YKWlo=)
                          39: pNL3oico6rSRy7HI-qZpBv7USh8.roa (hash: nkMrE3yZ9+wbGR6nyZRKmZOaTcWk2iFc5i+D0HRUuvk=)
                          40: t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa (hash: oIu2af2fOLn1wMUWQi6xhmqoR7yT8Ct2Fe39qmDYJjg=)
                          41: uf9kYM6bm6nAONdl8a65rkIYgu0.roa (hash: eilXyuZnlj2dgxzjRmoRlIqnyiAwWyw+VjTTRqknEa8=)
                          42: yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa (hash: EHU24D0qUh2tmsJEt6bSbVEdFShB4gt4fc5fgyaoi/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:46:e0:27:22:4b:0d:c1:5f:4f:8e:9a:cc:31:98:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Apr 21 23:01:22 2026 GMT
            Not After : Apr 22 23:01:22 2026 GMT
        Subject: CN=d1b58e0d2b82e4def3f3859714edfbaa78f89665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:d0:39:c2:63:52:a7:e5:01:cd:66:c9:02:
                    b7:63:b9:b5:ac:0d:a5:89:56:2c:45:5d:1b:b0:96:
                    62:4a:55:ae:dd:a5:29:65:b3:57:74:a6:17:1c:75:
                    0f:c3:13:c6:a9:e2:ba:8a:21:4b:50:c8:3b:7a:e9:
                    0b:49:eb:d2:09:40:bc:74:f6:b8:88:7c:05:8b:bd:
                    36:38:b8:c2:e9:5a:c4:c5:9a:00:1f:c5:11:06:84:
                    22:db:16:35:85:de:f8:94:eb:d6:49:57:3c:4e:e0:
                    7a:13:22:1b:26:db:18:b1:14:55:9e:18:90:b1:9a:
                    da:2f:ce:25:56:7c:35:c7:ce:d5:90:20:6b:92:6f:
                    6a:d4:25:33:00:4c:3d:8a:1d:ef:b1:29:c9:e4:05:
                    83:1a:0a:66:ad:4b:c3:d9:7e:74:f6:01:fb:3a:3a:
                    4d:a1:27:08:25:84:06:1c:00:e1:ec:d6:36:4c:35:
                    35:23:fe:bb:6d:c7:0c:5a:0b:92:1e:e7:ce:28:44:
                    39:60:46:18:22:56:d8:4a:a4:5b:59:97:ae:b2:50:
                    26:bd:e9:6c:7f:32:84:b6:fb:a1:1c:40:13:b1:64:
                    01:48:27:60:9b:2e:e1:d6:88:25:c7:b9:f5:04:55:
                    13:c1:23:5b:59:7b:70:2b:62:42:67:f4:c1:63:ad:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:8E:0D:2B:82:E4:DE:F3:F3:85:97:14:ED:FB:AA:78:F8:96:65
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:60:3a:83:ff:27:6a:99:94:fa:19:30:e0:7f:ac:10:4e:73:
         14:a7:46:4e:56:17:89:4f:99:cd:8c:f6:01:92:d3:f5:3f:1f:
         ac:9f:12:6e:49:a3:25:45:54:6c:5f:fb:01:e6:8e:27:28:dc:
         c3:05:eb:87:38:e7:83:93:f1:57:40:9e:1f:31:2d:35:d9:f4:
         90:a9:56:30:81:a3:44:e6:4d:64:a5:4d:5b:8a:21:e0:68:03:
         80:33:62:d5:1d:a3:59:97:5e:b6:71:c2:f1:aa:2b:8d:ef:c0:
         b1:e7:54:6e:c2:cb:70:5f:21:d4:78:b1:a8:b5:dc:c3:05:0d:
         60:5c:d6:75:07:2a:2a:67:81:bc:b9:99:95:77:ee:a4:c2:00:
         3f:e3:e0:c2:06:d1:e3:38:c0:3f:6d:76:31:4f:b9:68:77:17:
         97:76:87:e0:32:5c:ea:60:f0:e1:30:40:3a:6f:22:fe:a4:49:
         7a:8d:4d:39:a9:fe:5d:24:ca:03:10:d8:00:75:a3:2f:77:eb:
         c5:14:9e:8f:78:41:3e:05:15:1a:1d:ee:f8:27:13:c7:da:6e:
         83:7b:38:a7:84:23:09:11:ad:8e:d7:b0:39:33:99:3c:5f:36:
         47:a1:56:6c:99:a5:77:c0:e3:2b:88:e8:49:cb:fd:19:df:c6:
         64:5b:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:33:22 2026 by rpki-client