Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
File:                     rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json)
Hash identifier:          Q2PAjYkWmB0RlL9hWwUyQY+kS8yT9dkYLBr42LccR58=
Subject key identifier:   60:35:06:8A:00:C5:3D:E9:70:7B:08:C1:68:40:CF:B6:68:28:9E:05
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019D3752A278A03266B3550CA752B64BB6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
Manifest number:          18BA
Signing time:             Sun 29 Mar 2026 02:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:55 +0000
Files and hashes:         1: 3a7_WjUjHvmaDKMR_0n-V2J4S48.roa (hash: HAXb7MwMLIlHkvY0JciFwEcWW+cBxNegwhoL5MEj+Y4=)
                          2: 4GnNaMU7ozZwZhW2J2112doh_tw.roa (hash: WMA3aYgk7G+X7flrtEOgH24fD1TLzYLGipLG5KR0H5o=)
                          3: 5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa (hash: RJ3VX8HghkzCma3QJ9QJO8+1DyrcpupoHfpYlwCMq0M=)
                          4: 7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa (hash: 7ShADED+6ABWdUZq+N0c2d9qFBvXvIfuwCNn0VPe6D8=)
                          5: 93sTot__pOvELS3ZJJ_0IKYI80A.roa (hash: cd3DiMi4zFZH02Z5vN9iUfleyfgwEhyhgnSYBKXSIqA=)
                          6: AVErlpP2VhysTwGtrB64czf3NqI.roa (hash: UMyN7o51qi8PMB0e1ciRLYkKAE3KUtpoBs5v/wpa8yo=)
                          7: CILl_zyXusNg3CeT5TPh9rVx7SE.roa (hash: FdMkKAGOUUSgyKvsP1F6/x5+Yu144fskvlYf4TyAXN0=)
                          8: G_n5RA6W3ZkloaFthEn-Fh-sCzM.roa (hash: c9qFmEiCdxto7E6131yKqNFNOUJFon6l2MhL2xlVtPs=)
                          9: IPJjNe_cB3zjIZyONYjGoBmmxrw.roa (hash: g27Ahx8NQ/P8ycHloD1dj7SU+EOwFLKNLXOaBXz5Lxw=)
                          10: JowNFbKi_vYoTRs26ptdtrIOuaM.roa (hash: TJWkhhs28sV5YlSQhf17WgqKXSfgnNIE8e2Aaqdz+vY=)
                          11: L5CGhyyEcuDPtwlMoB7T0ykBOW0.roa (hash: KmUkqVbBWAmW4Wsgbx+66HRsHh83JXR5eCNYk4qTJ3c=)
                          12: MInmjTvW1jbn8HVs4d7pziBXvog.roa (hash: sqeC1+d5oRvHYURRaJApXOy7p3KmwZMMfOX3s+0N5no=)
                          13: NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa (hash: cCvYyHI6VXA2SHqtxY6FdqOa8OINU3B57RbzyCoIYmY=)
                          14: UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa (hash: C2S4KpTLma+Nr0C/LgZeLhVTXWrhyD4esp1prszfICc=)
                          15: UQs_v6zqbOmXSl8dyqIq5u6i-_o.roa (hash: 4jx6EXQhbefzVsskhUYOXoXxrxUb8CxFEYfTlZeZuSU=)
                          16: YnRIz2LAVm6T1ngHwYknchOMZ5g.roa (hash: O08Dnht2tycilQ0sCxxQOH4+isy3TkZ0CpI/HxIUNRM=)
                          17: c7D8z87seThahzJGV1xxzUC68yM.roa (hash: lEtNJalbVark+w9kQtFPEtaaKlnnHtxsb3MXywog3UE=)
                          18: cMVqOn9_O511UMJeh_8L-Q0ryD4.roa (hash: GPsJ34P/KBtvf2V8PpxfXTPLlIXgJHes62O2Gn8/mMM=)
                          19: eFpBdg6bsZMOceMMDBSJPbKerRQ.roa (hash: 0CNpt//WjjkQ9s80RqkgFSsUKxYW7IA+iSGJkuAzflc=)
                          20: gfHF0_9tC_g86XlB0EGuBJeEcF4.roa (hash: dW+/GSUe21Y9vzGs6gA/zL83gMId3e6+CsIQ8ML4Lxk=)
                          21: kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa (hash: kI7ZNlTpRra3MpODVxn5O1XIoHdEb9TeHKIqmZcOjSw=)
                          22: oV0JLOMHWgEPodfJD7fettcMDKo.roa (hash: 8byXH6iwa9ptsygTXF7KrIJlXXNBNYRMHn/3mZG+lWQ=)
                          23: pKdyppPaHYtR-oyAX_dINAizQCw.roa (hash: 0aaYkpeViKdlLjKyoydpc47P1Ji22FZ3Tvk3MaL7ELU=)
                          24: qv25HuVkGD25YIg_oR2WSTGPtS8.roa (hash: AhkATBPCei80O9bXQPoD49GvTRXEmbOiuSx3aLVtzx4=)
                          25: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: PrzbWWBfMB2uTZnvthOVaFANYLX3lDQ848SF/Da8/NA=)
                          26: uLFuSxmniVdOOB-xJoPZwASxLt4.roa (hash: FLb2IX6npCXvVAUlOdGVEYczSWz0bZw/0vsaAGxi3UI=)
                          27: v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa (hash: gmtuefqcnpBpqJUGEwxDDhZb8NTc6oQgtAx5ttlsZSs=)
                          28: xjnYzgBcenqcxEq_xCvUmgvi1LI.roa (hash: Z9ZiuEMfsOlYoKUCQ/ZjnzpK4neZkRT5jBddWL6d7fM=)
                          29: yLV7lfd30bAjDnQWLnJQ_McSKtA.roa (hash: LMA6JBfDwM4DNAaRQWUraFrUGqg8Vgx8QA0i7GxUahs=)
                          30: z8jkcsVGt66_sClw6OoCA4fxiD0.roa (hash: O/OxXPCdKehv6qCJUwydClm29EJLOL6Thakr4fdICZo=)
                          31: zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa (hash: C+8e5I+GbSwAG5M+lCl7ucBJaBL9QyOfEWbG2V8egMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:a2:78:a0:32:66:b3:55:0c:a7:52:b6:4b:b6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Mar 29 02:00:55 2026 GMT
            Not After : Mar 30 02:00:55 2026 GMT
        Subject: CN=6035068a00c53de9707b08c16840cfb668289e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:91:e5:d6:41:43:f3:85:92:bc:34:96:8f:
                    68:e6:ff:88:37:90:30:6c:46:73:06:36:ba:60:dc:
                    fb:42:81:8b:ed:a0:70:d1:89:36:c8:47:a3:ee:43:
                    88:7d:26:eb:ab:03:9a:64:04:41:97:ab:84:cf:1f:
                    58:a9:5c:4b:69:e6:d4:49:92:1f:e8:ad:07:64:91:
                    55:60:11:b0:95:5d:98:10:5f:0e:80:d4:69:38:1e:
                    a1:5e:ce:e6:b3:4a:f7:09:2e:0a:14:9b:64:b1:26:
                    67:d1:e5:62:c0:ab:83:f2:5d:07:1c:ad:6a:8c:9c:
                    2d:9d:81:ed:c3:22:7d:59:f3:97:28:e4:f1:35:d6:
                    26:db:87:7d:60:a3:8b:5e:6e:49:f9:1c:0c:c9:ea:
                    8e:19:fa:8c:cb:c7:ee:80:25:76:83:82:93:53:2c:
                    93:6a:d2:c3:4d:68:b2:ed:e4:6e:60:f0:1d:cf:ec:
                    6d:41:c4:aa:3c:ac:55:3d:8d:be:24:42:50:6d:8b:
                    cf:f0:1f:54:a5:12:99:d6:6a:98:cd:30:c1:db:e4:
                    b2:7d:ab:08:51:84:ef:2a:7d:ab:d0:3f:1c:a7:46:
                    ca:2b:ab:4b:d9:53:d8:a6:c8:df:b4:3e:c0:93:1e:
                    6c:47:cf:82:ed:59:85:a8:3a:63:57:4c:f5:1b:79:
                    e6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:06:8A:00:C5:3D:E9:70:7B:08:C1:68:40:CF:B6:68:28:9E:05
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:56:bb:f2:39:94:19:2c:f1:fe:fd:99:89:b4:e8:a4:0b:f8:
         a4:80:d6:80:77:09:4a:9c:55:3d:d9:ff:3f:b4:1d:73:88:b9:
         24:95:b2:e8:96:7d:8e:89:cc:4d:11:37:64:52:8b:79:be:3d:
         af:fa:de:e4:24:97:17:e4:ab:c5:49:cc:b9:c0:43:d3:7b:6b:
         5d:21:41:2e:0b:c1:c8:e9:17:59:3d:ea:1e:ef:03:0c:99:df:
         43:37:77:48:d5:4e:fa:b8:7e:af:7c:a2:82:b1:87:73:5c:11:
         99:ee:62:28:4c:f0:72:10:f5:ec:13:0f:b5:08:29:3b:3e:5e:
         3f:83:cb:bf:46:ec:3f:b3:d2:91:fb:e7:15:26:25:0d:6b:01:
         28:e8:32:28:b3:9d:d5:bf:68:ae:d8:20:23:a7:4d:4a:55:46:
         7a:57:01:be:ac:92:fb:1f:46:3c:61:26:ee:de:0f:d1:f6:de:
         97:6e:a8:be:c0:0b:69:4f:27:28:ae:d9:14:99:84:68:00:5d:
         f2:6e:0f:31:a9:bc:30:e0:75:27:98:17:76:98:0e:cb:25:a3:
         b8:b4:70:7b:10:8e:de:54:92:47:ed:23:6e:10:ff:bb:b5:a5:
         19:c0:a8:7f:8b:a1:47:2a:97:9c:c7:91:ee:f1:5b:be:e8:fb:
         55:28:ea:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UqJ4oDJms1UMp1K2S7bPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjYwMzI5MDIwMDU1WhcNMjYwMzMwMDIwMDU1WjAzMTEwLwYDVQQD
Eyg2MDM1MDY4YTAwYzUzZGU5NzA3YjA4YzE2ODQwY2ZiNjY4Mjg5ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRKR5dZBQ/OFkrw0lo9o5v+IN5Aw
bEZzBja6YNz7QoGL7aBw0Yk2yEej7kOIfSbrqwOaZARBl6uEzx9YqVxLaebUSZIf
6K0HZJFVYBGwlV2YEF8OgNRpOB6hXs7ms0r3CS4KFJtksSZn0eViwKuD8l0HHK1q
jJwtnYHtwyJ9WfOXKOTxNdYm24d9YKOLXm5J+RwMyeqOGfqMy8fugCV2g4KTUyyT
atLDTWiy7eRuYPAdz+xtQcSqPKxVPY2+JEJQbYvP8B9UpRKZ1mqYzTDB2+SyfasI
UYTvKn2r0D8cp0bKK6tL2VPYpsjftD7Akx5sR8+C7VmFqDpjV0z1G3nmFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA1BooAxT3pcHsIwWhAz7ZoKJ4FMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1a78jmU
GSzx/v2ZibTopAv4pIDWgHcJSpxVPdn/P7Qdc4i5JJWy6JZ9jonMTRE3ZFKLeb49
r/re5CSXF+SrxUnMucBD03trXSFBLgvByOkXWT3qHu8DDJnfQzd3SNVO+rh+r3yi
grGHc1wRme5iKEzwchD17BMPtQgpOz5eP4PLv0bsP7PSkfvnFSYlDWsBKOgyKLOd
1b9ortggI6dNSlVGelcBvqyS+x9GPGEm7t4P0fbel26ovsALaU8nKK7ZFJmEaABd
8m4PMam8MOB1J5gXdpgOyyWjuLRwexCO3lSSR+0jbhD/u7WlGcCof4uhRyqXnMeR
7vFbvuj7VSjqgw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client