Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          P1x1kXNCx8+sl0zS4J14huASJKt+E3uH5xMMPvO90i0=
Subject key identifier:   00:6A:98:89:63:69:8C:E8:7E:9F:AA:07:3E:BE:C6:F0:39:25:EE:C4
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019DECDAC7A2A298A2B73F6114F93ADBEA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          18EF
Signing time:             Sun 03 May 2026 08:00:54 +0000
Manifest this update:     Sun 03 May 2026 08:00:54 +0000
Manifest next update:     Mon 04 May 2026 08:00:54 +0000
Files and hashes:         1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=)
                          2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=)
                          3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: knFvPZNb4SDxv/LxSVUqK5r1PQnAuzGFcj91hWQRRhY=)
                          5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:da:c7:a2:a2:98:a2:b7:3f:61:14:f9:3a:db:ea:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: May  3 08:00:54 2026 GMT
            Not After : May  4 08:00:54 2026 GMT
        Subject: CN=006a988963698ce87e9faa073ebec6f03925eec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:f6:0e:8f:b5:f5:b6:eb:5e:3f:bb:6a:dd:
                    83:3f:8f:94:32:69:84:68:83:ae:ca:1a:87:5a:20:
                    79:4c:f1:6d:78:45:3c:d3:65:d1:e8:a7:4c:f1:8e:
                    b5:1f:97:b2:b5:67:ea:dd:e0:cb:56:30:a5:92:3e:
                    cd:71:05:a0:4a:09:ca:60:dd:bc:58:89:4a:e7:7c:
                    e5:29:3c:eb:1f:da:23:37:6c:c4:73:c3:42:a1:aa:
                    17:05:40:0e:ee:21:30:0f:5d:1c:59:0a:fb:4a:24:
                    9d:27:0e:b3:5e:87:d5:fa:09:c0:60:22:9e:a9:9d:
                    74:52:cb:88:a2:8f:25:74:4d:01:ac:af:8d:57:95:
                    b4:e2:da:45:16:d2:4a:2b:f3:dc:05:f9:11:aa:58:
                    2a:9f:00:63:6f:9d:15:51:72:53:7b:df:53:81:26:
                    94:01:4d:11:4f:7e:61:0f:93:43:6a:d1:04:db:03:
                    2b:bd:02:17:ed:21:19:ca:cd:f4:45:50:1e:ba:0a:
                    d0:61:c1:8b:62:e0:39:d5:39:65:93:8b:6f:c7:7f:
                    7f:51:77:a7:7d:a2:4b:62:98:e5:9c:0c:56:a1:dd:
                    fc:f0:5b:3a:a6:05:fa:7d:52:bb:66:38:e3:4d:80:
                    c3:ae:80:9c:a1:37:04:67:72:67:37:29:12:8d:14:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:98:89:63:69:8C:E8:7E:9F:AA:07:3E:BE:C6:F0:39:25:EE:C4
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:ef:10:8d:9a:f9:6c:c2:c9:11:a4:c0:48:99:5e:ae:c1:
         9e:8f:67:44:14:b8:e6:fc:56:18:89:59:be:47:45:f8:53:b9:
         eb:b4:51:8a:2f:32:6f:7d:dc:73:d0:91:96:37:78:8a:17:a0:
         2e:bd:74:50:95:68:3e:33:ff:75:7d:c7:af:ff:c5:2a:13:4e:
         94:15:7c:84:4f:8d:90:67:36:a5:2e:e0:93:fd:21:1e:c6:3c:
         c9:2c:90:ae:63:dc:90:0c:ac:64:ce:99:39:0e:94:fa:bd:04:
         2a:7f:1e:69:38:7d:48:09:08:1d:65:98:f8:f0:95:f2:9d:52:
         86:5a:ae:90:46:d3:01:cb:af:64:06:a6:2f:48:21:98:94:02:
         34:5b:6d:fe:15:ac:4f:e2:7a:78:e0:9a:02:24:95:06:02:83:
         a0:f6:3d:ce:98:00:c4:0a:81:3d:db:ba:6d:cd:d4:d2:6b:5e:
         ba:5c:fe:e4:69:9b:81:54:83:7e:e7:10:1a:11:9d:5e:f7:23:
         1a:eb:7a:6e:b6:63:ce:47:90:fa:ae:e0:74:4c:07:53:3d:16:
         78:bd:7f:f1:fd:97:a1:49:38:2b:1e:b6:79:72:09:46:d4:91:
         da:b0:83:a1:d1:53:20:98:1c:f6:c5:55:3e:2d:f2:72:97:99:
         c9:ee:6a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3s2seiopiitz9hFPk62+pSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2
N2VkMDIwHhcNMjYwNTAzMDgwMDU0WhcNMjYwNTA0MDgwMDU0WjAzMTEwLwYDVQQD
EygwMDZhOTg4OTYzNjk4Y2U4N2U5ZmFhMDczZWJlYzZmMDM5MjVlZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE32Do+19bbrXj+7at2DP4+UMmmE
aIOuyhqHWiB5TPFteEU802XR6KdM8Y61H5eytWfq3eDLVjClkj7NcQWgSgnKYN28
WIlK53zlKTzrH9ojN2zEc8NCoaoXBUAO7iEwD10cWQr7SiSdJw6zXofV+gnAYCKe
qZ10UsuIoo8ldE0BrK+NV5W04tpFFtJKK/PcBfkRqlgqnwBjb50VUXJTe99TgSaU
AU0RT35hD5NDatEE2wMrvQIX7SEZys30RVAeugrQYcGLYuA51Tllk4tvx39/UXen
faJLYpjlnAxWod388Fs6pgX6fVK7ZjjjTYDDroCcoTcEZ3JnNykSjRTXrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABqmIljaYzofp+qBz6+xvA5Je7EMB8GA1UdIwQY
MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO7vEI2a
+WzCyRGkwEiZXq7Bno9nRBS45vxWGIlZvkdF+FO567RRii8yb33cc9CRljd4iheg
Lr10UJVoPjP/dX3Hr//FKhNOlBV8hE+NkGc2pS7gk/0hHsY8ySyQrmPckAysZM6Z
OQ6U+r0EKn8eaTh9SAkIHWWY+PCV8p1ShlqukEbTAcuvZAamL0ghmJQCNFtt/hWs
T+J6eOCaAiSVBgKDoPY9zpgAxAqBPdu6bc3U0mteulz+5GmbgVSDfucQGhGdXvcj
Gut6brZjzkeQ+q7gdEwHUz0WeL1/8f2XoUk4Kx62eXIJRtSR2rCDodFTIJgc9sVV
Pi3ycpeZye5q3Q==
-----END CERTIFICATE-----
Generated at Sun May 3 15:33:49 2026 by rpki-client