Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File:                     0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier:          4T5ir8NP7DlScdykrOKsp7CRqxylocZ4N/7cUe/sNzk=
Subject key identifier:   EA:F3:E1:1E:55:E4:18:95:87:98:61:AB:97:0A:C4:95:A7:24:6E:12
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer:       /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial:       019DCD18C979B77692160CD6AC1858FB6876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number:          162D
Signing time:             Mon 27 Apr 2026 04:00:46 +0000
Manifest this update:     Mon 27 Apr 2026 04:00:46 +0000
Manifest next update:     Tue 28 Apr 2026 04:00:46 +0000
Files and hashes:         1: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: v6XTSTGeIzGD+HkS2R4WNveXsa/YYhZoHaeS6BsIkbY=)
                          2: 8xUINwR_MZF2v4_Uc8NHq55tEu4.roa (hash: BeND2ovC8Tb4Nwoyh9HxRMDQdbkz3PoJwktwooDxVhk=)
                          3: 9yRC7zAUCj4WsEYWohBubnEg-To.roa (hash: BAP4Q9Aas18vDD1GYMHWN+ne8d9I+odSYSc4FqyAAMk=)
                          4: B2YoZgrpQEDb8UGkfFFcmk1C8WU.roa (hash: lrmThkzbXwEgonP8nGIi95OkJtxQ+u0aZhl33JVnnGg=)
                          5: HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa (hash: jvJDycM8Kwx/kDrj1W5EYQK9WGSm7y5sJzrsu3gD7EA=)
                          6: KVWGAtNaDYuCLBDqyjhmNTSUsco.roa (hash: I+mYgzLuOkLdrV2nmEsQLkeZAGwvKj2fiTFinUQhLus=)
                          7: O4wX-zREvFToFPAF8_QrfeHlFV8.roa (hash: AuJD+oGrEuzjm5RNbgKhP3+ewZtfDa45xvNHgyGDnu8=)
                          8: Q5KjtFuA4b13GYFReAXac6ikxMM.roa (hash: C9lFOLqvB3UVVYIvZafTYRaPsoOOXhpw7/LoWS9f3HY=)
                          9: SigdKS7JtTEVYXgED4DdixD6OgM.roa (hash: NfamlOUNbIv4AqwK/fv2VF3gtE7JmiXqUNd8ZVZzSIc=)
                          10: T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa (hash: ZWBCyQYdJoW8TuwkXaB5bNFnPnWKEyVuntW9B90XJeU=)
                          11: VtpjoWz0RdFNmkffYS2weF5bVAs.roa (hash: HVKb03zFb2eoY7pvE7f8ruqUNxZJTuKgQsAR9YLQhCs=)
                          12: ZJ56n3Y17TFJk-Tqc_ycphu8qgc.roa (hash: J+O1IkyhA+FTfPaWOGsyaFo/vFHRN64aMyNig4w0a6g=)
                          13: ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa (hash: m/dMgskCu/LRhEwHUxPFbSCbCpuefF8R5De3vG7ME3g=)
                          14: _1Ck2zOMmaEKy6jWTA2To4WXHOc.roa (hash: PosaMGaTcyPhx+0qx4rcwdvlDm/JVQKWlg+9OoGTG24=)
                          15: _XNB-uxfsS8Bg-aoGqYMaoc-YB4.roa (hash: +2E5bdIK9sFDQ0WQhkQrjROrGKFuw2mz7mQOzFxJQT0=)
                          16: _g5wGZfyMy3-AkUPnKNuMg5TWV8.roa (hash: lBSsBrgpgGHjUcWq8qlYBX3qnVmb+Y5QAoDDvYZngGA=)
                          17: aj3l0yv9XLpdil7kCp_8ryv10IE.roa (hash: PrL6FnkTyQ9oBvc6R+GpyIsFkpSpBE166q8B3+Lb9OA=)
                          18: c_cnoepM2LH--kK93huc5LFtAGM.roa (hash: yf0pYWUbz2m2vPji81gl+P3qnDg6ATcYw6U5kY+PL4w=)
                          19: eVgfq36VRdQ-XOngEBCyoqvAPkI.roa (hash: +CVzb6eA5CbaFxZDloliVM6kDTn+ZGIaxtZcOdNZ3+w=)
                          20: hRBOq97yc0j5iPcr4gfDn3KJQyY.roa (hash: Xy2a29JOYTMfN3fVGwk03l3mrjFbTa3ns9VGhqHF9bU=)
                          21: n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa (hash: htARq6EX3Sp+hmNjOwGerogqy143+hwQcapChVQW1G8=)
                          22: oIIbuj2FHcGESIdrcnZdquUCmAw.roa (hash: IYUyIGj5ktu8xidYz/ZKK6vrmLnBBGD3Tn1bdnoOMEY=)
                          23: qa4AJBW86Czjko9NBPVz9ex8J2A.roa (hash: SNkj/qaNSHoPn945qKVgvTpVHs/z2BHkGTHMKbZzEpM=)
                          24: uaMX8OCYbSxBlbpnUENrRiTwaY0.roa (hash: AZg0zm8r8ZxZT3h6KfhtY2c5WsXYcVXS9ecTWb+mM/M=)
                          25: vBIP5l9f7rLOmxHW6g1Sox18wCU.roa (hash: RfnJ5Sz3BFVwYnK6CAz5XEIDTL6Yuu7HFULOecFrd74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:18:c9:79:b7:76:92:16:0c:d6:ac:18:58:fb:68:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
        Validity
            Not Before: Apr 27 04:00:46 2026 GMT
            Not After : Apr 28 04:00:46 2026 GMT
        Subject: CN=eaf3e11e55e41895879861ab970ac495a7246e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:6d:61:7d:00:14:ec:87:28:4e:f8:f9:68:
                    a8:cf:ba:5d:34:95:d3:c8:7c:c6:38:c9:91:bb:f6:
                    ee:79:11:ae:8f:e9:00:b9:5d:9a:9b:bf:e8:bf:ba:
                    b2:43:83:1a:20:9b:5a:fe:bb:f9:73:f6:f3:5f:31:
                    c7:fd:7e:b2:60:77:87:56:85:1f:db:61:72:66:e4:
                    cf:fc:bd:71:64:b5:a1:3f:9a:b8:85:cc:46:f8:56:
                    eb:19:e9:97:dd:ff:47:0e:ea:6b:27:b8:cc:b0:37:
                    00:29:c1:90:ec:11:a5:d4:24:35:c6:e3:7a:08:d0:
                    8d:a8:6f:f9:fd:73:72:8b:2c:da:d8:ae:3c:5e:24:
                    7e:55:de:0c:28:dc:15:5c:e6:e9:70:55:c4:e8:2a:
                    31:2a:b8:be:c3:c1:94:a2:c2:80:c2:a8:15:bf:e4:
                    7e:d4:53:06:e6:b9:6b:f3:ba:42:ed:47:53:69:01:
                    3f:10:77:6b:b9:47:ea:33:0f:a4:4c:5e:55:d5:e1:
                    3b:cf:c3:95:23:ed:dd:45:86:38:fc:d5:eb:38:ce:
                    54:41:b7:7c:f4:bc:5a:88:f8:c0:83:86:03:ce:2e:
                    b6:83:ee:63:dc:3a:4e:96:14:26:f8:a7:dc:72:11:
                    69:f1:0b:97:03:6d:81:25:f4:38:d4:96:c9:cb:0d:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:E1:1E:55:E4:18:95:87:98:61:AB:97:0A:C4:95:A7:24:6E:12
            X509v3 Authority Key Identifier:
                keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:bd:2f:a9:c8:47:08:c9:68:cc:d9:24:1d:9a:5b:ed:a6:
         c7:06:6e:13:b8:5d:a7:1d:c3:24:57:37:cc:fa:51:56:91:5a:
         17:da:aa:e7:9f:1a:4a:42:0e:39:8c:47:d9:34:bc:ee:b5:9b:
         f6:89:04:9f:4d:6f:43:02:0d:40:60:49:5d:fe:a2:b0:8a:c7:
         cb:31:bf:87:c9:40:e3:b4:53:5b:97:3f:1a:12:97:10:1e:38:
         91:d8:15:ac:63:16:2d:67:3d:67:95:d7:c4:e7:8d:85:f1:55:
         a0:ea:99:26:a3:a3:12:24:95:f9:42:2e:da:18:96:9f:a5:9a:
         5e:1e:29:c7:4d:3d:38:27:b6:1d:b1:50:30:29:89:9b:a1:ca:
         09:78:a2:73:9e:4e:67:ad:cc:ec:85:90:46:e2:e1:ac:48:d9:
         2b:d5:0c:bb:33:00:df:20:51:6f:da:cc:87:08:e9:ac:b7:5f:
         91:dd:d5:ab:b8:51:4a:fb:43:6c:1f:b0:50:76:6a:81:7d:bf:
         43:4a:ad:e8:ab:0c:11:dc:fa:b9:78:cb:3a:02:6e:1f:f1:ee:
         99:b6:1f:2d:4a:53:78:bb:92:19:15:a3:53:bc:0d:3c:71:49:
         b5:39:d7:2d:58:d8:d6:4d:79:cf:24:37:7d:c3:4a:69:42:0b:
         1f:1b:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:27 2026 by rpki-client