Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          qEeRUrRnRm6o1OvTNAX6hqGChOEZf2nB0xe4JxLbHnc=
Subject key identifier:   0E:7D:BF:20:CA:FE:41:F8:AA:AF:54:D3:26:3A:14:CD:A6:27:C1:3B
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       019DB1A178A767601B0A8961B53D5B8703A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          190C
Signing time:             Tue 21 Apr 2026 20:00:42 +0000
Manifest this update:     Tue 21 Apr 2026 20:00:42 +0000
Manifest next update:     Wed 22 Apr 2026 20:00:42 +0000
Files and hashes:         1: 1es75LXX8EZ01C80XE67R3PQMtU.roa (hash: UJ4bcXqfnb31k16ESQyvCulDeQy/+beKenH/t1j9EJM=)
                          2: 49CPBIX4EaMxdJyd3xYYFltrGoU.roa (hash: Ex0IMnX8TLJnPKPjJx+ZpKeCCZJl+8I3fLOLd7VY8do=)
                          3: B4c6N2MizK8adC1jI5nCnuasVyQ.roa (hash: vkr5AztZBkpOoQXyn9yDEdd3WF22aoRXCoS3gCShBNw=)
                          4: FghCADOw6Oojunwkfe8vTiF9pLI.roa (hash: uykM6bNYozSsy+cKMaytW2YENRFibcbs2I4eVEk75Gk=)
                          5: GQlxS2-2c8Qqe3N2rZ2XpSodHkw.roa (hash: MKwXwqWUiaVeAn/7/iSA8hVPROI+Jn0tqGxs7u6XJ/4=)
                          6: LIZxOBTNmVM3vK9tCq5zRPUgpTo.roa (hash: 3Qw4C14Da/T7HDkcqKq+3FVfcQywVkmcZXawejrDHl0=)
                          7: MBFdqFLJcxVtOw-JJT6-6DPU4C4.roa (hash: 0y4l4Mi7xbMuhzKukzW/37uq5/WSDRhRc3TFpkmhncA=)
                          8: QZ671pc0AHWGiJKaiCeRWUkvi0w.roa (hash: 1qOoSO1VGJunDj9On7JrnmSQh5tAX58/tLnNsRng6ZQ=)
                          9: VF8nseeKFoW1-sQCI4yEAMSh33c.roa (hash: HnMrjXoUoap5Tw8ndP9ztKvIUxRuUHw+ETqNCU31IdI=)
                          10: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: 9av4O6JY+embK1+jvHy+gSLTT/LTqOZZKbQvfSUKcoU=)
                          11: b_sx65YpI1QLBEZRuGQGmmnaTnw.roa (hash: 3Il+MWS8tFj2nno2HoqXDI14YSxua6h0CGOf+Z3Kedo=)
                          12: hRhUcbu7KZRSvnkz4CO8BJLWuH4.roa (hash: uMFCDSPSzYAtqFKyN2Vv8Q5iqVvmZBowV1Ty5ZpBTEM=)
                          13: n9uTPhO6cyPpEsvXZmxf53LLc6s.roa (hash: utrFwmDJ3+vrF1blihW69IE07AwIQ9/EzS4iV75TiRU=)
                          14: qLoILvDOqzV9K9GBxZphZks1tnU.roa (hash: /QV9XEO/ZKJk65wl5vLGWrkhUEz4TcA1M/MvWA4ViTU=)
                          15: uu4RDU_XEe_o-xgd8iKxunLsRRk.roa (hash: WSVYyW0VsPbEh7XSoefAa4skPLabJDbbiTqZspuhAAA=)
                          16: wdgVJPyUsZ9-HGk_FoAzT19gu6w.roa (hash: 2mneISDicPClVA1+3cQM33ETuCO6n5ZeA2u5SBMbUwU=)
                          17: yTlDO6dWszXiBm3hduGVp38lBa4.roa (hash: SegOwCCa/6cPlpQ15U35o2VjRPgrt2I4STP15j5SvSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b1:a1:78:a7:67:60:1b:0a:89:61:b5:3d:5b:87:03:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Apr 21 20:00:42 2026 GMT
            Not After : Apr 22 20:00:42 2026 GMT
        Subject: CN=0e7dbf20cafe41f8aaaf54d3263a14cda627c13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:ac:a2:b2:48:4f:69:e5:1c:d9:35:34:b8:
                    44:30:c4:7a:be:64:63:67:54:87:e6:37:fc:02:bf:
                    45:e3:d3:52:09:5c:d5:07:8b:c3:39:63:22:cd:b9:
                    62:aa:de:71:e9:35:8c:3e:c9:9f:2f:e5:1f:e7:2b:
                    1a:9e:12:90:0a:d0:24:56:90:89:27:be:33:3b:b3:
                    1a:fe:e4:fb:e9:28:0e:23:fe:1e:88:7b:2f:53:77:
                    ba:d8:a8:b1:e0:16:72:91:de:8d:5e:9e:a3:26:e2:
                    c0:9f:c3:c4:59:7a:82:f0:d8:8f:c6:68:dd:29:db:
                    ba:7b:3e:37:33:f4:15:cf:f4:72:c2:6e:8b:33:13:
                    75:ae:a6:49:4a:13:ad:aa:e9:0a:0a:da:9b:74:87:
                    8e:d3:c8:4c:a1:d2:ab:19:09:8f:48:09:08:eb:7d:
                    ad:8f:7d:e5:8c:d1:f7:76:8d:61:8a:b9:38:09:29:
                    a1:31:81:0c:f9:da:a9:1e:66:b0:42:b4:25:65:48:
                    76:84:00:bd:c1:59:34:29:31:31:3c:19:cc:87:74:
                    6d:bb:73:e7:18:4a:cd:b5:f2:70:15:ca:fa:93:34:
                    96:8d:c4:48:53:3f:eb:37:6e:79:7d:9d:47:ec:fc:
                    b7:50:4b:c6:89:23:e9:02:62:7c:bc:2a:ee:7e:fc:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7D:BF:20:CA:FE:41:F8:AA:AF:54:D3:26:3A:14:CD:A6:27:C1:3B
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:09:a0:a6:33:46:05:4c:00:c2:61:ce:f4:56:36:60:a5:55:
         5b:e3:07:87:cb:ef:ad:d2:1f:59:49:0d:26:ca:77:e4:2c:5c:
         05:6c:89:48:11:db:aa:fb:95:97:6f:2a:1d:ea:85:20:ba:82:
         d9:20:81:94:4f:4a:35:f5:08:3a:10:e7:9b:fe:68:2b:b4:96:
         d4:6f:15:1b:a0:51:60:21:8b:e5:59:da:aa:23:5c:e7:df:29:
         b2:85:f2:d9:46:e0:a7:e3:b0:ce:e0:97:72:0f:1e:5e:ba:cd:
         87:8c:ca:c2:18:2f:5e:b4:62:de:21:b4:23:86:1f:4e:b1:c5:
         ae:d9:30:48:1f:55:1c:36:dc:14:6a:4c:50:b5:08:cd:17:d3:
         b0:a8:d0:b2:78:ce:67:e6:17:c8:9c:b7:a9:83:04:49:c4:d6:
         40:da:bf:a0:b0:1b:be:98:b5:c6:00:bd:5d:68:9b:a0:7f:0d:
         9f:07:bb:94:d1:c4:da:4e:49:48:21:44:2b:bd:22:5b:a7:1f:
         46:c3:86:99:2e:5d:27:f8:4a:cd:9d:5d:81:4b:55:31:e3:d9:
         cc:16:cc:e1:23:65:5b:90:ca:51:67:c5:be:4c:12:c1:9f:92:
         fd:a5:77:df:51:f3:7d:0b:c8:06:8f:05:c7:b4:c4:8f:fd:3e:
         a1:8f:57:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xoXinZ2AbColhtT1bhwOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjYwNDIxMjAwMDQyWhcNMjYwNDIyMjAwMDQyWjAzMTEwLwYDVQQD
EygwZTdkYmYyMGNhZmU0MWY4YWFhZjU0ZDMyNjNhMTRjZGE2MjdjMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmKsorJIT2nlHNk1NLhEMMR6vmRj
Z1SH5jf8Ar9F49NSCVzVB4vDOWMizbliqt5x6TWMPsmfL+Uf5ysanhKQCtAkVpCJ
J74zO7Ma/uT76SgOI/4eiHsvU3e62Kix4BZykd6NXp6jJuLAn8PEWXqC8NiPxmjd
Kdu6ez43M/QVz/Rywm6LMxN1rqZJShOtqukKCtqbdIeO08hModKrGQmPSAkI632t
j33ljNH3do1hirk4CSmhMYEM+dqpHmawQrQlZUh2hAC9wVk0KTExPBnMh3Rtu3Pn
GErNtfJwFcr6kzSWjcRIUz/rN255fZ1H7Py3UEvGiSPpAmJ8vCrufvyCAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA59vyDK/kH4qq9U0yY6FM2mJ8E7MB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQmgpjNG
BUwAwmHO9FY2YKVVW+MHh8vvrdIfWUkNJsp35CxcBWyJSBHbqvuVl28qHeqFILqC
2SCBlE9KNfUIOhDnm/5oK7SW1G8VG6BRYCGL5VnaqiNc598psoXy2Ubgp+OwzuCX
cg8eXrrNh4zKwhgvXrRi3iG0I4YfTrHFrtkwSB9VHDbcFGpMULUIzRfTsKjQsnjO
Z+YXyJy3qYMEScTWQNq/oLAbvpi1xgC9XWiboH8Nnwe7lNHE2k5JSCFEK70iW6cf
RsOGmS5dJ/hKzZ1dgUtVMePZzBbM4SNlW5DKUWfFvkwSwZ+S/aV331HzfQvIBo8F
x7TEj/0+oY9X9w==
-----END CERTIFICATE-----
Generated at Wed Apr 22 03:02:15 2026 by rpki-client