Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
File:                     pTmv66zomajuC7T4u0R1_iR6FSg.mft (raw, json)
Hash identifier:          SqpH7Mdksk5INDnAKD2qLFEgnxUP9iHShVEJKXqBxqM=
Subject key identifier:   75:B1:71:B0:1D:CC:E5:E7:CC:0F:36:5E:36:4D:95:F5:58:66:32:5C
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Certificate issuer:       /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial:       019DCDF594B240A7391FFBBADD083C8C9B35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
Manifest number:          1934
Signing time:             Mon 27 Apr 2026 08:01:56 +0000
Manifest this update:     Mon 27 Apr 2026 08:01:56 +0000
Manifest next update:     Tue 28 Apr 2026 08:01:56 +0000
Files and hashes:         1: 1jhK6FlZl5hM4Uobk038Kp_qa2Y.roa (hash: 2WoESQPg3Jk+4IXMvTcODAWwogRB6i9rlzqgm3VM7XA=)
                          2: 6-YwzCAmAdgyKEPBYShhBhIBhnM.roa (hash: +DLsJ42mB+5gKA0FbQs1ttHoaiTNZPqKV5tU9tKbma4=)
                          3: 7QOSRsUzrv4e8s57xIcce-8fjU0.roa (hash: 83cvs1mHf1GPrHopw/PC9gQSK7E7muVUfyT6Z0+/0KU=)
                          4: FK7M33h8PneimbbBwlzPtI7UGjQ.roa (hash: aNLGPczAzOxwP3MWrRV4AkrfcQXY2Y+aKOj5IkNZYfg=)
                          5: HViU2CXDqAwYiLEOmVT0HEWWNl8.roa (hash: xrKcPKMyy5kb4XlM4DV6lK8CCEfrwg3shA95PHYdoCw=)
                          6: JD8IpoXqXzIC8vLaBRunpCPEQvU.roa (hash: JEXzDk48fkmrTJN1DyidrVTKmnWcqnbDgWMrAk17GAI=)
                          7: NFcs3_vtK2cMwEx0AZMkAW4Wi_M.roa (hash: mVHm7YHZkLILOmiDQhdBTk3AqxRLfPypCLO+wiwEnVg=)
                          8: PVtDvoKDWPbDlmCkVv9Kze2YHLE.roa (hash: sDMl3vZ84jZNLAogEKfEV5Ug2moZQP95H4adBk9Pww0=)
                          9: SvjLT9N3HGM9eSSMC1QfjoPljVw.roa (hash: 4bE4rSoHbeIVjc0OGc/qn01kC7j9LOwfYNpRhaA8hro=)
                          10: T65RDGY7jOSroAgPwqBJYPhLD_4.roa (hash: /88fIxUYsWhK6bpbqKiBO/jzJhKYSoaaRWLN0hL9Kf0=)
                          11: U9vArcy0YpOB_iqMTyKbcwrLvRA.roa (hash: +u8ovOiThImcmMsR0qMCOkY1PV8NHXu8hOW71e14rb8=)
                          12: VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa (hash: vfRsWV2tt63Zp2pKLXvqyz9hs71tP2T2P3y8dqOioMc=)
                          13: VmHJNehSaSjf_RY01rDz-LkKqEo.roa (hash: 2JsMgajit3cNjj0KEde3MujRcO1NdJZZV45oREiLK88=)
                          14: WB4MjGibZE7UPAKBKppI7mbtykg.roa (hash: uodhr4uLTH3uG2YqIrdc4iaiOv2sYyQ2pQYPb//WMSk=)
                          15: X1AMpALcXqAbWZTLQdVQDPCOaVQ.roa (hash: SigMHPmGWyXozax3MHPbaNs+MpPR14/hwXpyD5vkCnc=)
                          16: amjmGxaJIouWoE6HVWZtWe57bQM.roa (hash: p//cUb//yTdGGVAL3sZJcljerwKjDHHVgX3jo/mQg5I=)
                          17: lKxpnXLQNARfqONah81rGmtc86w.roa (hash: eC37YRWZVPznB3X4x4RduQ4G+eGvRdFwA+NZ4sUf8CE=)
                          18: pTmv66zomajuC7T4u0R1_iR6FSg.crl (hash: uA3pqYwswiFi5Ynm7H6+1tnfA3GodKfjYb2h6rJ1ta8=)
                          19: ra6EqpGuSemlaKju63quMj14eoA.roa (hash: 5jJE3CEsbl598h/zzOY8ksmm5yxY/xcgelTxwbVAr2U=)
                          20: rtWyT0ydn4TbKiT2WPrlr1PKiuk.roa (hash: RNjhWF0V8FlD5sEBigcfklZ1Ji8x5NrJUS7A6XO++0E=)
                          21: wVhr9fNebt7ao_oIsxRkpb1DYtU.roa (hash: Zq5CrZMlYnhfNYKFoV1YjUW/LX6JKwqLSmhoDdjZDyE=)
                          22: x07d8_VNSnI0evnxPpkn3SJAFY4.roa (hash: gSJPBpsS4DxCFyTg3NHyQead7Z1IOT6crgOT0rvN994=)
                          23: xN-iH4H9eMR0rlQa8wdhMf2l7I4.roa (hash: 1fRI0jfHRH/HGV3lsPgwdyCxPSzmPkzersGfoqaooYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:f5:94:b2:40:a7:39:1f:fb:ba:dd:08:3c:8c:9b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
        Validity
            Not Before: Apr 27 08:01:56 2026 GMT
            Not After : Apr 28 08:01:56 2026 GMT
        Subject: CN=75b171b01dcce5e7cc0f365e364d95f55866325c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:48:98:60:36:e9:18:d0:7a:f1:6a:a6:27:
                    33:80:cf:8e:07:03:c0:a6:3f:49:9f:a7:85:1f:cc:
                    6c:10:c3:68:57:8d:79:85:f5:24:27:17:74:03:17:
                    79:a4:91:28:58:51:3c:4c:ef:6d:d0:17:a4:d0:8d:
                    7b:83:b9:a0:be:a8:60:9c:13:b9:3f:9a:46:0a:d7:
                    db:83:0b:13:b2:3a:20:7e:fd:66:b2:c4:c2:4d:47:
                    e0:15:c4:a6:47:89:2f:cc:df:f6:4e:b6:05:29:a6:
                    bc:d6:73:df:5f:76:98:c3:cf:86:d7:1f:7c:26:04:
                    e5:7c:55:7b:fa:b4:c8:9a:a1:78:47:2f:36:5d:aa:
                    64:e0:e2:ef:6d:9a:6a:36:e9:80:46:67:18:72:96:
                    dc:91:d6:b4:58:4f:5c:dc:af:67:8c:6a:c6:d5:73:
                    fe:20:31:87:61:31:a8:2a:93:7d:a1:a4:77:9d:75:
                    3e:85:3e:53:9c:55:95:29:62:32:18:2f:9f:2a:f8:
                    1e:fb:28:47:a4:e9:b6:6f:a3:1b:8d:96:45:e7:ff:
                    3c:a5:d8:da:ab:4b:80:21:cf:6f:dd:cd:da:99:b4:
                    bf:18:89:83:d0:fa:29:6a:d3:59:ba:fb:2a:20:1a:
                    f1:6d:08:11:5f:a4:12:66:f9:c7:b9:ae:89:67:04:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B1:71:B0:1D:CC:E5:E7:CC:0F:36:5E:36:4D:95:F5:58:66:32:5C
            X509v3 Authority Key Identifier:
                keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:f3:12:0a:0d:d9:8a:1d:10:dd:78:5a:85:b6:ae:4e:d8:80:
         40:cd:94:db:bb:8a:55:5f:cb:19:0b:2f:d4:fe:b4:35:60:81:
         ee:0d:ff:de:47:8f:40:ce:cb:47:ea:ca:b7:2d:3d:b3:7e:0e:
         84:4f:19:83:ed:7d:f8:f4:94:1d:c2:f4:d3:f8:7b:47:99:4c:
         02:ba:a3:fc:3b:ed:59:28:b7:a0:58:24:21:92:e8:83:d8:54:
         de:06:21:b4:45:8a:3a:a4:f6:c0:0d:81:9b:39:cc:9e:4d:27:
         cf:20:76:62:87:c9:d4:49:42:29:e7:9b:69:a7:0a:7a:61:dd:
         ad:f7:b5:96:49:4c:50:7d:40:03:bf:c3:19:31:cf:f7:d3:48:
         5f:f8:9d:b7:b2:60:48:ad:b9:1d:49:cc:54:f1:33:c5:95:70:
         57:20:72:58:5a:a6:51:c9:cb:95:da:80:0e:c2:7d:1e:e0:ae:
         23:a2:31:d7:10:3f:47:78:9f:16:d7:ca:30:45:46:80:00:ba:
         6b:d7:15:ad:ca:fd:af:cb:6b:33:32:e6:33:0b:1e:7c:a4:04:
         f7:03:52:ea:28:f9:6e:29:ec:ac:cb:b3:12:3a:99:6b:7b:d5:
         86:ea:45:b0:22:3c:3e:74:3b:85:c9:7d:49:bc:e9:a1:1e:36:
         fc:55:33:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9ZSyQKc5H/u63Qg8jJs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjYwNDI3MDgwMTU2WhcNMjYwNDI4MDgwMTU2WjAzMTEwLwYDVQQD
Eyg3NWIxNzFiMDFkY2NlNWU3Y2MwZjM2NWUzNjRkOTVmNTU4NjYzMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZImGA26RjQevFqpiczgM+OBwPA
pj9Jn6eFH8xsEMNoV415hfUkJxd0Axd5pJEoWFE8TO9t0Bek0I17g7mgvqhgnBO5
P5pGCtfbgwsTsjogfv1mssTCTUfgFcSmR4kvzN/2TrYFKaa81nPfX3aYw8+G1x98
JgTlfFV7+rTImqF4Ry82Xapk4OLvbZpqNumARmcYcpbckda0WE9c3K9njGrG1XP+
IDGHYTGoKpN9oaR3nXU+hT5TnFWVKWIyGC+fKvge+yhHpOm2b6MbjZZF5/88pdja
q0uAIc9v3c3ambS/GImD0PopatNZuvsqIBrxbQgRX6QSZvnHua6JZwSgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWxcbAdzOXnzA82XjZNlfVYZjJcMB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2PMSCg3Z
ih0Q3XhahbauTtiAQM2U27uKVV/LGQsv1P60NWCB7g3/3kePQM7LR+rKty09s34O
hE8Zg+19+PSUHcL00/h7R5lMArqj/DvtWSi3oFgkIZLog9hU3gYhtEWKOqT2wA2B
mznMnk0nzyB2YofJ1ElCKeebaacKemHdrfe1lklMUH1AA7/DGTHP99NIX/idt7Jg
SK25HUnMVPEzxZVwVyByWFqmUcnLldqADsJ9HuCuI6Ix1xA/R3ifFtfKMEVGgAC6
a9cVrcr9r8trMzLmMwsefKQE9wNS6ij5binsrMuzEjqZa3vVhupFsCI8PnQ7hcl9
SbzpoR42/FUz5w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:17 2026 by rpki-client