Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File:                     j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier:          0L8c/NM6yB+4g9QntMzK3ByGGLlw12lzU0g86BIH5Eg=
Subject key identifier:   78:46:13:20:01:3D:98:8C:47:05:0A:EA:80:74:44:9B:C5:E3:4F:B4
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       019DE52244F405951525D87C3497B3E2AB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number:          147A
Signing time:             Fri 01 May 2026 20:02:01 +0000
Manifest this update:     Fri 01 May 2026 20:02:01 +0000
Manifest next update:     Sat 02 May 2026 20:02:01 +0000
Files and hashes:         1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
                          2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
                          3: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (hash: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ=)
                          4: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
                          5: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
                          6: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
                          7: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
                          8: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
                          9: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (hash: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=)
                          10: OY4yu33kRTHXIDvS06hD5g3ZU1I.roa (hash: MO3P51CXchSgKn4Y84H+Th8p16bdsxGFK2fbYdmXi5Y=)
                          11: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
                          12: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (hash: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=)
                          13: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
                          14: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
                          15: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
                          16: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: P/+5BqY3ytfhXsTrwDkgsjNkjxznkvVvNBEXrTSPB/o=)
                          17: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
                          18: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
                          19: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
                          20: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
                          21: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e5:22:44:f4:05:95:15:25:d8:7c:34:97:b3:e2:ab:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: May  1 20:02:01 2026 GMT
            Not After : May  2 20:02:01 2026 GMT
        Subject: CN=78461320013d988c47050aea8074449bc5e34fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:e6:cb:3c:99:e2:a3:eb:5b:b5:8a:70:66:
                    ef:5a:0a:65:ab:4b:08:59:11:d6:0e:7e:7b:75:e9:
                    7f:66:86:1f:e8:b8:50:8f:3c:86:d3:00:62:07:d5:
                    cd:d7:64:2f:22:67:6b:62:43:ad:53:ac:00:b8:86:
                    a9:9d:37:ee:85:60:0e:62:b7:a9:02:3c:ff:d3:c0:
                    b0:ce:be:a5:98:58:cd:aa:1c:ae:08:50:6f:e9:90:
                    b5:3b:e8:69:64:74:e3:ca:61:61:06:63:39:ee:e0:
                    94:63:60:ef:36:3f:1b:a7:da:43:b1:65:27:e4:6d:
                    a6:1a:0f:50:a6:4e:1e:4b:96:eb:16:d7:c9:d3:c3:
                    be:fc:d5:d6:47:a2:0f:a0:77:3e:84:31:8b:74:70:
                    9c:da:60:1e:75:b2:02:7d:bf:ca:ce:44:80:dc:2c:
                    cd:60:7e:c6:9a:7d:1d:b4:d5:68:78:4d:eb:2b:d4:
                    3c:35:ad:62:0a:d2:85:5b:d7:f0:66:15:aa:4d:4c:
                    c0:92:ec:71:6f:f5:e4:29:17:f3:95:50:08:bf:6a:
                    69:c3:9b:5a:16:18:1a:35:7b:af:96:ac:28:f6:90:
                    ce:46:50:ec:37:8f:7d:a3:a9:dd:47:80:65:82:59:
                    64:e7:19:8b:44:09:bd:8f:4c:95:e3:01:2a:d9:df:
                    11:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:46:13:20:01:3D:98:8C:47:05:0A:EA:80:74:44:9B:C5:E3:4F:B4
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:93:fa:3b:c0:01:ec:94:bd:3a:00:2c:76:3a:66:27:57:
         39:e4:23:9b:66:7a:9b:ac:bb:aa:f5:83:f7:84:ba:dc:81:be:
         1b:04:2a:9d:ac:1d:21:f9:bc:ab:19:8c:dc:21:b4:40:c4:17:
         dc:0f:a3:5a:b0:a2:cb:f1:ef:54:da:ed:0e:82:2e:b8:ac:18:
         ff:6f:76:53:04:ec:c4:6e:59:39:b0:66:69:7b:6f:9c:69:c2:
         5e:ac:67:1a:5a:8f:89:5b:03:11:cc:cc:66:20:83:0c:4a:4e:
         40:4a:7a:e1:26:4e:1c:7c:5c:b0:88:cb:74:d5:8c:20:21:d9:
         7f:89:a7:29:77:72:90:e1:14:79:01:04:54:48:fc:bb:9b:51:
         1e:e0:32:fb:98:0a:f4:af:cf:eb:c1:3f:e1:ed:18:c0:c1:72:
         2b:4d:62:45:60:00:85:9f:18:68:c6:ec:3d:01:ae:56:ee:a8:
         ad:ad:76:02:b1:11:fe:fc:bc:54:12:3b:e6:b1:02:e2:9e:9b:
         cc:34:69:c1:b2:99:10:0d:01:3f:01:74:d2:65:2b:86:8b:38:
         63:48:4f:47:70:ef:23:5b:c8:68:14:ed:f1:3a:3f:e9:c7:55:
         3f:15:7c:a6:4f:71:81:cf:35:75:5e:52:7d:38:8a:54:84:27:
         cf:59:64:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3lIkT0BZUVJdh8NJez4qtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjYwNTAxMjAwMjAxWhcNMjYwNTAyMjAwMjAxWjAzMTEwLwYDVQQD
Eyg3ODQ2MTMyMDAxM2Q5ODhjNDcwNTBhZWE4MDc0NDQ5YmM1ZTM0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+HmyzyZ4qPrW7WKcGbvWgplq0sI
WRHWDn57del/ZoYf6LhQjzyG0wBiB9XN12QvImdrYkOtU6wAuIapnTfuhWAOYrep
Ajz/08Cwzr6lmFjNqhyuCFBv6ZC1O+hpZHTjymFhBmM57uCUY2DvNj8bp9pDsWUn
5G2mGg9Qpk4eS5brFtfJ08O+/NXWR6IPoHc+hDGLdHCc2mAedbICfb/KzkSA3CzN
YH7Gmn0dtNVoeE3rK9Q8Na1iCtKFW9fwZhWqTUzAkuxxb/XkKRfzlVAIv2ppw5ta
FhgaNXuvlqwo9pDORlDsN499o6ndR4Blgllk5xmLRAm9j0yV4wEq2d8RuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhGEyABPZiMRwUK6oB0RJvF40+0MB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqKT+jvA
AeyUvToALHY6ZidXOeQjm2Z6m6y7qvWD94S63IG+GwQqnawdIfm8qxmM3CG0QMQX
3A+jWrCiy/HvVNrtDoIuuKwY/292UwTsxG5ZObBmaXtvnGnCXqxnGlqPiVsDEczM
ZiCDDEpOQEp64SZOHHxcsIjLdNWMICHZf4mnKXdykOEUeQEEVEj8u5tRHuAy+5gK
9K/P68E/4e0YwMFyK01iRWAAhZ8YaMbsPQGuVu6ora12ArER/vy8VBI75rEC4p6b
zDRpwbKZEA0BPwF00mUrhos4Y0hPR3DvI1vIaBTt8To/6cdVPxV8pk9xgc81dV5S
fTiKVIQnz1lkNg==
-----END CERTIFICATE-----
Generated at Sat May 2 01:33:33 2026 by rpki-client