Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
File:                     c8adBFg1AMXvgRNoMSN1k-C7hs4.mft (raw, json)
Hash identifier:          5DW1BLw45ekbOJrjbS68bUu4TKPAdzdA4A8X2gD9ii0=
Subject key identifier:   26:98:C8:FA:DC:F3:8E:98:F5:7A:BF:59:EE:13:A0:A4:39:98:9A:19
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019DB32258E2C1DD1B05EBFADABE362E8C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
Manifest number:          17D9
Signing time:             Wed 22 Apr 2026 03:01:05 +0000
Manifest this update:     Wed 22 Apr 2026 03:01:05 +0000
Manifest next update:     Thu 23 Apr 2026 03:01:05 +0000
Files and hashes:         1: 8rt3dNF1Y-UD8pslNNECjOgnA8M.roa (hash: HTf1rOzS+Uk4sV5A/XyKRNzC8UFpKCauz1q4F0X0Hbs=)
                          2: 9LWJR2We5UNR7Cghi_bhxu2hbrY.roa (hash: jvw7c9J3PzjDWbINNPneqLQ5M3uAcSm7AvEU2gk66OQ=)
                          3: BOy8bjeQqnx_uV0jutEMNXR_WPo.roa (hash: 70vK5SKBAtveQ1NtI1ZYPVa3PkWIvV39eB9naTN+Scs=)
                          4: BoiSOiReGPVFpaCDNopU0mejeCQ.roa (hash: 0tmjyfqR/wWKsdfVfBknQh+f8N7AXW4sMVDk/ZH0HQw=)
                          5: CHO44I77w6VJL2zUa_ZJ10zZ9ss.roa (hash: HsjNONuC8AMl+Rb5jGemSs1a+5XI6RVmsEVzIB2O0GE=)
                          6: DEoshG7eFPeY0S4yiXHA0qmeYz4.roa (hash: /yw5l05SyglUs5cn26JsT7BxKWTQinjgne8eANoGKSI=)
                          7: H2CZmJ8TDDqCgA3UVKEHT5Ab9kE.roa (hash: T+a/89d5cshzqqSDb6PeIMfbHVvttHGT8MXGuBRaCIo=)
                          8: I-GjkQ_hqVjvNgwm_hRHJom0auY.roa (hash: mQ7Bxf1OJGwo25bULYXidE7+dzB23OlvOXV8iAAJoSs=)
                          9: N9fOb5o_lEC84F_KqcX-cFrp5vc.roa (hash: EFcD7czYRge4Jz7yZcyL00HN/fp+QSX09dQR2RLa4Ws=)
                          10: PNkKw2xJH8Do6hBPz76HNUSe_0c.roa (hash: ZRWM9d4kjtShN3wXm5ejMvvbYNTiLa0407wdRrmMin4=)
                          11: UmkrjjPaHaPikKI8Z3Nj8SyWcLk.roa (hash: TvN33x275X/FmjCbENZwqGJ9bae0mAfGge9ECd0RS+w=)
                          12: V28H0ZfckG6mvV8fgEWARHQ005Q.roa (hash: a7hGbUrG8AhoVOElPdPYhppzpINkuZLIOxOAlEQmwD4=)
                          13: XkgtF5TJXyTSJIWtLmqXy1umma0.roa (hash: 6DX8XaBTIwdbkM7giwExjG/pLuL/Ylj36OiOnK70kBc=)
                          14: ZwfYtQdpPsN9KHpPY5fXnHwXUYg.roa (hash: 2C5kdsdsC9MylZkl1qPNwxfNrw/IRAEIjKuvYWD7gp0=)
                          15: bftxVTMBqmZ6jPfVxW6kFOFKymo.roa (hash: uHX6W7OLzeKUzqa71O/+0xZStq8/3p0C2HUdy8v01Ak=)
                          16: c8adBFg1AMXvgRNoMSN1k-C7hs4.crl (hash: L0QKYd8FKQW8Ns8l9cpAD3pX7JrTpOed0i0V219J6zI=)
                          17: d1u-Dzyr_t0RmBShLjl4edCmUcs.roa (hash: lNOhFh7Zl1UrYDhugl2dxLEKvoqzQdXOk76Xwkj1T+g=)
                          18: h7j_XeidAY79jAhSX0ZS8eKKhNg.roa (hash: 0lP7/+qCZQ2USC/4n0jZyparf6g2b1/fasoIlkULaUU=)
                          19: jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa (hash: K0akq9Iq9DZmiNN1Axy2fJVUiCY4NzycyW1Nu6gD96Q=)
                          20: mAZN186AZNftU_Zg2CXS4zTpCt4.roa (hash: dTLe+Ec800fz9ppzyI+ChHfdMm/9zY/t5BE66vhSZbs=)
                          21: oCbAeYqdQHysgnvekIPnmC9jZA8.roa (hash: tT/00eXln6mQVEeggw5rLSVO3yyyNvI7r5tRv7ldnxc=)
                          22: se-Qem5rJr8oCbujcy6SXQimEMI.roa (hash: 2C2enc9vSbe6rKeL+ulj+b8i2Ke0SbcuF5nYArYI8Rc=)
                          23: u385ri2O2FA0gs-a8Bv1qP66Iag.roa (hash: irHgjUHRkkYaiRFdrgPZK/IkaqPzLXY5DRUnkCoUmLY=)
                          24: vQV03iV3rdbTa3cqwOLtMBcLIHs.roa (hash: JF/KUD14AZw4Baz3TB98zDXIAFH0m6LYZz9MIpkz9Bs=)
                          25: x2nu8-2ccqjHsn1Ou3xyH7-cq8s.roa (hash: VvtZkNuoab+ENXcc3Od+jJPAmDYauKnKrGrmB70oZj8=)
                          26: xt2hck0iNiJOY_MIM20wT5NCLGo.roa (hash: //y/D2+vgTBgPbt/2pbGmTN0KjJEuqOi0kceT5bVYPs=)
                          27: yXyl6rmr2OG4ysFVc6BBs7WvTX4.roa (hash: 4toGGVNx2ljsjTVCORql5iR1nnetEL/SsCRf34jeAvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b3:22:58:e2:c1:dd:1b:05:eb:fa:da:be:36:2e:8c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Apr 22 03:01:05 2026 GMT
            Not After : Apr 23 03:01:05 2026 GMT
        Subject: CN=2698c8fadcf38e98f57abf59ee13a0a439989a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:d9:b0:b1:5f:c8:de:db:07:1e:63:5b:73:
                    d9:c0:48:18:fc:07:da:6b:1c:e3:50:53:16:48:50:
                    7a:bb:52:bb:08:fe:9f:b4:97:4f:23:40:c4:2e:dc:
                    6c:1c:d3:b6:83:ae:14:7d:3e:e2:9c:53:81:48:44:
                    9d:4f:48:92:45:82:cc:a9:b3:f9:44:e8:9d:68:27:
                    99:37:e1:84:1f:14:34:3e:17:71:6e:6d:f7:83:a9:
                    cb:ff:6d:d5:06:ff:ce:17:0a:b0:89:94:36:39:a4:
                    f7:1b:24:d9:aa:02:7b:69:f4:e6:8a:59:04:25:cc:
                    eb:cb:d4:13:df:be:34:7f:2e:5c:7f:d3:11:78:c7:
                    38:13:fb:4e:18:47:c9:31:8a:f7:c0:74:c1:92:23:
                    84:01:26:81:69:27:10:a6:c4:03:0a:ec:43:05:98:
                    0c:6a:55:ed:2c:1d:51:46:de:56:c5:67:da:22:c4:
                    5c:6c:0d:95:c5:11:2d:84:f0:11:1e:93:67:76:5a:
                    38:62:a9:50:d2:bf:b7:de:64:88:aa:7e:fa:d9:1b:
                    74:37:d1:4a:e9:c8:51:12:e3:e8:7f:36:40:1c:51:
                    4f:a5:79:38:8a:3f:a6:25:37:c3:0f:11:eb:bd:1b:
                    28:7f:37:4a:48:30:8a:92:be:7f:9e:9e:94:54:04:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:98:C8:FA:DC:F3:8E:98:F5:7A:BF:59:EE:13:A0:A4:39:98:9A:19
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:70:f1:fc:76:8b:cf:98:c9:63:15:ff:75:3d:d6:5a:f9:93:
         9c:84:6c:7d:e9:4f:a4:70:17:52:5f:f9:6f:bb:61:9c:b7:32:
         4a:da:28:ed:67:9d:be:a7:d9:48:7c:ac:e2:0e:fd:8f:73:3b:
         90:ca:e4:77:0a:7a:96:a8:18:ba:33:0b:2c:89:9d:5f:86:89:
         bf:26:cd:a8:29:1e:e1:34:36:00:33:3e:74:73:e6:7d:89:87:
         49:1f:b0:8f:6c:c6:cf:94:d1:c1:e8:7b:02:27:39:b9:df:68:
         5e:69:09:4f:d9:27:84:75:53:97:79:da:64:f7:a7:77:e1:97:
         f8:83:cb:91:55:43:fb:93:ed:dd:24:ee:db:4e:1e:da:b3:5d:
         d0:2a:9c:bf:a0:8f:f4:4c:a3:e7:cb:90:ef:51:4d:9e:80:d8:
         78:d1:03:4d:f7:da:2c:51:2f:a7:e9:4c:14:5d:e1:5f:90:91:
         a4:0c:97:58:62:10:6d:7e:54:46:60:66:93:f7:dd:6e:f3:4d:
         3e:3b:f8:89:c7:8c:e7:51:25:16:e6:b2:b1:8c:80:8b:78:69:
         78:1f:26:53:19:3f:74:00:b8:ae:af:38:ac:00:f2:9e:9e:04:
         b6:76:30:a9:f3:50:77:ec:36:29:eb:9b:98:37:54:e3:55:88:
         fd:f5:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:11:58 2026 by rpki-client