Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
File:                     mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft (raw, json)
Hash identifier:          0H5BiF5fhGdcNWM68Q2ne46fxhUVcWjLeoY9hovylmo=
Subject key identifier:   05:12:E6:E4:2D:27:65:32:FD:8D:5C:14:F8:D2:46:8C:43:50:66:77
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       019DADC5016F436296457FA361C0732959F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
Manifest number:          17E0
Signing time:             Tue 21 Apr 2026 02:01:02 +0000
Manifest this update:     Tue 21 Apr 2026 02:01:02 +0000
Manifest next update:     Wed 22 Apr 2026 02:01:02 +0000
Files and hashes:         1: 1--UUXOdRKB18yPKkRgefGGQahe4.roa (hash: U8qM/SfyUWcN2YzIKFQLLy28wcf0V2Gyw3yRSpXQfDs=)
                          2: 3eqnljvrSMNuISjjLY9Ah3n7lpw.roa (hash: nhZRSFOUbhyO77HJ5X/HRDhNGRKiiH9otVn6vKi9IGk=)
                          3: 6cMY_wwfDBFZqJjsHcZukKirL_o.roa (hash: 2gKcXa2cxU04e9mLa1hFcBV7zIEQPtIHwZLA+taApIM=)
                          4: A7IkVO09ID54ECBWjSGN6xZkv3w.roa (hash: xpNT0SSXWLaGEdPvdNCSdWhmDfb4P590sGl9980gv/o=)
                          5: BfJnrLEnL98XNsJzTgaLMLePYBM.roa (hash: IfJYAAE+k+2AREMYBR3fX7Q4H0VbZm7wobJ2dutpdGE=)
                          6: E6tHexMZ4Ig_Ep66qZIqgSd5Tpw.roa (hash: z4yZx6M+tyF5ynApm7/OTC4vvmherSg0WahA4OzG2R0=)
                          7: Ix4OiCGslJTscGc7-wU3M6G7S8U.roa (hash: AJvqjWQ+n7SY8hOMaDOiq7u0d8v8pOsglCAwmm0/6rk=)
                          8: LXVPkCMf-iOFqNeNwJv-_y-HEIY.roa (hash: TXoOFAB4hy2rDjbzbaqZU52p8hSQADOQOZNnNWq9BsY=)
                          9: Lmb8EqeT0HKrCmiUMDZIX3xNIzo.roa (hash: 7dt+AfZ3KHHDElYbVbB8Rs6kEOXzo9dSbGaBaxM/G64=)
                          10: NaBUGfPE6ZpQqgNe0fVHXX2ttFU.roa (hash: QOgoYeeecJtQIX3F2kdiQ/oejeqbLfA86BJ9ifa3zK4=)
                          11: Rvnwl7w5Dgsw1_5yXc_64WS9U80.roa (hash: /gBpda8eLmlLY7s/iIaYeJeeNXd2iIqgX2oGlXRSLFA=)
                          12: SEcs47zxHnaub6zbYmRibja7-0k.roa (hash: BgJ+K19PECi1+Y95OlHSkHUKKE4El4/40Gb09u3R0LE=)
                          13: WteyplI9VbEj_k0baJL_kanP5wg.roa (hash: eJHXRODGT84UEP05+CFtsRHNqBl4pdX8D+nlKwWrVTg=)
                          14: YoHnwB1fQFI1z0oaVF_z_ohySj4.roa (hash: uUXh/9vL/xooeIE1/c3j14hg4rTw+h/24MzWFWruEC0=)
                          15: ZoQmAe_ekcmJoC_KGcjLcbAJ5jQ.roa (hash: DdxIR6ckOuPF+fI9X8c8JIls1xKk5y8gkDS3GOw2iwU=)
                          16: ZxCNaN2oCAj1zfm6MKAl_SwvThk.roa (hash: joh18htJEALCa1g8h0KmNv7UwhZIpXL5oySizewM/yE=)
                          17: bMOYWjyUgntzPLso_EdxSEsEB1Q.roa (hash: JAwYwF7NktOh794bBozXZ1zf0fbukTDjrNBjkjh/PrQ=)
                          18: e1cAyM2TJIkd7H54W6Y9ZDTXR90.roa (hash: 2UOGrZ62RhFS7lpGz9yJNfexfRhxQJMWFrqgW5i8YXY=)
                          19: frcMsmbURM5svgFCiC96KPy_qUg.roa (hash: gQ6iQxM2JB5Q1G49ysgrForIuJxpTNC/TAZbRlINdCQ=)
                          20: hQIImJotzOyoDddNbMK0fz3Mq0I.roa (hash: DzqbADKRid3XT0ekhDtVYyi9jfxSFrJlX0rdbSlS8uw=)
                          21: ht30x3jhiz1hvZBV0VMbayzRKK4.roa (hash: O7pA/LYdDet2mxhEU5yYj+mrcu9O7mMkBzOJ959zmpc=)
                          22: iGxz-Xn1SdPPw42vilhkPwqnJ1E.roa (hash: 2VaJ9V6ISr3oRV3RjWRWjl8vZMcqlKQJOnXDvZit6Xg=)
                          23: it1iOuAOKeXKmZIgToCf68n57w0.roa (hash: PtM4IHnPEqjx+3ydhNCTWVj93Z6VSaFfKrbJS1q5aFE=)
                          24: k25_Fq7y4ygw2ZmFCaEDdOwp27Q.roa (hash: 5YUBR0zlHUBOhC74KEO29UgfVGHrrAn4JD0Jg9eVaXU=)
                          25: kYX_14rTxL4xk_NZhk8k3x1RpPY.roa (hash: hIp7xTmDixOZEkJJdKZKoSgBQ4C+ryapmLzFskIk9N8=)
                          26: kpkqvA_Xs9EcqApyHzp7tlExj0Q.roa (hash: HiByjGNn5l5Ayxi7ApGDAAte/z6p/oe1Cl+MV2VLGIQ=)
                          27: m0DeYX-V30V4UwEbU2h1QWuix-M.roa (hash: afELCdA77FWcxkzJwWM67yB5DsfgJQZxu41FpASk5LU=)
                          28: m8_x6eGxxmnm18GfDkKHFQGwuD0.roa (hash: fWokT3tKg6M2rh7ZEVaUnntTBCY1Lio+yn/dnJhltnc=)
                          29: mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl (hash: +y7Uw0dQoRVAK94NNklJkgv+BC3bQxVxRko0ALzCr6g=)
                          30: nX8N-jyzrfI0oSko9GdsGIf_Il0.roa (hash: 3r0BbCyBSb5W/wVBb7Z3/O6CcnOLpW4A7av6ZVyo3Ws=)
                          31: nvsiCvqT5RzcAhW47sr9Q1eBNTs.roa (hash: mR9RDQOnPhD1rKeYnjs64YxN+2EZXez9v8fgyHyG2dc=)
                          32: oEVcoH2yqjn-c4quMfYczR1JQQc.roa (hash: F2x7BkiTG/sqjoVF8BRwSb8/XQvk6LyjPMB3HpxWYuo=)
                          33: qyU0MJIzv-ff-Bxj5-q7jAWykPw.roa (hash: mKzVuMDbcXakj4yC/plNfj2k2aXpZSe3ypz4iPD8zzE=)
                          34: rWU09La0ZRdUn3ElpKqCWL_72ic.roa (hash: itM9arYZ4jMy94tCOGNHFyzJuN0j8XPGJF5U+UUykUs=)
                          35: tYY3v3FYeEJG-TBamWZejszkIgw.roa (hash: juOXizKulXrce5HNFN8Wotujs/vL+cqOkraeCjdfCq0=)
                          36: xGHWOsQ-oGvGbTeCgIS3fXd5JaA.roa (hash: VwXX+SRRTPtXinf9q3qUgR4Eg1IQPx2UwBKPXO+6CZs=)
                          37: xuyiv3EHF703LKy9rAkMAE90jUo.roa (hash: 1pk1j6aPc2psBVBbmgIDL+KUR8rqhlTyc2gxnnOOV0M=)
                          38: z_lpifJDC9mzdEW2V0IuiirqyzA.roa (hash: J9PX/y8kQxjkrDt00JapIPnAxSPCtUvaIOKcsd3yVd0=)
                          39: zqFJzqQhbsCKgM02Bkb2tNnrNM0.roa (hash: XMp5SjVpjY/msyHSH88BllRZDyTq06yzgyFKTDbnap4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ad:c5:01:6f:43:62:96:45:7f:a3:61:c0:73:29:59:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Apr 21 02:01:02 2026 GMT
            Not After : Apr 22 02:01:02 2026 GMT
        Subject: CN=0512e6e42d276532fd8d5c14f8d2468c43506677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:15:60:6b:01:eb:41:b9:8a:ed:51:69:49:
                    ed:67:4a:a5:93:6a:e4:bf:60:c6:1e:ba:0b:48:ae:
                    c5:38:ca:46:4a:9c:e4:99:db:56:75:e6:b0:37:e1:
                    8c:1c:e7:cd:5e:48:95:2c:50:0d:f9:53:31:fb:f9:
                    ae:a1:79:36:de:fa:80:17:77:66:b7:f4:99:ac:5b:
                    a3:9c:6b:d7:a9:31:6c:ef:ac:f6:33:0d:42:5a:fb:
                    86:da:cc:62:36:c3:82:8a:3b:6f:0d:4c:1f:0b:ce:
                    9a:18:ad:37:81:ab:ff:b2:94:e2:2e:9a:5c:e1:5e:
                    4a:10:22:b3:fd:75:bb:41:25:d9:b6:85:af:36:d6:
                    0d:1b:85:18:b7:d1:61:60:df:4c:01:40:af:00:7c:
                    3e:a3:95:8d:ac:52:23:b4:00:57:f8:00:66:bf:a9:
                    d2:92:8e:93:0e:b2:83:16:e9:5d:80:44:86:6a:0b:
                    95:2b:bd:80:b9:45:ea:14:fc:10:7d:b9:8d:47:6d:
                    39:3b:5c:0a:7f:ff:cb:85:f2:d7:fd:53:dc:a3:9d:
                    74:f1:9e:ff:13:39:40:2b:c2:73:3f:11:66:c5:c3:
                    66:c2:2b:88:05:7a:9a:d7:15:9b:50:e3:e5:0b:40:
                    ae:13:c1:eb:31:30:b3:58:2f:19:24:a5:0c:e9:82:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:12:E6:E4:2D:27:65:32:FD:8D:5C:14:F8:D2:46:8C:43:50:66:77
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8a:81:34:14:da:5a:63:26:e7:7b:43:ef:0a:8e:93:f0:2a:
         b8:14:23:ad:ed:6e:67:82:2a:64:55:00:7e:41:d8:0b:00:ac:
         bd:48:7c:fc:11:01:d4:5d:72:94:33:b9:18:c7:33:38:1f:aa:
         fd:39:e7:f1:07:c0:f9:d1:ab:07:c9:79:86:ca:bd:dc:d1:0e:
         f0:41:e4:e2:dc:48:2e:2c:37:2d:fe:5b:c7:1a:13:20:78:b3:
         ea:5c:cd:66:d8:e9:e3:fd:b6:bb:ad:a5:61:6a:dc:42:00:c7:
         a9:92:75:9f:8b:ee:7c:91:8e:37:3e:ab:14:cc:fc:8c:f9:7c:
         a0:75:65:eb:d4:42:f7:a7:60:2c:06:17:d4:f0:e2:1a:5e:47:
         61:8d:26:4d:cb:e5:33:b1:1d:2d:d9:b2:a3:0b:0b:d1:62:1f:
         95:7d:a5:93:eb:95:7a:51:76:5e:4d:cf:48:c5:63:b4:94:b9:
         b8:88:f5:c6:c4:d9:b5:2e:fb:c7:88:ae:7e:f4:d6:26:c1:ce:
         45:ef:7b:aa:f9:04:82:26:9e:99:b8:91:e3:1f:79:a8:e1:f4:
         c5:60:3e:e1:1e:37:5b:91:5b:78:a0:f0:cb:8b:aa:71:76:4b:
         42:38:33:23:2f:71:18:51:d3:53:a0:41:4a:3d:47:e4:78:b0:
         5f:ee:bf:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2txQFvQ2KWRX+jYcBzKVnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwNDIxMDIwMTAyWhcNMjYwNDIyMDIwMTAyWjAzMTEwLwYDVQQD
EygwNTEyZTZlNDJkMjc2NTMyZmQ4ZDVjMTRmOGQyNDY4YzQzNTA2Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA334VYGsB60G5iu1RaUntZ0qlk2rk
v2DGHroLSK7FOMpGSpzkmdtWdeawN+GMHOfNXkiVLFAN+VMx+/muoXk23vqAF3dm
t/SZrFujnGvXqTFs76z2Mw1CWvuG2sxiNsOCijtvDUwfC86aGK03gav/spTiLppc
4V5KECKz/XW7QSXZtoWvNtYNG4UYt9FhYN9MAUCvAHw+o5WNrFIjtABX+ABmv6nS
ko6TDrKDFuldgESGaguVK72AuUXqFPwQfbmNR205O1wKf//LhfLX/VPco5108Z7/
EzlAK8JzPxFmxcNmwiuIBXqa1xWbUOPlC0CuE8HrMTCzWC8ZJKUM6YJY1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUS5uQtJ2Uy/Y1cFPjSRoxDUGZ3MB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoqBNBTa
WmMm53tD7wqOk/AquBQjre1uZ4IqZFUAfkHYCwCsvUh8/BEB1F1ylDO5GMczOB+q
/Tnn8QfA+dGrB8l5hsq93NEO8EHk4txILiw3Lf5bxxoTIHiz6lzNZtjp4/22u62l
YWrcQgDHqZJ1n4vufJGONz6rFMz8jPl8oHVl69RC96dgLAYX1PDiGl5HYY0mTcvl
M7EdLdmyowsL0WIflX2lk+uVelF2Xk3PSMVjtJS5uIj1xsTZtS77x4iufvTWJsHO
Re97qvkEgiaembiR4x95qOH0xWA+4R43W5FbeKDwy4uqcXZLQjgzIy9xGFHTU6BB
Sj1H5HiwX+6/Gw==
-----END CERTIFICATE-----
Generated at Tue Apr 21 10:45:21 2026 by rpki-client