Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File:                     UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier:          5Q2SheyEGj55gP4OW2piuPzBwRnTSDjACmQyS1hCqqs=
Subject key identifier:   99:19:5B:00:6A:A3:A7:EE:31:B9:18:E3:70:2A:92:F4:C6:76:FA:8B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       019DA8674E6867ECE5612AAF2FB42CD7D192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number:          156C
Signing time:             Mon 20 Apr 2026 01:00:35 +0000
Manifest this update:     Mon 20 Apr 2026 01:00:35 +0000
Manifest next update:     Tue 21 Apr 2026 01:00:35 +0000
Files and hashes:         1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=)
                          2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=)
                          3: 6TspkPEtNeMIOxgYCbpvq18PMC0.roa (hash: 8bo4csWweD7RMiWr3h9S7/8r7y82pLqLqFjVLFXUIaQ=)
                          4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=)
                          5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=)
                          6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=)
                          7: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=)
                          8: DpYS7lRrillfu9K51nCIniTqNmY.roa (hash: UkQwWYpXy7K/OwHNGaKai/nAfoWeLWXYqtRRe4F8mQE=)
                          9: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=)
                          10: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=)
                          11: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=)
                          12: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=)
                          13: OvQCPbU7xaexN6KNG98gTxBlPZ8.roa (hash: B+7vMRgtRKWIYiyObWJnR9TPAurOqhLva4J/rVDJQSQ=)
                          14: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=)
                          15: RSlrMSXsYQqD5_X3qdeusHBjTV8.roa (hash: rm68bm8MwPNoLfEzVKTjK5KhGKZaNdAMKVt15UbeVB8=)
                          16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: DN/vIW4zhBQBfYtvxk1wsDWdxbwUpjnDHt+UlESzp8U=)
                          17: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=)
                          18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=)
                          19: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=)
                          20: bToR6umJYInit4YmCjsW758Knfc.roa (hash: 37BGec+qdTp+UnRV0AER+V8DA3MB50nkwTf82xMXRJw=)
                          21: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=)
                          22: fbSoKsXWu3vMu37siMiY-wAiEWk.roa (hash: o2jpBV54JiENtAI5H5hS+86ge/vbtsQ6m03B1UpGa2w=)
                          23: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=)
                          24: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=)
                          25: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=)
                          26: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=)
                          27: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a8:67:4e:68:67:ec:e5:61:2a:af:2f:b4:2c:d7:d1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Apr 20 01:00:35 2026 GMT
            Not After : Apr 21 01:00:35 2026 GMT
        Subject: CN=99195b006aa3a7ee31b918e3702a92f4c676fa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:62:e2:8a:09:cd:c4:ff:56:ab:7b:32:92:
                    a1:53:73:fc:3d:f7:e0:d5:2d:35:9c:3d:74:2f:f1:
                    1e:49:bc:d3:da:f3:8b:84:1a:1b:63:77:c0:09:6f:
                    42:f1:98:6a:5a:fb:fb:44:b3:e6:c2:41:11:12:c3:
                    5a:a4:9c:57:d7:ae:2a:f9:3a:43:ef:ff:df:f6:00:
                    b8:c2:ee:4e:2a:12:29:9b:db:49:d4:4a:a4:ea:cc:
                    eb:d3:84:e9:b1:3b:70:d7:22:f7:cf:fe:1d:a8:4b:
                    16:4c:dd:24:85:55:34:3b:b2:66:41:6a:cb:44:a5:
                    ae:dc:6c:46:30:fa:23:9f:80:d7:e8:48:79:ff:86:
                    f4:3d:0c:dc:89:c1:83:1d:81:9f:7a:7f:6a:69:dd:
                    ec:91:d5:0e:26:de:75:d6:b5:22:a6:b3:ab:70:c4:
                    ff:bc:43:fc:ab:31:65:fd:6f:1b:0b:7a:f4:af:27:
                    d7:d5:5e:5d:36:38:97:4c:26:34:b7:6a:04:5f:8f:
                    86:71:f2:7b:b4:b6:e6:4a:14:dc:07:8e:36:0f:a6:
                    ce:1f:9d:0d:fb:a7:21:6e:f0:a5:32:12:40:30:2f:
                    87:7a:a0:fc:3a:a6:9d:c9:95:28:d9:e3:89:fe:cb:
                    bf:45:72:22:c6:18:3a:84:1f:5b:fa:6a:50:d0:68:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:19:5B:00:6A:A3:A7:EE:31:B9:18:E3:70:2A:92:F4:C6:76:FA:8B
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e2:42:9a:61:4e:35:7b:e3:ab:78:ad:74:13:90:88:b2:ed:
         7a:46:74:80:93:35:ed:fa:2f:60:63:1a:a3:d0:95:a2:93:75:
         26:05:b4:eb:eb:c6:49:19:96:44:54:56:91:5b:ae:e9:bb:f8:
         47:c9:19:ec:d5:85:0f:4e:6b:fb:df:9d:ae:f4:b6:d1:d2:02:
         d4:b3:34:de:a5:be:e2:3e:57:fc:dc:f3:4f:01:ac:45:78:f5:
         79:c6:bb:7c:20:85:fd:2b:fd:30:e0:09:e7:c2:bf:72:46:53:
         89:64:d7:4b:a6:5b:7c:27:b9:12:72:2b:6e:be:eb:2a:49:cb:
         4a:7e:b1:fa:b8:62:89:90:57:7d:5f:ee:2d:d5:08:7f:3c:fa:
         26:ca:f9:de:37:c7:36:61:83:4c:04:59:cc:75:2c:d9:67:12:
         88:45:95:a3:b5:39:0d:42:93:03:53:6e:2c:b1:b8:67:95:be:
         9b:17:42:b0:4b:63:0d:3b:f2:86:13:dd:8d:9e:bf:ee:6f:97:
         c4:c5:5b:30:97:fb:2f:db:97:08:e6:62:48:d1:65:f2:7b:e0:
         da:8a:83:2a:fb:6c:7f:fe:83:9f:1e:a6:16:0a:69:b1:32:fb:
         d6:a9:df:07:f9:22:4b:bb:84:29:68:21:56:56:49:f6:3f:40:
         b6:92:7a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:51:31 2026 by rpki-client