Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
File:                     iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json)
Hash identifier:          ePhttQuIQXKYdGS/qeJ/ZI67Pa2vF2TmMgbZ00vlNe4=
Subject key identifier:   5A:64:AB:E0:91:1A:ED:56:29:BE:11:54:B5:93:0B:3D:B7:04:3E:3F
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       019DA6B021B43E360F52DCE14255E220C4A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
Manifest number:          18F6
Signing time:             Sun 19 Apr 2026 17:00:53 +0000
Manifest this update:     Sun 19 Apr 2026 17:00:53 +0000
Manifest next update:     Mon 20 Apr 2026 17:00:53 +0000
Files and hashes:         1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=)
                          2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=)
                          3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=)
                          4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=)
                          5: 3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa (hash: H82bfxWmiHNRJ1H7gR7ROjYOhxBbx/o5pU/AxcHnke8=)
                          6: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=)
                          7: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=)
                          8: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=)
                          9: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=)
                          10: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=)
                          11: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=)
                          12: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=)
                          13: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=)
                          14: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=)
                          15: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=)
                          16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: gP25OdxYBD43ukxLDOSTipRWNp/aUBzv/RipSX4cPrQ=)
                          17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=)
                          18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=)
                          19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a6:b0:21:b4:3e:36:0f:52:dc:e1:42:55:e2:20:c4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Apr 19 17:00:53 2026 GMT
            Not After : Apr 20 17:00:53 2026 GMT
        Subject: CN=5a64abe0911aed5629be1154b5930b3db7043e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:96:94:92:33:24:3b:77:cc:5e:ac:fd:cf:
                    f9:6b:7d:6c:76:da:8d:ee:4e:23:f7:82:5c:3c:27:
                    7c:6f:a9:3a:97:1a:23:19:db:72:0a:f1:05:f4:e6:
                    1c:fa:ed:13:e3:c1:6a:16:aa:30:85:79:83:36:dd:
                    4f:1d:a2:53:9e:cd:6a:fa:10:94:d9:a4:3f:ea:8c:
                    dc:4d:26:87:a1:80:03:f5:2b:75:04:94:ed:a2:9b:
                    62:3e:11:2d:6a:bc:fb:8d:e3:13:1d:a3:4f:ea:c1:
                    6b:0f:be:a5:1a:08:6b:fa:1b:93:63:c7:42:f0:90:
                    44:2e:df:98:37:8f:48:77:5e:9b:dd:da:e4:0c:f2:
                    91:cd:d8:9b:31:f1:a7:70:79:0b:ac:1a:2d:05:43:
                    a9:b7:91:d6:92:59:10:55:73:e0:e8:55:f5:7d:84:
                    c3:df:86:30:94:8a:51:b4:ab:f5:4d:d3:91:a9:02:
                    5e:0a:b6:f2:16:b7:f4:59:04:1e:0a:18:8f:77:40:
                    29:57:4e:56:dc:44:ea:22:c1:15:c5:85:7b:6d:fb:
                    da:ad:5b:7d:9c:0a:61:22:28:6f:df:39:7e:52:17:
                    2b:e3:e2:7c:d4:bc:52:04:21:04:03:0e:17:94:1b:
                    2d:2f:97:57:4f:fd:f4:c9:4b:09:9f:04:f4:63:48:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:64:AB:E0:91:1A:ED:56:29:BE:11:54:B5:93:0B:3D:B7:04:3E:3F
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:91:ad:c4:98:6d:51:c7:23:64:17:9d:2d:ac:cf:91:0a:
         52:4b:b6:1c:af:65:86:15:aa:c1:fa:1f:7e:19:15:82:4d:af:
         44:ba:17:14:29:9f:42:03:5d:57:50:77:11:50:0b:9f:1c:a1:
         cd:a4:c7:f4:2e:39:c3:6a:fc:3f:5b:48:11:db:9d:6a:63:27:
         b1:20:5e:0a:65:59:3c:26:92:88:53:3e:7d:23:87:76:db:55:
         be:4d:0e:6d:ef:c0:b9:24:14:6e:f2:6f:48:13:c9:4c:40:d8:
         9d:69:16:76:74:d4:ab:9b:bb:7c:f6:94:cf:87:4f:0e:9d:7b:
         50:c5:87:f3:13:cf:6d:6d:ff:7f:cb:74:8c:5b:bb:ce:bb:1e:
         5b:56:f1:55:60:0c:4c:e3:14:77:c8:d0:b6:09:60:d4:7c:ea:
         4d:99:a5:6b:b3:4c:3f:cd:35:ac:3b:55:87:d3:1f:fe:f9:2c:
         8c:bb:d1:c3:8a:ab:81:fd:ab:8b:59:6d:73:e5:95:b8:84:11:
         e5:21:7a:d1:08:25:f4:7d:d9:d8:90:8a:bb:89:f0:51:40:23:
         bf:c3:c6:60:b6:16:0b:2a:b6:20:a0:d8:ac:6b:36:fa:39:81:
         8e:8a:4b:e7:e1:b0:5e:d6:5a:20:a9:f5:36:2b:90:57:1b:8a:
         24:8b:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:18 2026 by rpki-client