Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
File:                     E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft (raw, json)
Hash identifier:          qv777YDmgfJ65ozZ3TE/Krglx0/2EY3nBAgltpIq/cU=
Subject key identifier:   7C:00:41:86:64:B9:B6:45:01:AD:7C:26:FF:C7:35:EE:BE:6F:EC:86
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Certificate issuer:       /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial:       019DCD86B37170204BA9958B9C078788EC53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
Manifest number:          A8
Signing time:             Mon 27 Apr 2026 06:00:50 +0000
Manifest this update:     Mon 27 Apr 2026 06:00:50 +0000
Manifest next update:     Tue 28 Apr 2026 06:00:50 +0000
Files and hashes:         1: CYSDTEbN7HCPv6WiTf4vl9sTrPY.roa (hash: z82DlMwvfURdZOYsNEnqd/DqjQsx8SUcftkxrBVOKkI=)
                          2: DuR8R9YJWEDaCvnw-8235RrAPAI.roa (hash: nwr1wP+HSbTaiN0zlgVNEhTYrOWHjDVW/mSXRxlqdg0=)
                          3: E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl (hash: hbgF3sQ1GA1tK+Nb5gDuKE/95flJkwaiqzwmm+DUPwY=)
                          4: Gx_-pKDS4W4D41qyLJU2jBKgxHE.asa (hash: GPJjuHl/wOxygBr8M9LdkRIbbAaa1Ab0/4/w207xH9g=)
                          5: HVtjpFrYsNMiZMANtbtwZb7tXTA.roa (hash: RT0/NHuxEn3/LChxeNjl7pnDqmmNjeuWdurgtBY/1ac=)
                          6: JjobvDHzB_RdGlQHuakDY7g6qUc.roa (hash: lMc17XsqpF3q+RuSqmQMroyA9fOiD+xrXB77wQY0+oY=)
                          7: KoAxChCFkAeIK98qjbf3bksCgHg.roa (hash: GFujlbeBcjaBQBdj6uHIkxK5RA2RyoYqfL9mlDRfy0E=)
                          8: Nwdo9pCrD81ywh_gJmPjPhdaStc.roa (hash: CByN02Aqb3g+j+Q+mQ1Lee+5OIhmSlvoV3blLVBIyuw=)
                          9: Pjr8P4WxPjNWQYpDxrZZw8gQcac.roa (hash: hnkHYyW4iqL/9EC+ffrxQuiBvp6Sspix+g4e3XwjMN0=)
                          10: TMGy79dW2pXkye7BEHy8CMyor_w.roa (hash: 1GLCODVONP48lg8Ky3uS0bIOpPD9LaSttQUDyZyBj78=)
                          11: UnSYaDgDlq6mma-qSvxlxf3f7cY.roa (hash: Vq/fmGi7ZxgEu6+2GPpPORkHD4V173NnGLUxV5LVIwU=)
                          12: X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa (hash: OOv3o2LHWlvIdA+Zgu9PaIEfBk4ChhYVmLlz2Cwp33o=)
                          13: _d_dQloK01ZkSLtux-TTKEsYrEE.asa (hash: sspGTnJbSKKU9rh9o/EyW1U+z5UyGnPtDAK4MNHo/vE=)
                          14: hZr8-GHSaT1LVC0d0SUnsdKNWgk.roa (hash: wG/J0iawhu+Kl1JUrzlumoLnQM5wpIB/0XILiot9T/0=)
                          15: mvsrCDC-NqbWrnDx8KIZT31_F9w.roa (hash: 6La2GkWDdDzTNk/r06zzIsY5pdXU8koA2+wcTUWWsEc=)
                          16: oEXJmfilftDc5eLAiDDdhGooeOM.asa (hash: VMaKcmh6u+YdbkAXZopwkYC2wQOBV5z+0rVIgehqv7Q=)
                          17: sP9A4cnylfqxWlDpkBAm0CIqBFU.roa (hash: pWmUgGcf93vr+1FE5Mpw2z4+mxojC+Zrtg39SIpckEs=)
                          18: sRwrUFPu8IufvUSdc5VMbpkKMcw.roa (hash: lN69V7XtAFJGqTEtBBnFGAJOekVEyr0Idgtc+5393lw=)
                          19: v0ktEALprjuYyYztKF7oiuux4Yc.roa (hash: uoK2ToELcvQ/V62kgkj3wD/DyJ0aXYt2dIxjN0uwM8E=)
                          20: yNImWxuyQjHzmmv-3_EoOXHf-CU.roa (hash: +omRj5AvhzVWWvcblTxHnl95I2HJgpEVlK0ldmd1MWY=)
                          21: yY8I4l0MBr9vnTlmQUYn6NoYBgM.roa (hash: o+wuVfWOWZsZTQMjwMDsqTstb94f+lmkvMjkI7KxcD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:86:b3:71:70:20:4b:a9:95:8b:9c:07:87:88:ec:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
        Validity
            Not Before: Apr 27 06:00:50 2026 GMT
            Not After : Apr 28 06:00:50 2026 GMT
        Subject: CN=7c00418664b9b64501ad7c26ffc735eebe6fec86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ef:05:dc:7a:ed:a5:25:29:40:37:52:b9:9a:
                    d5:83:2d:77:84:1c:7f:54:04:77:e2:b1:32:8a:87:
                    84:46:f7:ff:89:4a:3e:1f:70:7c:b1:c0:99:9e:1b:
                    3d:b0:65:f7:27:98:92:bb:2f:31:bb:43:40:0d:f9:
                    5f:52:a3:5a:00:7b:e0:59:ea:92:73:f9:f3:0d:fd:
                    df:f7:5d:0f:13:7c:b7:43:19:65:44:27:ae:52:c7:
                    2c:90:0a:8c:f7:a6:07:b5:eb:96:20:d7:d5:fc:ad:
                    80:39:ea:14:b1:31:1a:4e:62:d2:d4:b9:1b:e3:02:
                    10:46:77:63:4b:a1:fb:25:6f:fe:84:d6:28:46:5b:
                    23:66:8a:15:6f:ee:f1:b7:ae:65:6f:44:47:c7:aa:
                    21:04:b6:c9:ad:21:1d:62:31:77:e6:e9:3d:2a:91:
                    b0:3e:0a:89:a5:f5:ab:ea:47:b0:ff:ed:30:bc:9e:
                    91:9c:52:80:6c:e3:35:78:e6:f6:14:e2:8b:b9:ae:
                    07:13:33:1b:92:b1:5b:cc:f6:39:f4:b3:e5:cb:9a:
                    a2:ae:a8:69:11:5d:41:e2:7d:80:a9:8c:d6:d1:a3:
                    15:2a:dc:ec:f6:fa:dc:34:22:fb:da:29:bf:82:4a:
                    55:ba:92:a0:97:b3:76:22:66:d9:08:21:5d:81:c2:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:00:41:86:64:B9:B6:45:01:AD:7C:26:FF:C7:35:EE:BE:6F:EC:86
            X509v3 Authority Key Identifier:
                keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:be:54:42:fd:5e:03:9f:d2:b6:6f:a2:03:bc:a0:d7:c1:c8:
         1a:12:fc:44:b8:a7:bf:b9:4c:06:d2:01:03:b9:37:25:38:7d:
         ce:bc:d1:ca:70:9b:30:8f:0c:a6:98:79:5d:46:8d:4a:2a:27:
         b8:48:0f:fd:7c:09:80:78:b7:4f:ab:e5:3d:68:4a:7d:4c:0f:
         24:0c:71:12:c7:f1:30:d0:57:e1:c5:67:4e:f0:91:d4:a7:18:
         ed:81:c5:98:b7:c5:2f:3f:69:5d:14:38:10:df:d5:a3:9a:c4:
         ee:75:e9:5d:2d:12:77:15:82:e8:2c:a7:eb:03:3c:40:65:b8:
         62:6f:52:de:8c:48:d1:23:0f:4e:fc:77:b4:d8:e5:1f:2b:05:
         fe:75:b3:7e:5d:c3:95:c6:cc:36:6f:59:7a:71:71:cf:2a:d1:
         01:f3:c7:3b:ba:b4:d7:1a:a2:3e:e2:aa:4f:6e:22:99:aa:6c:
         2f:ec:32:a7:1c:39:9b:3a:1a:45:31:25:c1:2d:32:0f:5a:02:
         6e:9e:94:59:f1:39:34:91:54:7f:31:36:6a:35:c3:e9:b4:0e:
         d6:12:2a:70:11:a4:67:7d:3d:2a:36:88:81:e3:fa:e7:50:46:
         6f:39:9d:61:ff:96:7d:b7:e3:e8:4c:ca:0b:bf:40:99:19:cf:
         8f:32:87:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NhrNxcCBLqZWLnAeHiOxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2U1NzA3NDQ0YTE2YzY4ZTFhMWM1MmFjNDkwOWQwYmRj
YTYyYWUwHhcNMjYwNDI3MDYwMDUwWhcNMjYwNDI4MDYwMDUwWjAzMTEwLwYDVQQD
Eyg3YzAwNDE4NjY0YjliNjQ1MDFhZDdjMjZmZmM3MzVlZWJlNmZlYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8e8F3HrtpSUpQDdSuZrVgy13hBx/
VAR34rEyioeERvf/iUo+H3B8scCZnhs9sGX3J5iSuy8xu0NADflfUqNaAHvgWeqS
c/nzDf3f910PE3y3QxllRCeuUscskAqM96YHteuWINfV/K2AOeoUsTEaTmLS1Lkb
4wIQRndjS6H7JW/+hNYoRlsjZooVb+7xt65lb0RHx6ohBLbJrSEdYjF35uk9KpGw
PgqJpfWr6kew/+0wvJ6RnFKAbOM1eOb2FOKLua4HEzMbkrFbzPY59LPly5qirqhp
EV1B4n2AqYzW0aMVKtzs9vrcNCL72im/gkpVupKgl7N2ImbZCCFdgcK+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwAQYZkubZFAa18Jv/HNe6+b+yGMB8GA1UdIwQY
MBaAFBN+VwdEShbGjhocUqxJCdC9ymKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYt
YzBkMjA3YzAyZDI3LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYtYzBkMjA3YzAyZDI3
LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvr5UQv1e
A5/Stm+iA7yg18HIGhL8RLinv7lMBtIBA7k3JTh9zrzRynCbMI8Mpph5XUaNSion
uEgP/XwJgHi3T6vlPWhKfUwPJAxxEsfxMNBX4cVnTvCR1KcY7YHFmLfFLz9pXRQ4
EN/Vo5rE7nXpXS0SdxWC6Cyn6wM8QGW4Ym9S3oxI0SMPTvx3tNjlHysF/nWzfl3D
lcbMNm9ZenFxzyrRAfPHO7q01xqiPuKqT24imapsL+wypxw5mzoaRTElwS0yD1oC
bp6UWfE5NJFUfzE2ajXD6bQO1hIqcBGkZ309KjaIgeP651BGbzmdYf+Wfbfj6EzK
C79AmRnPjzKH1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:01:36 2026 by rpki-client