Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          CuwN9uDPw2IwPtQ+fyLd4UZnj2oigrBL/kaA6QRYRD8=
Subject key identifier:   00:F6:EF:9B:EC:22:B3:6C:67:DB:88:AE:AD:F9:1B:A1:3B:6A:E8:1A
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019DCC071CC6C506ACE6C7964D6EBFE6C572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          15D5
Signing time:             Sun 26 Apr 2026 23:01:51 +0000
Manifest this update:     Sun 26 Apr 2026 23:01:51 +0000
Manifest next update:     Mon 27 Apr 2026 23:01:51 +0000
Files and hashes:         1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=)
                          2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: BZIHZfwzOH+k2EuFXbcTMcX1LN8bON6D3RZFQrzmkio=)
                          3: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=)
                          4: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=)
                          5: CiNhwzJsM6ZFV5GCT0q6BXhT6DI.roa (hash: KWZXDRfpaCL2QK5Ff1vICptorEtdR6f4RpWBfQJGxXA=)
                          6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=)
                          7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=)
                          8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=)
                          9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=)
                          10: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=)
                          11: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=)
                          12: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=)
                          13: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=)
                          14: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=)
                          15: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=)
                          16: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=)
                          17: pwt_ioJbMxlvLIPCon7PXpWskZU.roa (hash: zcwi8wS4gYFNgtFK2T8uPDXbVbH+F1vwepDSAScp8GU=)
                          18: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=)
                          19: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=)
                          20: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:07:1c:c6:c5:06:ac:e6:c7:96:4d:6e:bf:e6:c5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Apr 26 23:01:51 2026 GMT
            Not After : Apr 27 23:01:51 2026 GMT
        Subject: CN=00f6ef9bec22b36c67db88aeadf91ba13b6ae81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:48:46:ae:ed:cf:aa:a5:e4:63:32:61:d9:
                    41:ca:17:2d:6c:c1:c1:a3:81:f6:d2:7f:84:08:68:
                    de:f3:f5:3a:09:52:d3:45:8e:25:b6:0b:70:7d:21:
                    d6:d8:90:d2:48:7d:e0:b0:24:6d:fd:57:73:12:0d:
                    82:e0:b2:4c:6c:86:dd:dd:92:1b:14:1e:5b:19:75:
                    88:26:9c:f3:fa:aa:17:53:e5:a6:f0:12:16:b8:76:
                    87:24:d4:ab:ef:cb:82:db:43:2d:ed:ff:36:71:95:
                    58:c5:4d:44:e8:e2:24:64:27:83:6b:a3:9c:b9:ac:
                    6a:52:5d:4e:ca:99:32:8f:7e:0f:f8:d8:49:e1:3d:
                    fc:62:7b:e3:79:0e:a8:b1:46:a5:80:78:fc:04:e9:
                    b2:e1:82:55:77:37:56:2e:ce:17:d0:2b:e1:1d:ff:
                    ed:72:11:c6:01:45:35:f3:f0:17:2f:b7:a4:ca:c5:
                    6b:e0:aa:a0:39:53:40:d3:49:c9:15:be:ba:02:5b:
                    0c:36:89:12:47:3c:95:f3:78:bc:74:36:60:2f:ff:
                    37:39:aa:84:ef:b6:1c:ee:95:59:09:ed:30:63:b8:
                    c2:86:c7:60:64:36:41:0b:f1:ad:be:61:b1:98:46:
                    16:61:97:a0:c2:42:b5:5e:89:74:f4:fe:c6:be:d5:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:EF:9B:EC:22:B3:6C:67:DB:88:AE:AD:F9:1B:A1:3B:6A:E8:1A
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:80:df:60:bc:28:53:c5:31:40:64:9b:8e:b9:bb:44:5f:a7:
         1c:ed:ea:27:37:d8:de:92:a4:b4:71:b0:c7:a8:bc:41:89:e8:
         11:fe:c3:28:c8:38:9d:c8:3a:0f:47:8c:4a:9a:17:dc:fe:de:
         de:34:2b:47:3b:56:fe:a0:f2:3a:e5:df:5f:1d:46:8d:da:be:
         ad:fb:3a:ab:ca:ce:65:28:cc:98:5d:f4:77:c4:c3:58:65:84:
         67:6b:33:63:9b:95:53:74:dc:15:68:01:85:c4:8c:66:6b:c5:
         0c:15:af:a1:a2:7e:4e:8f:05:a8:6e:15:6c:e7:de:37:d2:18:
         b2:bc:f8:59:ba:d2:cb:83:c0:a1:0b:cb:cd:a8:54:18:c4:69:
         3b:eb:af:17:74:05:14:af:ee:df:9d:ba:3d:c2:47:e8:89:ce:
         6d:a9:da:c7:18:eb:43:07:54:e7:ea:f2:1e:01:46:21:e6:97:
         e5:eb:c5:a2:7f:21:39:c1:13:88:5a:99:c2:0a:fe:5e:ab:cf:
         6c:75:32:ba:3a:32:ca:02:3a:1e:94:8e:7e:a3:72:42:81:a8:
         a8:6f:dd:9d:e9:70:2d:fe:5c:a4:e1:d6:fc:ac:f7:93:f7:bd:
         de:4f:54:05:d4:d1:39:cd:93:df:24:0c:55:e7:b7:95:df:5e:
         fc:9e:b7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MBxzGxQas5seWTW6/5sVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjYwNDI2MjMwMTUxWhcNMjYwNDI3MjMwMTUxWjAzMTEwLwYDVQQD
EygwMGY2ZWY5YmVjMjJiMzZjNjdkYjg4YWVhZGY5MWJhMTNiNmFlODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWNIRq7tz6ql5GMyYdlByhctbMHB
o4H20n+ECGje8/U6CVLTRY4ltgtwfSHW2JDSSH3gsCRt/VdzEg2C4LJMbIbd3ZIb
FB5bGXWIJpzz+qoXU+Wm8BIWuHaHJNSr78uC20Mt7f82cZVYxU1E6OIkZCeDa6Oc
uaxqUl1Oypkyj34P+NhJ4T38YnvjeQ6osUalgHj8BOmy4YJVdzdWLs4X0CvhHf/t
chHGAUU18/AXL7ekysVr4KqgOVNA00nJFb66AlsMNokSRzyV83i8dDZgL/83OaqE
77Yc7pVZCe0wY7jChsdgZDZBC/GtvmGxmEYWYZegwkK1Xol09P7GvtXyzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD275vsIrNsZ9uIrq35G6E7augaMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4DfYLwo
U8UxQGSbjrm7RF+nHO3qJzfY3pKktHGwx6i8QYnoEf7DKMg4ncg6D0eMSpoX3P7e
3jQrRztW/qDyOuXfXx1Gjdq+rfs6q8rOZSjMmF30d8TDWGWEZ2szY5uVU3TcFWgB
hcSMZmvFDBWvoaJ+To8FqG4VbOfeN9IYsrz4WbrSy4PAoQvLzahUGMRpO+uvF3QF
FK/u3526PcJH6InObanaxxjrQwdU5+ryHgFGIeaX5evFon8hOcETiFqZwgr+XqvP
bHUyujoyygI6HpSOfqNyQoGoqG/dnelwLf5cpOHW/Kz3k/e93k9UBdTROc2T3yQM
Vee3ld9e/J638Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 05:55:04 2026 by rpki-client