Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          v2upSZdAl8Vg/Fka2HPBWphGcAGqou67G3bi+5EZ0Yw=
Subject key identifier:   3B:9C:A8:22:E4:2E:7C:81:C8:2F:AC:D6:12:9A:CF:FD:C7:9F:AE:65
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019CBF9696FB083E9950187E858ECB6181CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          18F0
Signing time:             Thu 05 Mar 2026 20:00:43 +0000
Manifest this update:     Thu 05 Mar 2026 20:00:43 +0000
Manifest next update:     Fri 06 Mar 2026 20:00:43 +0000
Files and hashes:         1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
                          2: 3DKyG4yqxD-RCxqPWmT7N7olh-A.roa (hash: PJ5W+9gaDI7CdrxxRKkNpvIJyqlsEgvjqhtTWlW7+xo=)
                          3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
                          4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
                          5: AQd6696DS58WSqKOJB3_PgGA6ww.roa (hash: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE=)
                          6: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
                          7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
                          8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
                          9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
                          10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
                          11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
                          12: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: waOPnFni9hAAyhpMr91A+G4uagCL/zjrxT1NKra4IoY=)
                          13: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
                          14: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
                          15: fEr16b1lvokT-7p2GF-BJ0nwjqw.roa (hash: 4kMeEbpMFnB2cA2N94f/QrIzzEsMpOa1QK/37ueLqzY=)
                          16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
                          17: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
                          18: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
                          19: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
                          20: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
                          21: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
                          22: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
                          23: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:96:96:fb:08:3e:99:50:18:7e:85:8e:cb:61:81:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Mar  5 20:00:43 2026 GMT
            Not After : Mar  6 20:00:43 2026 GMT
        Subject: CN=3b9ca822e42e7c81c82facd6129acffdc79fae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:fc:69:db:a4:02:5a:33:9e:25:a2:1c:a5:
                    b6:59:0b:3c:52:08:2c:56:af:f9:2b:95:5c:b1:3e:
                    cd:c0:6d:73:9e:19:0d:93:ab:b7:95:0d:ac:2f:c1:
                    6f:c6:c5:eb:3f:d1:7b:04:65:fe:f6:cc:2d:1e:ac:
                    2d:59:5c:a0:b5:95:78:e4:1e:55:1b:f3:e3:74:4f:
                    b6:9f:d9:76:2f:f5:90:a2:15:5d:ec:64:fb:d7:d4:
                    d2:b8:32:c0:c9:a3:fc:84:29:55:eb:b1:69:3a:9a:
                    49:89:b2:b5:88:bd:f9:6d:22:c5:fc:89:71:57:f9:
                    f6:16:6c:fd:e6:18:b2:4f:e9:65:de:68:85:67:bc:
                    48:2a:fa:3a:eb:5b:9a:31:fc:54:17:41:02:12:e0:
                    66:0b:0a:d4:f6:86:5d:cf:1b:70:24:e1:74:53:2b:
                    03:47:54:ed:fd:56:d7:91:70:35:ff:64:1b:89:e3:
                    d7:72:73:08:14:7d:8c:b8:a2:41:96:a6:a0:ec:c7:
                    e3:4a:26:93:3f:b6:27:f0:cf:f9:50:e8:ac:0d:c5:
                    33:bd:ac:ec:63:23:70:57:a1:13:56:2e:93:fa:8f:
                    08:ca:42:64:b6:17:7a:27:7d:6d:c6:b7:57:18:3d:
                    e0:d2:f6:5c:41:e7:9c:83:41:2e:8a:74:7e:c8:73:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9C:A8:22:E4:2E:7C:81:C8:2F:AC:D6:12:9A:CF:FD:C7:9F:AE:65
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:33:83:1a:57:ce:ed:f6:dd:3a:f9:6c:71:06:41:9c:8c:a8:
         17:13:2e:3b:88:8c:cb:bb:3b:ba:88:86:19:9b:8a:a8:70:ab:
         5e:40:dd:aa:76:ff:a6:e1:fe:99:62:0c:c3:fb:30:99:0f:44:
         5a:0e:97:99:95:b4:15:a8:5b:11:63:16:2a:5f:66:fe:4f:4d:
         57:6c:ec:51:6d:4d:01:d6:f5:d4:30:14:93:70:39:ff:80:70:
         90:61:07:f2:50:10:a2:bb:a9:9f:0a:d5:a2:ad:8c:e7:7d:98:
         84:bb:6f:a4:65:c0:b0:60:c3:72:15:64:8a:0f:d4:29:d5:91:
         9c:3d:09:88:2b:06:5a:d7:bd:e4:60:ea:ef:ed:ad:5e:8c:4e:
         be:4b:9e:c6:a6:5d:89:1c:13:86:02:27:18:36:85:55:85:56:
         1c:52:e9:b2:8a:34:bf:51:9b:a8:d6:62:a6:f0:a4:3a:e8:52:
         91:f6:d5:07:ec:d3:e9:29:a0:0b:56:e7:4a:1e:e2:c6:8c:8a:
         f8:90:d5:78:10:38:68:17:3e:38:e7:81:41:5e:74:ea:78:f3:
         26:7c:07:48:c5:e1:a1:36:2b:f1:be:01:27:87:d3:7b:f9:3e:
         04:c2:bc:d8:8e:6a:a2:e6:79:44:63:1f:21:61:29:db:01:79:
         14:ee:7b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/lpb7CD6ZUBh+hY7LYYHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjYwMzA1MjAwMDQzWhcNMjYwMzA2MjAwMDQzWjAzMTEwLwYDVQQD
EygzYjljYTgyMmU0MmU3YzgxYzgyZmFjZDYxMjlhY2ZmZGM3OWZhZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5T8adukAlozniWiHKW2WQs8Uggs
Vq/5K5VcsT7NwG1znhkNk6u3lQ2sL8FvxsXrP9F7BGX+9swtHqwtWVygtZV45B5V
G/PjdE+2n9l2L/WQohVd7GT719TSuDLAyaP8hClV67FpOppJibK1iL35bSLF/Ilx
V/n2Fmz95hiyT+ll3miFZ7xIKvo661uaMfxUF0ECEuBmCwrU9oZdzxtwJOF0UysD
R1Tt/VbXkXA1/2QbiePXcnMIFH2MuKJBlqag7MfjSiaTP7Yn8M/5UOisDcUzvazs
YyNwV6ETVi6T+o8IykJkthd6J31txrdXGD3g0vZcQeecg0EuinR+yHO03QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDucqCLkLnyByC+s1hKaz/3Hn65lMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjODGlfO
7fbdOvlscQZBnIyoFxMuO4iMy7s7uoiGGZuKqHCrXkDdqnb/puH+mWIMw/swmQ9E
Wg6XmZW0FahbEWMWKl9m/k9NV2zsUW1NAdb11DAUk3A5/4BwkGEH8lAQorupnwrV
oq2M532YhLtvpGXAsGDDchVkig/UKdWRnD0JiCsGWte95GDq7+2tXoxOvkuexqZd
iRwThgInGDaFVYVWHFLpsoo0v1GbqNZipvCkOuhSkfbVB+zT6SmgC1bnSh7ixoyK
+JDVeBA4aBc+OOeBQV506njzJnwHSMXhoTYr8b4BJ4fTe/k+BMK82I5qouZ5RGMf
IWEp2wF5FO57Gg==
-----END CERTIFICATE-----
Generated at Fri Mar 6 04:48:15 2026 by rpki-client