Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          ZeYfKG/VZwouXeK5adIsvWuKU6A8zYn/UeQlLgvqmQU=
Subject key identifier:   44:45:64:58:C9:6A:F8:DC:DE:72:E5:4F:FD:97:89:30:4E:D0:CC:07
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019DA7F998DA9F8058608FCC5550E87130EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          1970
Signing time:             Sun 19 Apr 2026 23:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 23:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 23:00:45 +0000
Files and hashes:         1: 1-aRoA0WhlYlJc8wz6ycex6Zo2ac.roa (hash: sdFqzlSJZoMBZXBYF/7sSNH10IFmTEtJ+BqqB3vKvsU=)
                          2: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
                          3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
                          4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
                          5: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
                          6: E77-yFQRh84D0qTULRJEF0OTucM.roa (hash: jEZp2gqKhSoyIk5JyO1cabqqkVlR2zTup+Or6BPEgXU=)
                          7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
                          8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
                          9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
                          10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
                          11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
                          12: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=)
                          13: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: V+c+OSwrBjV7/l/9JZ5LhWpPy3zaluZzaYl4fmXOEjM=)
                          14: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
                          15: VEwNY5P1vuA23oPruHvqJ6HFtjs.roa (hash: eZpyIVZzTVU8RDs8Mn5Dvw3csgwI8cTA6KbGalIl4hA=)
                          16: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
                          17: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
                          18: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
                          19: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
                          20: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
                          21: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
                          22: rAV_y4-NevcPXbza-t6ZOR9FvHc.roa (hash: 5pvfB3nTTbHi/Ny0ZoNFS5BiI3yuVYiNAtvSGsVUR/Y=)
                          23: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
                          24: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
                          25: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:f9:98:da:9f:80:58:60:8f:cc:55:50:e8:71:30:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Apr 19 23:00:45 2026 GMT
            Not After : Apr 20 23:00:45 2026 GMT
        Subject: CN=44456458c96af8dcde72e54ffd9789304ed0cc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:15:83:d1:ea:61:9a:ce:ce:57:10:b7:0f:
                    94:d9:8f:1b:a4:cd:08:54:a2:73:1d:2c:87:67:42:
                    05:ac:22:5b:25:03:48:95:3d:c3:b5:23:a2:d7:4d:
                    9c:9d:62:de:88:65:cc:14:88:54:ad:15:5d:e7:30:
                    14:70:12:a8:1c:27:ca:2f:13:b9:d8:e5:c4:6b:3b:
                    2e:28:72:82:e2:b3:19:20:8d:ff:f8:fc:ed:f0:1a:
                    e0:f6:7a:a4:22:9b:c2:9b:a1:07:35:02:d5:55:90:
                    35:76:d9:de:53:e5:16:dc:4e:5a:d8:a5:ce:89:f9:
                    e8:50:01:5b:5d:45:a3:6f:fc:63:3a:ea:98:1f:21:
                    0e:04:bd:c4:1c:23:4d:54:0e:3e:e6:4c:3b:88:f8:
                    57:47:5f:4b:b0:d4:67:2a:b0:d9:30:53:7e:9b:03:
                    e3:43:de:dc:a3:27:05:a4:4f:8a:cf:c7:dd:bb:45:
                    19:df:75:f9:c3:96:a1:5e:9b:5c:0d:7d:ce:d7:a2:
                    8f:8d:d3:cf:ca:40:03:89:ab:d4:03:7e:33:b5:37:
                    c0:e7:c9:72:4d:69:a8:ec:fd:67:0e:54:e8:ec:fd:
                    b4:da:3b:87:de:b0:77:05:40:6d:73:de:db:08:94:
                    03:06:d6:6a:94:f0:97:da:e7:16:e0:e9:8f:80:38:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:45:64:58:C9:6A:F8:DC:DE:72:E5:4F:FD:97:89:30:4E:D0:CC:07
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:e3:87:23:a7:67:a6:06:5d:79:14:35:3f:c4:ec:e3:00:
         e0:47:ad:1d:d3:27:22:4f:01:14:5c:dc:6d:be:34:08:28:99:
         b4:41:4b:fd:0d:0d:eb:17:24:e5:37:70:fb:e8:f3:7b:77:7d:
         cd:f7:48:be:51:ac:07:42:02:94:41:39:5e:5a:30:0b:db:6e:
         1c:84:47:f5:f3:99:83:b2:a1:71:5d:f8:16:59:f6:d0:0e:98:
         05:8d:e7:e0:6e:c0:07:8b:43:4e:60:36:07:3a:d0:7f:a3:72:
         27:fe:af:2e:18:ac:9d:87:2a:cb:b3:66:8e:dc:19:d7:2b:63:
         c9:ec:65:d8:33:8a:a2:08:32:f3:14:08:fc:8e:f1:b9:03:61:
         25:a9:3d:0d:ad:ed:5e:1e:4b:d6:71:8f:ec:fc:9d:46:65:23:
         22:45:ac:1f:0f:60:f1:9f:e3:50:e6:98:b0:d4:83:7f:3d:3d:
         8f:10:da:9b:d5:f3:9c:8d:63:1f:69:88:c5:b6:89:91:1f:8f:
         de:02:44:86:3f:55:10:60:4d:fc:dd:a6:34:e0:16:4f:33:ba:
         4e:aa:32:7c:18:46:03:8a:3a:2b:88:2a:c5:27:76:52:5d:45:
         e8:94:6d:5d:b1:14:db:31:5e:75:8b:19:7d:85:47:b8:72:71:
         3e:ef:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:28:31 2026 by rpki-client