Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          jS3bU9nTAbhS0M6/yQKbxtZv/qtSPtURKfbSm1delm8=
Subject key identifier:   EB:41:26:18:47:99:F6:20:DE:9A:70:D2:C6:A7:08:0F:BE:8F:0A:F5
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019CE410A1083930E2222DD4EB41B73AD6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          18C4
Signing time:             Thu 12 Mar 2026 22:00:20 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:20 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:20 +0000
Files and hashes:         1: 07YHnmSGL3DGY6c5DbcijP217LQ.roa (hash: 12gHzQSyTMLeGjVAmr1zmwWq9fnXc3yyJAMhoMfsUbI=)
                          2: 1-vNISdAgr1vxuSu-Toco8sAAfmc.roa (hash: FafBdHtMW1cgxu/h4FqfgmHc5gJkbiyqRpvw+bdoRVc=)
                          3: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: I2LZwurKbua0yrCvANCwE6qb/zhIKhLh7H0AJ9hR/zI=)
                          4: 3NoAtRyFyT3mqxuhl8rikGi6CPw.roa (hash: UkQRBoygiIXUDqnF/nZfu6Z2PAxT1DRUs4/Fx1lQwIc=)
                          5: 7aadFBthJDyRQokVjXSNIVlep8Y.roa (hash: KQAgcbF+M8CSWiOXEQEIGdq+Cg4hNVChgiG9+pR/fMU=)
                          6: 88GXt-Nj8epfXsaOzg77sNdRo5s.roa (hash: xLg/Jf5JnayYecy0KNeCwmuhUM+tMuNIkboAxtbEGYM=)
                          7: 9SzKR2jRUVwOaueZVAhbWUN2hKk.roa (hash: FVohvzzEsQ8ZWQ3bVSw2whz2W6Fbc2vk/r+zxXJ8JGo=)
                          8: 9a7DiM85xWW0SUOHj55_qdtGlrM.roa (hash: /wdQL253QIgX63BRfrM9hjhyJ7le6nAjEl2iFxxdTHQ=)
                          9: BEr_R-Y76jDsSzh3bfESjoOwl0Q.roa (hash: XKEvtHfwkP1nMOaRrnUEt9y98qABQkwe3lGvAnv9row=)
                          10: HNnkcaU2Hh5IuZWTx2ax25PCVFo.roa (hash: QEMvN1hGawGHGM/XJD+BepVtmnpndyGrmsYjk5D0vXk=)
                          11: JBmh4xJQPOrgXhW8afp75WMHXtU.roa (hash: Eu21koGIAierUmhNQZ3QsI0F1soGks0wdE/brAHqtA4=)
                          12: Lj4vCV3CzpslBrQs2uQPQz0J-lI.roa (hash: 4PkaGjUOJQRMD/3HjoXORV26Z0v+UJe+d4n4F+P5Bew=)
                          13: QCeLT32TJH0BUjUrilhb7chA7xQ.roa (hash: F/9NdtpeCDeb/lM2ZGhLi9OKN6meb7oC3ZPfJfW/F4c=)
                          14: U-vM5k7kX-abfGLQNLBMdCq5aJw.roa (hash: bJBvjK0cokVnLIfc7kCrIZ00FbL6Ke3KrGBJupQgo1c=)
                          15: Ul9RpH6oBexBY5C_PA23LHZoBkc.roa (hash: XRUFccREziuIDl6+6nxzRgNDnHGi0XuldvNlFW7whIw=)
                          16: VEJFTWLInqVBVVVzjcXE8u0k4jU.roa (hash: MDCdlTYX/q6OjZDJTysgXveF6ZbyFuxNgUow4xZBH2M=)
                          17: Y_FLWnuNhEx2wO3ILnJnHpE8S50.roa (hash: 4sjgJfec1CI7poYdj8/LooNLid4ueqSY+AsJdUDwJp0=)
                          18: cGR-cZXHq1SVvLMV3yudMjgOmWE.roa (hash: 5J+DPS65ZibV4JHjVNRUad5cnyzzDzeOQ+1szjLfH/U=)
                          19: dMUsL87HVH-hWFe6QaT2O1cjz80.roa (hash: aQSqen+T1CnOwM6TpzsdO+vcc77lV4HKUI++ospju5c=)
                          20: f_VCnUgXclXXJeFK4ehEKaPm8bU.roa (hash: NU+9MIVHryfjHTTYgjstCko8E5LtsVYshqXivZ7/0Mw=)
                          21: sl1JvwMo_PnxNUT0n7b37VjHYBI.roa (hash: 4s59F4JeRBM9UIf8FZMIueAYaOBneqDZ1z5HCj442e0=)
                          22: xvqiP1uUbaodSEMAQDXDC58GS80.roa (hash: oaCy9//PkG6/HUpYGlrrSEfQitLFp/CqGYs5ulfXPTo=)
                          23: xxI-hj6mHmiHl2OwN4j5ztBMH8U.roa (hash: 1zAXiE+IF/aHyRDjomYAlxs9J+15UvpbWtlzl8GfuYE=)
                          24: yt9D2jLsreAMWCWEdKVQm0MM7k8.roa (hash: lKhmu0VxkSr9o+yCKmoctbtSS//EnsnvUzIyvtwGci0=)
                          25: zSfbkXSSTZ9b4VM38AL0y2ev5KM.roa (hash: qh9HWWdJnJjIlbbHx9ULyJvN/7KGQA0brIGqvUHqcAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:10:a1:08:39:30:e2:22:2d:d4:eb:41:b7:3a:d6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Mar 12 22:00:20 2026 GMT
            Not After : Mar 13 22:00:20 2026 GMT
        Subject: CN=eb4126184799f620de9a70d2c6a7080fbe8f0af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:35:b8:cb:c2:59:e0:3f:99:e4:94:45:72:
                    24:3b:5e:ec:75:09:db:6e:11:c2:e1:b1:ad:8f:78:
                    10:c3:33:c3:f0:64:f3:f2:88:cd:83:eb:7a:12:65:
                    2b:22:aa:35:9b:9e:0d:9e:e7:8c:b8:d7:39:92:cb:
                    9d:ee:e3:e8:62:c6:3a:a0:b9:3a:b9:45:c2:5a:53:
                    c7:37:3d:98:df:b8:10:3a:63:b3:c5:3f:ba:e3:8f:
                    23:5e:75:d7:a8:b1:5f:18:1c:04:83:a1:47:a1:7c:
                    91:8d:b9:f0:f5:8c:b8:6d:1b:06:89:23:71:12:1a:
                    f0:d7:7b:c1:53:53:69:39:70:75:cf:9e:f6:3d:8c:
                    81:0a:0c:ee:a7:71:7f:a8:6c:1f:d1:49:89:00:d0:
                    b4:8e:7e:41:01:22:b5:a9:7c:25:4c:e0:17:8a:4a:
                    4d:e6:1f:21:d6:35:e1:6c:8e:b7:ac:53:ff:00:12:
                    49:21:98:42:31:8b:f4:07:f6:d8:1c:15:e5:ff:c9:
                    77:aa:9e:1c:a8:8c:7d:60:75:7f:29:4a:44:a4:71:
                    cd:af:fe:30:40:4c:cf:b6:fb:00:6b:f3:51:2a:97:
                    d8:b8:6f:09:9d:cb:cf:a9:b7:63:cc:19:08:5f:f7:
                    7f:30:24:4a:eb:39:d5:93:f4:8f:c9:8b:e6:ce:77:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:26:18:47:99:F6:20:DE:9A:70:D2:C6:A7:08:0F:BE:8F:0A:F5
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:7d:71:37:fe:c4:f3:1e:d1:2a:98:11:65:59:6e:b3:c1:
         b1:4b:35:6b:c4:15:16:2f:4f:a7:73:7c:4f:e2:a8:b7:31:38:
         06:a4:21:4c:0e:1f:ff:7f:3e:24:db:e5:79:31:b5:6e:8b:dd:
         83:f1:6f:ff:d5:1e:91:a8:43:5c:1d:db:aa:b8:5c:a8:82:aa:
         25:62:8a:ba:da:17:78:b5:7b:04:0b:c7:f5:1b:c6:01:57:aa:
         0c:21:12:06:49:bc:aa:5e:4e:58:1a:7a:15:f1:a0:14:d1:0d:
         b5:23:dd:8e:83:26:84:3a:a5:e1:2d:42:10:ee:de:fe:94:03:
         d8:93:e2:16:99:ba:92:70:b1:62:e7:79:89:a1:50:1f:13:0c:
         22:58:29:5f:22:79:cf:d3:13:7a:2e:74:12:2a:fe:d1:02:a4:
         9c:a6:99:62:71:3f:53:f4:d8:7e:73:ff:b4:5c:35:39:de:1f:
         64:20:4d:9f:59:f7:db:55:13:63:99:f8:80:10:de:9a:85:50:
         b4:99:30:d4:25:20:5d:86:a2:ce:1c:d8:94:8b:1b:41:22:92:
         6c:e9:aa:9f:5a:1d:85:f9:23:b8:ae:fa:b3:4d:50:0c:e8:e3:
         b2:3e:73:a7:b8:f5:a5:db:69:3d:d6:b5:b1:2a:f1:bb:67:ac:
         2e:50:9a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkEKEIOTDiIi3U60G3OtbSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjYwMzEyMjIwMDIwWhcNMjYwMzEzMjIwMDIwWjAzMTEwLwYDVQQD
EyhlYjQxMjYxODQ3OTlmNjIwZGU5YTcwZDJjNmE3MDgwZmJlOGYwYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWY1uMvCWeA/meSURXIkO17sdQnb
bhHC4bGtj3gQwzPD8GTz8ojNg+t6EmUrIqo1m54NnueMuNc5ksud7uPoYsY6oLk6
uUXCWlPHNz2Y37gQOmOzxT+6448jXnXXqLFfGBwEg6FHoXyRjbnw9Yy4bRsGiSNx
Ehrw13vBU1NpOXB1z572PYyBCgzup3F/qGwf0UmJANC0jn5BASK1qXwlTOAXikpN
5h8h1jXhbI63rFP/ABJJIZhCMYv0B/bYHBXl/8l3qp4cqIx9YHV/KUpEpHHNr/4w
QEzPtvsAa/NRKpfYuG8JncvPqbdjzBkIX/d/MCRK6znVk/SPyYvmznfLCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtBJhhHmfYg3ppw0sanCA++jwr1MB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJct9cTf+
xPMe0SqYEWVZbrPBsUs1a8QVFi9Pp3N8T+KotzE4BqQhTA4f/38+JNvleTG1bovd
g/Fv/9UekahDXB3bqrhcqIKqJWKKutoXeLV7BAvH9RvGAVeqDCESBkm8ql5OWBp6
FfGgFNENtSPdjoMmhDql4S1CEO7e/pQD2JPiFpm6knCxYud5iaFQHxMMIlgpXyJ5
z9MTei50Eir+0QKknKaZYnE/U/TYfnP/tFw1Od4fZCBNn1n321UTY5n4gBDemoVQ
tJkw1CUgXYaizhzYlIsbQSKSbOmqn1odhfkjuK76s01QDOjjsj5zp7j1pdtpPda1
sSrxu2esLlCa8Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:19:07 2026 by rpki-client