Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          SIvibDnqhRzNK1ogrABBTxJ3d3bP84QiD5fw/UDtZH8=
Subject key identifier:   83:91:1A:62:3A:96:FF:FB:2F:A8:00:65:57:92:A1:0E:42:27:D8:A7
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019D981855866BCA5876D1D2569874C9E039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0BBB
Signing time:             Thu 16 Apr 2026 21:00:24 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:24 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:24 +0000
Files and hashes:         1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=)
                          2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=)
                          6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: 6dRBbq9l3hagSIUUH5REU214CZaw6QkSPrFc2XJEMnE=)
                          14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          16: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=)
                          17: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          18: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=)
                          19: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          20: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          21: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          22: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          23: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=)
                          24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=)
                          31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
                          32: zjtl5Y0Z3oogjAq5K4uAfLAq8ro.roa (hash: LpQt/bLNnHWYgd6YNiQU8EA6fFlerNrGYNaE8nt6sMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:55:86:6b:ca:58:76:d1:d2:56:98:74:c9:e0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Apr 16 21:00:24 2026 GMT
            Not After : Apr 17 21:00:24 2026 GMT
        Subject: CN=83911a623a96fffb2fa800655792a10e4227d8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:36:2a:5b:ce:43:94:3d:a0:db:bf:a2:e8:
                    42:24:92:42:4e:98:41:15:0b:68:5d:7f:85:ff:9e:
                    64:3b:7a:88:d0:f3:64:d3:0c:1a:49:9c:29:33:1b:
                    48:5d:aa:e8:b9:ea:94:d6:97:ba:35:93:f9:4b:41:
                    dd:d8:cf:18:32:0b:19:7f:6a:53:7f:ea:eb:fb:3a:
                    53:54:a9:e4:ba:41:78:83:e7:5d:dc:8b:98:60:a0:
                    af:21:57:a9:00:cb:ac:3b:cc:a6:21:90:63:51:41:
                    57:04:b4:6e:ec:b4:02:3b:f2:2e:2e:d1:73:cf:c2:
                    41:ab:67:5a:cb:e8:24:25:29:7d:ab:d9:53:0a:ad:
                    20:20:c4:c5:83:04:9d:09:e2:ca:94:ee:c0:46:6b:
                    ba:03:16:87:2b:3a:ee:f9:ec:13:59:92:cf:d2:c1:
                    16:3e:07:f9:75:87:cf:56:25:de:56:1c:60:f7:99:
                    a0:45:43:0f:3c:ab:97:4f:0c:84:c5:c2:1c:b3:18:
                    b6:84:ea:53:66:39:2f:f2:c8:ac:f6:ec:f9:c3:b7:
                    df:ae:be:5c:d9:98:3b:9e:af:9a:6d:52:19:18:03:
                    59:ea:1f:cb:97:43:4b:1b:f5:33:1a:97:11:54:d8:
                    ca:ac:67:c8:26:da:0a:76:10:f8:74:eb:a9:b7:1a:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:91:1A:62:3A:96:FF:FB:2F:A8:00:65:57:92:A1:0E:42:27:D8:A7
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:46:b6:48:bf:51:1a:38:87:99:b9:40:e1:2b:c8:a7:33:bd:
         55:42:fa:e8:34:48:e1:39:cb:a7:6d:98:66:6b:22:4f:6e:04:
         95:0e:bf:5c:c5:4b:c7:f0:3c:e0:07:ea:85:95:fa:19:63:dc:
         c8:c3:ea:a6:99:33:72:a1:0e:ef:08:a2:27:ae:5e:10:36:ac:
         f1:b0:38:0b:02:ec:a0:52:92:44:52:62:ec:f2:88:78:36:b3:
         fa:63:69:42:dc:74:fb:8c:d9:ba:db:b0:07:56:d3:66:c1:e2:
         65:a0:c5:4f:a8:5c:55:fc:55:f2:cb:f1:89:fa:6d:11:27:40:
         d3:80:6d:95:3f:f2:a6:af:c6:d9:da:b8:bb:64:3c:b6:1b:10:
         a4:12:a0:05:3d:8e:ae:3d:ed:15:cc:d0:27:82:9c:39:51:3d:
         4a:bc:db:90:30:09:43:94:3f:8b:d9:3c:5b:20:e4:aa:4d:d8:
         9d:c2:e2:38:af:7a:b1:e6:88:2b:19:be:50:e3:5c:f5:a0:96:
         70:f1:1e:55:87:95:a3:f7:86:88:83:60:0b:12:b8:9c:c1:ef:
         d4:e9:d7:e9:a3:5e:11:29:d0:71:63:42:c8:70:ae:63:b8:1b:
         39:7f:a9:46:0c:f9:d4:56:dd:ad:d9:54:c6:a9:88:e7:ff:a3:
         8d:e6:dc:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGFWGa8pYdtHSVph0yeA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjYwNDE2MjEwMDI0WhcNMjYwNDE3MjEwMDI0WjAzMTEwLwYDVQQD
Eyg4MzkxMWE2MjNhOTZmZmZiMmZhODAwNjU1NzkyYTEwZTQyMjdkOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFg2KlvOQ5Q9oNu/ouhCJJJCTphB
FQtoXX+F/55kO3qI0PNk0wwaSZwpMxtIXaroueqU1pe6NZP5S0Hd2M8YMgsZf2pT
f+rr+zpTVKnkukF4g+dd3IuYYKCvIVepAMusO8ymIZBjUUFXBLRu7LQCO/IuLtFz
z8JBq2day+gkJSl9q9lTCq0gIMTFgwSdCeLKlO7ARmu6AxaHKzru+ewTWZLP0sEW
Pgf5dYfPViXeVhxg95mgRUMPPKuXTwyExcIcsxi2hOpTZjkv8sis9uz5w7ffrr5c
2Zg7nq+abVIZGANZ6h/Ll0NLG/UzGpcRVNjKrGfIJtoKdhD4dOuptxpJ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIORGmI6lv/7L6gAZVeSoQ5CJ9inMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArka2SL9R
GjiHmblA4SvIpzO9VUL66DRI4TnLp22YZmsiT24ElQ6/XMVLx/A84AfqhZX6GWPc
yMPqppkzcqEO7wiiJ65eEDas8bA4CwLsoFKSRFJi7PKIeDaz+mNpQtx0+4zZutuw
B1bTZsHiZaDFT6hcVfxV8svxifptESdA04BtlT/ypq/G2dq4u2Q8thsQpBKgBT2O
rj3tFczQJ4KcOVE9SrzbkDAJQ5Q/i9k8WyDkqk3YncLiOK96seaIKxm+UONc9aCW
cPEeVYeVo/eGiINgCxK4nMHv1OnX6aNeESnQcWNCyHCuY7gbOX+pRgz51FbdrdlU
xqmI5/+jjebcKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:54 2026 by rpki-client