Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          XI/YFT1l6zQ5O/SA6HoC2d0Bem87pFVKVpE2YLIolVU=
Subject key identifier:   EC:7A:7C:CE:5F:71:26:22:BF:11:4F:FD:8A:74:2D:E3:DF:59:78:67
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019D97E20EB123972298BA5403165DC7B9B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          13FA
Signing time:             Thu 16 Apr 2026 20:01:07 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:07 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:07 +0000
Files and hashes:         1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=)
                          2: 1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa (hash: VMbTIDUnS0rJprZQrwM8fOUQBhB/Ygv1jHJEt/ApBqE=)
                          3: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=)
                          4: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=)
                          5: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=)
                          6: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=)
                          7: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=)
                          8: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=)
                          9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=)
                          10: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=)
                          11: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=)
                          12: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=)
                          13: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=)
                          14: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=)
                          15: bjtqDJXlOz7pCpEjOBsxaBiuwec.roa (hash: NF7IuS5ng6fRX6mAKKyUm5b/IR1xDvuUmKt4bVjV978=)
                          16: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=)
                          17: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=)
                          18: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=)
                          19: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=)
                          20: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
                          21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: 25Z8PJfQWIN6qy/vFrh1iaS9h0E2qhsG2UW+NviN9e0=)
                          22: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:0e:b1:23:97:22:98:ba:54:03:16:5d:c7:b9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Apr 16 20:01:07 2026 GMT
            Not After : Apr 17 20:01:07 2026 GMT
        Subject: CN=ec7a7cce5f712622bf114ffd8a742de3df597867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:98:9d:95:aa:8a:15:9b:ea:65:3d:61:3d:
                    b0:fb:54:fe:68:02:3e:82:c1:f3:23:3c:11:b8:3e:
                    d8:1c:74:19:e6:e9:8d:a7:e1:44:2e:b9:85:27:ee:
                    4b:d0:27:ec:d9:5b:70:27:02:5b:e1:d7:c7:eb:00:
                    67:ad:05:c1:3a:61:84:a4:41:59:ec:78:2a:68:69:
                    79:da:90:44:ca:56:6e:eb:53:d2:0f:ad:68:39:2f:
                    34:e2:6a:66:03:33:ea:81:c3:8c:a4:66:a5:4e:e1:
                    da:89:b6:97:21:42:ae:61:1d:6a:4f:60:1d:d6:93:
                    cb:6d:db:a9:8c:f7:a6:ae:c1:f1:44:11:e8:a9:ac:
                    b5:c8:af:81:4a:48:b0:a0:5c:3c:9f:51:a1:c1:d4:
                    0e:b1:5e:0a:66:69:31:b0:a0:7a:ef:74:a2:07:da:
                    55:26:bb:da:bf:e5:f5:1b:f1:bd:b6:96:56:1c:fa:
                    d2:d7:96:00:ac:ce:90:bd:24:3c:35:fa:30:1f:08:
                    79:e1:3f:92:9d:05:91:74:3d:f7:1c:91:24:59:60:
                    15:d2:4f:e8:50:c6:01:f0:de:75:9e:2d:c1:67:c4:
                    3f:0a:58:71:33:49:14:ce:1e:54:a6:48:b6:23:e6:
                    a6:6d:01:f1:db:fc:4b:df:ea:04:f8:c9:4d:a2:9a:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:7C:CE:5F:71:26:22:BF:11:4F:FD:8A:74:2D:E3:DF:59:78:67
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:6a:d7:ea:70:d4:9b:f1:13:9b:b7:99:ef:eb:f9:81:4e:
         53:a2:d3:8a:39:f2:0e:fe:10:10:a6:7a:01:4b:4b:05:95:d8:
         40:88:68:f4:36:a1:83:d9:be:27:db:52:03:09:13:a7:d9:56:
         47:82:10:47:ac:13:21:af:2c:f3:6f:bb:f6:a6:ba:ca:ab:eb:
         f5:fe:8c:5c:d4:03:cc:13:3c:16:b2:90:84:11:a8:4f:df:6c:
         cc:7a:9b:4d:b1:bf:0d:c6:67:01:18:91:aa:77:9c:f0:ff:6a:
         65:a4:ea:5d:d3:4e:22:ba:d2:f7:83:ec:a0:2b:17:58:59:83:
         e1:54:65:a5:e4:31:3e:85:f7:1b:98:80:df:52:11:0b:45:e0:
         9e:39:d3:55:e5:ea:b1:4f:1a:9a:3e:21:01:f0:9a:ae:34:c5:
         af:3f:0d:25:ec:77:b8:c4:46:68:48:f9:7e:8c:f7:e6:f5:a7:
         33:0b:71:20:d2:2e:ef:ec:5d:d7:57:ad:2b:bf:e2:61:70:46:
         ef:8a:fb:9d:5c:15:54:82:23:c5:5b:3d:81:98:ba:e5:b9:29:
         7d:e1:82:ed:2d:49:be:c4:ec:04:a0:cb:ce:97:4b:ab:e3:d1:
         68:9b:1b:4d:89:f4:05:f7:45:39:dd:a4:fa:81:c6:97:46:ad:
         1c:38:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:39 2026 by rpki-client