Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          +9QPVfkHO6VXJqmPVwumyfyXeBnAAvLTk5gu79C4HsU=
Subject key identifier:   92:02:46:EE:1A:15:1A:15:42:08:94:1A:9B:E9:48:1E:9B:67:B6:99
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019D98BDB2ACA945CD60F13332C08A217036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0CF9
Signing time:             Fri 17 Apr 2026 00:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:02 +0000
Files and hashes:         1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
                          2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
                          3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
                          4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
                          5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
                          6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
                          7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: LPSM4LXflx6vyHFzfZWBuRhbdSLhy5gr8JcB711gU0Y=)
                          8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
                          9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
                          10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
                          11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
                          12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
                          13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
                          14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
                          15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
                          16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
                          17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
                          18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
                          19: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
                          20: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
                          21: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
                          22: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
                          23: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:b2:ac:a9:45:cd:60:f1:33:32:c0:8a:21:70:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Apr 17 00:01:02 2026 GMT
            Not After : Apr 18 00:01:02 2026 GMT
        Subject: CN=920246ee1a151a154208941a9be9481e9b67b699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:9e:2f:b4:17:48:38:db:ee:a6:8e:e6:c0:
                    7f:58:dc:ee:d1:2f:29:f4:cf:b5:54:a0:7c:ad:7e:
                    12:17:00:b5:28:72:45:3f:53:ae:bd:73:5a:ac:5c:
                    55:fc:e4:55:2b:b6:59:7f:2d:de:0c:29:78:85:77:
                    d3:c5:f0:c8:ad:37:6c:9c:ab:20:5e:19:28:cd:c0:
                    b0:0b:56:eb:3e:22:9b:bf:9c:fa:3f:2c:b5:5b:a1:
                    fa:37:9a:c6:cd:ee:fd:48:a9:de:c6:08:44:a4:0a:
                    fc:63:d0:be:e5:f2:77:02:79:a6:7d:55:7e:2f:d1:
                    6f:50:89:f1:73:05:72:26:a4:70:cf:54:dc:e5:8e:
                    46:63:a3:41:92:8d:3d:fe:1c:cf:79:46:f8:6a:c3:
                    0f:ce:67:27:49:01:fe:e4:14:29:c4:43:65:15:ed:
                    9a:b3:fd:2b:fd:96:c8:ad:5e:3f:14:27:ae:4d:1b:
                    85:e3:ee:c1:65:9c:53:e5:0d:c8:6b:ea:1f:fb:c9:
                    38:b2:68:62:6c:59:51:0e:96:4b:1a:9b:0f:f7:55:
                    3e:4e:0f:93:f0:08:26:68:f9:7d:eb:bb:b4:e9:f6:
                    bf:e5:55:f4:72:b0:42:0b:77:4e:1b:4c:8b:97:bd:
                    f1:9b:c8:0c:6c:8f:4c:24:73:af:36:4c:9a:14:cd:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:02:46:EE:1A:15:1A:15:42:08:94:1A:9B:E9:48:1E:9B:67:B6:99
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fb:d2:9b:d1:09:3c:8d:95:1e:25:ca:4a:96:ca:ee:14:cd:
         42:5f:86:2a:0f:57:14:d6:ee:60:d2:61:5b:de:66:bc:2c:87:
         40:9e:18:87:66:b8:18:86:39:9e:3a:ac:c0:80:bc:9b:29:d9:
         13:c5:91:6b:54:2e:f7:f5:ef:95:85:7f:22:30:bc:c2:a4:ab:
         9b:bd:6a:38:01:c7:bd:68:b4:3c:c2:95:e0:3d:25:84:31:b1:
         8e:72:91:82:cf:d0:92:90:86:f4:d5:57:ed:0a:7c:50:0c:d6:
         4d:69:9d:e9:89:c5:74:8d:ca:58:a0:d3:b6:d3:c8:63:74:87:
         30:56:6a:7b:ca:ce:60:3d:4f:d7:10:30:91:45:cd:a8:29:46:
         e4:fd:da:22:f0:a4:ee:fe:80:0e:0e:de:ee:29:94:0f:9e:00:
         a0:76:f7:f9:a4:8a:e4:11:35:b3:2c:a2:e6:4f:57:de:55:15:
         c6:8b:c7:60:91:bc:bc:04:2c:0c:22:e1:03:f2:27:1c:3c:91:
         7e:ea:00:0a:23:6e:d3:06:62:cb:15:51:54:de:13:e4:0d:5a:
         da:71:33:f9:b0:3c:a7:84:1f:55:52:bf:9b:5e:03:ab:56:f9:
         f5:69:06:00:d5:3a:96:b1:84:76:65:65:fe:55:f3:d6:a0:cb:
         07:50:c7:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvbKsqUXNYPEzMsCKIXA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjYwNDE3MDAwMTAyWhcNMjYwNDE4MDAwMTAyWjAzMTEwLwYDVQQD
Eyg5MjAyNDZlZTFhMTUxYTE1NDIwODk0MWE5YmU5NDgxZTliNjdiNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHueL7QXSDjb7qaO5sB/WNzu0S8p
9M+1VKB8rX4SFwC1KHJFP1OuvXNarFxV/ORVK7ZZfy3eDCl4hXfTxfDIrTdsnKsg
XhkozcCwC1brPiKbv5z6Pyy1W6H6N5rGze79SKnexghEpAr8Y9C+5fJ3AnmmfVV+
L9FvUInxcwVyJqRwz1Tc5Y5GY6NBko09/hzPeUb4asMPzmcnSQH+5BQpxENlFe2a
s/0r/ZbIrV4/FCeuTRuF4+7BZZxT5Q3Ia+of+8k4smhibFlRDpZLGpsP91U+Tg+T
8AgmaPl967u06fa/5VX0crBCC3dOG0yLl73xm8gMbI9MJHOvNkyaFM1y9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJICRu4aFRoVQgiUGpvpSB6bZ7aZMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevvSm9EJ
PI2VHiXKSpbK7hTNQl+GKg9XFNbuYNJhW95mvCyHQJ4Yh2a4GIY5njqswIC8mynZ
E8WRa1Qu9/XvlYV/IjC8wqSrm71qOAHHvWi0PMKV4D0lhDGxjnKRgs/QkpCG9NVX
7Qp8UAzWTWmd6YnFdI3KWKDTttPIY3SHMFZqe8rOYD1P1xAwkUXNqClG5P3aIvCk
7v6ADg7e7imUD54AoHb3+aSK5BE1syyi5k9X3lUVxovHYJG8vAQsDCLhA/InHDyR
fuoACiNu0wZiyxVRVN4T5A1a2nEz+bA8p4QfVVK/m14Dq1b59WkGANU6lrGEdmVl
/lXz1qDLB1DHjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:58:07 2026 by rpki-client