Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          vPXIoXhNvx7thOJb+NtxTR1DM431aGmRYMZlDOEj/5Y=
Subject key identifier:   65:39:25:E2:04:59:36:3C:5F:ED:7E:8C:82:BB:50:33:80:41:77:33
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019D9998DEB0604BA3B7B5D649A895C0D630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          18DC
Signing time:             Fri 17 Apr 2026 04:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:25 +0000
Files and hashes:         1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
                          2: 5T6muliVBW8fS-8i29q4TfjPKww.roa (hash: tQ3qJO54TZ3cHoxqFq0bCzVKBXdLkF5Xol5mChz7hcM=)
                          3: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: RZAlmOMLEV+5mE5oiCBH9v3wt7OF9/eRHr9wixtSJYk=)
                          4: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
                          5: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
                          6: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
                          7: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
                          8: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
                          9: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
                          10: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
                          11: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
                          12: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
                          13: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
                          14: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
                          15: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
                          16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
                          17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
                          18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
                          19: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (hash: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=)
                          20: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
                          21: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
                          22: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:de:b0:60:4b:a3:b7:b5:d6:49:a8:95:c0:d6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Apr 17 04:00:25 2026 GMT
            Not After : Apr 18 04:00:25 2026 GMT
        Subject: CN=653925e20459363c5fed7e8c82bb503380417733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:1b:8b:01:1c:c0:18:a6:5e:61:22:3b:42:
                    24:84:f7:87:fc:97:db:9f:dc:1d:6e:a0:2f:3f:14:
                    94:13:39:7a:32:95:79:e7:4e:f2:7d:60:5f:cd:2c:
                    d0:98:e6:22:1e:96:12:1a:11:11:02:8c:7a:c0:6c:
                    d5:25:4a:db:53:96:bf:32:d9:22:75:6e:3b:e6:32:
                    51:7c:58:fa:01:7f:48:dd:6e:bd:e1:5a:1e:3b:1f:
                    78:99:fb:1d:60:cc:ab:a7:e8:7c:16:8b:ec:db:d0:
                    a7:45:59:5b:87:59:b2:9d:e3:e3:5f:45:13:48:30:
                    68:ae:5b:0b:84:43:76:60:0b:6e:97:5a:55:3a:85:
                    26:1a:30:34:f8:a8:ac:54:d3:fb:11:09:2a:86:c5:
                    b1:2c:a9:14:55:ca:4a:11:ac:97:7f:0a:de:46:6c:
                    b7:a5:53:90:f1:42:9a:25:0f:e7:5e:7b:6a:57:b8:
                    9b:12:0a:64:c2:6d:73:40:46:0b:d7:21:09:ff:3e:
                    e3:1e:88:3e:a8:7b:b2:61:ec:5a:97:a1:0a:a7:8c:
                    f1:c1:c7:ca:e8:46:25:e1:9c:3e:96:cd:98:82:80:
                    65:1b:e4:a2:5a:87:05:62:bf:0f:56:c1:b8:d1:0b:
                    46:a8:b4:4e:65:5e:22:6e:c7:b1:23:d4:a5:2b:24:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:25:E2:04:59:36:3C:5F:ED:7E:8C:82:BB:50:33:80:41:77:33
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:34:be:eb:93:3a:65:9d:89:3f:fc:8c:94:1e:76:dc:94:d7:
         96:04:9f:4f:89:1c:95:15:52:8d:ec:c5:8e:6e:64:b6:e9:86:
         88:e0:65:37:7d:2a:b0:34:c2:14:ba:9a:c8:6a:65:19:7d:56:
         5f:d1:c2:3b:15:6f:c8:2b:15:08:af:98:b7:b4:e4:0a:53:cc:
         ee:5c:00:aa:fa:7a:e1:a3:a8:67:42:60:2c:e8:07:fe:24:cc:
         41:e7:6f:46:70:68:4d:82:b9:93:07:57:8a:f1:a1:23:ec:5f:
         57:b9:c1:29:f6:bc:f8:6c:de:25:44:76:2d:be:e8:8c:80:6d:
         ea:bf:21:5e:4d:14:05:b4:23:b8:00:67:41:1c:e6:94:8d:00:
         89:12:34:16:4c:18:7f:48:25:d3:93:ea:c1:22:50:cb:21:cd:
         24:7e:77:83:b4:b0:9a:f2:2b:34:f5:b9:ca:b8:9b:8f:23:89:
         bf:fe:9a:e9:f3:6a:5e:b4:b0:e0:0a:b0:a3:12:3f:13:21:eb:
         e0:66:6b:27:60:bd:57:dc:8e:94:56:8f:0f:ac:47:da:6e:58:
         f5:18:eb:c6:bf:85:f0:ad:f2:34:89:3d:e7:70:f9:36:59:b4:
         71:56:89:10:6d:1e:c3:9d:31:13:19:7c:0f:f2:29:2a:38:8f:
         da:fa:c2:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmN6wYEujt7XWSaiVwNYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4
NDFhZTgwHhcNMjYwNDE3MDQwMDI1WhcNMjYwNDE4MDQwMDI1WjAzMTEwLwYDVQQD
Eyg2NTM5MjVlMjA0NTkzNjNjNWZlZDdlOGM4MmJiNTAzMzgwNDE3NzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthwbiwEcwBimXmEiO0IkhPeH/Jfb
n9wdbqAvPxSUEzl6MpV5507yfWBfzSzQmOYiHpYSGhERAox6wGzVJUrbU5a/Mtki
dW475jJRfFj6AX9I3W694VoeOx94mfsdYMyrp+h8Fovs29CnRVlbh1mynePjX0UT
SDBorlsLhEN2YAtul1pVOoUmGjA0+KisVNP7EQkqhsWxLKkUVcpKEayXfwreRmy3
pVOQ8UKaJQ/nXntqV7ibEgpkwm1zQEYL1yEJ/z7jHog+qHuyYexal6EKp4zxwcfK
6EYl4Zw+ls2YgoBlG+SiWocFYr8PVsG40QtGqLROZV4ibsexI9SlKyTMbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU5JeIEWTY8X+1+jIK7UDOAQXczMB8GA1UdIwQY
MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt
YmQyNDliNjI1Nzk3LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3
LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjS+65M6
ZZ2JP/yMlB523JTXlgSfT4kclRVSjezFjm5ktumGiOBlN30qsDTCFLqayGplGX1W
X9HCOxVvyCsVCK+Yt7TkClPM7lwAqvp64aOoZ0JgLOgH/iTMQedvRnBoTYK5kwdX
ivGhI+xfV7nBKfa8+GzeJUR2Lb7ojIBt6r8hXk0UBbQjuABnQRzmlI0AiRI0FkwY
f0gl05PqwSJQyyHNJH53g7SwmvIrNPW5yribjyOJv/6a6fNqXrSw4AqwoxI/EyHr
4GZrJ2C9V9yOlFaPD6xH2m5Y9Rjrxr+F8K3yNIk953D5Nlm0cVaJEG0ew50xExl8
D/IpKjiP2vrChw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:25 2026 by rpki-client