Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          B/EFT7tRF5vfqinyKPpNq7d2b4Mu36+DC2adZkdxx3c=
Subject key identifier:   F5:87:E7:09:73:D1:67:42:43:FB:9E:2E:FA:64:23:D1:A9:D5:BF:70
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019D992B8BBE13BBD86BF0FA4F8636995524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          1976
Signing time:             Fri 17 Apr 2026 02:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:00 +0000
Files and hashes:         1: 0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa (hash: TXGYHpEkbA/gmBzhb7MEKc4sA2Fqy0eb/p6I+gL0THg=)
                          2: 1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa (hash: NLxrLA0OqYxqRmfJGl+OFXBhEszRqDielh1bnhVcZzg=)
                          3: 2KUTocOpAT7sBhebTwh3G4FESlk.roa (hash: qCXP7Gzh5WeYsyND7xGMNVQazeCbTW+xxU01dOva01I=)
                          4: 4Ucriqv55EYMnIzTuWFJEJ0cFbI.roa (hash: lG2vwxva8GrYFGHSt+tYisTRrXaNflBbJwPUhm0hB1k=)
                          5: 4l9EsCgzSHlVTtpywsbUUFtExTk.roa (hash: YL2VEKNHNIjwIMrHgQShXB+ezdUEHsuR+LX2D+OX3sQ=)
                          6: 9-NL_3pPKwjoT10Tknd1fywwh6c.roa (hash: 2AUz3UyBm+hNCRPuqcyUa4lcxCahpjHfjKeNNTVRWhI=)
                          7: AkErl4jlY9bXi8pqa-fwgrweKKU.roa (hash: 0XWDTE5Tv62kIn8zLAqHgpnppEVXV8X+MfUWwrRak7w=)
                          8: CnjhaBCYf7ZnMG3Es2D005bWWPI.roa (hash: vnu28EkHQSIG2pnIVVAMbjcgAHNSaPZ05++SiDjH6LA=)
                          9: DpVlP-CDojfJd8BFvlgfdr3f-T4.roa (hash: eNNDlrOJw2Jo/OW5o5qOgoZ27JzOfR4lVRHbMkq1Bdc=)
                          10: EKuLwMJDazSSbggWLeeqY64f0qk.roa (hash: OfYUgwGcfk/wwvQIpRfbrU+7ZSV91GDPgDRf/++1XoE=)
                          11: F9UQlAebc29GSseukVGk2Ly4-ig.roa (hash: SXDWRzwFnYBqyLhZKjGPwwWVf1aIUUbUr34+3OpNV9g=)
                          12: Fm258hcKsjpIMI7amylXAkeBtU4.roa (hash: CxYZdpQYo2Xh/OoIWujdvOfnnOrO6eV3QzrjFCJmgpY=)
                          13: I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa (hash: 1D2AsC3t5Oo+fCH9DuB+RX3mIGavPSGBYdO7E8JcruM=)
                          14: Ip7B4awbZgfNeXA2x0V50-o-c9A.roa (hash: fF+qKa96LMcpcHr7gUx7PPq8EJWzQoCtAK5cioR9tRU=)
                          15: L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa (hash: v3b+ZpRVqPxC/PxnlvcYscfXPSpsRxuoNmW2s29gQ7E=)
                          16: L1z4gAbmtBr6IFjxlRf2f6QkURo.roa (hash: wfR+HjJDOFvJipZLYW4jdBeVJSrQq986lvQU2WiKhq8=)
                          17: MS8Bv_7T3F3D_VAzb7WSaLcYpfc.roa (hash: lk0a4eNfHng0En9tKf/4Xz/4DH1EMESKWrpSRzXWN9g=)
                          18: N7A86p6PRImcj39W7i3dmRULO6M.roa (hash: aoYmassX8XrXtggl4g+64gU3So7LOrBiC8s9TUO4xas=)
                          19: NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa (hash: mZou46RX6NNyW8lU0qa5tsLs6e+gZ1j+Q57s8qZ9Pp0=)
                          20: OPjyMx8xKL5yf4RsSVANbdPc_Ys.roa (hash: QpXN7MYWDyrIFi5Q477WSj/mfvseLrZe8a2xDC0OcvQ=)
                          21: OtGcmTXxtlAndkCENkgPfZ5qkpY.roa (hash: /n2XdyxLOIwoRSagcNtXKkIFcsp0vWI29IPSu/5Oazw=)
                          22: PuWhap-0muVvQV-0BrycJNZtn1s.roa (hash: cwkFpse9f5j5nHN/rRZOX3pPvRyqmiPVwVbzwBgvaHU=)
                          23: SrXqNvmuvQJBIjB0Di8xUFoZez0.roa (hash: SRA4RELyTLPR3imea02LrnsTj3Gu/dAsOF+7lBcjxe8=)
                          24: WSV7wDu_oOEWknqxauWPGgULCUo.roa (hash: cpJEa6OysfsH+SZFVKbmC8vCj4aMLj4mTs3CNrgU8T4=)
                          25: WgE1MGBGPR7k5rh3nE3hf7taSUw.roa (hash: tpDyS9JuhgZT9rKwZWlbjacZtc36iJXeis37wFMFBNY=)
                          26: XgyNYXwLhPSXrny8NDix9oprHDI.roa (hash: PWGs9rS5sBhLApUjUmFl5ISIFI1Oly8X3m/3XXPeS0g=)
                          27: Zes9PUIGZdo_9LrDP7M15p5oawc.roa (hash: 6bUtaGElpOGGE63DLlZtFA5PJo8DtZ4UODrtR53uq4o=)
                          28: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: MRDb1lJMvRY3FyHWIk+RgYA0fqYdSAkpZIKXJOwSHo8=)
                          29: als8bOZv4fKBOCQtVsZ9-tvIHNM.roa (hash: Nm1Cu1BIVmttqtDjEB5m5E1PnL0WvKuShJjAPmq2bJs=)
                          30: eVUCZ2gkOg648kh9IahZkIBOJA8.roa (hash: vMKWl4EbBRXZC+tfwMZgbq5f1CG1UUPRzQXxRawEkC0=)
                          31: fTRzb2cZPSIq__glS6tFSc9lGdI.roa (hash: /O7Vv8jDvx8wOvP3bnJZXgbV+VYFXbf+4qH/zIndzEA=)
                          32: kRm---guYcInSUKq-QookHvNTuM.roa (hash: iGZFzrsQlmqEd4hUxjMucE/uvpD/1KA4uLxkKOBPLhA=)
                          33: kmtJGb31zTt_pJ6GCyTQ9LzmkzE.roa (hash: Q5L6eWKaIz5gBzH7B4mLua9KGWq+PLDJnwr9Kj6N+qo=)
                          34: m4CMglLKx5afVc4xGa4MNQL45e0.roa (hash: aQupodLAGlRxTsd2+5VonhOCOKwRDtVmp6gxInX0RbM=)
                          35: msSEI6HlL5d64JwmuUz8Sr8pWG0.roa (hash: Te8OnG1Rs5zfBbzAKPB1q6JjnhlnmawlvBxGi0xWVuw=)
                          36: mv252XC-r2Fp7WH9gax3y1kCf_w.roa (hash: TyOu2J6Gg6ncup4jNkEuboP+B2/EiWFPV9rxEB3IXsY=)
                          37: n9jXeCQebePRp-nZqBI8SlNOL0A.roa (hash: iRFY1MascouzPY6CQ9pd/hkDj4KxTl5LRhZinPt+4Z8=)
                          38: p-MPHuSWGSGKU-iV508LoDaNCco.roa (hash: 37cZvENTegpVmdQDSXghqou7ADx6Hi6odF6Ut6YKWlo=)
                          39: pNL3oico6rSRy7HI-qZpBv7USh8.roa (hash: nkMrE3yZ9+wbGR6nyZRKmZOaTcWk2iFc5i+D0HRUuvk=)
                          40: t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa (hash: oIu2af2fOLn1wMUWQi6xhmqoR7yT8Ct2Fe39qmDYJjg=)
                          41: uf9kYM6bm6nAONdl8a65rkIYgu0.roa (hash: eilXyuZnlj2dgxzjRmoRlIqnyiAwWyw+VjTTRqknEa8=)
                          42: yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa (hash: EHU24D0qUh2tmsJEt6bSbVEdFShB4gt4fc5fgyaoi/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:8b:be:13:bb:d8:6b:f0:fa:4f:86:36:99:55:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Apr 17 02:01:00 2026 GMT
            Not After : Apr 18 02:01:00 2026 GMT
        Subject: CN=f587e70973d1674243fb9e2efa6423d1a9d5bf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:7c:c2:b1:7a:74:5c:80:a5:ae:1d:bc:e6:
                    a1:91:b8:a2:34:c9:aa:45:80:4f:6a:60:e3:2c:30:
                    f3:04:b2:82:32:3e:bb:44:7d:44:91:aa:66:af:13:
                    66:23:fe:db:80:ec:23:73:41:1c:fd:63:aa:78:a4:
                    ba:f7:4d:98:16:14:f1:9e:d3:31:e4:69:34:38:b2:
                    04:d8:4e:e1:2c:7d:29:f1:7b:d7:95:51:77:42:d8:
                    c2:e9:71:b8:70:87:b1:c5:af:a8:59:4a:c7:19:65:
                    50:1b:3f:c7:f6:ad:15:b0:e5:5d:df:8e:f8:80:a0:
                    24:0b:80:b6:00:c7:80:40:2d:e9:03:51:67:71:24:
                    38:55:9e:da:a8:63:43:2e:55:32:a5:b4:59:92:d8:
                    58:45:7f:f2:0c:30:18:f6:05:48:3f:16:2f:3a:7e:
                    2d:87:bf:ef:f7:06:1e:7f:11:b4:31:e1:e2:c2:44:
                    6c:e7:3d:2d:21:bb:c0:93:eb:55:26:cc:46:ca:d3:
                    f3:97:8d:5f:ae:c4:02:89:f5:a2:08:62:4d:95:f6:
                    13:91:3f:92:36:b2:a3:07:cc:23:25:fc:43:60:cb:
                    04:41:bf:10:6d:fe:b2:16:21:fe:15:5d:7d:b6:94:
                    8b:03:f0:61:fe:57:a8:59:2c:ef:72:93:14:5e:71:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:87:E7:09:73:D1:67:42:43:FB:9E:2E:FA:64:23:D1:A9:D5:BF:70
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:04:62:69:7d:5f:ac:78:6b:72:0e:26:02:c3:6c:eb:83:19:
         27:26:e3:9f:16:7f:28:18:86:78:cd:19:ca:be:fe:ab:c2:80:
         fc:00:b0:e1:c3:5d:78:a1:cb:ca:8e:d8:58:40:3d:19:92:9d:
         35:0c:59:87:a5:7e:d6:84:3d:5f:26:19:3d:f6:5d:b0:dc:08:
         9e:12:d6:5b:82:3e:a2:e7:e3:94:23:f3:e8:e6:9e:e1:5e:8f:
         a7:ff:56:08:e7:dd:9b:39:91:74:61:22:93:f1:71:18:1b:b7:
         4d:9f:c3:08:bb:d3:69:0f:df:97:7c:30:a4:8f:e0:6c:91:6c:
         eb:25:b4:e0:fc:e2:b6:c8:3d:32:18:95:a5:12:d9:02:c2:f2:
         81:4a:49:98:e8:98:d7:97:66:07:bf:eb:e4:66:a2:e2:fb:e0:
         1f:c6:08:32:73:64:8d:01:7d:b2:83:49:5f:fb:c6:d5:ca:91:
         12:0c:3d:78:60:b9:28:ee:84:94:9c:56:87:0d:22:44:ca:3d:
         74:74:2d:fb:19:5e:cb:e5:90:83:f9:a0:c7:43:e4:df:fb:e9:
         57:d8:38:7b:3c:d3:97:f4:ef:21:2a:c2:82:ad:d7:fc:4d:55:
         9e:39:67:ff:08:38:fc:57:5f:9d:8a:6c:e8:93:ad:48:7f:c0:
         bc:a4:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:28 2026 by rpki-client