Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
File:                     k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft (raw, json)
Hash identifier:          OLApSZ16V+gRiSImPH4pbf+3nxR8OJl/9oeo94O3JrI=
Subject key identifier:   CA:8D:68:A7:86:BC:2F:69:43:B5:C1:B2:27:F8:0D:51:1B:19:F7:15
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019D9BBF481F86B4A6A29CE7338184A4D766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
Manifest number:          1942
Signing time:             Fri 17 Apr 2026 14:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:37 +0000
Files and hashes:         1: 0lYWQjZY8G9gFCxPPA6Z1e6Et7A.roa (hash: IL/oVqJCJvBcuhRa0udWrMl8b5MZPj/cIIzXYQVtlu8=)
                          2: 5FIVNBbRzzZxl83qrCNwL_6Bnpg.roa (hash: LbvZNY0tC6zYRbPYoa4ozGzRAQOXt4ZTnNFn0xhSnzY=)
                          3: 7Jo1AXxL9dWxSmwTRBFhks9Q4Vs.roa (hash: XSSzViCtmw8J0g2pF/zT6knPpk1iDv9kdN1eQqLpiqI=)
                          4: 7YkwqMeQNo1ZCW5cXDDtW6tJPIM.roa (hash: QYaRajMdHdtvejmwMr8bX6WzRjepO0NpayhGfPPYZjs=)
                          5: 8HkdlRIsSGuo1I-drFwJKzYJsLc.roa (hash: C8ZP2jpxrKvVL9+836kgNK24TF2yaO/bf4nIX98Lufg=)
                          6: 8anU_kSsbOGe6ZU0HS4gzWovLqg.roa (hash: wkDzJZRCUWlfEfFwPoPfznzkQ9x//geG8nDMwyMxFek=)
                          7: 9ZAIwXRFWAT6bwVjGxJA58LT0C8.roa (hash: cVjpGVfGUmxebxPLOp3neQi9YEZ7CKPSGNOdweHchC4=)
                          8: DYFGQ9jLmPveTVYvqmPdMOiB2II.roa (hash: 5FCw7oW9hIoLUdGZsC5C/kAqM/V+0AThqlTk43JtS4M=)
                          9: FoavqWF8jeAMSQlW10lOBirX1-Q.roa (hash: p8z3kmN7e3hhfZrzVOMRMMtYhzpF+J1m/L2uzSJKAM8=)
                          10: I7LwPdW90If5Iq8va8VVky8QjJM.roa (hash: wvgGGkRoiQOQWK8pYp5pi5jggBd+DiReaExIPv/a0Qs=)
                          11: LhzEJgeIglAa5qZWdGZklevtUTg.roa (hash: a5QqVzS7PfvbVZgoeMWUOcBUG3/k7vat/Mzm4iVPmnk=)
                          12: N70XxhXahOWN-bJRkQuA6R5YciE.roa (hash: 1GAH9fBjTX1tIK3p8QgIIyWRcnIPBnAOKx1/G/At2X4=)
                          13: NvPHM9DbtscigEStbedrS4ZnrcE.roa (hash: YiK5qvrI0X5QgkIf9YEzw+6MmxBJxVAFj9mlF+7Uj4U=)
                          14: OIjLxs6VmAGUTEzh8PSJtLBopGY.roa (hash: 8AceMO5tWwuUpBtpE1+qoQkFOUmeBKGly65yw/hi+sk=)
                          15: QowR94jtBUnFvn7mSw9HdelmuL4.roa (hash: E0Dh7cd14TaT6XnP2VIr9PfSAEJbNifsjZXKmz2LVxY=)
                          16: UsXARVO0ku9iIm3C-vStGeFRLlc.roa (hash: Za1raUPPBFhNuB0MNODIseZi3+2ddIMhH5cJ3c+pEH0=)
                          17: XYMRMU_3O-JK-JIGAvAXg1QrnRM.roa (hash: llYUO5jnzTZpvaJuLkhYws9O4QD9RoKbEnpetMF/cpY=)
                          18: _hpXRDy0EUFzfhN_aHdFdymXiIA.roa (hash: HAN6zvmeqHdwoZfGyxOd38E87FHJX9YZiFoBibK2IOk=)
                          19: eMLMK1qGxvtHAnruO9820drOkF8.roa (hash: Qpd2e+jq6odk6pRnDczmMMXkJCSUq5XQLSBI5aFLqnU=)
                          20: eyQJc6-SgirOqpkjy7BayhaUNTM.roa (hash: +9zbqq0DJW8y8iPCW5wtYdUDsTSuNxnLZXq28/HomsQ=)
                          21: g-5OExobBPKpwq86-mokeUHrM5s.roa (hash: esJBdIejJQA3R77ejO+4/6JoDvhxDi/exjc+GoZuVe8=)
                          22: hk1oju7a85YLrK-xOi3Dwyc514s.roa (hash: 47y67aqLovE6XQVviNUqEv8Eh2I5vqgHfxxqdx3QVxs=)
                          23: k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl (hash: XJlIoxq6TedJ+sW4H2IG3U0+SkZBWAsbMs35BLIl62M=)
                          24: phGDcnbsUAWKUDua2zfBGnxvvHA.roa (hash: PmqHP8zrCvf2Ikf1cbZi674FwG6W6lFWBsYqFkhhcnA=)
                          25: qZN1iGc-Xf3cp5urtHVXBZqoF5M.roa (hash: zbowHekheKN7KuV9DnFXvdpM7KjV51/aW8mu77VaWX4=)
                          26: xVkKNJRba2SGRn985sBZidqpu8Y.roa (hash: V0oEel9d63PmLfURQhNtv6FLYVRm7Iz09fE77eJwwQM=)
                          27: z4qebrlxoCTWKQYs_5DhTFQmnbQ.roa (hash: vmqtsShBDwyvuz3COzl63zKiNkUIbp3VBuhBqO6QmVQ=)
                          28: zM7bb3oEHINoYMOeQRk-XYW9EkU.roa (hash: RdFq0JyIVgelxWsJ1/n+o94CMLBqw3yV+IpTMdt32Uo=)
                          29: zhpGkkiHWYW4818HnEbqExeUBls.roa (hash: qWe+oDx2YTDIQSZZ2y2+AEfhQT4OZcU2Yuk2CoLSDWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:48:1f:86:b4:a6:a2:9c:e7:33:81:84:a4:d7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Apr 17 14:01:37 2026 GMT
            Not After : Apr 18 14:01:37 2026 GMT
        Subject: CN=ca8d68a786bc2f6943b5c1b227f80d511b19f715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:c1:ea:88:44:c6:0a:45:a3:7c:dc:4c:03:
                    c8:9f:ad:a9:25:2c:9b:ee:60:fe:ff:56:3a:27:e0:
                    75:e5:1a:cc:42:1d:78:ea:df:62:c7:2f:57:2f:b5:
                    e7:7c:66:22:7e:1d:eb:0b:f2:15:36:ea:46:e5:d8:
                    65:3a:31:27:6d:5a:2f:af:6c:2d:47:c6:81:47:20:
                    9b:24:52:2a:74:58:32:ed:06:81:f3:f7:9d:5a:47:
                    99:76:8f:3f:a7:b1:ef:bd:ab:db:66:98:56:2c:d9:
                    91:f5:4d:ef:3c:c1:cf:db:cb:34:85:72:e6:62:0a:
                    d4:14:50:05:19:ac:f2:08:46:cb:e7:d4:df:5a:ca:
                    25:26:28:e2:2e:28:0e:6f:a3:ac:e9:ed:17:ec:89:
                    ac:b1:22:73:ee:ab:b8:2f:57:37:e7:1f:1b:05:c9:
                    64:b2:0c:ad:17:95:38:42:03:d3:c8:a0:c2:b8:0f:
                    25:f8:88:ad:27:b6:9a:c4:66:dc:e2:6c:ac:03:e4:
                    06:03:8e:9e:73:fd:cd:f6:0b:0e:24:b2:01:87:9a:
                    55:b2:84:7c:6a:a0:4e:4a:73:a9:b7:71:98:7c:75:
                    71:17:6a:57:6f:0a:49:2d:45:7d:09:cc:d6:fa:97:
                    5a:55:88:b2:b8:c2:b6:a6:4a:7d:fc:1e:ec:62:12:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8D:68:A7:86:BC:2F:69:43:B5:C1:B2:27:F8:0D:51:1B:19:F7:15
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:df:fe:ce:bc:50:fb:03:73:fd:d7:f5:76:e4:1a:ff:61:72:
         1d:88:1c:b2:98:b5:31:d5:0b:f9:20:12:ad:25:21:39:fe:ae:
         7e:1f:e6:3e:3f:9f:ee:c3:35:64:f0:87:02:76:16:a7:4b:02:
         34:cd:74:c9:93:40:06:f7:be:35:25:77:67:f4:cc:e1:69:47:
         90:91:d9:c4:a7:70:ac:8a:a2:1c:27:44:7d:b1:10:24:6f:b3:
         e6:16:c3:a7:7a:44:87:f3:0c:1c:bb:8d:c6:26:4d:f4:6c:fa:
         2a:67:47:39:14:ea:b4:f8:7d:f8:90:63:27:2c:b1:9d:8a:90:
         64:af:7b:24:92:20:b0:19:a8:56:fb:57:81:29:ca:e6:12:cc:
         1e:95:5d:de:89:3c:3a:03:3b:e7:53:0f:44:bc:fe:31:c7:c3:
         71:51:5f:18:b5:9f:86:5d:fa:27:ff:3b:d2:e1:52:b6:06:56:
         1b:7c:ef:32:0b:82:0f:3f:af:f9:05:17:1d:24:7e:11:52:35:
         d1:56:0c:ed:ac:2d:36:4d:1a:85:8e:c2:2c:49:55:92:66:ee:
         82:48:37:31:93:ca:a7:d1:6c:44:93:fa:28:ae:ce:8e:e5:92:
         6d:71:d0:5d:c2:f4:f6:4a:d5:5f:a8:1c:e9:f1:e4:9e:37:4f:
         ed:7d:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:14 2026 by rpki-client