Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          E0xuZJrtfHWeQADKv6E4u1d4jUx4uyY2O07UtJkqLtM=
Subject key identifier:   F5:63:C1:8C:02:B6:1A:AC:61:DD:A7:02:71:65:8C:A5:91:36:8A:B0
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019D9CD0DAD995BDE1F2C63E3BB4F3C63EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          1146
Signing time:             Fri 17 Apr 2026 19:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 19:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 19:00:26 +0000
Files and hashes:         1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=)
                          2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=)
                          3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=)
                          4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=)
                          5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=)
                          6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=)
                          7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=)
                          8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=)
                          9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=)
                          10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=)
                          11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=)
                          12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=)
                          13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=)
                          14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=)
                          15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=)
                          16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=)
                          17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=)
                          18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=)
                          19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=)
                          20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=)
                          21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=)
                          22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=)
                          23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=)
                          24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=)
                          25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=)
                          26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=)
                          27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=)
                          28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=)
                          29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=)
                          30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=)
                          31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=)
                          32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: b3PlDdo89UbzUZg8FvKwuWnNufmsy6PlrIih1HvubdI=)
                          33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=)
                          34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=)
                          35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=)
                          36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d0:da:d9:95:bd:e1:f2:c6:3e:3b:b4:f3:c6:3e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Apr 17 19:00:26 2026 GMT
            Not After : Apr 18 19:00:26 2026 GMT
        Subject: CN=f563c18c02b61aac61dda70271658ca591368ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:51:a0:fe:80:f6:ad:5f:36:67:a4:15:2b:
                    8b:96:6d:83:d0:7c:49:0b:5f:e2:fc:76:83:ba:36:
                    e3:0f:8f:dc:46:f8:b5:5e:03:c4:c0:8d:f4:cb:a0:
                    30:56:e4:54:14:d8:ec:bf:65:89:82:a3:ca:e1:c1:
                    90:b5:43:e6:7b:06:69:ad:70:32:62:b9:27:af:1b:
                    d7:cf:c6:4a:88:dc:4e:18:19:ec:6d:b2:52:8e:a2:
                    3b:7a:f4:f5:b5:9d:25:a5:c3:6d:f5:3a:72:ee:a6:
                    f0:18:77:61:84:67:dd:12:b9:fd:70:56:39:47:b9:
                    99:4a:37:c9:34:1e:ca:46:cf:68:4a:ce:d2:16:28:
                    dc:bf:8a:95:8a:dd:8a:9e:8f:0f:67:0a:f2:3c:32:
                    bf:23:d4:3b:7d:6c:2f:9d:4d:f5:34:48:3c:b3:62:
                    41:3b:1e:e6:d3:1b:17:65:d1:a5:82:10:33:c5:40:
                    a1:3d:b2:5b:01:79:31:c5:8b:60:ad:8b:27:4c:9a:
                    ee:28:11:dc:11:bf:35:dc:7e:76:2f:10:78:32:9a:
                    0b:92:a3:f5:a2:10:c3:40:1e:32:43:fb:26:c9:c9:
                    65:7d:fe:71:a6:7f:30:57:bd:f4:2b:ed:d5:8c:2d:
                    8f:82:40:13:93:fb:5f:2e:52:18:0e:a6:c0:15:a9:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:63:C1:8C:02:B6:1A:AC:61:DD:A7:02:71:65:8C:A5:91:36:8A:B0
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:7c:b1:02:a8:7e:7a:e8:ab:27:90:b7:a3:ca:85:d3:12:
         46:89:a7:30:c3:d4:ec:5e:a0:37:1b:db:f3:61:7e:04:83:56:
         ee:e1:95:b4:ff:cd:ad:82:3d:b3:9b:bb:ea:41:e2:8c:6f:14:
         ad:ea:62:dc:77:c1:d0:aa:1d:82:0f:d0:06:7d:93:bb:eb:a6:
         0c:aa:ef:ee:2e:d5:fc:29:b1:82:8c:ac:b9:d8:e1:2d:6c:90:
         72:90:de:28:b1:73:79:c4:a5:d3:f3:a9:19:59:ea:fc:4a:bf:
         f3:54:a0:a4:86:53:bd:48:57:14:66:63:19:ec:db:aa:79:0c:
         b1:e9:bb:0e:39:46:62:41:b4:e8:f1:03:84:de:b4:d0:81:9a:
         9c:ff:ba:a4:94:ba:11:3e:9a:d6:79:9a:7b:b1:8b:b5:03:c8:
         a6:8f:ea:24:8f:4b:c0:63:af:5a:6f:f0:c7:ed:60:b5:7a:79:
         ad:97:ee:23:b4:88:27:b2:27:8d:c4:d9:e5:cc:91:9f:32:b2:
         70:1a:a3:6f:ac:94:37:07:c6:b5:3e:d5:a4:28:ad:3f:d0:52:
         87:48:13:6f:41:de:cf:6f:fe:a6:60:80:d1:7b:f2:b0:e4:2f:
         63:0e:6f:e2:f3:47:3e:2c:60:7b:c8:ad:c2:40:d5:83:b3:ad:
         83:9d:2a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0NrZlb3h8sY+O7Tzxj6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjYwNDE3MTkwMDI2WhcNMjYwNDE4MTkwMDI2WjAzMTEwLwYDVQQD
EyhmNTYzYzE4YzAyYjYxYWFjNjFkZGE3MDI3MTY1OGNhNTkxMzY4YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b1RoP6A9q1fNmekFSuLlm2D0HxJ
C1/i/HaDujbjD4/cRvi1XgPEwI30y6AwVuRUFNjsv2WJgqPK4cGQtUPmewZprXAy
YrknrxvXz8ZKiNxOGBnsbbJSjqI7evT1tZ0lpcNt9Tpy7qbwGHdhhGfdErn9cFY5
R7mZSjfJNB7KRs9oSs7SFijcv4qVit2Kno8PZwryPDK/I9Q7fWwvnU31NEg8s2JB
Ox7m0xsXZdGlghAzxUChPbJbAXkxxYtgrYsnTJruKBHcEb813H52LxB4MpoLkqP1
ohDDQB4yQ/smycllff5xpn8wV730K+3VjC2PgkATk/tfLlIYDqbAFakX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVjwYwCthqsYd2nAnFljKWRNoqwMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnt8sQKo
fnroqyeQt6PKhdMSRomnMMPU7F6gNxvb82F+BINW7uGVtP/NrYI9s5u76kHijG8U
repi3HfB0Kodgg/QBn2Tu+umDKrv7i7V/CmxgoysudjhLWyQcpDeKLFzecSl0/Op
GVnq/Eq/81SgpIZTvUhXFGZjGezbqnkMsem7DjlGYkG06PEDhN600IGanP+6pJS6
ET6a1nmae7GLtQPIpo/qJI9LwGOvWm/wx+1gtXp5rZfuI7SIJ7InjcTZ5cyRnzKy
cBqjb6yUNwfGtT7VpCitP9BSh0gTb0Hez2/+pmCA0XvysOQvYw5v4vNHPixge8it
wkDVg7Otg50qeg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:56 2026 by rpki-client