Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          iEC/ziTNaxRsMqu+KcCLiy9BLVskZVhLFbPmMbdyxaY=
Subject key identifier:   99:AB:AF:78:DB:67:1F:18:42:1B:32:FF:AD:FB:89:18:97:38:C5:59
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       019D996294B41728574EC8B3D213A49873A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          18F0
Signing time:             Fri 17 Apr 2026 03:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:07 +0000
Files and hashes:         1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
                          2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: LiWZOx2LZ7tO9pJID9Rui/YdTqUNUgG9aV07yB1+zXg=)
                          4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
                          5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
                          6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
                          7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
                          8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
                          9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
                          10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
                          11: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (hash: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc=)
                          12: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
                          13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
                          14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
                          15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
                          16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
                          17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
                          18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
                          19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
                          20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
                          21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:94:b4:17:28:57:4e:c8:b3:d2:13:a4:98:73:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Apr 17 03:01:07 2026 GMT
            Not After : Apr 18 03:01:07 2026 GMT
        Subject: CN=99abaf78db671f18421b32ffadfb89189738c559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:6c:61:88:b4:70:a6:27:5f:af:60:8a:84:
                    cc:70:19:df:a4:d2:54:98:8b:97:23:57:c0:bf:d1:
                    aa:10:9d:db:dc:37:bf:f3:8b:43:70:48:54:63:bc:
                    2a:cb:83:31:c2:43:ba:7f:04:60:b7:16:9c:fa:56:
                    32:44:73:68:58:63:ea:f4:36:de:83:62:1a:e4:3a:
                    f0:3e:ce:69:79:a9:3a:e6:52:de:ce:03:21:03:e8:
                    d5:a4:01:d1:5d:e0:6c:e9:6c:d9:bd:70:89:de:83:
                    de:14:50:22:69:b6:7a:be:21:29:3d:84:0b:37:9b:
                    2c:19:c8:40:d6:f1:cf:c7:a1:7b:68:3d:dc:25:6a:
                    23:9b:fb:89:a9:3f:04:48:14:a5:c4:d4:20:af:f6:
                    99:8b:70:d5:95:49:31:bb:9f:10:1e:27:a9:f0:3a:
                    64:37:88:43:54:8d:8b:65:ad:04:4b:c7:6b:1d:31:
                    45:bc:46:45:b6:64:60:6a:24:58:63:a8:13:7b:c7:
                    40:15:64:5a:d5:fe:c3:00:3b:8c:0c:ca:b1:37:67:
                    60:61:b0:4e:a3:e2:cd:9f:af:8a:2f:97:94:9c:30:
                    cc:f3:49:f8:ab:df:9d:b4:8b:eb:00:1c:64:19:41:
                    6f:03:44:f8:07:b3:57:b6:f1:cf:e1:48:9e:8e:97:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AB:AF:78:DB:67:1F:18:42:1B:32:FF:AD:FB:89:18:97:38:C5:59
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:37:ed:5f:bc:25:81:85:99:81:3e:2a:63:eb:ed:62:dc:7d:
         dc:3d:b9:d6:11:b0:08:51:ff:81:40:8d:24:51:42:cd:ad:7c:
         20:29:d1:a2:00:43:00:a0:1e:6a:db:9f:6f:45:58:8e:3e:b8:
         3d:16:ac:43:75:aa:5d:85:ba:b8:e1:06:a1:44:85:c8:15:ff:
         89:7c:ec:56:ba:c1:e4:12:91:e2:bd:1d:55:04:29:55:bd:0a:
         59:82:a2:2d:4c:6e:09:b3:e8:84:7a:c8:b4:ce:32:6e:d8:e0:
         75:88:66:72:7b:0a:d9:43:ef:1e:0f:10:98:c7:89:94:7e:17:
         12:1c:de:52:a1:02:e4:3a:2c:41:cb:47:2e:f8:f0:21:d2:0e:
         45:3e:b6:52:20:75:2f:41:41:dc:a0:78:a7:69:54:cb:f5:4a:
         3b:98:83:cc:8b:d0:48:1d:3b:0e:da:63:0b:99:c3:18:ed:fa:
         2c:c8:a0:ad:9c:c0:d1:94:2d:91:21:28:50:44:a5:cc:d1:b4:
         1a:8e:f1:2c:20:0e:94:55:16:16:1a:af:93:82:dd:ae:5e:3b:
         92:74:0a:29:28:3b:42:c2:24:f4:ac:bd:4f:e1:4c:5a:4b:47:
         01:6f:9c:60:05:64:31:06:ac:68:e2:ca:8d:99:c7:d3:ea:40:
         22:c3:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:20:41 2026 by rpki-client