Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          HJ58ZLZPF3EBZcxNi7dx3Ko9uIQjZ/72Ko6lFXex67s=
Subject key identifier:   E8:DE:BE:DC:9D:CC:B8:D9:F0:85:6F:2E:55:D7:2C:F7:E1:20:7A:14
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       019EBEEC87507B3020CAE2307276F4DF30F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          1988
Signing time:             Sat 13 Jun 2026 03:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:32 +0000
Files and hashes:         1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
                          2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: tnWOu9Bo0CtDQRhmYQOkiDxxrYabWKa1QQCCX2B/XYk=)
                          4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
                          5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
                          6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
                          7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
                          8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
                          9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
                          10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
                          11: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (hash: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc=)
                          12: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
                          13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
                          14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
                          15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
                          16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
                          17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
                          18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
                          19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
                          20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
                          21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:87:50:7b:30:20:ca:e2:30:72:76:f4:df:30:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jun 13 03:00:32 2026 GMT
            Not After : Jun 14 03:00:32 2026 GMT
        Subject: CN=e8debedc9dccb8d9f0856f2e55d72cf7e1207a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:2f:b6:63:d4:29:e1:57:de:d6:9c:d0:af:
                    6a:96:67:65:c3:a4:0d:cd:d2:b7:df:04:5e:19:28:
                    ed:5b:11:fc:d0:c5:cd:ea:68:b7:7e:13:3f:17:b6:
                    e9:46:ed:56:04:b0:86:7f:52:c0:55:7c:31:21:94:
                    17:74:5c:b4:38:ea:3c:7f:b4:40:65:c4:89:2b:bf:
                    d4:9c:bb:79:36:75:4b:a0:8e:86:da:82:9c:92:9a:
                    df:41:ef:73:83:0b:65:b1:de:8c:f8:56:5c:d9:c9:
                    2b:76:72:9d:10:c6:6f:c7:81:27:67:2e:42:37:93:
                    47:ec:28:5f:76:d2:78:3f:06:41:7e:5f:b2:35:a5:
                    a6:ae:02:4f:b9:a8:56:d1:a2:8f:fb:70:a8:48:75:
                    e1:4c:eb:e6:33:a8:45:a6:a9:9e:da:c6:fc:cd:6b:
                    0d:e5:05:8f:9a:0c:e2:77:dd:dd:ca:d5:ab:6f:fb:
                    b9:c4:8e:e0:90:4e:b3:bb:1c:f2:22:08:c9:71:95:
                    03:02:90:a4:de:2d:52:6f:b5:42:02:c6:ba:cc:a7:
                    e5:c6:91:49:59:9f:ad:e7:6f:f3:c8:52:4a:01:08:
                    ca:97:46:ae:54:38:cf:61:f2:c9:66:d8:b8:31:5b:
                    b5:38:23:7c:ea:85:8d:49:f0:36:c0:b4:4f:39:26:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:BE:DC:9D:CC:B8:D9:F0:85:6F:2E:55:D7:2C:F7:E1:20:7A:14
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:8e:33:b5:f9:6e:f1:d5:0a:d3:eb:04:22:5c:f4:04:e8:
         d0:0c:ba:28:c5:73:0f:23:f8:de:ff:8c:3c:65:2f:59:24:cf:
         79:66:20:89:a3:47:70:77:7c:a0:29:82:83:2c:13:b0:88:89:
         6a:6f:f2:5b:84:52:a3:46:0b:39:cb:93:9a:f7:9c:95:cd:56:
         77:db:54:45:36:3e:8b:b0:8d:61:1e:d4:40:e5:e5:5d:dc:a1:
         ce:31:41:f4:72:1a:82:3b:e5:8a:29:82:99:9e:ea:e3:e1:bd:
         16:9b:a9:02:4f:74:68:c6:3b:63:0e:7f:6d:88:cb:dd:80:73:
         50:b5:72:1e:0f:96:3d:53:cd:30:84:cd:85:68:7e:94:59:0d:
         0f:f1:38:a0:88:92:fa:5d:f8:c8:39:64:6a:ad:c8:62:c1:61:
         9a:ab:40:c9:69:42:b1:f4:48:1f:41:8a:da:e5:22:ba:38:51:
         19:1e:d6:ea:a8:b5:3d:14:e2:c7:a5:ac:f4:95:bb:2c:53:06:
         f3:20:6a:63:56:f3:bd:d8:2e:6c:99:f7:25:c4:9d:ec:2b:c1:
         72:18:d4:1f:52:f4:b2:86:d3:d6:b6:ad:cc:07:06:66:48:f1:
         13:9f:79:f9:f3:25:74:25:3f:9c:a0:fd:28:8e:77:3c:dc:b7:
         d9:3a:0d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7IdQezAgyuIwcnb03zD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjYwNjEzMDMwMDMyWhcNMjYwNjE0MDMwMDMyWjAzMTEwLwYDVQQD
EyhlOGRlYmVkYzlkY2NiOGQ5ZjA4NTZmMmU1NWQ3MmNmN2UxMjA3YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAcvtmPUKeFX3tac0K9qlmdlw6QN
zdK33wReGSjtWxH80MXN6mi3fhM/F7bpRu1WBLCGf1LAVXwxIZQXdFy0OOo8f7RA
ZcSJK7/UnLt5NnVLoI6G2oKckprfQe9zgwtlsd6M+FZc2ckrdnKdEMZvx4EnZy5C
N5NH7ChfdtJ4PwZBfl+yNaWmrgJPuahW0aKP+3CoSHXhTOvmM6hFpqme2sb8zWsN
5QWPmgzid93dytWrb/u5xI7gkE6zuxzyIgjJcZUDApCk3i1Sb7VCAsa6zKflxpFJ
WZ+t52/zyFJKAQjKl0auVDjPYfLJZti4MVu1OCN86oWNSfA2wLRPOSYC7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjevtydzLjZ8IVvLlXXLPfhIHoUMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVqOM7X5
bvHVCtPrBCJc9ATo0Ay6KMVzDyP43v+MPGUvWSTPeWYgiaNHcHd8oCmCgywTsIiJ
am/yW4RSo0YLOcuTmveclc1Wd9tURTY+i7CNYR7UQOXlXdyhzjFB9HIagjvliimC
mZ7q4+G9FpupAk90aMY7Yw5/bYjL3YBzULVyHg+WPVPNMITNhWh+lFkND/E4oIiS
+l34yDlkaq3IYsFhmqtAyWlCsfRIH0GK2uUiujhRGR7W6qi1PRTix6Ws9JW7LFMG
8yBqY1bzvdgubJn3JcSd7CvBchjUH1L0sobT1ratzAcGZkjxE595+fMldCU/nKD9
KI53PNy32ToNjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:36 2026 by rpki-client