Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          WP1gaqtQRkZVhknjs/I2ArPfhhRuZX02bJ5Cy9aZ2ZI=
Subject key identifier:   41:C4:60:3B:9F:99:91:FB:77:B3:81:BF:59:12:D9:06:77:0B:ED:A4
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019D98184815FDABFD5DDC8E086DE2400D81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0E60
Signing time:             Thu 16 Apr 2026 21:00:21 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:21 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:21 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: 4pZXrEj9yLrK_myw2vkLuHMRP3o.roa (hash: DJQK03t5tLBFY9ixKqxEvu00yd9H1jFx8XFi86QNB2Q=)
                          3: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          4: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          5: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          6: GNGk2dk3owBh0t7XjA8lYKtdBNY.roa (hash: C0SSoQPsvhCvPcaamLjO8oeUMsL4lVyuJZ6NEzbK8t8=)
                          7: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          8: KwOOI4nyHLltSmxmCqXmNAWGCTk.roa (hash: Cn4AENaFj3iDaJ2ynDP4Br7mPiKHlqswys3FUBKbke4=)
                          9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          10: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (hash: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk=)
                          11: UG4gN9aA_f7YEAcfB1dO7NY5_ek.roa (hash: nJyT2MQFpU6Fg7zPK7kL/FvpROU0th0KaXDPuCdaUZ0=)
                          12: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          14: anoAzrJOBoD9JpP5FqUgzX-f6-E.roa (hash: IskdJP4FXXgbtLijonxfuZHM9j/dth82BlTSTwUCPuk=)
                          15: b_rbJD0ZQG4ZvUjkt34Qlu8-Ccc.roa (hash: PVGQ7PuJO29dq4nCPNz/ExdypC2r9RCf0bTTn6uhOlw=)
                          16: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          17: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          18: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: oPsZEQTZ2DSc/fgrqS9ypitl3YXdSWd7Noct6wMiP40=)
                          19: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          20: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          21: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          22: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
                          23: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          24: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:48:15:fd:ab:fd:5d:dc:8e:08:6d:e2:40:0d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Apr 16 21:00:21 2026 GMT
            Not After : Apr 17 21:00:21 2026 GMT
        Subject: CN=41c4603b9f9991fb77b381bf5912d906770beda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:dc:5b:01:99:c6:3e:8b:c2:b1:a5:c8:e6:
                    a9:20:68:f3:93:29:e1:bf:1a:7f:c2:db:bb:6b:e1:
                    65:aa:6d:8b:03:d2:35:13:d5:99:39:11:d6:3f:ed:
                    78:e7:cb:af:b2:dc:e9:33:40:6a:18:aa:ac:36:e8:
                    e9:3f:1c:be:ae:6d:8f:07:4f:0b:70:6a:7a:fd:89:
                    67:eb:dd:2c:f1:1a:ac:6d:3c:5b:27:89:21:87:d5:
                    02:fe:3f:19:0b:72:5b:e4:1a:46:39:86:bd:d8:21:
                    40:46:2c:a1:06:33:f2:6a:c4:d1:6a:6d:2a:de:a5:
                    9c:6e:55:9f:91:7c:f9:d9:96:49:f1:19:89:32:8d:
                    67:51:74:56:89:45:fb:b1:c7:16:da:3d:46:e5:8a:
                    35:c0:2e:e6:12:6c:74:c1:da:53:ac:4c:b2:1a:bd:
                    9f:06:ba:06:66:63:7b:09:90:7e:a2:5a:e2:5e:5d:
                    cf:a9:0c:e6:ed:f2:74:85:b2:5f:de:c9:7a:bf:8d:
                    7f:92:52:0a:31:b7:62:f6:dc:f7:a3:4c:43:e3:64:
                    41:85:26:ec:a9:15:b8:97:fc:24:ef:b8:49:3c:2c:
                    67:0c:94:2b:f0:82:af:b8:97:99:6e:1a:06:51:23:
                    cd:b7:93:bf:63:40:02:d8:42:5c:f6:b7:9b:c9:69:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C4:60:3B:9F:99:91:FB:77:B3:81:BF:59:12:D9:06:77:0B:ED:A4
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:45:7f:49:b7:8a:4a:43:54:42:3a:68:60:22:37:5e:d7:
         4d:2d:e3:3a:25:0a:f5:70:1f:5b:21:df:1d:a1:31:ce:b3:a4:
         89:d8:e0:ae:8c:e1:3f:6d:28:8e:ec:86:32:cc:73:e2:0b:25:
         15:77:36:d5:f3:c6:f2:d2:32:41:75:ba:e5:7b:0c:29:f4:dc:
         24:03:9a:b2:fd:dd:e2:19:dc:f9:96:d7:90:ea:74:7e:2b:b7:
         5b:29:91:b2:30:3f:3e:db:44:80:92:6f:db:d5:13:c8:25:0c:
         43:e5:5b:45:d9:20:54:c0:00:8c:8c:75:39:45:ae:0e:c2:ad:
         fe:b9:18:45:55:60:71:8e:cf:84:06:aa:db:f2:93:30:56:55:
         96:52:b2:8d:e6:97:fe:b7:d6:35:e2:1c:6f:c6:71:f0:8a:a9:
         c4:89:c8:67:ce:03:22:8c:2f:e6:ea:0f:66:dd:18:5b:a7:5a:
         5f:7d:99:77:c5:c0:04:94:ec:ba:8b:a8:37:12:84:f3:9d:a1:
         c8:f8:19:98:19:a6:bf:2b:7e:d0:7c:cb:b7:2a:e6:bc:b1:f5:
         6e:cf:8c:91:50:7c:ea:82:3f:68:1e:54:0e:c6:80:c7:30:82:
         43:78:e8:5a:a7:97:02:95:69:8c:a1:96:80:f9:43:63:e1:0b:
         ba:f1:a0:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGEgV/av9XdyOCG3iQA2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjYwNDE2MjEwMDIxWhcNMjYwNDE3MjEwMDIxWjAzMTEwLwYDVQQD
Eyg0MWM0NjAzYjlmOTk5MWZiNzdiMzgxYmY1OTEyZDkwNjc3MGJlZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9DcWwGZxj6LwrGlyOapIGjzkynh
vxp/wtu7a+Flqm2LA9I1E9WZORHWP+1458uvstzpM0BqGKqsNujpPxy+rm2PB08L
cGp6/Yln690s8RqsbTxbJ4khh9UC/j8ZC3Jb5BpGOYa92CFARiyhBjPyasTRam0q
3qWcblWfkXz52ZZJ8RmJMo1nUXRWiUX7sccW2j1G5Yo1wC7mEmx0wdpTrEyyGr2f
BroGZmN7CZB+olriXl3PqQzm7fJ0hbJf3sl6v41/klIKMbdi9tz3o0xD42RBhSbs
qRW4l/wk77hJPCxnDJQr8IKvuJeZbhoGUSPNt5O/Y0AC2EJc9rebyWlwcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHEYDufmZH7d7OBv1kS2QZ3C+2kMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIixFf0m3
ikpDVEI6aGAiN17XTS3jOiUK9XAfWyHfHaExzrOkidjgrozhP20ojuyGMsxz4gsl
FXc21fPG8tIyQXW65XsMKfTcJAOasv3d4hnc+ZbXkOp0fiu3WymRsjA/PttEgJJv
29UTyCUMQ+VbRdkgVMAAjIx1OUWuDsKt/rkYRVVgcY7PhAaq2/KTMFZVllKyjeaX
/rfWNeIcb8Zx8IqpxInIZ84DIowv5uoPZt0YW6daX32Zd8XABJTsuouoNxKE852h
yPgZmBmmvyt+0HzLtyrmvLH1bs+MkVB86oI/aB5UDsaAxzCCQ3joWqeXApVpjKGW
gPlDY+ELuvGgKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:49 2026 by rpki-client