Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          tGgaIxTZLBU/y2pk739d5jQA9ijqxR7xVBeqMdEMoTw=
Subject key identifier:   EE:83:E9:25:61:DF:3D:49:48:E0:03:71:EA:31:87:2E:5B:5C:58:C0
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019D9D3F7B77116551480B5863D3C3C82D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          1271
Signing time:             Fri 17 Apr 2026 21:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:16 +0000
Files and hashes:         1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
                          2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
                          3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
                          4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
                          5: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
                          6: 8pNY12YDpGrnDKduWHlcW7mEsQE.roa (hash: zQP2Qnvl73y+y1TLtAVLaO6F1EdYkhaAokyupxVYD9g=)
                          7: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
                          8: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=)
                          9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
                          10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
                          11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
                          12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
                          13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
                          14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
                          15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
                          16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=)
                          17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
                          18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
                          19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
                          20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
                          21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
                          22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: ro/NynpBbfjAjyAPtZ4i3mqHQhrQbD3F9vo5sNaxawY=)
                          23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
                          24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
                          25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
                          26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
                          27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:7b:77:11:65:51:48:0b:58:63:d3:c3:c8:2d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Apr 17 21:01:16 2026 GMT
            Not After : Apr 18 21:01:16 2026 GMT
        Subject: CN=ee83e92561df3d4948e00371ea31872e5b5c58c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:d2:9a:4e:f5:6c:5e:2a:69:48:84:25:dc:
                    61:7d:83:da:96:21:41:62:1b:f7:91:ab:39:cc:33:
                    d1:78:ef:12:2e:80:02:30:d0:1a:a2:f7:47:0f:c1:
                    4f:dc:cf:c6:08:2e:8c:87:3a:29:14:08:96:86:94:
                    2a:5d:61:88:32:56:57:f0:0f:19:82:83:73:63:33:
                    f5:fe:2a:f5:d3:36:c5:0a:d8:1a:c6:a0:3a:07:cf:
                    66:a8:03:fc:f7:f7:05:3f:7e:18:9e:95:97:f8:1f:
                    e4:7a:2e:d9:9c:66:e2:40:b2:01:40:ec:77:88:31:
                    ae:25:55:7c:3b:11:13:3b:eb:7c:5d:b5:84:de:4c:
                    3c:21:28:e0:4c:78:45:1c:94:31:d9:e8:96:61:5c:
                    db:f2:83:6b:c6:b3:80:b9:ba:5b:e9:cc:34:2e:01:
                    a3:4e:9d:87:cb:86:f2:82:ef:95:7f:24:73:29:10:
                    0d:77:d0:d7:93:b3:ee:4d:9f:97:ed:99:77:e3:a9:
                    17:fd:ae:15:5d:f8:4b:6b:a1:9e:82:81:0c:6e:d1:
                    15:68:f8:06:0d:04:b5:85:66:76:2f:d7:56:6e:f2:
                    fa:ad:04:4b:1f:73:c6:4e:58:bf:12:8a:3c:5c:48:
                    2c:5c:f3:46:47:f2:92:0d:4f:a2:2d:2b:3b:44:ee:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:E9:25:61:DF:3D:49:48:E0:03:71:EA:31:87:2E:5B:5C:58:C0
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e4:87:ba:19:46:9f:0b:c0:83:43:a0:81:4d:50:b7:34:86:
         9c:14:b5:09:f9:e5:ed:c6:58:ad:67:f9:f2:a0:6a:47:15:81:
         ae:f1:6e:f2:b4:58:ff:a7:bd:bc:9e:02:bf:2c:67:78:7b:35:
         58:81:1a:7e:99:a1:c9:3f:10:17:bf:cc:60:e7:4c:2e:22:e0:
         c3:c2:57:f5:f6:99:7d:29:2e:c1:62:bf:01:10:2b:47:a1:f8:
         b6:20:fb:4a:5f:df:64:25:5c:4d:de:57:8a:4d:5e:fb:ad:f2:
         f9:8f:2d:de:ee:cc:cd:fa:90:c5:67:84:d6:4b:ba:d4:f5:bd:
         cd:82:9d:a2:7e:c2:57:06:0a:31:7f:f7:76:2b:cf:e3:37:f1:
         0f:09:92:0f:89:4c:d1:14:1e:2e:df:29:1c:dd:12:0d:45:4e:
         84:9c:54:ce:bb:3e:fd:60:a8:4c:99:43:70:c2:a2:de:b7:a0:
         5a:c7:7d:65:36:7c:12:b4:7b:a6:07:51:56:57:2b:d5:e8:66:
         a8:7b:35:53:61:82:18:49:1b:e7:17:4e:a7:87:60:bc:d6:11:
         6e:70:e9:66:af:31:d4:55:b4:1b:98:20:0a:7f:6c:37:d6:99:
         47:ac:cc:c7:01:47:d1:d7:b4:be:a6:00:0e:bb:8a:31:11:36:
         29:c7:89:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP3t3EWVRSAtYY9PDyC07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjYwNDE3MjEwMTE2WhcNMjYwNDE4MjEwMTE2WjAzMTEwLwYDVQQD
EyhlZTgzZTkyNTYxZGYzZDQ5NDhlMDAzNzFlYTMxODcyZTViNWM1OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBjSmk71bF4qaUiEJdxhfYPaliFB
Yhv3kas5zDPReO8SLoACMNAaovdHD8FP3M/GCC6MhzopFAiWhpQqXWGIMlZX8A8Z
goNzYzP1/ir10zbFCtgaxqA6B89mqAP89/cFP34YnpWX+B/kei7ZnGbiQLIBQOx3
iDGuJVV8OxETO+t8XbWE3kw8ISjgTHhFHJQx2eiWYVzb8oNrxrOAubpb6cw0LgGj
Tp2Hy4bygu+VfyRzKRANd9DXk7PuTZ+X7Zl346kX/a4VXfhLa6GegoEMbtEVaPgG
DQS1hWZ2L9dWbvL6rQRLH3PGTli/Eoo8XEgsXPNGR/KSDU+iLSs7RO5SFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6D6SVh3z1JSOADceoxhy5bXFjAMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+SHuhlG
nwvAg0OggU1QtzSGnBS1Cfnl7cZYrWf58qBqRxWBrvFu8rRY/6e9vJ4CvyxneHs1
WIEafpmhyT8QF7/MYOdMLiLgw8JX9faZfSkuwWK/ARArR6H4tiD7Sl/fZCVcTd5X
ik1e+63y+Y8t3u7MzfqQxWeE1ku61PW9zYKdon7CVwYKMX/3divP4zfxDwmSD4lM
0RQeLt8pHN0SDUVOhJxUzrs+/WCoTJlDcMKi3regWsd9ZTZ8ErR7pgdRVlcr1ehm
qHs1U2GCGEkb5xdOp4dgvNYRbnDpZq8x1FW0G5ggCn9sN9aZR6zMxwFH0de0vqYA
DruKMRE2KceJZw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:15:08 2026 by rpki-client