Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File:                     H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier:          EovllpYJGCzaUiL0+leGNqFxja3fd6r6jpxzF9AZjOo=
Subject key identifier:   E1:78:23:AE:9C:63:7C:6B:11:A2:4C:80:38:82:EC:BD:C7:81:EC:19
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       019D98BD4A79EC9E6F871135BD3F8FF44C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number:          18DF
Signing time:             Fri 17 Apr 2026 00:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:35 +0000
Files and hashes:         1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=)
                          2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=)
                          3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=)
                          4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=)
                          5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=)
                          6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=)
                          7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: 7sb2u/DaMBPP+7bID6T8JyLQLrwMUkOsmuTGtOWfv4w=)
                          8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=)
                          9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=)
                          10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=)
                          11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=)
                          12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=)
                          13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=)
                          14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=)
                          15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=)
                          16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=)
                          17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=)
                          18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=)
                          19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=)
                          20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=)
                          21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=)
                          22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=)
                          23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=)
                          24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=)
                          25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=)
                          26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=)
                          27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=)
                          28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=)
                          29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=)
                          30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=)
                          31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=)
                          32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=)
                          33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=)
                          34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=)
                          35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:4a:79:ec:9e:6f:87:11:35:bd:3f:8f:f4:4c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Apr 17 00:00:35 2026 GMT
            Not After : Apr 18 00:00:35 2026 GMT
        Subject: CN=e17823ae9c637c6b11a24c803882ecbdc781ec19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:29:f1:af:e6:d9:4f:b1:c7:c2:d3:d2:4d:
                    7d:7d:eb:5d:2a:cd:2c:0d:6c:ab:cb:9a:14:6a:fd:
                    e4:ae:87:9a:8a:73:71:71:7e:c8:51:35:88:66:fa:
                    85:db:2e:49:e9:70:e3:16:ee:4e:ad:38:8c:46:09:
                    0f:c6:0b:9f:33:b8:fc:b4:91:fc:1a:68:b6:dd:3d:
                    10:23:c9:a2:43:f2:05:af:eb:42:c8:70:bf:32:2b:
                    3d:67:00:8e:2b:4c:18:2c:d2:e7:64:44:a8:d1:84:
                    c0:e7:39:eb:a7:42:41:cd:e6:5e:37:51:78:0c:3b:
                    f6:fc:6a:2d:c4:8a:90:48:ec:f9:98:af:f6:e1:7d:
                    0f:61:1a:24:78:5a:a9:ab:f5:c5:2b:12:3c:df:a9:
                    fc:f5:a8:db:8f:34:ed:b6:b8:fb:a6:68:10:1d:bf:
                    4b:a1:9f:14:6c:65:a2:cc:c4:93:27:9c:54:a3:11:
                    3e:4e:4d:03:2b:a7:4e:db:82:d5:bb:40:de:c4:8c:
                    39:8a:ac:9b:42:20:c2:b8:00:57:0a:60:fd:43:0a:
                    e6:73:d7:56:57:e6:4e:82:de:46:93:e2:b6:3a:3b:
                    ff:e2:5e:db:c8:7e:58:76:5c:af:d0:85:83:f5:39:
                    1d:cd:97:b6:e9:06:07:54:5a:9e:90:12:10:c9:ae:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:23:AE:9C:63:7C:6B:11:A2:4C:80:38:82:EC:BD:C7:81:EC:19
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:0d:19:b2:17:1c:7d:de:56:41:59:4b:a8:d4:b7:25:93:
         ac:5f:a0:e4:27:d9:bc:c7:48:f5:34:92:04:1f:66:f3:22:95:
         36:23:71:8a:1a:3a:3d:34:16:32:b4:f7:ee:97:70:7d:63:69:
         aa:48:5b:b2:28:5a:a2:b9:5c:e5:4e:f7:c5:00:20:35:aa:69:
         2b:d5:f1:20:b3:b2:e4:13:f5:38:2e:7c:e7:80:88:97:27:e7:
         bf:01:20:51:72:0b:f3:53:44:f4:c6:2a:8d:c4:50:96:98:1f:
         c5:84:c5:35:2e:76:8f:58:27:38:97:d1:bd:72:2f:32:b7:4d:
         62:fa:42:59:ea:f7:e0:81:57:de:cb:73:25:38:89:d5:30:85:
         65:12:6e:f3:dc:0b:b6:26:58:8b:a4:31:de:10:23:94:99:4f:
         17:ac:1a:4d:26:0a:e6:e1:73:53:ee:cf:71:48:af:6e:3a:09:
         e1:f3:ef:11:d7:15:fa:97:50:8c:96:bf:5a:fb:07:04:70:44:
         01:44:f4:12:01:31:bc:7a:3e:b0:e0:94:72:44:c1:2e:33:6a:
         1c:6a:cb:9a:01:d8:c7:1f:97:46:87:c2:30:6d:04:00:02:28:
         36:a1:c6:b1:bf:53:ac:01:ef:a5:43:52:b5:d6:8f:d7:b4:9c:
         30:50:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:59 2026 by rpki-client