Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          NgD290murUChe/u52r4kEKKxbU1Mob/vN2KZAarH5BE=
Subject key identifier:   F9:9B:E4:54:3E:FF:3C:4E:F6:41:AA:F9:FD:A2:AF:4D:01:D7:6B:C5
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019D9886A5ACEBD61ADDE765EB71CDEA58D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          0845
Signing time:             Thu 16 Apr 2026 23:00:54 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:54 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:54 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: RvudBeJulWICKyWFi4sg2zPSLsP3svdq+Fv2sdw/0Qc=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 8WYZtuwYrNVxTGao1xnfD6DTJdQ.roa (hash: kECzxgTvYO+PrdxQixZUCF66WT+yJQBNEFYIJiJ2PsM=)
                          7: 8tbwcDTEWxf0dgERaTp1edZPByo.roa (hash: aXZAfMJklLbbNeNG0FdJjvjAVdaoK3lAXPVc0ZbcDJo=)
                          8: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          9: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          10: CkCDhPbCna91c--nA7KEJZUC0FA.roa (hash: SCFhK7kq7enPygOGahP+XtF61sybJv999OYFUdH7i+M=)
                          11: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          12: Dry5fmI7vbYODg3IRPL7HNkMZEE.roa (hash: pqWEYcMTMmr2xp+JOotJI+53hcGjaHkqIQLS6j9AKUU=)
                          13: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          14: K67tfvE4FRSPvLt2l542G0220Hc.roa (hash: b1V/he+PINE8CRmplDLJWQIH+333uWnJMPhoYbftnuE=)
                          15: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          16: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          17: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          18: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          19: jThJ8zyPfDON0l1aonw1ID8g1mg.roa (hash: jThi472vhZRzgny5FoiQHNxN0cWcyfPRCG/AaRi78ZE=)
                          20: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          21: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          22: pz9sbNQnRsD3lDmS_3sNQSGUNlM.roa (hash: 6ImAyjB++uGSJlAdPGguoq0Hb1TaQ164wmSn84u2CX8=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:a5:ac:eb:d6:1a:dd:e7:65:eb:71:cd:ea:58:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Apr 16 23:00:54 2026 GMT
            Not After : Apr 17 23:00:54 2026 GMT
        Subject: CN=f99be4543eff3c4ef641aaf9fda2af4d01d76bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:3f:88:ec:1e:3f:c0:79:2c:22:71:1c:e7:
                    1d:df:f5:c0:1d:61:68:2b:f4:16:1a:d1:96:f1:e1:
                    d2:18:71:c7:d4:c8:68:aa:ad:88:dc:f7:73:37:8d:
                    04:24:3d:4c:bf:62:49:eb:95:5f:03:57:70:d0:1c:
                    d6:ce:be:69:2f:20:43:21:51:33:c7:07:65:b5:39:
                    88:1b:90:7b:c8:04:f4:ae:6a:07:19:3c:c9:00:f2:
                    38:fe:ac:b7:9c:0d:f3:95:4a:98:d4:e6:3e:35:b7:
                    6f:2a:a3:51:de:95:eb:f5:b7:d9:55:f5:ff:09:ab:
                    b2:40:df:cf:d7:75:fc:4c:d1:19:c7:75:0a:33:77:
                    18:08:04:ad:6d:f9:00:72:b5:7e:aa:95:0e:ff:24:
                    e5:3c:73:88:c1:ea:fd:ae:a8:04:d3:cd:7f:9f:4e:
                    c9:64:87:70:e7:e2:1c:b3:f4:80:2b:6f:e7:ae:80:
                    f4:0c:6b:ed:4b:4d:fc:18:14:fd:38:e4:ab:35:54:
                    4e:05:59:3b:b7:04:e6:8f:d9:29:f2:06:7a:cb:2d:
                    03:1b:96:3d:ba:e1:be:98:7d:65:f4:46:38:53:2d:
                    31:d6:19:80:9e:d0:0d:7a:c0:4d:0e:11:33:00:de:
                    f3:9c:a2:c6:c5:7b:c3:1f:a0:c7:8f:d5:d5:00:d2:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9B:E4:54:3E:FF:3C:4E:F6:41:AA:F9:FD:A2:AF:4D:01:D7:6B:C5
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:5b:3c:2d:66:d7:7d:cb:72:4d:c8:e4:08:26:89:18:34:
         6a:ea:24:60:e6:b3:c4:a5:d3:ee:59:cf:a1:a5:dd:1e:88:ee:
         f0:d8:d9:c0:ea:78:e5:8f:ca:68:e4:3a:ce:4f:f7:f9:9c:bf:
         d5:e9:00:cf:52:fc:dc:12:c7:95:a9:83:f2:46:bd:cd:e7:b5:
         6c:4b:ae:2a:97:cd:e5:35:be:a3:57:32:32:b0:b5:a6:e0:e9:
         31:59:ed:46:b2:72:9a:8b:fb:19:c0:78:6d:ac:ca:20:d0:cc:
         f6:28:d4:0e:68:20:a8:6a:12:e7:44:63:7e:38:ed:e2:8c:a5:
         f1:fe:90:3b:a0:71:c4:99:89:ca:72:e0:24:04:f6:c5:37:37:
         55:8f:b1:90:ea:64:81:09:b4:5f:20:a8:0b:92:c3:ec:24:be:
         49:ce:cf:93:06:63:50:a4:1f:76:81:23:e6:0f:72:c4:45:fb:
         8d:26:c8:25:29:0f:e6:99:f0:7a:2d:38:10:e4:b9:31:b4:24:
         72:67:02:74:77:a1:f7:45:0b:4a:f9:03:7d:43:6e:a1:c3:a5:
         81:fc:c4:d8:39:4f:44:4a:90:4e:92:57:6f:76:4f:61:f9:ef:
         23:b6:2b:e8:00:5f:2a:2e:a1:06:f8:7c:c7:2e:c6:1f:b1:b3:
         ac:4d:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:42 2026 by rpki-client