Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          rz627VkGVlkkA7+OgDIsvOjNhLcsXWruDEskCUCv0HQ=
Subject key identifier:   0A:01:50:D0:B3:35:4F:53:8D:65:9D:13:07:07:45:DB:28:EE:00:F0
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       019D98189DD80BBDC30AC875D2BB25EC4E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          030A
Signing time:             Thu 16 Apr 2026 21:00:43 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:43 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:43 +0000
Files and hashes:         1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
                          2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
                          3: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
                          4: AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa (hash: PtBxNCrF8QX0P315dOs4ZmrXEvyhJt7cb+0UMIIHYW4=)
                          5: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=)
                          6: DTFBVkNmjB6PhyrTaLTWnml2VXw.roa (hash: g4SO01LxYc8TpYd25tyes0oCoTRef/gNrpZdhyO//98=)
                          7: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
                          8: IdcY3v8c0CZDDmi3STdilJPAqYA.roa (hash: MtpvUlKM4NkKs2dwWGucxHDKfkZ77Tg0i1COdRQImog=)
                          9: WIxhLEYJGDRzvi2YQPkejSnZcyY.roa (hash: IQv8lDCReAIo1vSxymiyMrbwR8Ln0jB9PXL5wzjZ1uM=)
                          10: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
                          11: YGgmrBWdNr2gr-PCb7IviufXu1s.roa (hash: XCRz3ie5NHXPDBJb939GkB0ydCGEbtQ+g5/MkaAJQ/w=)
                          12: _xmWsoblg-srepf2TBlEaVdiPKk.roa (hash: SBm95kG9MVfOfU1RVM03bP0Do3XJkhBWqnBtVJgoGS8=)
                          13: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
                          14: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
                          15: ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa (hash: 1kO7KglXg+mOXu0757cqWUOoHLIBVcVZE3NF8cCE/Wk=)
                          16: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
                          17: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: Xt0FKbvKcDyTu+dkjDc/hlgE9/ZyNXXuR+NP4SA4MuI=)
                          18: sLk-izSTWX7GM5E-kM2g-ymgESA.roa (hash: a3gJXW/HoyQtdrjVm/h5X6VgqIynZQ0Fud92Ay7J9lc=)
                          19: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
                          20: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:9d:d8:0b:bd:c3:0a:c8:75:d2:bb:25:ec:4e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Apr 16 21:00:43 2026 GMT
            Not After : Apr 17 21:00:43 2026 GMT
        Subject: CN=0a0150d0b3354f538d659d13070745db28ee00f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:3b:e2:ca:65:cb:35:d0:3c:2d:59:ca:88:
                    06:64:bb:7f:5b:87:7d:90:2d:a1:66:89:cc:03:92:
                    75:d1:35:d7:88:44:ef:2f:12:04:b2:13:59:90:fd:
                    28:eb:74:f1:82:09:68:ad:2a:dd:da:a2:05:cb:44:
                    3b:91:42:ab:14:f2:ca:8b:3b:5c:f8:27:6f:a0:87:
                    d2:1e:14:51:33:52:60:83:cc:f8:ed:3e:c4:09:94:
                    13:e6:62:5d:97:92:17:ba:82:39:93:53:51:25:02:
                    02:2d:14:52:39:69:89:e1:6f:ba:96:ec:9e:a3:c5:
                    c5:37:f9:c2:5a:55:c6:5d:59:3e:ea:6c:c8:7a:a2:
                    6a:4b:c1:e1:ac:a6:a3:8f:03:ae:4f:e0:af:69:e0:
                    8f:70:9f:ff:c8:62:2b:8a:cd:fe:4e:ae:19:3d:34:
                    86:34:d7:a0:57:b0:6f:5f:8d:b5:19:5f:e5:9c:70:
                    16:14:29:69:31:7a:2b:85:a9:27:c9:41:87:46:79:
                    7c:b0:cc:b3:84:1f:d1:69:12:5c:53:95:12:17:30:
                    ce:f6:6c:7d:dc:ce:e4:d5:89:07:21:c5:b2:51:04:
                    2a:47:bf:33:1c:fd:ac:7f:eb:98:a0:a1:a3:a3:c2:
                    d4:fa:fe:99:01:b6:91:f0:4d:4a:85:52:95:d3:5a:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:01:50:D0:B3:35:4F:53:8D:65:9D:13:07:07:45:DB:28:EE:00:F0
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:b2:21:1d:92:8a:67:52:7f:1e:e1:23:cb:1a:19:f1:75:
         3b:93:61:08:46:5e:45:ff:78:9f:32:d9:dc:35:05:69:53:f6:
         57:14:a5:10:3b:9f:d1:ba:4a:99:94:5b:85:b0:c8:87:37:80:
         27:76:b8:ef:49:b4:1c:9c:33:4c:bb:22:2f:50:bf:87:0a:13:
         d4:df:9c:f5:a9:cf:3b:16:ec:a4:c6:9f:67:b3:b2:b0:4e:f1:
         93:68:6d:71:58:fc:32:f9:50:03:1e:7a:ec:90:83:c2:33:31:
         bc:9c:ff:6a:b3:7b:49:73:04:8c:6b:fc:3e:ae:c0:73:48:66:
         64:fc:2b:ff:4d:5f:26:75:bb:a4:8c:6e:c6:c8:43:99:9c:d8:
         d6:80:13:74:47:4b:b0:98:05:b1:a3:f9:a5:89:3c:0f:95:27:
         2a:77:9a:07:0c:cd:f0:02:62:f9:fa:ff:45:8f:e9:55:8b:da:
         12:2e:39:36:e0:a2:e3:2f:4f:dd:8a:f3:b0:c1:1d:f3:20:27:
         a5:1b:c7:d4:8d:6f:a6:08:71:ba:54:d1:23:d6:6d:ad:2b:64:
         fd:8c:e1:4e:5a:46:f7:86:9c:7b:cd:f1:93:e7:93:42:94:28:
         aa:13:71:e7:3f:d2:3d:5a:65:55:64:d2:f3:79:d6:23:ed:2e:
         f5:59:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:57 2026 by rpki-client