Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          GD3OQSq8IR8q5G/UKRokCBmW32KyCXPdhBiThBbsTm8=
Subject key identifier:   6B:F9:A7:09:E1:82:30:19:17:36:53:C0:D6:DB:96:2B:80:19:1E:25
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       019D9A3F199626EF1E3116DCC5B62D7ED51C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          18EF
Signing time:             Fri 17 Apr 2026 07:01:59 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:59 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:59 +0000
Files and hashes:         1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=)
                          2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=)
                          3: 1WdFXv1Jg5APhjnipHcc4mLeqvg.roa (hash: IZKCSGM3fACKg/PrPaA+UZQwdKhIoEOq7r5L+j4pjTg=)
                          4: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=)
                          5: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=)
                          6: 8rKgBAJA8MJvfJn7wlRXaLSOltg.roa (hash: vKik0l+/uPuH0Z6X6US0ts7buVtMAj4tzTB6bbsDKWw=)
                          7: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=)
                          8: Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa (hash: /lqPOANyW17qinqhiK8qfXDXg0mEzP1UjKBeGgxEB10=)
                          9: FMdvNunKljn8ofGnpjf1LZVHjq8.roa (hash: 8mvnTEy6JbB2XqN3FH0fr8TfsaVsZ+l1QCmyb/WMQRQ=)
                          10: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 6UIFokK/cQ83hRWyH6LYdqz4WxZegtGFd4nHTtOo8V4=)
                          11: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=)
                          12: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=)
                          13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=)
                          14: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=)
                          15: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=)
                          16: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=)
                          17: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=)
                          18: sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa (hash: OEBAEu1SEBwrWfciVaKHy8l9XFDNXjoEFOCceQeIsnI=)
                          19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:19:96:26:ef:1e:31:16:dc:c5:b6:2d:7e:d5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Apr 17 07:01:59 2026 GMT
            Not After : Apr 18 07:01:59 2026 GMT
        Subject: CN=6bf9a709e1823019173653c0d6db962b80191e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:47:59:e7:70:e9:3d:0a:e4:e9:aa:74:21:
                    a0:b8:0e:8b:71:d0:3c:3d:04:8c:94:99:46:49:d8:
                    6e:63:33:fa:16:11:94:8a:e7:43:f6:83:d0:c5:6b:
                    da:30:06:dd:54:78:87:b6:a9:3c:2c:fd:52:19:72:
                    94:f0:55:ec:fe:c9:1b:a8:a6:d2:a5:90:30:bc:2e:
                    db:46:91:82:5f:1a:a9:4f:06:7c:d9:be:f9:c5:c4:
                    0c:a3:29:2e:2f:82:5a:e3:78:88:56:08:6a:57:cb:
                    28:8e:ad:71:d3:5f:18:b1:79:89:b0:10:52:b4:91:
                    a3:85:cd:9d:91:2a:4e:d2:2d:1e:19:e5:ae:b5:16:
                    02:c0:b8:3d:75:5f:f3:f0:01:52:49:04:d3:5c:35:
                    12:fc:04:1e:94:6f:6b:b0:e3:80:b4:c6:dd:c3:59:
                    c3:db:8a:3f:38:71:42:b3:88:23:54:02:80:63:ea:
                    37:8b:7d:db:58:49:c1:c2:44:f7:1c:fe:28:aa:08:
                    ff:14:b5:82:06:d7:87:c1:96:eb:dd:17:c1:85:62:
                    05:a7:08:db:51:02:0d:57:8b:d7:b5:d7:63:63:8f:
                    9b:33:8c:c1:12:da:ea:55:49:bc:c9:4f:09:9a:d5:
                    47:32:f3:51:0f:f7:d5:66:c6:30:0a:d5:09:0e:d7:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:A7:09:E1:82:30:19:17:36:53:C0:D6:DB:96:2B:80:19:1E:25
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:69:ef:34:09:c6:eb:0f:4f:48:95:fe:f7:97:ad:73:92:
         43:7e:98:ae:e3:13:67:44:24:04:78:cb:56:e0:7a:fd:fa:b9:
         f1:01:33:87:0d:e9:3c:0a:7a:13:4d:1f:cc:cc:ff:3e:b1:02:
         41:17:ee:fa:73:c3:54:b8:3b:28:1e:a5:57:ba:2b:4d:0e:8c:
         70:c0:d2:f7:48:b1:2d:3a:f2:9a:fd:b2:2d:b5:4e:b6:87:be:
         13:af:b2:ce:7a:7d:d4:8f:39:0e:3f:97:06:11:84:73:c8:b6:
         31:23:cc:34:b1:c1:b3:13:32:9e:06:f1:0c:28:10:84:b3:87:
         24:40:45:1c:b1:89:21:26:f8:09:d3:ad:58:6f:57:03:3e:93:
         9e:ab:a7:5f:9d:f9:13:d7:80:6d:78:56:26:01:31:f3:5d:80:
         c4:7e:ce:c9:0b:13:97:9a:f3:2b:c9:2a:dc:06:1b:45:51:16:
         3d:2a:9d:df:16:44:6d:96:93:7a:ef:02:ac:5a:93:bf:34:9b:
         69:14:e9:c1:f8:26:6d:6b:42:3d:ee:c4:4e:74:b2:53:7c:fb:
         82:07:a3:e5:32:0b:2c:c3:f5:99:21:78:a8:2c:09:a5:63:5d:
         60:0d:45:be:dd:51:e9:78:35:b0:08:3c:1b:12:2a:92:ec:4e:
         5a:42:87:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPxmWJu8eMRbcxbYtftUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjYwNDE3MDcwMTU5WhcNMjYwNDE4MDcwMTU5WjAzMTEwLwYDVQQD
Eyg2YmY5YTcwOWUxODIzMDE5MTczNjUzYzBkNmRiOTYyYjgwMTkxZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+tHWedw6T0K5OmqdCGguA6LcdA8
PQSMlJlGSdhuYzP6FhGUiudD9oPQxWvaMAbdVHiHtqk8LP1SGXKU8FXs/skbqKbS
pZAwvC7bRpGCXxqpTwZ82b75xcQMoykuL4Ja43iIVghqV8sojq1x018YsXmJsBBS
tJGjhc2dkSpO0i0eGeWutRYCwLg9dV/z8AFSSQTTXDUS/AQelG9rsOOAtMbdw1nD
24o/OHFCs4gjVAKAY+o3i33bWEnBwkT3HP4oqgj/FLWCBteHwZbr3RfBhWIFpwjb
UQINV4vXtddjY4+bM4zBEtrqVUm8yU8JmtVHMvNRD/fVZsYwCtUJDteb0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv5pwnhgjAZFzZTwNbbliuAGR4lMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE5p7zQJ
xusPT0iV/veXrXOSQ36YruMTZ0QkBHjLVuB6/fq58QEzhw3pPAp6E00fzMz/PrEC
QRfu+nPDVLg7KB6lV7orTQ6McMDS90ixLTrymv2yLbVOtoe+E6+yznp91I85Dj+X
BhGEc8i2MSPMNLHBsxMyngbxDCgQhLOHJEBFHLGJISb4CdOtWG9XAz6TnqunX535
E9eAbXhWJgEx812AxH7OyQsTl5rzK8kq3AYbRVEWPSqd3xZEbZaTeu8CrFqTvzSb
aRTpwfgmbWtCPe7ETnSyU3z7ggej5TILLMP1mSF4qCwJpWNdYA1Fvt1R6Xg1sAg8
GxIqkuxOWkKH/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:19 2026 by rpki-client