Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
File:                     Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft (raw, json)
Hash identifier:          sVUjWp7zWLkF0RsiAEHvCEeOuZ1ftkxOPSrbm5UXeKc=
Subject key identifier:   40:4F:F9:D0:BD:61:F8:73:65:DB:20:CE:B4:99:10:15:96:49:52:26
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Certificate issuer:       /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial:       019D98BDCC9384A54572E98CE8C4B7A3673D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
Manifest number:          018A
Signing time:             Fri 17 Apr 2026 00:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:08 +0000
Files and hashes:         1: 1-754yn0cXUen0mB13RhFBCCHbog.roa (hash: 78zYqr5yGxGhh0YQuAoIg3iqxnVUJ3rYVBvGE6aSJfQ=)
                          2: 1StUnapseCiMQWnYb2eTMzCR1G4.roa (hash: B7xFqR6+lA6rb6M8+1+NxvfBy9Yh1w4f+NdiwDOlV2k=)
                          3: 4JUJMuH8gFs9DE68zxS3NF-MVyI.roa (hash: 10WPHR143Cr97gFTdRxouN6VSfBxJID1X9gNYQGB03s=)
                          4: 4yMe0KQWqHlqNRxGI-HI-YfNviU.roa (hash: q9QEUOuJmvF783pEdtgSs/IHgLaoLscMYbL67CJd8ro=)
                          5: 5jgtFtkGFs3MVnXU7EtZ-wtpMP8.roa (hash: RsoKDzcKosV3gQjC57ZfeVyrZTCxaDxJedySFB6iHSw=)
                          6: 5uKJZHdfDX6TXX-SRwiwxZGZ2Ac.roa (hash: dNb/ayekSV3gRwWnyBUmQiJqyh3+db3pUkOxjC/qYak=)
                          7: 7bUBJxfta8YWGQeRb5fl37Yaaxo.roa (hash: XQf9kxSl4sRFbthfZQdIsbNBSDsU9+N1iQ8oM1kavXM=)
                          8: 8Wa9_vPZrMT6pIcho3_TYjVtqk8.roa (hash: h7V44SoFq4shpd3Oi+k/Fm8gG7BNoMR2fp5YWnkKrKs=)
                          9: 9IXwTzzllCJjNWjosEw9IqDjZZ4.roa (hash: qwbUB4pGtNvNetLT365Cb9mkywkHbHRPACK7i2qfcIU=)
                          10: 9uJevseWtHq9WwkYBlyBhrsiipI.roa (hash: XWHVmAdhqAX/5wURmMpdbLR+UcMWugrpYTC02rWpXjA=)
                          11: ATueWFcqnvuZDV_kL2XwVjV3Y2I.roa (hash: 1jQny7qo2FR+SifYjdMTpPFd2HzzebiTliSeTIqgl4k=)
                          12: AozO2Ub53lV6NEQRvkO5cmyql4Q.roa (hash: RZCbTSnnDP9YK/6t18/TtUnd/v/TBLxovnyGgksZ+Wk=)
                          13: Ba5fXG6jmbh2acBviV-iIIKo76Y.roa (hash: sPziRn27AjBAPFRy3zSLQQKsc8W/cg21d5WvStLKdlg=)
                          14: D1jqmx7zgrM24HcsfAdM7H7e6TU.roa (hash: z9M641aDlhELJSePrkssedI/+dVAAWfwDtnl21FFKuo=)
                          15: D8MTwdqOGoqiadxznmbc58GGyCw.roa (hash: hWg4hQ21GnKD+Kub0XusadCxYjYanrHdJMGDk68zWQI=)
                          16: E_XsrZw3WqGMs5VmPLVxGcnlMCY.roa (hash: 2D+oUitD46TfrbaoAd0xRO/fd4Hsgz+E1RH5vXR/vSA=)
                          17: FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa (hash: 01XBXhI4ohSZEUimcwiN6YwEt7OYVjfuP0CIc0/Aghs=)
                          18: GeL70A_vDuJS5e0i9OdyUUo3fcE.roa (hash: t5lXhig/7fbuaofGOc2sBzyCP8TE7Bd4H7o5/WBYU2g=)
                          19: Ipq3DVKETg8P3AR2d3v53XRHP8E.roa (hash: OexlMNg1bkCu+ze+kDH7HWalEhLxpKBrfkNHr92XQtw=)
                          20: KJo3GAdKNFd3THsemF08pnREwy0.roa (hash: g8QkMjKCZnbmt7stE9ZOU/G22JCGHvHzbPa2y8dl68o=)
                          21: NzvJC_KMleGhtmNpsqKr65nFwKw.roa (hash: xdkY4pIv1Ov6lhrcogUMNsybPzhiBPJCRk9I0apg674=)
                          22: PPR9iY6e7wB8dBG4hPjEf_bXgrE.roa (hash: rVsXHJx7s3hFoA+dVNyfw/DyXL6OOCw5L+m6ouelVRM=)
                          23: RJf-yUIMAhTeHpw5w0dxvSvA-T0.roa (hash: ByePBlZXfscW9XsJ3W1m30RSO4fXTm44BH7JPgnXxLw=)
                          24: URFT6fKsY2OtyB_MOBIcyuYtLjI.roa (hash: Bi6srY4oh+V5Uw676tTyw8yvtKoGhpD37htv9PBY0t8=)
                          25: Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl (hash: /oJtYj416+4JRD175Oa8hwUXFZ9lVZF51m0ii9jF+8g=)
                          26: Ur8FLPafl7NLCGJMZdM86uXJeOE.roa (hash: XYYsdiGwo/GgWz447XdpK9VNCxb25m7GWU+Jc4A5wfc=)
                          27: Z3tFdufgPl6EBqM83ZZTUlCsxeU.roa (hash: bg7JnMjL5ADxpVlyak0KcCSpMSEHMIGLxB84iGem6Ng=)
                          28: ZediFr-kiNcab3zFz4eXtCdrDDY.roa (hash: ADnthEU+Brh9wA//ELyNS+LJVvpzl9jC3U47kC784aw=)
                          29: Zy4u8OQmpS--VuyxpTtEdgQj7u8.roa (hash: 3tm5LplJNsUwv6QzEI2j7o9juIR/DbsW3Y8t7c94ZKY=)
                          30: bg5OuQwu_G2wxecDYapAVTrKZSU.roa (hash: ggkhRBAvbvqvsvnY0841/FOrSyw9xDw7h9YsiZA8oaM=)
                          31: eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa (hash: US9Oa3u4UtqaGF2sA8nZWPbipyXsj6nuL34f5I+dpv0=)
                          32: erAqQdv4ek0okgzNUjEJUbHDl-M.roa (hash: UjC8V5nT2fjyaHmBG/uU01LBvVikDDo0eoyOrTbxKr4=)
                          33: fZyAK4-7mQSEWnWBipSmG29XhLg.roa (hash: VyEh3g7KQaKsqvuCH4j2Vw0hondgOxxQ+lgKbocRpTM=)
                          34: kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa (hash: VJmnS5B5bfBOwQGEw3DwSY9zU3wS19eOtw0ATx1JGzk=)
                          35: l4lKElWg8jkb3S2y8G5HtpLv_8E.roa (hash: eAlM3UbqMidzWRUNV68Iw9JlOfYfEzuWB2gx059CUzU=)
                          36: mn7OLNCLzPBqkrsyYpqFg1imvZI.roa (hash: wxWSpC2c3XkI8LLnMMHI9jlxpk6lm3++ec6oKWD2Sas=)
                          37: rxFdQ8wHm79-KwtfCQQduhZ5MX4.roa (hash: 4fE5VLNDidIj7JkBBuOBn6AqwpO9aA+OzOMLJ27mh8o=)
                          38: tmK8DHrmcBnINMMyD2QW0IgULBE.roa (hash: r85TfRa3AIHgPQ/FHH1jZhpg0dqRTysxXHtYOx/eV7Q=)
                          39: x7UH7ZJrApI32sK581_akJQW4t8.roa (hash: 7fHtqcAW0zaDA/MAx+F9yZB2mEvSMVFZMHyQwzDUnVo=)
                          40: zKqnquuEn-McTEol5oGnIhYAmy0.roa (hash: oCtvyo+fDE9JdHJIxhwHi/+Z9/aIRkF4L/I9VIjuKP0=)
                          41: zocALgimkWCVbzszBR2uphEiBtI.roa (hash: 4ANr/Owql6aOh54xvEE6sr/jfbMHNepGi5TVeFJshk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:cc:93:84:a5:45:72:e9:8c:e8:c4:b7:a3:67:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
        Validity
            Not Before: Apr 17 00:01:08 2026 GMT
            Not After : Apr 18 00:01:08 2026 GMT
        Subject: CN=404ff9d0bd61f87365db20ceb499101596495226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:c7:c7:db:46:7b:32:74:58:9c:db:3f:42:
                    90:4e:dd:67:dc:c6:fa:6b:7d:89:ec:4f:6d:a8:ad:
                    04:34:bc:8a:19:af:1a:d2:5e:d8:b2:5e:85:6a:06:
                    47:1e:76:1a:8a:6b:1e:51:c7:54:a4:df:31:b5:17:
                    3f:6f:22:09:bd:f6:90:cb:f8:bd:ab:aa:8a:2d:bc:
                    8b:ed:00:c8:d6:bd:a5:80:0e:d3:23:ce:1a:9d:8c:
                    cc:4b:3e:00:f6:1f:25:b0:96:54:a5:cc:d1:9c:60:
                    d4:05:b9:96:a3:87:db:5a:79:2a:2e:68:85:8c:23:
                    24:e0:e4:f1:eb:62:61:4e:20:5e:00:58:60:b1:52:
                    8a:ef:60:fe:2b:67:45:c0:4f:1b:f0:fa:ef:09:ee:
                    3f:be:af:b7:dd:48:d3:95:3d:5a:f5:59:09:45:f1:
                    f5:11:16:dc:f0:6a:98:b3:e6:77:57:e5:ee:c8:32:
                    f6:1f:79:cc:1a:73:e0:4d:bc:f1:d8:a2:80:ab:bc:
                    c5:56:b5:3b:10:72:1c:3b:ee:62:3c:0f:e4:d7:0e:
                    f7:25:e5:f9:89:d6:8c:f8:32:e7:ea:14:c9:52:71:
                    e6:81:36:13:88:2d:99:f1:88:db:f3:02:08:2b:26:
                    64:43:05:1a:15:c3:9a:70:08:d0:d3:dc:ca:59:be:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4F:F9:D0:BD:61:F8:73:65:DB:20:CE:B4:99:10:15:96:49:52:26
            X509v3 Authority Key Identifier:
                keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:44:3a:b7:af:42:1a:ce:2a:7b:06:56:d5:ba:ff:69:58:e1:
         36:e3:99:72:f9:cd:22:c9:21:ac:54:5b:e6:48:06:f2:f1:a9:
         58:01:60:ca:ac:d5:a4:ec:f7:8b:1b:d7:77:5d:73:31:48:b8:
         09:0a:f6:fa:cf:58:e4:6e:cd:2a:43:f8:37:ac:69:59:6d:65:
         b4:98:cf:b6:c7:2b:c5:7d:85:16:7c:0b:97:03:df:15:92:9c:
         fc:e0:42:dd:b9:a7:a3:66:b2:38:76:5c:2e:3b:fb:8f:67:b4:
         57:88:03:3e:25:50:d9:b0:64:9d:95:f4:0c:80:a6:ed:89:c8:
         c5:73:aa:fb:02:cc:50:75:54:48:73:8b:e3:68:6d:4b:26:0e:
         68:2e:6d:65:e5:43:6a:01:84:7f:2b:84:0b:5f:0e:e7:0f:4a:
         a2:6a:6b:84:21:ae:61:8f:47:5b:3e:17:fe:b8:6f:fc:76:bc:
         30:8a:8c:92:21:84:b4:7c:69:65:f4:17:be:4e:62:1f:67:db:
         c1:8e:1c:9e:b5:69:b0:a3:23:a5:21:97:f7:9e:46:86:b9:a6:
         4c:42:05:ff:a7:80:59:4f:86:84:7e:77:85:c7:35:93:be:36:
         95:ca:de:17:ae:7a:49:b6:a2:27:70:6d:60:0b:f5:9e:d5:ed:
         89:2d:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----