Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          YnnkGBW7Cxiqh5cpLavxDT66NPLiPYgLkMCfVnc/JOY=
Subject key identifier:   E6:FE:ED:D6:44:24:7B:8E:D9:A7:94:A7:5F:DE:0D:7A:11:C7:B5:B1
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       019D984FCB1E18345A156BA800D5C4DDE5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          18FF
Signing time:             Thu 16 Apr 2026 22:00:59 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:59 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:59 +0000
Files and hashes:         1: 2HrqXeXo9pYDymmIm6gRkQ8fiH0.roa (hash: a8P3NJsFBPajt0RWltNWLSyNGu9NCv3uHqPkeX2s+xA=)
                          2: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=)
                          3: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=)
                          4: Nm74nw9-DBQVMhcuItU_tZfAL2k.roa (hash: RyPc37bXaWUgAbxVMkVJRhAAvwA/KA0JIapwb+nu+pE=)
                          5: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=)
                          6: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=)
                          7: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=)
                          8: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=)
                          9: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: N9TSs38hNHeT6+AD8yBSVVzjb1ztRBCOl9I9oMf87oM=)
                          10: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=)
                          11: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=)
                          12: hzxxPGg5MDjjd1W04A0XjAEt6KU.roa (hash: pd+5JuUo6DGsgLgsFzJ04mH4wsYQ42Nz8tr3ubdP9Iw=)
                          13: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=)
                          14: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=)
                          15: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=)
                          16: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=)
                          17: uEioqsfjoD3Xl5Oou54cX2C0S34.roa (hash: go+HYucKqNseQJzP/5n7AMRia6twNmQH+kJ8P+JHx6A=)
                          18: w49hc9pt-rI9dE1aJPepq6cVJrc.roa (hash: XRnzI4j7+4a/orI2utUUHksc2DUd94oqWcO8QziYrqE=)
                          19: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=)
                          20: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=)
                          21: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:cb:1e:18:34:5a:15:6b:a8:00:d5:c4:dd:e5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Apr 16 22:00:59 2026 GMT
            Not After : Apr 17 22:00:59 2026 GMT
        Subject: CN=e6feedd644247b8ed9a794a75fde0d7a11c7b5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:aa:7a:2e:99:91:9f:5b:5e:ed:68:a1:4e:
                    e2:cd:b4:0d:b7:41:4f:32:0d:bc:b0:ba:f0:0d:b8:
                    87:6a:7f:40:7b:36:4d:1e:72:94:ac:f8:70:7a:4e:
                    63:1f:96:d9:6f:f4:be:4b:e4:1a:e3:be:95:21:58:
                    9d:51:e3:b5:49:91:78:88:3e:d4:3e:99:e4:94:94:
                    c8:83:53:95:c7:c5:a8:d9:a0:bb:49:f5:6f:9a:96:
                    12:35:e6:8d:c8:7a:11:a0:2b:aa:9d:cf:e4:cd:f9:
                    0e:ff:29:43:92:0f:6d:53:c7:99:e8:10:39:be:8b:
                    87:96:38:68:b8:3a:b0:c9:66:67:4e:8d:87:09:11:
                    1a:29:09:c4:fa:4c:0f:72:9c:dd:18:9d:00:b3:bd:
                    2e:3b:4e:1f:8a:d3:86:98:42:93:67:76:31:a6:0e:
                    27:39:73:bc:98:a3:96:d2:da:11:fb:95:ad:a5:e0:
                    0a:4c:15:ec:45:bd:42:ac:b7:4a:bf:44:de:54:42:
                    db:a9:5b:41:c6:1a:5b:0c:87:88:99:fa:d5:4b:57:
                    de:56:8c:db:65:c8:19:d5:7a:65:1a:aa:6d:87:cf:
                    3a:8c:f7:8e:0b:3e:67:1b:60:6e:34:58:69:e5:e4:
                    7a:ee:48:36:68:c4:24:d1:a0:c0:3f:85:b4:a4:ee:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FE:ED:D6:44:24:7B:8E:D9:A7:94:A7:5F:DE:0D:7A:11:C7:B5:B1
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:8b:9c:83:eb:dd:03:37:ee:5a:48:76:08:56:0a:fd:d0:
         6f:28:9d:42:0b:02:ea:ac:c8:2d:05:4a:10:f3:bd:9b:ff:8d:
         81:63:85:ff:b2:8e:95:81:ef:b9:11:c0:7a:bd:56:72:8b:01:
         5a:bd:ed:33:ea:75:cf:19:c4:b6:8e:ad:b2:05:95:c7:f9:4a:
         44:fb:12:5b:fd:5d:bb:13:4c:32:bc:14:fd:12:77:95:e1:8a:
         46:4b:1c:bd:a4:36:56:24:dd:47:fa:68:b4:e7:c3:c1:54:19:
         69:2f:fd:d4:71:0e:9f:b5:5f:e9:89:a8:39:4d:8d:ad:70:e9:
         db:78:88:bc:14:6d:b7:be:2d:b6:b0:12:ba:e2:9a:26:3f:bf:
         66:cd:7e:60:eb:ee:99:de:f0:c3:5c:3c:3f:d4:64:9d:e3:93:
         f0:8b:c5:d8:25:b8:14:6b:65:1d:67:bc:33:df:d9:92:c1:ea:
         b3:d6:dc:64:77:54:b9:88:ff:9d:7f:e1:b5:0e:e0:25:20:58:
         a5:99:cf:b4:32:fa:78:0d:f0:dd:64:e2:4a:bb:d8:03:9d:53:
         d0:5c:01:d3:86:b9:9e:5d:e9:b7:c8:0f:0a:09:7a:56:68:94:
         ad:e2:3e:ef:15:ab:26:35:8e:43:20:df:26:92:da:54:78:4d:
         ef:54:00:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT8seGDRaFWuoANXE3eXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjYwNDE2MjIwMDU5WhcNMjYwNDE3MjIwMDU5WjAzMTEwLwYDVQQD
EyhlNmZlZWRkNjQ0MjQ3YjhlZDlhNzk0YTc1ZmRlMGQ3YTExYzdiNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Kqei6ZkZ9bXu1ooU7izbQNt0FP
Mg28sLrwDbiHan9AezZNHnKUrPhwek5jH5bZb/S+S+Qa476VIVidUeO1SZF4iD7U
PpnklJTIg1OVx8Wo2aC7SfVvmpYSNeaNyHoRoCuqnc/kzfkO/ylDkg9tU8eZ6BA5
vouHljhouDqwyWZnTo2HCREaKQnE+kwPcpzdGJ0As70uO04fitOGmEKTZ3Yxpg4n
OXO8mKOW0toR+5WtpeAKTBXsRb1CrLdKv0TeVELbqVtBxhpbDIeImfrVS1feVozb
ZcgZ1XplGqpth886jPeOCz5nG2BuNFhp5eR67kg2aMQk0aDAP4W0pO5sSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb+7dZEJHuO2aeUp1/eDXoRx7WxMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKyLnIPr
3QM37lpIdghWCv3QbyidQgsC6qzILQVKEPO9m/+NgWOF/7KOlYHvuRHAer1WcosB
Wr3tM+p1zxnEto6tsgWVx/lKRPsSW/1duxNMMrwU/RJ3leGKRkscvaQ2ViTdR/po
tOfDwVQZaS/91HEOn7Vf6YmoOU2NrXDp23iIvBRtt74ttrASuuKaJj+/Zs1+YOvu
md7ww1w8P9RkneOT8IvF2CW4FGtlHWe8M9/ZksHqs9bcZHdUuYj/nX/htQ7gJSBY
pZnPtDL6eA3w3WTiSrvYA51T0FwB04a5nl3pt8gPCgl6VmiUreI+7xWrJjWOQyDf
JpLaVHhN71QArQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:44 2026 by rpki-client