Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          kfqQXHIxoERZxhX/p/BTYMNa7zIw/r1DQiW0h3oJrOQ=
Subject key identifier:   E4:E6:2C:AC:88:9A:4A:3A:4A:7F:4B:2E:D1:7D:9F:F2:0C:B5:57:8F
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019DA378CEB35D1ECEE219B7FD78D5B5D780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          143E
Signing time:             Sun 19 Apr 2026 02:01:36 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:36 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:36 +0000
Files and hashes:         1: 4K_95KFZWMhbPpIfz5E1jHBv5aw.roa (hash: S+/oi+d3olEq6tAFWe3He8qCofTZg2SAbS0y1lTVFbQ=)
                          2: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
                          3: 9Yph-pozsAa1u8D3EORz5KZEkck.roa (hash: eBaChJ/lL8SbnPpF1SLCUTRSIb4xLZthmgzcZwPUd1M=)
                          4: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
                          5: BmzDco6FUeR2pV7CetfxwgyZzwU.roa (hash: 3e8ATRNUbcI+nS1vmGLQB8ObHNnkxsHOjtgJ15KBPNU=)
                          6: EGTr11Cn33WgsBkSO-DW_brv2pQ.roa (hash: WbBfhfc/J57F6babpd8iRrGBrz8Jx8j1fD8g8nHbBpM=)
                          7: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
                          8: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
                          9: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
                          10: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
                          11: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
                          12: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
                          13: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
                          14: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
                          15: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
                          16: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
                          17: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
                          18: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
                          19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: QHoYNbEtTjOROQs1cBiQH7Vy1qjTaI+Jd75+3SmGKOs=)
                          20: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:ce:b3:5d:1e:ce:e2:19:b7:fd:78:d5:b5:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Apr 19 02:01:36 2026 GMT
            Not After : Apr 20 02:01:36 2026 GMT
        Subject: CN=e4e62cac889a4a3a4a7f4b2ed17d9ff20cb5578f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bb:31:46:81:e1:7f:b9:9d:5d:26:f0:e4:45:
                    a0:55:f0:82:72:79:59:55:78:9b:00:b1:97:63:a7:
                    e1:53:d8:89:0c:2a:5d:16:cf:bd:72:08:2e:15:b2:
                    04:50:b2:f1:bf:f4:ef:75:b7:84:72:98:dc:b0:af:
                    9d:3e:57:d3:a0:d3:27:55:e0:19:d3:65:4d:ed:e3:
                    a6:9e:04:33:59:99:51:c2:44:be:3a:db:e4:af:cd:
                    71:67:c6:20:67:c3:c9:ff:a9:34:1c:bf:1c:07:88:
                    93:a6:2e:5d:d4:5f:f6:ba:db:2b:3e:0a:ab:1a:db:
                    10:a0:f2:e0:c9:3c:45:18:51:f3:c8:d8:42:d5:d2:
                    87:de:20:f6:c9:87:ab:a8:fa:d5:6a:51:11:ae:5f:
                    8a:d1:93:a3:88:e1:7c:50:8c:f5:19:22:2a:d3:4f:
                    05:ff:c6:06:5d:be:91:6a:d8:16:8e:6b:cb:ec:ab:
                    e7:63:b0:4c:3d:77:b4:6d:27:51:3d:02:07:82:6c:
                    ce:d3:5d:b8:e1:d6:27:fa:ef:71:26:2e:b9:e0:01:
                    1f:32:b9:22:04:36:86:1e:1c:3a:0e:3d:32:5f:93:
                    c1:0f:63:de:37:f3:45:95:9e:2d:31:80:17:18:ef:
                    a3:ed:f7:0d:ad:c6:5e:b3:1f:ab:a3:df:b4:24:15:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E6:2C:AC:88:9A:4A:3A:4A:7F:4B:2E:D1:7D:9F:F2:0C:B5:57:8F
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:62:fb:b5:77:e5:f1:38:3d:74:0b:5b:ab:07:e1:96:6d:91:
         a9:c7:29:82:46:1b:11:6e:a2:c5:f8:21:d6:02:3a:f2:a1:98:
         e1:26:ff:ae:80:84:74:fc:ce:81:39:f2:46:7e:70:c1:e0:4c:
         8d:df:e6:cb:63:d0:e6:22:26:23:75:11:3f:5e:a2:70:06:1c:
         1a:63:34:9f:ea:fd:22:a8:53:2b:e1:f4:61:4c:ba:b2:c4:cd:
         c7:73:1e:a6:3c:16:69:cb:b6:d7:a8:13:2d:c8:bf:d6:9c:b4:
         ec:b9:7f:be:29:0b:6e:35:57:c2:cd:4a:08:9d:3a:2b:c5:e0:
         46:90:d9:43:4c:0b:5e:15:9a:f8:07:b0:e1:e9:5c:3f:01:01:
         05:4f:08:d0:8f:47:0d:f8:62:a3:4f:b5:ee:04:77:63:a2:97:
         3a:c6:6f:74:e4:23:a5:8c:ae:41:2b:e2:87:46:ab:1b:89:7d:
         d5:36:fb:79:bb:5b:8b:3b:32:62:8c:b1:e2:17:d3:29:c8:ab:
         3f:b0:90:e7:92:6b:94:76:45:c4:7c:1f:1c:47:2b:0b:f6:25:
         8a:10:d7:aa:af:f3:94:44:1f:68:41:c9:7a:b8:fc:e0:59:aa:
         5d:ea:7f:48:fd:0f:92:e0:c8:b6:df:31:35:88:8d:70:f7:14:
         6b:7b:8f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:50 2026 by rpki-client