Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          WygShraLljEANvZMyWG35DA+OGbISumH7wCa53viiZA=
Subject key identifier:   D4:38:93:7A:C8:CB:2B:7F:5F:5B:F3:22:A1:D7:1A:7F:2F:1D:70:47
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       019D98F4D782FF4B25F842F03393AA5BC938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          0405
Signing time:             Fri 17 Apr 2026 01:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:15 +0000
Files and hashes:         1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
                          2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
                          3: 72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa (hash: vZhU/38tVfKMQXtXEf0zL9xQr8OezLicNnuxASDwPqs=)
                          4: 7V5o0G742Xx6wwekFHlHI_pH6s8.roa (hash: 5RA9pDaVBJdJXOc6UztowcHA38lXbN2dK51pTKu1n/4=)
                          5: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
                          6: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
                          7: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
                          8: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
                          9: OFbPbs8o84Mx2w-OctCFEzyYygU.roa (hash: K9++GIp3S1SPKzxtPCf5MbshLgMP0x4lB/emAZ332gc=)
                          10: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
                          11: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
                          12: UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa (hash: nCSgngo72sAUBIAPkqY1n0nS+kfpLh6FUfGBWOhDNHw=)
                          13: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
                          14: X6gkbQD7XKjlpDCPmtrSBjhNhNY.roa (hash: J9AA0VeAPAZJB/+l+EvDES1QGP6dLWqo5ps91vAe5bc=)
                          15: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
                          16: cxrFYholN9HvJ-us9fmJgzA0WI0.roa (hash: Wwa5EX50bfWPI0XbhpID/ZlbhKK3J9mlKgRfeQnAMPQ=)
                          17: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
                          18: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: tvAAb6dI+IYHOm5uQyy+TFLQfAmDTJSkbJhC+Su8oSY=)
                          19: f5M-hTzNDSSqohb0b1K4vjNcyxY.roa (hash: ciY50ZlYxva7aKDHcfCcjzo6LTzr/qKlBuKYyTji90k=)
                          20: fISbt3TEt5z7hvgEykaWZ1xKNyY.roa (hash: CfyvMhS9ewbjRLfiApY3927/WtEF1gMMScOXv02Vkr4=)
                          21: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
                          22: o-2kICnoHNfivNsTLGTpqOYwstQ.roa (hash: YkVOT+LP7w8mTJUbnwv0gEvNf1idVM4c+qYZj2+A7Oc=)
                          23: r9B02vmajGoqzJg47qEQQvo3CxE.roa (hash: SlXFzGDnnfIbDGN67Fp7Oc2RR984LeMf9GzRFDPOlaA=)
                          24: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (hash: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=)
                          25: xp4XInmvIX6CC9Ex-JmVHgrbPgs.roa (hash: RHkZbfHLGorgQEqsyMXzjKwc68C6UanDs4STBF1Ck9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:d7:82:ff:4b:25:f8:42:f0:33:93:aa:5b:c9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Apr 17 01:01:15 2026 GMT
            Not After : Apr 18 01:01:15 2026 GMT
        Subject: CN=d438937ac8cb2b7f5f5bf322a1d71a7f2f1d7047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:0e:6a:1b:09:7a:82:c0:b0:72:a7:5a:67:
                    39:87:e9:72:0d:21:e6:dd:95:f0:07:27:b7:5a:92:
                    7c:6e:1e:11:03:30:8a:d1:e8:0c:58:2b:bf:5e:14:
                    6d:c3:1c:25:c4:c7:cd:67:fe:33:6b:1e:b5:58:35:
                    36:17:f2:64:20:ca:39:6f:9a:91:44:9e:23:06:58:
                    41:fc:ed:a1:a8:f7:f5:38:14:07:68:53:7d:7b:b6:
                    05:19:36:84:18:9c:c5:56:f1:05:f4:e0:bc:9c:39:
                    32:ac:96:26:51:09:95:3b:fb:27:98:cc:54:06:b5:
                    f6:1d:d4:df:d5:b8:58:53:17:de:65:b0:b3:7f:18:
                    c2:0f:4c:e2:ef:25:c7:5a:76:c5:1c:61:b9:d8:64:
                    83:2d:cb:71:e6:ee:df:39:61:5c:d3:7c:fe:6f:de:
                    c9:42:a3:0f:1f:20:4e:8b:22:d9:16:39:d8:a9:7b:
                    70:b8:04:c6:ba:a8:23:32:7c:68:6b:dc:2b:76:92:
                    38:14:b9:3f:ce:6a:d3:bd:6c:f5:65:dd:99:72:0d:
                    57:66:e1:56:2b:1c:06:0c:03:69:59:41:20:de:48:
                    50:00:f7:92:66:43:e8:0e:47:26:c6:9e:92:69:ab:
                    d6:0b:16:8e:b0:b6:dc:1b:6f:13:1c:66:f0:58:0a:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:38:93:7A:C8:CB:2B:7F:5F:5B:F3:22:A1:D7:1A:7F:2F:1D:70:47
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e0:29:5b:aa:40:0a:94:3a:77:78:1f:d5:50:e1:4d:5e:79:
         aa:67:bb:a0:f5:d7:e0:27:a5:6f:b2:ad:e4:34:ad:e2:45:9e:
         03:c3:37:06:51:5d:ca:fa:b8:df:58:3f:aa:20:4d:16:9a:01:
         9f:57:f2:57:67:61:69:11:69:1e:97:70:b0:22:d0:6e:3f:8f:
         fd:94:60:e2:97:f3:c7:df:40:ef:98:02:a7:7f:43:07:09:9a:
         5c:5a:e1:ea:c6:84:f5:13:02:68:32:c6:c8:9b:44:a8:22:a7:
         48:e7:e6:d5:1c:c2:0f:5d:a7:be:c1:3b:a2:45:0c:51:b6:24:
         cb:e0:21:90:65:d6:92:c1:98:1b:d6:3d:07:22:45:c9:f5:ec:
         1c:07:42:12:7f:31:b4:71:2c:98:b9:30:87:1b:08:5d:1d:cc:
         79:e4:b5:a3:d0:11:01:8b:6c:c9:83:8d:8a:b8:bd:63:21:0a:
         b4:54:aa:e5:e7:16:bb:17:7f:97:bf:a1:f1:00:9d:c6:6c:8c:
         ba:3c:8f:67:bb:16:88:24:58:59:33:c2:f5:1e:9d:fd:70:0d:
         cb:0f:ff:52:06:37:6d:47:be:c4:5a:35:41:0a:c2:08:7c:4e:
         07:35:52:53:ee:e9:1a:67:3d:a4:66:c6:81:50:99:62:1a:68:
         05:e3:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:36 2026 by rpki-client