Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          g/7gm65xvyaq6kjFG1k2pt+l0w08hjllLAlmyf2oTlE=
Subject key identifier:   2A:9C:64:07:D3:D7:B1:90:BC:CA:91:54:54:AC:5A:F1:61:EA:DC:FC
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019D2704C24B3DCD226915C2107E8C87136D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          1A29
Signing time:             Wed 25 Mar 2026 22:01:56 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:56 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:56 +0000
Files and hashes:         1: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (hash: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=)
                          2: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (hash: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY=)
                          3: 2F6KjJmnh4fG2o31oMeDLzlhe3M.roa (hash: U3NzVWajOAPyyw0TujhCrhB+YyvG3V+w8CS/ITzJ3lQ=)
                          4: 34KmZ8VrdL0919mvZ699Gx_xpwQ.roa (hash: Q5D7jFgCzQNL3luiUnYO7ELZV2sJxrboi490AwwO1mY=)
                          5: 7j2_NbelXGkPqeH8Kkeh1ym9_DA.roa (hash: JZe6w9UDx2mGbUG+2NzB+MVQw/jPj68z/y/0hvVfhLU=)
                          6: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (hash: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU=)
                          7: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (hash: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE=)
                          8: 9--7k8s2vBgfv9cOtklxxBdlhTg.roa (hash: JcI1d/J1LHsYTNe6jH8TPu1qVojYT6V7vlT9I10CzUc=)
                          9: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (hash: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU=)
                          10: AY3FW2IB9nexvx9xT55P4qXch9w.roa (hash: APNMELOEu+Yhf/JJ7/H7Cc0dJp9lEZ5EZz4w5dHfwFc=)
                          11: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (hash: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw=)
                          12: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (hash: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds=)
                          13: DsLRswrIL2bjarddWXxgMaYz0pk.roa (hash: cLYKT6oBtCkgrNFlRquRG12LDkvlkhXPXiMWFdBt32w=)
                          14: E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa (hash: bIj2Xc2XKCsJfzUcbvZ5kW4+OYzoOdbLVfr+TNdbU8c=)
                          15: EUp63jBa0leP1OvOcpdNWMC3CUU.roa (hash: uQ1Dw8PQCHKdGUd6o5BdHl0j+XMq3ml+07QGhhX1os4=)
                          16: F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (hash: WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=)
                          17: FYUqU8QWOLIjFef4sxjXi2SRgiE.roa (hash: YKJ2KcRNhHoxqeVVhOtsB2AOrHfzUODw+6sEzqJPF4k=)
                          18: Iv5goV36XyJf8h8Jg9f5HpjvVkY.roa (hash: /qW7a3x4Bqdh0z0vzoFyz5jEY3aTbOB6BSfGATNwGVI=)
                          19: J0gDIkrpboJuRwLiO8mRarT4dVM.roa (hash: KNGfnvH9hN8MLBIB5K0MLNABNs+jOG4jng+kKwDoCrM=)
                          20: K1et99aGlCbRN0atD8laA6wCpoM.roa (hash: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=)
                          21: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (hash: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE=)
                          22: LOHkKboHHj98Sud03cU5OIAfDEA.roa (hash: jTKW2wbQOoCIA97EofLg3elq1L7+ob1lcwso1uyxnO0=)
                          23: Lq1_kC7K6rSER7BBOksIzNMYSkk.roa (hash: PUuNNwZQh6bBg3pgTnG0BSz1bnW6aW1AJW36sfA609k=)
                          24: PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa (hash: mMckO0VWsJIoTMSpV0U2xVZQdIMSSosg9qAEuX4Cl34=)
                          25: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (hash: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic=)
                          26: Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (hash: cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=)
                          27: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (hash: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg=)
                          28: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (hash: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk=)
                          29: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (hash: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo=)
                          30: bsA14uz-YOXsaSFd_5h3VNt_UOk.roa (hash: IXOAQlZ/L2ESEYgfrmyIYrixLqYgar9WBc4G2uIdJEk=)
                          31: h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (hash: 9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=)
                          32: hGFaHcwrovzGAIYRLQIthoUbz9I.roa (hash: EW//8vzHeEI6MBxbWRLHvlhu2IW8hbQriarbUOI8bI4=)
                          33: jwLZoY1l9QraxwasgyAPNL-Lmi0.roa (hash: jB+O1Mki2gVeU0ChD+Q4PPmvQH8u/BH5X6sQaqc9dwI=)
                          34: kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa (hash: KdvanUmTfifS1E7RiGOchWirNpaIWYJ9mP4hoPbCkcI=)
                          35: kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (hash: uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=)
                          36: lHNKO7sNNTzQ5Qf7iXFu2MykVlY.roa (hash: gSBFoF7U8vP8sddt6bGyOP5IVVcu/X14ckwK7nmTGi4=)
                          37: mREkMg5h2CoIwruTXu13t8R24-k.roa (hash: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=)
                          38: mWE26VhH4aZItoNdm61WGalJaz0.roa (hash: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=)
                          39: nfPxS_G9gcj7ar4S7u_X74zr1JM.roa (hash: iHcyW/2KJt0+hDcs3hP5eiwUvwY+CugIYpFmJVOKT2Q=)
                          40: t_QY2lM7jBaSD55UnlYp2CJKlqw.roa (hash: KJk9RhNUyjLDjBZyhKz+Gi6pVQ35sT30ueaJl0wPtqY=)
                          41: tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa (hash: njzm6lCAV+EE4DxRZf3PtyDknOGT9/aOviQx8BhHPt4=)
                          42: tv--uDVRTnOlBD4wLkX6klTWyHk.roa (hash: qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=)
                          43: ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa (hash: S6htXVqvYivJ/J0tyQH0JXgWVjrdc9WIOkcpLunur6E=)
                          44: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: vbxgurH1tYdPBoOjdgmOXw40pVzju27fYk4gMBiTmuM=)
                          45: ye5JAz107-QVpFyi481T0DZx4h0.roa (hash: r2POUNpr2WCW9cC/BotLIDBkPCKZVoCCOPc5NI5c8Vk=)
                          46: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (hash: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c2:4b:3d:cd:22:69:15:c2:10:7e:8c:87:13:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Mar 25 22:01:56 2026 GMT
            Not After : Mar 26 22:01:56 2026 GMT
        Subject: CN=2a9c6407d3d7b190bcca915454ac5af161eadcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:bf:01:3d:83:b4:8a:50:53:2d:1d:96:fe:
                    94:c6:65:ba:c6:01:c8:38:27:5a:80:19:60:cd:82:
                    82:98:44:91:bb:dd:f9:7e:6c:38:26:e9:f0:e0:72:
                    d7:29:54:aa:f8:41:7f:3c:22:96:ef:ac:e0:65:f8:
                    83:51:d9:19:06:b9:f7:01:50:60:e1:9d:c4:15:1f:
                    05:90:d3:78:4c:b4:04:36:8e:2e:52:f2:62:60:09:
                    a3:22:42:c6:d3:46:1d:65:4a:a2:4d:0d:a7:70:14:
                    f8:dd:23:25:f1:db:16:6c:5d:b2:55:67:ba:c2:eb:
                    19:c5:27:03:0b:5f:53:de:37:9d:d9:c8:7f:eb:21:
                    c0:4f:6b:6d:fd:f2:e0:b7:7b:49:94:3e:84:64:c5:
                    ed:21:42:a4:fd:f9:c9:e9:95:96:cd:41:2a:07:83:
                    c7:ae:7b:42:85:7f:98:dc:33:84:44:3a:38:7a:95:
                    75:cb:d8:b0:d2:33:69:c5:c6:e6:1f:f2:71:ce:04:
                    61:9a:4b:7a:f0:bc:51:0f:00:83:2a:95:a9:5a:03:
                    07:7e:9a:a3:05:05:aa:3f:5c:0f:0c:16:a4:e6:2e:
                    46:28:d6:c1:e4:56:5d:65:c2:69:38:cd:0d:cf:1c:
                    21:8b:27:cb:f1:18:5b:40:9c:05:e1:60:8e:fa:2f:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:64:07:D3:D7:B1:90:BC:CA:91:54:54:AC:5A:F1:61:EA:DC:FC
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d4:67:9e:1c:2f:79:90:ad:bf:de:a1:fe:c5:c8:08:61:34:
         58:e0:af:39:90:c0:69:78:4c:e4:b9:58:e5:c9:76:d0:75:ee:
         77:b3:4f:61:ea:c5:d0:b4:42:37:09:86:0c:e5:ee:2a:40:5b:
         17:57:31:1f:84:e7:9a:f3:d9:93:00:90:d4:09:a7:28:ef:67:
         77:e8:b8:dc:20:54:4c:36:3d:72:de:ac:4b:0f:96:0d:8c:4d:
         ef:1a:8b:78:66:fa:4e:ec:cd:87:ff:1e:dd:c4:f8:0e:fc:66:
         77:33:4e:e5:64:8c:2b:a6:e1:7b:f7:f5:29:60:2c:6e:25:85:
         0f:00:40:16:9b:10:ef:ca:0f:be:88:1e:8a:84:5f:3b:1c:ae:
         d9:d2:8e:eb:d2:d3:9a:93:e6:5f:52:c5:47:db:05:27:c5:c9:
         04:e0:4b:50:70:ad:e5:93:c8:63:d1:e8:33:4b:c3:83:fd:76:
         04:9a:c4:bc:8e:c9:d9:e8:be:f8:f7:dc:1f:2f:c1:79:5c:d0:
         7c:9a:29:5b:d3:3b:59:be:c9:73:62:35:73:32:06:f2:fd:1d:
         c1:8d:cd:85:f0:a3:67:36:bf:3e:b8:d9:fb:1a:da:0f:17:ff:
         88:17:d4:20:c9:db:b2:43:43:a2:3a:44:39:19:3b:86:27:ea:
         cb:37:1d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMJLPc0iaRXCEH6MhxNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwMzI1MjIwMTU2WhcNMjYwMzI2MjIwMTU2WjAzMTEwLwYDVQQD
EygyYTljNjQwN2QzZDdiMTkwYmNjYTkxNTQ1NGFjNWFmMTYxZWFkY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha+/AT2DtIpQUy0dlv6UxmW6xgHI
OCdagBlgzYKCmESRu935fmw4Junw4HLXKVSq+EF/PCKW76zgZfiDUdkZBrn3AVBg
4Z3EFR8FkNN4TLQENo4uUvJiYAmjIkLG00YdZUqiTQ2ncBT43SMl8dsWbF2yVWe6
wusZxScDC19T3jed2ch/6yHAT2tt/fLgt3tJlD6EZMXtIUKk/fnJ6ZWWzUEqB4PH
rntChX+Y3DOERDo4epV1y9iw0jNpxcbmH/JxzgRhmkt68LxRDwCDKpWpWgMHfpqj
BQWqP1wPDBak5i5GKNbB5FZdZcJpOM0NzxwhiyfL8RhbQJwF4WCO+i9pdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqcZAfT17GQvMqRVFSsWvFh6tz8MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdRnnhwv
eZCtv96h/sXICGE0WOCvOZDAaXhM5LlY5cl20HXud7NPYerF0LRCNwmGDOXuKkBb
F1cxH4TnmvPZkwCQ1AmnKO9nd+i43CBUTDY9ct6sSw+WDYxN7xqLeGb6TuzNh/8e
3cT4DvxmdzNO5WSMK6bhe/f1KWAsbiWFDwBAFpsQ78oPvogeioRfOxyu2dKO69LT
mpPmX1LFR9sFJ8XJBOBLUHCt5ZPIY9HoM0vDg/12BJrEvI7J2ei++PfcHy/BeVzQ
fJopW9M7Wb7Jc2I1czIG8v0dwY3NhfCjZza/PrjZ+xraDxf/iBfUIMnbskNDojpE
ORk7hifqyzcdXg==
-----END CERTIFICATE-----