Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          bNoltXSq9kav3WRx30DZJtlatojbpZVK4FPoqlqYkJ4=
Subject key identifier:   9D:C4:2E:CC:48:91:D7:EC:72:FE:A1:E5:BB:2D:51:C2:7B:BA:88:D3
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       01A0CB598DD1641E60F3AEBE1D9594E80500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1ACB
Signing time:             Tue 22 Sep 2026 23:00:38 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:38 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:38 +0000
Files and hashes:         1: 01kfrBCLXsb_MBRY0V39-NQ7rgQ.roa (hash: 0enDaZKwuYkATDRkwnd98W7Je5T9WDnrNDfkylmrhd0=)
                          2: 0GwtoUzvyeaOyVgiz5_5u_fQDK4.roa (hash: ZzkFfie4rwQqLWELgA2gskNhetqEHZ8eQDpZfZACQJA=)
                          3: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: FM6Q3pJJ1MZ8ES+LEI3BlsK7dOMM7jojoLDxJygPevI=)
                          4: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          5: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          6: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          7: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          8: 2f2KbLWLRgefrh1jMcyUmlWtbBM.roa (hash: 7abS44zNq2ylx4BaFqOQr8b/IG7Bh+rBDu/FXXp3Wbc=)
                          9: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (hash: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=)
                          10: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          11: 6WMK9I3DnHTXYoRzy1IbDgxnYNY.roa (hash: XQheycBstYDE+5x+URUBuFcOUSJvoN70Z8ujQ9Hilis=)
                          12: 8lcUdDQu4-S0Jk_uhGH1tksSBMU.roa (hash: VZUajfKKZ+6/MW47DrUYLxT7wW97tV6tpTpEfd2c/3A=)
                          13: BAIynlsyHU_iC9dbEPMu0P4DC0o.roa (hash: NwY40F+kFG2yfJLJ2eEnwJuZ8Y7l5nWAQmBeMkshuLg=)
                          14: BBqUDSX3Fvve-FGx1jFivIUVEmM.roa (hash: FfIefLDtd+nMu7zbtyHVxd8RpD4OF2BShpnpm9l0ac8=)
                          15: Cwxmh-q4ocNyXzSkaSGVJUJmM1M.roa (hash: uP02IrigvyhN9S8CB7QQal83MTTSbkjVVjksemd0Awc=)
                          16: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          17: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          18: HivILvymqncyu4kzXVkIX7ILl5k.roa (hash: v33uaraRSZDb221ZLSNj9uM/rVrGUTNVYseptwrMKOk=)
                          19: I1bm7eXIZpq2tqGKBIuB8NRWQPk.roa (hash: N9y61MIeJ5NO8Eq26x4lUQLtlEQG0sukKq68n6T3Z5U=)
                          20: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (hash: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=)
                          21: J6cvqdNaa_h8c-AJMPMNzi3IcZk.roa (hash: szt8aLA4tUZEqoG37djJt0EwfQ+WkrWOnry8JrN53Wg=)
                          22: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          23: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          24: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          25: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          26: REp8AFKGns5xiYXkDqFGd2SbJUU.roa (hash: tlQAtFV34/SZMwY/TuTVauUOXrAR3Dodz+yvtAKxe5o=)
                          27: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          28: YCpQpGJvTMJcO0TicA4fkp7IzaU.roa (hash: k/VcJ1QNPnA5DRYnFFUDe1TP6YstAmFSZmxJIOWET1U=)
                          29: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          30: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          31: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          32: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          33: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          34: ez3sINlMTISdZyBV_hJqmoLINo4.roa (hash: SrEIOLPfYZlxkGiTaWbM6ObQhoWyRVfvSGT8gHOAs4Q=)
                          35: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          36: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          37: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          38: pjDB1GDdcVVreVj-Q3zh-jUvRg0.roa (hash: 0rt1hCmLolk7xz/j43eQn2e6jlbNvi4KzsoV0vsgSVc=)
                          39: sCp-ic69EDxQ8ZLfJ7taL1pp0CE.roa (hash: xaCYWU/obHtmqJSwbSvW3HJlolsUeKexX3oOqFczu6g=)
                          40: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
                          41: wg9Gn8W5Iya8_ib5d0xOJwWR1qs.roa (hash: qLIg84kr+yFqGfleZlOeAuSLQDzYfJaquM072K5xYjQ=)
                          42: wpmkhn7MtpWlWDqS7v08qnuoFdY.roa (hash: 34KGuAwFXepl2mueXI+PWCiLTgtJ4D0Gg0Z0V5uio1k=)
                          43: xa5mNxjnEXhMEBCuJ9F9OKU0x5k.roa (hash: cwK0iR42E3FrGLL4IaVUQLUTweJIpxrxUB3kIXhU5z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:8d:d1:64:1e:60:f3:ae:be:1d:95:94:e8:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Sep 22 23:00:38 2026 GMT
            Not After : Sep 23 23:00:38 2026 GMT
        Subject: CN=9dc42ecc4891d7ec72fea1e5bb2d51c27bba88d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:61:3f:84:57:11:68:b8:1b:b2:cf:9e:eb:
                    ef:49:a9:40:9a:ec:38:4a:6e:50:2b:c0:7b:f6:f5:
                    d4:95:5c:1c:fb:f1:81:58:f1:7c:6f:f8:c4:c5:1b:
                    ca:a6:31:3d:2e:ec:7b:3d:0e:0e:bd:3c:04:81:1d:
                    f7:91:d4:24:98:b1:dd:2d:98:77:a6:bc:f9:a1:bd:
                    01:e6:74:d8:29:5b:2e:9b:a5:f7:3b:ea:96:fd:ba:
                    15:53:54:82:43:f7:88:bb:ec:d8:16:eb:eb:d4:b9:
                    6f:3b:16:bf:65:6a:87:0c:d2:f4:9f:ab:9d:cc:6f:
                    af:d0:34:9a:c3:78:47:44:a9:d9:cc:67:21:83:ab:
                    d1:7d:4e:f6:fd:56:22:97:d9:79:1f:bc:cb:59:92:
                    2b:00:0c:80:0a:b0:75:d8:0e:89:fa:a7:ee:6d:1a:
                    02:bf:92:33:45:3d:4f:d9:59:65:dc:ee:7b:be:57:
                    99:ab:64:5a:9a:39:b9:60:4e:92:eb:b0:36:f6:19:
                    03:70:b7:d1:5c:12:d7:12:8d:92:a5:17:f3:20:b4:
                    dc:b4:0f:fd:9c:93:62:24:7e:f9:6e:93:a4:6a:c3:
                    36:96:5b:34:27:44:05:f8:4a:4b:d5:bb:60:7b:d8:
                    31:2f:68:f5:e7:4b:94:8f:d7:0f:9b:17:72:6c:eb:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C4:2E:CC:48:91:D7:EC:72:FE:A1:E5:BB:2D:51:C2:7B:BA:88:D3
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:92:58:21:88:3c:1b:dd:ac:07:36:1c:36:8b:89:e3:34:33:
         36:c9:b3:9f:03:56:a3:80:44:36:35:60:55:96:e2:0e:5f:eb:
         da:0e:42:db:f4:d3:86:80:01:27:9d:b4:3a:0b:44:1c:96:9b:
         74:a1:f5:32:75:ef:5a:56:c0:e9:7b:d4:22:b9:25:cc:83:bf:
         e8:ba:af:15:31:1d:b1:c1:33:ef:f0:41:c7:eb:08:ec:43:ae:
         9f:99:1f:23:17:d8:2e:ab:e4:1a:5e:db:0d:90:e2:c8:f6:56:
         a8:3c:8f:9c:10:74:fa:cf:18:32:a4:db:10:31:b3:91:ce:14:
         a0:f1:49:f3:7d:b8:c3:06:68:51:7d:27:bd:27:0b:13:2a:23:
         c7:19:8a:59:fa:39:ab:96:8e:d3:9d:2e:eb:54:4c:67:7a:d0:
         63:03:7a:63:64:8e:4d:fc:6c:2e:1e:f4:e9:38:ef:88:6d:47:
         0f:fc:0c:3e:b8:cc:b3:68:cf:ef:93:a8:04:af:71:f8:2a:78:
         12:8c:39:92:50:ed:fc:bb:7d:e9:02:8a:dd:69:ab:97:d8:bd:
         bc:5f:a8:5d:16:9d:5e:06:3e:f6:55:70:87:9f:db:59:ae:9c:
         6a:be:81:72:33:8e:c5:9e:72:35:55:7e:09:72:a5:dd:74:0e:
         5d:22:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:05:53 2026 by rpki-client