Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          OiZOBm46O+qK3PZ0/JnXWlRIFnouyAC4MC9t5GujAQ8=
Subject key identifier:   6D:A4:82:FA:65:37:8D:63:42:B9:BA:91:4E:7F:8A:24:E3:5B:58:87
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       01A0CEFFCB4FDF5E1D26674781E41EB7BA21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          15A8
Signing time:             Wed 23 Sep 2026 16:01:05 +0000
Manifest this update:     Wed 23 Sep 2026 16:01:05 +0000
Manifest next update:     Thu 24 Sep 2026 16:01:05 +0000
Files and hashes:         1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=)
                          2: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=)
                          3: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=)
                          4: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=)
                          5: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=)
                          6: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=)
                          7: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=)
                          8: Itg1prYwWRPhF5zNIUnOGVNFGeM.roa (hash: nAsp415Ngb0XOA9HboUId94jZhl5oTnXqu3QjJfj8KU=)
                          9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=)
                          10: Mg1D6QC_g63JPX2rdrLMPwpxCSY.roa (hash: Yh3tNT6+XfpBErn2NHfTJsOgi2In688uCxSwQz2Lk7o=)
                          11: MtY73m5Dy7Z-8IkMEEvtPhwun6o.asa (hash: YVP7j6bXOWilQyVf5GWPEBF5i8ugo1QMSomNFKB/BjY=)
                          12: MuWQfO3mJklCU15dVw9qdJGgipk.roa (hash: mwuJdo4EA83qSqYe63WUHWpcqAseygQza4cwnZrRl6Q=)
                          13: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=)
                          14: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=)
                          15: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=)
                          16: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=)
                          17: bjtqDJXlOz7pCpEjOBsxaBiuwec.roa (hash: NF7IuS5ng6fRX6mAKKyUm5b/IR1xDvuUmKt4bVjV978=)
                          18: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=)
                          19: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=)
                          20: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=)
                          21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: QwHoeGh3CFt77zGeAATZERvKKjPI9Dw8LeRU7cFLY7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:cb:4f:df:5e:1d:26:67:47:81:e4:1e:b7:ba:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Sep 23 16:01:05 2026 GMT
            Not After : Sep 24 16:01:05 2026 GMT
        Subject: CN=6da482fa65378d6342b9ba914e7f8a24e35b5887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:0b:3a:c8:29:d2:2a:d0:d0:b3:ba:85:8d:
                    0e:0f:b7:48:57:3b:5c:9e:4a:3c:82:a6:49:91:47:
                    f6:d0:16:4f:f3:b6:4a:a4:3c:06:05:ae:6a:52:d1:
                    d1:fb:c1:0b:28:4d:bb:00:7d:d9:02:d5:6e:cc:54:
                    cf:76:fa:62:91:bb:6b:6b:fd:b7:5e:d5:12:7d:81:
                    d3:0a:3a:f3:24:f5:4f:45:74:f7:07:71:0b:c1:4a:
                    e7:6e:5d:a5:f9:93:0b:e1:84:2a:1f:89:e7:85:a6:
                    37:04:dc:59:e6:13:2f:54:74:76:3f:2a:72:85:e7:
                    7e:b9:52:3b:26:6a:31:0b:bc:ea:e3:bc:1e:da:eb:
                    ed:f2:6a:e3:42:e9:02:90:fc:63:0f:fb:c4:08:05:
                    13:3b:3e:4f:db:29:2f:b0:4d:b1:5c:26:26:61:3a:
                    ee:c2:f6:85:62:6d:18:a2:00:3b:34:ca:fd:84:d4:
                    a9:47:ef:6a:c1:3e:2c:da:db:d2:9e:98:d8:13:10:
                    9b:6d:90:9a:ce:01:c6:73:2f:91:43:b4:50:0f:81:
                    8f:d8:cc:64:25:1d:80:62:52:3d:da:96:70:f6:99:
                    36:05:f4:2e:ed:63:6f:6b:dd:86:9f:28:66:a9:1d:
                    2b:35:e6:e5:f3:2a:ef:98:23:43:d9:0a:d2:fb:72:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A4:82:FA:65:37:8D:63:42:B9:BA:91:4E:7F:8A:24:E3:5B:58:87
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:17:1f:45:f3:10:00:d8:61:9e:33:6c:3e:06:2c:64:67:0b:
         7e:b7:1a:a6:13:ab:4f:14:f0:bf:dd:cc:a7:7f:a9:fd:85:51:
         40:a0:bf:5f:b8:0b:fd:6e:f7:58:71:df:88:54:a7:bc:77:46:
         b0:7a:c1:76:42:8c:6a:1e:c4:f4:99:77:cc:90:bd:62:c5:d3:
         03:f0:40:38:11:c1:71:d8:df:9f:4a:7d:11:21:f8:67:7b:b4:
         df:dd:0e:b9:c0:e9:98:88:0b:14:56:27:48:2e:81:fe:b9:e4:
         5f:dc:39:34:60:51:98:93:f8:47:6a:82:88:ea:8c:e5:62:57:
         2f:b7:08:28:46:f8:78:32:51:d4:43:2d:e5:8e:54:be:15:08:
         4e:2c:ca:b5:7b:46:a4:d9:f7:10:c3:c5:d9:8c:53:be:be:6d:
         9b:54:8f:f8:5d:bb:e2:86:ec:b4:d1:4c:f8:ad:ec:87:69:c6:
         0f:44:76:fc:55:e4:d1:93:df:b4:06:38:40:2e:37:91:21:e3:
         bc:e6:8f:cb:a3:ec:b3:74:ad:64:ef:31:b8:93:14:46:fd:43:
         77:0c:22:d7:5c:a4:49:03:f3:c0:69:19:98:b0:49:3a:80:a5:
         bf:02:d3:8e:7a:c0:9a:41:9b:4a:a2:83:db:26:90:34:8b:48:
         35:10:57:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/8tP314dJmdHgeQet7ohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjYwOTIzMTYwMTA1WhcNMjYwOTI0MTYwMTA1WjAzMTEwLwYDVQQD
Eyg2ZGE0ODJmYTY1Mzc4ZDYzNDJiOWJhOTE0ZTdmOGEyNGUzNWI1ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/YLOsgp0irQ0LO6hY0OD7dIVztc
nko8gqZJkUf20BZP87ZKpDwGBa5qUtHR+8ELKE27AH3ZAtVuzFTPdvpikbtra/23
XtUSfYHTCjrzJPVPRXT3B3ELwUrnbl2l+ZML4YQqH4nnhaY3BNxZ5hMvVHR2Pypy
hed+uVI7JmoxC7zq47we2uvt8mrjQukCkPxjD/vECAUTOz5P2ykvsE2xXCYmYTru
wvaFYm0YogA7NMr9hNSpR+9qwT4s2tvSnpjYExCbbZCazgHGcy+RQ7RQD4GP2Mxk
JR2AYlI92pZw9pk2BfQu7WNva92GnyhmqR0rNebl8yrvmCND2QrS+3IUOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2kgvplN41jQrm6kU5/iiTjW1iHMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBcfRfMQ
ANhhnjNsPgYsZGcLfrcaphOrTxTwv93Mp3+p/YVRQKC/X7gL/W73WHHfiFSnvHdG
sHrBdkKMah7E9Jl3zJC9YsXTA/BAOBHBcdjfn0p9ESH4Z3u0390OucDpmIgLFFYn
SC6B/rnkX9w5NGBRmJP4R2qCiOqM5WJXL7cIKEb4eDJR1EMt5Y5UvhUITizKtXtG
pNn3EMPF2YxTvr5tm1SP+F274obstNFM+K3sh2nGD0R2/FXk0ZPftAY4QC43kSHj
vOaPy6Pss3StZO8xuJMURv1Ddwwi11ykSQPzwGkZmLBJOoClvwLTjnrAmkGbSqKD
2yaQNItINRBX1A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:01:04 2026 by rpki-client