Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
File:                     fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft (raw, json)
Hash identifier:          2gYeMxX23VlB9kOMJzCe1kFjDhFi7k7bVfrHR5w2050=
Subject key identifier:   95:9D:4F:99:D3:96:CF:3D:34:A8:4E:11:B9:65:A7:13:41:0C:54:87
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Certificate issuer:       /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial:       01A119AB1BC0D967D9A6BE5BD26549407836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
Manifest number:          010D
Signing time:             Thu 08 Oct 2026 04:00:06 +0000
Manifest this update:     Thu 08 Oct 2026 04:00:06 +0000
Manifest next update:     Fri 09 Oct 2026 04:00:06 +0000
Files and hashes:         1: 0CJ9u17zIPcruLsVJEts_CUZ3fw.roa (hash: Gg5SPXWp5505pInWA62OkVBNCjh/Ak+0D6VAOWzVDdM=)
                          2: 0xZa5yWUtoc-24jdugiflkmmIc4.roa (hash: qEcPxa3jNxSXYXEJgRMGQ6gYdmaxH+Dt3Hzpzwm1GXk=)
                          3: 1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa (hash: 0v6Z94OQ8OEYuVPUX/BBkgAoPKUlQ0dv8VbYzRMpkfw=)
                          4: 1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa (hash: DwYLVMYxwptlKH2Jo7VsqdJLNSIsspd6i0cEzgvakYU=)
                          5: 1gbHCEbgQwjeiouKm5GaF97BBGc.roa (hash: ybmEELamwbI3k/0S59jWHQ3NihRk/30dBtI2TdBBoS4=)
                          6: 2BycUX4OMpp_ONmpWqOOx8A7GP8.roa (hash: fBXfZQwwJARK7+JDrhcq1IBYyI1YOEEWIdgMx7lYI70=)
                          7: 2JFfv659oPFGOkGk_bNMMZy8rbs.roa (hash: 9gs7l3uhLE7j+4RGYjBCct/pVQeRefhiDRoUa8kkxMY=)
                          8: 31IuJXymzyCCz-nBx80UcTy2KJM.roa (hash: N3OXjTJ7vPVzKKs9xt/0Z8rYQDz7GcNmVIDCtknzJo4=)
                          9: 3OKNlLRJJnY0WTL3jmhbPyh3QVM.roa (hash: jE4i9KPU+4ZRPuD5yVgasSVEVq5ZbrevQvdkI1ApONA=)
                          10: 4w9eMhz25cgw3wBmUofTq4aW9uM.roa (hash: Yu6i3q4t0BYz44PAfY8hgxLUoKL6ChdFdr0U09RhdHg=)
                          11: 53nVjykINhU1E1uARYyClLYic88.roa (hash: zoRw839yzl1D6EZAFd7ggDldbFRrTlMpGkY1G7jePDM=)
                          12: 5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa (hash: NwWWrwv2iEIMkY7yf+unqyAydilFqabTc8rRRuphZ2s=)
                          13: 5pDS3kHKWiU32-QZaJs7OmwHgaU.roa (hash: 7a9hnytsdQqjYSTUgg430pVu5zqq3po37oF6uG0MC0Q=)
                          14: 7rCdRbLq6hIcfsQnA303r_W7D30.roa (hash: erc0IzcRLIFTs6Qge/GkDnIJ6SiitmFUuwWwrs3G+Xw=)
                          15: 8d1IalPXfs0mlmk2FgzdLLr1OuQ.roa (hash: twW4N52rkz8GHbPzPt85ACh973N+eEARK2hpJgcEEds=)
                          16: 9e4nhDBDV7BzN-doC3Rdukk4IwM.roa (hash: kDPiKKf9CtaPCGXBNFKViWoi33U2OU7GaDd0TDYj/II=)
                          17: 9xIOZBHwAAkNANpknXvG8dZrLL4.roa (hash: OabLyuPtexleKLH5wRVOVV9OaUguM+6/MQcUPjkveC8=)
                          18: AKdP_WnCYSC6ouwGRCd07y2VJDk.roa (hash: gnjZovsh4NDuHzxJtWk8Vj/NpReZ+7VV6PpuQ1xNrgk=)
                          19: BJy-8q5rdLqS1VrgzjydPMIrwPc.roa (hash: 2+PepOInvhAWOYeDFTDRuwPrzFlVe49zW1KY3Vp4ZYc=)
                          20: Dnv6uILkWUS1v_KPYuw5SnVEXb0.asa (hash: yPbKBIOVqPlMzEgCK07iafSaBNUrtik8ciRuhN3kEs0=)
                          21: Jb5fhsHpDrmyLdjGRz0uFhEem98.roa (hash: UCI+d59xT/eDs0DShUfWDjWNMDQWAEcZTjIhSv7QN2k=)
                          22: K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa (hash: g076Y7WvmqIjLiy3ZLB52YNXxeeqiR1jHUxs7vXARmE=)
                          23: MUHAo43ATksR-SLPdrPtyQpVw8I.roa (hash: 8g6eM7AQ3CGLVzNv2I7I6eXU5p8aStR5V5IVK5ftuSY=)
                          24: Np7zLmXKA3yA-ioGsFaWFV5ebns.roa (hash: ite+WatU4VDz5FpF5VICtwu7wBAE93/8nd6qjBjs2Jg=)
                          25: Q_m5E5Z7LMb5OuLyiA01P8oV7Hs.roa (hash: o2Gw3Dx2Nrdktrx7TjfEXgk1J5nJb9Zxl25czXEgF8U=)
                          26: QsmDC0xumyz5MRI0VCdCEwmFohI.roa (hash: h8GNRtwjDCB9bY1Ozw+rHXsw0nChaonJyo4obxp9+nE=)
                          27: R7Vr98elCl8-XI40OwgjbRBy2ok.roa (hash: uXZhX4GIglHQod9UoZAg4FOS+PXKnbh8c2QJQLW5IfY=)
                          28: TXUKJJoKGveOWU1d4MKKpC7vG9g.roa (hash: +6CW9WY885Em14YZDApYOXXY83soIXGmk3RqofjJhjs=)
                          29: ZAaTnU6s_eFv366TC0JclDW0ZhE.roa (hash: YT//ILFoSXtbMg4NnvN2nPtXhEErfTq55aBeha2nE1E=)
                          30: Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa (hash: 4PwFjqVYHtrMdoqJtqZUtQgbid0TJjs+0mXNy+Un5T8=)
                          31: _nI_PNVjm1tzW7fbPHRQ_UNXGio.roa (hash: 7b8iKmGmZaMSXOaqiUPziUPJsSVF6OMYA76iGGmqXEs=)
                          32: baE-uTGXhUmXS65TJe0eoTaAdTA.roa (hash: AjzX6VNfFo0NJGvUKk2w+nDwgkPWIsuzZYkfZRHLP3E=)
                          33: bybU-ALtdFOAYGWPJIdrXnlJpsE.roa (hash: IhoD5+ZK284yvX7U34qLp2ObNOIWs6rJkCYkyy0P2oI=)
                          34: cAZ9pFFoJ2zhoSD5UHgH9xQkSKA.roa (hash: Upfym8cWm9hUGkNLSusIrU8RFQubfsySUw7WwyXAjHs=)
                          35: dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa (hash: 7YBcg3eoh/u0arCV5cilBpldW9SOARulU+iJYPbWCbY=)
                          36: ext-QDDWINcKwa2Mw4rXO7S9uXs.roa (hash: fWesDUJo13M+KG37vYxdJdEn2ynVJZfDjSl1lpbRFz0=)
                          37: f2zJwbsJQDjbgUwAMqBn3yhf67g.roa (hash: HoFw8uwofu/rWBg89N7bjQ91Fy2ImP28Tf0BytyeuJg=)
                          38: fB8XWNLLHNgHnYx78o3T2kcAKPs.roa (hash: jj9t1chBJ2t0t3tOHNeIqeQLqq+L6Q2JAiPF62ls9ac=)
                          39: fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa (hash: 9Pj2j1VDZ2oEcMkOoN8txqGGDjWHMZWAwK3n7bTvCg0=)
                          40: fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl (hash: CUQN4wKuDWmfXRYkENuX6Mjbj0oFdKpJsSskQ3YaupQ=)
                          41: gcB9OLOx-KqwqMp-e_TB7COz-xw.roa (hash: zOEacADZrsOUIT8na1aHga1C9RSgmdETsExbU8pE4Dc=)
                          42: jg6hfYCoXuAuPPoa7YinNKFlL28.roa (hash: rY+k9rbHpeWLCQT7qtOX5aiLx5RJnRuBw9S8uvo5yHI=)
                          43: jlFc5NpGt74_oDqgxwbh_oUqWRw.roa (hash: DciZoXOI6etcmmM8obtBaoffqMMBlF7e1baiFAPLUpA=)
                          44: oBfZRDR6FjLvr_-XU2lAaHQi0-Y.roa (hash: UyvbGxYl+EH4oQJaaT8IlVRUYz3dVoAAV1AeA249Oqo=)
                          45: oN6JJatzLo336CTblNZNKlHW7do.roa (hash: q5KHKCdbs6gJ4OP0+u1pdK9DEZupbyyK5LLY66y6Wi8=)
                          46: rKMXOu1LAkitTnIIuffCkZ36o8I.roa (hash: WkIoax7Ob7CGue2VjVswuJpb+FMRnB0LCAFbENC607M=)
                          47: rkXmkXfMN96unGF951D4RUAZm7s.roa (hash: DOvHWXPvMRR6+Gmo9Hh9n91hxEM9f/WGszHqiHPudYU=)
                          48: t1H1WeUKIekI-A1M_0yvxre-Cbw.roa (hash: pVeGrAx4QubBe5v7/7IYgcs8DtMQFCIpeWaaPUnESSA=)
                          49: uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa (hash: OuyxmyR7qFi2pZrcmF4ecIE7EgJUQ6+HiBKeZV/ae5E=)
                          50: w2Zllddsp3ETUfwlekfQFAQqlxo.roa (hash: Om10yXY3nPE/Bz/T/FmfqE3jNsjHIMUKT6SBgFk16bM=)
                          51: wAZtAE_3By_Xf-nupeBBOmp5mhY.roa (hash: hc/J/aEXc6fO3eZxYzWtgyBj0rsf+xPtP36ty39IdFA=)
                          52: x5guuAosMFmq5eJvD3KWfyibJEo.roa (hash: 0TT2fn2DQ/oQeYAJOgp14i1XmJQ6hYMiNIM3lUNvqpE=)
                          53: x6odgv4GBx7koYM0lfehBGyNvyM.roa (hash: hiMJKGkjwzFZrEmaNtZ57Yu5ODoeuShCdiRgVeJUTjM=)
                          54: xJmKkBU_6pGBGJ0NkbFR4R-7L7k.roa (hash: vjNNKW6FfN0Njf5+Jh/bQgnhiyKq9w9GA3uAf37wjig=)
                          55: xlfcRKaFcsMxbU98Nn3IsjnvEWo.roa (hash: v8hp66YtzHnMWY7lZCrnZ5MeLMLXbo1tlMs+Ycfpccw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 04:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:ab:1b:c0:d9:67:d9:a6:be:5b:d2:65:49:40:78:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
        Validity
            Not Before: Oct  8 04:00:06 2026 GMT
            Not After : Oct  9 04:00:06 2026 GMT
        Subject: CN=959d4f99d396cf3d34a84e11b965a713410c5487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:5a:c2:28:20:8d:96:9c:d7:f3:af:f8:d3:
                    8d:1c:c2:f2:c9:a2:b3:51:8f:bd:09:78:d8:69:a4:
                    d7:c7:e8:9b:40:43:5a:20:16:18:a2:59:18:7a:cf:
                    ce:d9:52:0e:75:8d:1c:a2:96:17:88:7b:5a:e9:12:
                    dc:7a:7f:0d:0c:c6:5c:56:8e:65:ba:02:39:33:6f:
                    fe:c4:aa:dd:bc:2e:c7:75:4c:1a:2a:09:9d:5b:9b:
                    fd:b8:b7:7e:51:83:d4:88:2e:ee:a4:71:06:52:ee:
                    12:ff:87:68:11:30:54:b4:d9:62:f7:79:18:39:11:
                    21:da:52:9d:b5:3a:6e:f6:3b:9a:4c:a0:6d:72:06:
                    bb:32:df:63:d1:6a:b9:0b:ec:63:c0:ac:7d:1a:c4:
                    1c:47:e3:32:62:c6:3a:e1:04:87:94:6d:af:e8:4d:
                    d0:65:92:a8:87:6b:ed:ff:93:4f:91:9c:ec:8c:0b:
                    96:f2:3d:c3:62:aa:8f:8b:6b:05:e7:48:cc:4e:1e:
                    1b:7c:cd:2c:f7:55:fc:02:f2:62:e0:84:0c:03:0c:
                    a4:d7:29:5d:d6:81:36:93:85:12:a2:b1:d1:97:32:
                    4e:97:a1:cb:11:72:18:51:64:57:bf:ca:cb:99:99:
                    cf:66:b4:c4:37:07:87:23:bf:80:da:e0:14:2c:72:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:4F:99:D3:96:CF:3D:34:A8:4E:11:B9:65:A7:13:41:0C:54:87
            X509v3 Authority Key Identifier:
                keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fd:52:15:53:3b:40:08:37:8f:46:a5:86:bd:de:dc:aa:0d:
         1b:de:03:cf:b1:7f:df:84:b4:72:52:69:60:b9:41:6e:69:ce:
         b7:dc:9f:c5:f6:9d:87:bf:c6:82:38:7d:9d:06:bd:f4:b3:49:
         91:81:ff:18:89:27:76:63:42:67:c1:90:0d:8a:15:9e:fd:35:
         ae:36:5a:73:ed:f8:93:e5:45:5a:c9:20:1b:43:20:6d:f3:07:
         54:e4:54:95:7a:7d:eb:8b:b7:75:fd:11:6d:11:04:94:e1:de:
         e8:bc:bc:25:e4:03:cc:0b:a0:f7:80:7f:c5:fd:7b:51:c3:20:
         3c:75:26:30:da:9a:4e:bd:d2:dc:82:90:2c:6a:4d:df:f5:7c:
         20:c3:23:81:7f:20:7e:f3:13:10:1a:06:62:21:5c:ae:a2:01:
         a3:17:51:cb:a9:eb:8e:1f:84:72:bc:0b:3e:69:d3:48:d3:f4:
         80:57:43:6e:65:b5:b3:5c:76:61:ea:7e:80:e6:3f:ce:ca:f2:
         5c:ee:cf:b2:a6:1c:3e:90:a5:68:cb:c7:b7:56:8a:26:40:19:
         90:7e:d8:3b:bc:f3:4e:52:dc:b8:d8:6a:f5:3c:e5:c2:44:73:
         56:32:70:c8:4c:6b:41:bd:09:ca:b6:d3:c9:6d:8c:03:e1:0a:
         dd:2b:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:23:16 2026 by rpki-client