Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          wvZ46jOvhRNLDruCZEnwQqgiwupxjQTSA67xRgcLcHc=
Subject key identifier:   60:B1:0A:BF:50:46:9C:1C:13:D7:E0:C8:B8:CC:83:71:09:02:5B:B9
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       01A0D04929A6D2D3BD59CEADAC5253974387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          136C
Signing time:             Wed 23 Sep 2026 22:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:50 +0000
Files and hashes:         1: 1FLA_81GCMks7W2rD9jp1J4joBk.roa (hash: J4WswnEmZVEN/GUZXCH17aqt4CkShkPRyJeXlG+8CfE=)
                          2: 1iBMJpIlXMLjjQkUn4nZDLczAow.roa (hash: 8NPnBEbUPN1SqKmDUPdeUFqBPKaBctzQ72AI7Zirisw=)
                          3: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
                          4: CBPoDdUH30f7d2sFQjNhO5c0Gec.roa (hash: klkootso0a7hcOElSqfGOplj+RsqKJ4MuYxaK0CdTEY=)
                          5: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: qDJ8CS+9LyPuWvdmwwW0wn4xMsWe3fJv3SUmHhe6aLc=)
                          6: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
                          7: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
                          8: GPENjdnBuUeAF8pjtU3on9aBSHA.roa (hash: Mw1cMnE9/B8Zcgxh0tYVxSVZOI4fKuxx+ERKVKcAJAs=)
                          9: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
                          10: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
                          11: IP74orl2g2GzS_sBg0bhIFwUnHo.roa (hash: e+ZFyLvD6TvqccDkvi7HS3f1gIAB4F0wAm1VZVBXDX0=)
                          12: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=)
                          13: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
                          14: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
                          15: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
                          16: W8YNXsX9yPDFPY_juFzIPJCKU_I.roa (hash: +blIAp8nmqZRBhHxpcV2UfhK4Uk56S7wQ9UO0lHBgcA=)
                          17: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
                          18: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
                          19: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
                          20: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
                          21: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
                          22: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
                          23: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
                          24: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
                          25: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
                          26: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
                          27: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
                          28: zXzaXXaXaacAbGR2BU_XAEJ7v30.roa (hash: Lqdd4BwuY4RYhpHOODbRGdpLMFlr375rTHvbeXFXxRI=)
                          29: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:29:a6:d2:d3:bd:59:ce:ad:ac:52:53:97:43:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Sep 23 22:00:50 2026 GMT
            Not After : Sep 24 22:00:50 2026 GMT
        Subject: CN=60b10abf50469c1c13d7e0c8b8cc837109025bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:8a:de:6f:72:51:f9:2b:97:18:8a:60:ab:
                    a7:a9:1d:0a:50:0f:d8:53:38:57:7a:d3:3a:01:38:
                    d4:e6:5c:2f:d9:7e:90:cc:09:08:3f:ef:bb:c9:e5:
                    dc:30:8a:12:18:f0:18:f5:6f:99:ac:e0:28:a2:2a:
                    75:48:56:b2:1d:7a:fc:cc:81:67:52:f5:e2:ba:6e:
                    1e:fc:a4:78:20:67:0a:24:49:2e:b4:e4:cd:18:15:
                    0c:67:d5:18:d4:a1:e4:fe:f6:a8:21:5a:79:33:99:
                    23:d7:73:2e:04:9b:17:eb:10:42:44:e5:b8:79:29:
                    c7:38:62:e6:0a:e2:07:31:34:9a:69:da:b5:d5:85:
                    c2:ce:f8:e1:1a:e5:fb:b4:f0:23:c2:b9:4a:4a:73:
                    b3:b7:f4:7e:9c:54:5d:65:d8:df:a5:c6:a6:dd:65:
                    ba:2e:0d:d2:21:6a:2e:63:de:3f:3f:c7:d9:9b:19:
                    7b:49:0e:ce:2e:0e:05:a4:cd:1d:0d:a3:e8:d3:8c:
                    dc:aa:99:2f:5c:25:67:dc:a7:d4:37:cd:46:e7:f0:
                    e2:6d:92:87:2f:9c:88:b8:a9:b9:01:5f:7c:f6:31:
                    38:38:4e:cf:9d:28:15:9e:50:c3:82:51:29:9f:b2:
                    c3:8a:6d:35:27:65:12:bc:f5:b5:78:d0:6a:e2:80:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B1:0A:BF:50:46:9C:1C:13:D7:E0:C8:B8:CC:83:71:09:02:5B:B9
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:57:0d:3f:8a:02:f8:7e:e5:4b:c6:34:73:6c:88:07:26:
         a5:96:3a:0b:fd:7a:8c:46:44:46:52:61:95:57:5e:10:dc:d1:
         f3:50:8f:71:c4:60:86:cb:86:67:99:88:9f:e0:e1:3e:91:cb:
         48:59:ff:8d:fb:46:86:6e:54:8e:dd:30:5c:88:15:8c:11:94:
         9d:b5:71:6d:6e:71:37:3e:4c:1e:85:36:d4:15:46:0d:b9:52:
         de:1c:58:18:ef:63:c5:8f:43:d1:4a:8e:83:29:1e:23:a6:59:
         ec:51:1b:18:63:2c:62:16:3e:6d:e5:19:cd:46:54:3f:31:64:
         04:e7:44:8e:41:b1:7c:a3:64:7b:10:61:19:19:ee:7a:2d:75:
         ab:d1:92:c4:84:2a:d5:2d:f2:c5:d0:b4:d4:41:12:e2:bd:e1:
         83:93:16:e0:53:80:17:6c:0f:d1:8f:b8:cd:78:f1:34:89:fa:
         a2:9c:62:d0:f9:65:d5:dc:b5:cd:ff:85:ef:f5:c9:68:ba:b6:
         2b:64:5a:67:84:75:30:e3:14:c9:33:f9:95:3b:4e:19:03:bc:
         f8:98:70:de:df:67:b8:07:5c:ea:d7:9c:fe:9e:7d:c6:96:b5:
         ff:30:8d:74:4f:34:f8:72:b3:06:fd:f2:1b:29:a3:a4:d0:a6:
         fa:3a:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:04:13 2026 by rpki-client