Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          f/MwIYkAoZQNbcHV+upJFUtf8SVaa9i7JyGvnMqx7zc=
Subject key identifier:   98:BF:CE:EB:B2:49:51:3C:7C:11:1E:17:41:32:43:00:D0:C6:B6:B3
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       01A0CEFF43CF658C5F1CEAA2349797FEB0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          1AC7
Signing time:             Wed 23 Sep 2026 16:00:30 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:30 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:30 +0000
Files and hashes:         1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=)
                          2: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=)
                          3: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=)
                          4: 4-OxTRvKsE-KfsPGgyR1V3t99X4.roa (hash: L2A7Kx7pcANTVtohacYGiY2IpmYiWV3MjmG+5heBuCc=)
                          5: 6vVxzg1To3jRLZRe5eAGfm3AXO8.roa (hash: J5x0w+XQYRKdT8cjk+sBpm9ywaXeHXB36cqOs9BFfgw=)
                          6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=)
                          7: 7pwosY-JpSxZJNG9_IZ-1bOApdg.roa (hash: iQ6JpBx8IUd5kDTnnsNvsyst1DBn0TCH1LdQFSsXQW0=)
                          8: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=)
                          9: CRbRvhC1uKqes8IR89lmtpIQTt4.roa (hash: EO562tiebnOW6btwaNkc9PtYJgNjll1/iyRvRluHUWM=)
                          10: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=)
                          11: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=)
                          12: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=)
                          13: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=)
                          14: Jl-3rddU5JjTlh4l0alUwA66Db0.roa (hash: ZChl26Oem6nIwZHG1a7h5kQon71v0ACHznlQkh4KKGU=)
                          15: KV59OO7KJClf-nV-SktyqxjeQD0.roa (hash: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=)
                          16: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=)
                          17: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=)
                          18: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=)
                          19: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=)
                          20: Msm0CfNKc2NQbDNlopaTwAKNTxE.roa (hash: 07dSY8XgqSRoFl5jsJCKlKLDItme7Y+Kfp8MrCvTuD8=)
                          21: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=)
                          22: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=)
                          23: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=)
                          24: RNLAho-QCCsGT4LlSBmDznPzISI.roa (hash: k9qrK3CB3pZBI/+ijf1H63IQuNeWEj/N3CKMuUtiwh0=)
                          25: RRKsQC6M9AkjMNnb6Dbgy31a89c.roa (hash: RgVs/FEdPi9iuMl4X4UjocrvDXfBoeU0x5T2+6iJk9Y=)
                          26: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=)
                          27: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=)
                          28: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=)
                          29: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=)
                          30: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=)
                          31: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=)
                          32: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=)
                          33: f6vxDfNcKmbcRMocWBWqx0klFfU.roa (hash: yF/U9wmEqkEVL+v6ftdK6mnwfqDPE8fyPj5MQZHAAd8=)
                          34: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: synCpllqoCOvOc0J8TFhc/i2pThioCQptJDW3wGSDKw=)
                          35: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=)
                          36: oqbInV5y5jVijngnsT6Z4KkwCJs.roa (hash: Jofbkqy8kOPIsDBzvJum0QcsSO9pDkw/9K4nko6x7wQ=)
                          37: pvqnTAmZTCtaDIGRIJLpV3RVRq8.roa (hash: ELaRN/1CLckouMuTm/tPdmNa5GWM0lES+K7y8P8juTs=)
                          38: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=)
                          39: ukeeQgc1qQ-vF29y9LoNJsvaP4s.roa (hash: K5QO1YvJwo4eZmewT8GbQ87g0G9iR3nxd59JfY8KzwI=)
                          40: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:43:cf:65:8c:5f:1c:ea:a2:34:97:97:fe:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Sep 23 16:00:30 2026 GMT
            Not After : Sep 24 16:00:30 2026 GMT
        Subject: CN=98bfceebb249513c7c111e1741324300d0c6b6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:8e:bb:1e:14:92:d0:57:eb:bb:55:1f:80:
                    af:b7:68:b9:4c:5b:c3:9f:ef:4d:02:5e:ba:bb:dd:
                    ec:71:9c:f2:e3:4c:f3:f4:b6:5a:4b:49:67:ac:91:
                    4e:5f:9d:62:1f:53:95:ff:59:1c:39:4f:9a:ab:84:
                    d2:9b:7f:06:8e:cc:d1:f4:4c:a8:44:7b:e3:a1:ae:
                    77:15:65:26:a9:54:52:49:a2:04:9f:cf:3d:32:e3:
                    ad:2b:ed:bc:77:66:60:24:8a:3a:10:38:0c:e3:5b:
                    0b:b0:70:80:c2:7b:c5:ba:28:c0:d2:02:24:bd:9b:
                    38:fa:3f:15:45:db:a1:8d:f2:da:51:88:07:a4:d9:
                    01:ca:59:bc:3c:0f:be:2a:d3:82:f8:17:3b:8c:2c:
                    a6:cd:38:f8:6d:53:96:99:4b:dc:4f:80:be:44:ad:
                    81:61:57:71:e9:60:ac:61:83:08:99:11:ba:bc:74:
                    18:a5:ed:b7:9b:ad:09:75:ca:33:07:ad:03:2c:e0:
                    f5:0e:bd:69:9c:fe:71:2a:16:e7:0c:3a:02:d5:45:
                    17:f5:fb:08:9a:17:58:bc:be:53:01:6c:fa:aa:b0:
                    a1:34:b8:55:f5:b4:10:3b:37:5f:c0:5d:3f:0f:04:
                    d1:9d:2d:d9:eb:6b:4f:59:07:dc:ac:3a:91:d0:97:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:CE:EB:B2:49:51:3C:7C:11:1E:17:41:32:43:00:D0:C6:B6:B3
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:07:dd:28:74:b8:db:f6:64:e8:b9:92:a0:72:d4:37:ac:6d:
         0e:61:67:56:3f:07:1e:b8:2d:33:97:2d:1f:5d:24:e2:9f:55:
         52:4a:b7:1f:04:b3:11:f9:a8:40:86:31:92:d0:23:57:18:22:
         47:81:cc:4b:30:13:c6:3d:d5:5f:f0:63:3e:26:b6:5c:80:88:
         84:9a:28:2c:f4:14:4f:af:59:3a:5f:de:43:c1:94:2b:6c:a6:
         cf:ae:18:ff:4d:7a:61:9a:a0:40:cd:e1:f9:71:18:3b:9f:0f:
         0f:12:de:a8:90:11:42:22:73:17:a6:f5:36:c7:eb:86:9f:00:
         30:90:80:4c:4a:ac:e7:9b:12:9b:fd:1d:30:7f:45:45:c7:01:
         fa:24:6a:f3:10:d5:41:33:4c:19:66:84:fd:37:7a:b1:8c:4c:
         1d:b7:8d:c5:a1:3f:87:fe:73:03:a5:67:e9:dc:97:82:de:56:
         ff:07:48:0c:a8:d2:c8:a3:b2:28:9f:3c:72:5f:f4:2e:9b:ee:
         76:84:4f:81:f0:17:55:53:b9:28:b9:ae:e0:21:8d:a4:94:e7:
         3a:d6:ca:77:2e:94:10:e6:79:5f:6f:0b:fb:85:4e:32:6a:b5:
         57:70:1e:40:0e:ff:89:ff:20:64:41:89:67:0f:2d:c6:bb:eb:
         25:97:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----