Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File:                     igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier:          t2u/AP2D7kD25ANxLDjVD75tcnjD51jblG8Ykp9sGUI=
Subject key identifier:   CE:AA:F6:71:B3:D1:8B:7C:24:06:0C:54:F4:A0:32:53:E6:C3:B4:04
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer:       /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial:       01A0CD8D0947E5903DA24389556B76907E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number:          17FF
Signing time:             Wed 23 Sep 2026 09:16:07 +0000
Manifest this update:     Wed 23 Sep 2026 09:16:07 +0000
Manifest next update:     Thu 24 Sep 2026 09:16:07 +0000
Files and hashes:         1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=)
                          2: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=)
                          3: 9qAEHUby2kuUCMI19wdK7QIhAg8.roa (hash: j0PyiEMnRv/aYSZCH4c3fek9SvuRs8/liv5iE7aCOm0=)
                          4: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=)
                          5: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=)
                          6: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=)
                          7: GspeMP674JCoxzmabdO8Nx2F6fQ.roa (hash: VKbOH4JHpKYz0hG7SgazWoJ56gIYm3db7hsnAsPcBug=)
                          8: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=)
                          9: LUc1MJoVPez5w1xSPgQNKTfk4LM.roa (hash: 972ijDeKVAa4Gskej+slmbPkDfx9Jo5UGuOHg1JfZ5s=)
                          10: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=)
                          11: Qww9gCj-X4B4Xg_aKnU4H1Tk5uo.roa (hash: SIiEXR4hvpH9UtDtRw7spSH/X12xxic4pC9q8/Dobkw=)
                          12: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=)
                          13: Ya8UhAbXRHW76CZXydZwDc89luQ.roa (hash: jrko4GgQfGa4fx2XVYs7sNRMDfXWZShssHOvl4TRSgg=)
                          14: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=)
                          15: c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa (hash: U3K1dzpYsUWsqrAD5WtyRGP2OtEEKqHJp0n2MHiucNo=)
                          16: f4t99DHwC1imSdH0qBOau6ppWXc.roa (hash: R9huUo4NQkxmrWCn+znDnfiLaLSzUXjUqRrEAKTH5p0=)
                          17: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=)
                          18: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 0fd8EHlvPQDKt/ViAqbaLjT4MHgvP2jXxmYfN6aEAqE=)
                          19: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=)
                          20: yWXTyKbdzhf70aOdG1K-qa2Vqzo.roa (hash: HsTOFLq2DipgL762bkM6mfxMBIXe/4uYryzBcH67ZcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:8d:09:47:e5:90:3d:a2:43:89:55:6b:76:90:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
        Validity
            Not Before: Sep 23 09:16:07 2026 GMT
            Not After : Sep 24 09:16:07 2026 GMT
        Subject: CN=ceaaf671b3d18b7c24060c54f4a03253e6c3b404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:46:4e:6e:46:6c:48:ed:aa:66:7b:d6:ff:
                    d9:26:a7:ac:33:d4:d2:78:92:04:02:28:18:f4:f2:
                    e5:dc:81:e9:9e:b8:43:d8:82:3d:6b:16:68:dd:ae:
                    71:3c:4a:ae:0e:8b:bb:84:5c:b1:ee:35:48:58:5b:
                    eb:6f:49:78:75:fa:52:a5:b0:41:7e:82:62:24:64:
                    2f:d0:53:c1:37:41:e1:7c:0b:cf:e4:b2:90:ad:9e:
                    a6:b9:4b:63:fd:94:f1:96:26:17:18:cb:06:46:1a:
                    23:b2:84:b7:03:8c:55:6d:32:9f:1f:3c:86:c8:54:
                    a5:d0:c2:1b:64:3e:bd:40:8f:34:3e:d1:43:e0:8c:
                    43:c5:a5:4d:f7:ec:88:88:e9:d8:b7:19:f9:35:8a:
                    3b:14:33:5b:2f:31:6e:37:07:44:a7:8f:34:41:b0:
                    a5:4d:b2:b2:e0:da:7a:ab:3d:6d:87:70:61:35:80:
                    26:9c:ab:48:cc:e5:e7:52:27:8c:3b:da:8b:3e:67:
                    fe:2c:c2:56:2c:d5:39:b1:4e:36:78:fb:ba:ac:05:
                    ed:42:16:f1:7b:78:8a:26:88:a2:4c:3a:14:d8:0b:
                    0e:94:fe:be:fa:7f:4d:a7:32:51:94:92:3f:a5:08:
                    b5:f1:76:17:cc:61:85:18:6e:5c:61:d5:d7:e6:3f:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:F6:71:B3:D1:8B:7C:24:06:0C:54:F4:A0:32:53:E6:C3:B4:04
            X509v3 Authority Key Identifier:
                keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:94:47:24:b5:23:14:e3:34:dd:54:75:2a:f8:e5:c6:87:fd:
         8d:5b:01:d6:0e:16:2e:55:cb:b1:08:a9:25:27:90:dd:48:e8:
         5a:2d:ce:c0:74:ac:6f:ce:1b:47:76:f2:33:99:a9:f1:1d:61:
         1a:ad:2b:b0:1d:9c:47:e9:d3:f4:3a:65:f5:60:60:47:9c:78:
         2a:15:fc:a8:80:2b:01:f3:bd:be:79:5e:40:54:e3:9f:c1:5c:
         ce:7b:b2:f4:a5:66:3c:60:31:6e:39:63:be:5d:3b:df:da:b4:
         26:1c:52:81:e9:cb:fd:b0:8b:83:f3:6c:49:06:02:3d:57:b7:
         6e:91:84:70:90:a0:90:78:e6:ca:cf:8e:8d:61:4d:d5:7f:90:
         42:73:26:bb:49:b7:11:23:a1:47:a0:9b:46:ba:92:69:e0:05:
         a3:09:4d:2d:8a:7f:74:9f:bd:26:db:75:a4:a9:3f:45:6a:12:
         f5:a0:23:26:17:7d:fd:84:7f:23:04:e8:c8:bb:d5:6c:c1:1a:
         9b:5b:9b:19:ae:b4:9f:27:5a:87:65:33:81:48:d3:f2:93:45:
         46:1f:66:16:a5:99:0e:88:c6:c5:f0:bc:12:f3:57:48:07:d1:
         ee:84:58:6a:13:5e:c1:f2:f6:14:2f:e9:21:bc:17:0e:9a:01:
         4c:82:79:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNjQlH5ZA9okOJVWt2kH5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwOTIzMDkxNjA3WhcNMjYwOTI0MDkxNjA3WjAzMTEwLwYDVQQD
EyhjZWFhZjY3MWIzZDE4YjdjMjQwNjBjNTRmNGEwMzI1M2U2YzNiNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5FGTm5GbEjtqmZ71v/ZJqesM9TS
eJIEAigY9PLl3IHpnrhD2II9axZo3a5xPEquDou7hFyx7jVIWFvrb0l4dfpSpbBB
foJiJGQv0FPBN0HhfAvP5LKQrZ6muUtj/ZTxliYXGMsGRhojsoS3A4xVbTKfHzyG
yFSl0MIbZD69QI80PtFD4IxDxaVN9+yIiOnYtxn5NYo7FDNbLzFuNwdEp480QbCl
TbKy4Np6qz1th3BhNYAmnKtIzOXnUieMO9qLPmf+LMJWLNU5sU42ePu6rAXtQhbx
e3iKJoiiTDoU2AsOlP6++n9NpzJRlJI/pQi18XYXzGGFGG5cYdXX5j9DnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6q9nGz0Yt8JAYMVPSgMlPmw7QEMB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJRHJLUj
FOM03VR1Kvjlxof9jVsB1g4WLlXLsQipJSeQ3UjoWi3OwHSsb84bR3byM5mp8R1h
Gq0rsB2cR+nT9Dpl9WBgR5x4KhX8qIArAfO9vnleQFTjn8Fcznuy9KVmPGAxbjlj
vl0739q0JhxSgenL/bCLg/NsSQYCPVe3bpGEcJCgkHjmys+OjWFN1X+QQnMmu0m3
ESOhR6CbRrqSaeAFowlNLYp/dJ+9Jtt1pKk/RWoS9aAjJhd9/YR/IwToyLvVbMEa
m1ubGa60nydah2UzgUjT8pNFRh9mFqWZDojGxfC8EvNXSAfR7oRYahNewfL2FC/p
IbwXDpoBTIJ5jw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:53:27 2026 by rpki-client