Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          ZJsZ4txAbdDacIQ7g9oAfV8gZhWTFq+01VRvbSdv/rg=
Subject key identifier:   0D:4C:9C:74:B3:16:4A:E2:D0:0A:1E:FE:53:83:A7:66:70:F8:CF:7A
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       01A0D3B8B9A9BFE34B7240AA75D399D16EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          12CC
Signing time:             Thu 24 Sep 2026 14:01:33 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:33 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:33 +0000
Files and hashes:         1: 1-in6fcWIaPM9o0JaQgI896hF-zw.roa (hash: +9m5BgtCfpchHYPV7/EjyZt6YHGzYJDxbgj6oT6HF5k=)
                          2: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (hash: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0=)
                          3: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (hash: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o=)
                          4: 3icWZ0l13CoXwoj1OeRHgYert90.roa (hash: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk=)
                          5: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: TkCBWmsjKNy8Fo0CvBRbkDmrYulmoENPIRcEt9QVgv4=)
                          6: 992fq_vGVR9DhcbPe8CUBvscAjo.roa (hash: ZIybI4m8ghsWbqdFNo303oecu4P0wgHVi4nE/lbnR9s=)
                          7: A_RH84-1x7MkMbmili_zEijhFoc.roa (hash: KkPDh+ZYJbDUpTw8Iyj+DnZssIujNQw/f1eqXQnh8Eg=)
                          8: C0gLDzEON7GbUuqeqStfjnIBp_k.roa (hash: kW2ilQ40sXgngeB19vuaQAEZ0a+UVe7vAL02vYsHhxI=)
                          9: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (hash: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw=)
                          10: EED5PEY1a1IMhSE0BwQBTJLp1mc.roa (hash: elqOAc4bpv6jCN5g6K4Rk1qf2TmccJP7YVS2HbgSYS8=)
                          11: ElgFDiuFJ69k81EViaoKdimWii0.roa (hash: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=)
                          12: G7LeYd0fXrMm-2duJDxHCF2Mid0.roa (hash: 7ZmxQO/JbegguZNq5XpK/SxY6WA8hbHx/FN0cGaqvAc=)
                          13: HbjKNiw4d3SEg0dTumigj0PGsTM.roa (hash: nW4tvMSwJMcIQf6OvnWLF1rZzRY1A2YzlXfxp1Y/+GE=)
                          14: KO3mbecsHziWft5oSlk1_j2d34M.roa (hash: f8pLS1dd6igj0miudYVCW/atCJnG106OYVdNd0IpsmE=)
                          15: LtoQvzCaMW0D-GhISv0hO8NnPOs.roa (hash: NcaX+GMamiFW/3NMIXtO3ttNk67Gbq5SGUiAVxBO82M=)
                          16: Mt4AQ66nGpX52iVTjG_QPgMc6j0.roa (hash: Nn/pGbRWzSFMrKeCQn+bGQau+a99ydSdqv5kVOvZ67Y=)
                          17: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (hash: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI=)
                          18: OKXdbYt6uiI_E7K2Y5NQ0q7B-Hg.roa (hash: QufMF5nQ301kb3Q/QUdR+FEuJBPVpRiSz6zQPzVWvIk=)
                          19: ON9YWiWt2G9hjCjDsqVcvbX_4s0.roa (hash: svhW29f3+cdPIBY4o1lLV7CzbwX1eK6CWnZYwYfOyNs=)
                          20: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (hash: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc=)
                          21: Qerk2VIQWhlnZtUFOR1amkJ29g0.roa (hash: y117lHapRieYxp1hZihDZzze+hWwVr4/qKnm8Hy7HDc=)
                          22: QihhibEPB5qBqDDL6gcnigScDv4.roa (hash: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA=)
                          23: UETzsQ14kEiR9ZLBzc1Rs6TQ7y4.roa (hash: mJed5UC6Bhm9fWUs4Xbxi43CN/6iMd2evk2vhZxj36Q=)
                          24: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (hash: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ=)
                          25: VTvixWkQMb81xqq15q9rkLGzQns.roa (hash: ryhXeNesoIfEURs7jvSEodrx0dn3DmlePOw6kt2lyr8=)
                          26: XnT8EkhkZ4ckaqupDpvRmKmadIU.roa (hash: LOQvwDLJiJLfGtgfx8v+cSvzCjMCe4xzGPCXgXKQfOA=)
                          27: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (hash: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg=)
                          28: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (hash: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo=)
                          29: c219QE8Kcog9UvMKST6A1X7Uzw4.roa (hash: a1rqIUue8AkZGET3xy9zr5OLEkOjTEfxL6rRJ8ZMXeY=)
                          30: cFFROZN_Y7sbAl1I74jtZggCTG8.roa (hash: InYvnCiiHJwyYctWNboHd6rtW9mlE8oy1wdX6DMdMjI=)
                          31: cIdwaFMnaN_nODeJi4PVUhETURc.roa (hash: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE=)
                          32: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (hash: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=)
                          33: iAuw5JQ3mAXjxY6QWG9RY3yTA-Q.roa (hash: UOg7kVgDqAJH5jfqy325Mwl+Vg9DYyHjwnI/jC5MC+Y=)
                          34: ikDfAfW-xsNgatn_b62wDmF7okY.roa (hash: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0=)
                          35: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (hash: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I=)
                          36: n7USEOktH5zuMAuITWQF7AXRczQ.roa (hash: ikLG4Fs9JJDgwb3XKOBoWhu8ubnMCzT/Buk9vuX9UaM=)
                          37: o-hXWK4pXGwy5inV-8aCVcH2pGg.roa (hash: hrroknuz7ekKj0nTTUoccrmwtDEAl2lggxPNrOeczwY=)
                          38: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (hash: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc=)
                          39: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (hash: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s=)
                          40: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (hash: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg=)
                          41: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (hash: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4=)
                          42: xIdot6FAjw7dfRg6u_ByXcj3lDM.roa (hash: 8+XjLrCilLhi21bpw8d0FOgL/oy8JtzB6AjiHlyT9fw=)
                          43: xXH0TOzedy66ElcG97fd78bjZKs.roa (hash: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:b9:a9:bf:e3:4b:72:40:aa:75:d3:99:d1:6e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Sep 24 14:01:33 2026 GMT
            Not After : Sep 25 14:01:33 2026 GMT
        Subject: CN=0d4c9c74b3164ae2d00a1efe5383a76670f8cf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:66:02:fb:4e:09:24:b5:7e:b6:73:50:21:
                    36:64:b0:f1:76:7b:d1:bb:d6:8d:c8:8f:73:7b:b3:
                    61:cc:62:35:c0:33:91:1f:91:d0:7c:a4:c9:37:cc:
                    df:4e:71:9e:34:dc:d5:0f:6a:e5:db:af:1e:02:cd:
                    3b:99:32:a7:65:e8:ae:9e:fb:33:3a:ac:9e:72:87:
                    2e:32:88:3c:a4:6c:db:c5:e1:d1:dc:20:22:7a:7a:
                    13:ed:1d:05:d4:34:b2:cc:df:19:d3:c5:21:d1:84:
                    2f:f0:11:8a:10:e4:fd:b1:1f:b5:ab:79:28:13:75:
                    45:77:d9:3f:df:cd:c4:62:cb:29:74:0a:cd:f1:33:
                    92:b0:8b:56:70:bc:56:0c:b5:a0:98:f8:18:6f:b7:
                    58:ed:53:b1:ff:dc:0c:ca:16:a9:df:55:cd:79:d2:
                    25:04:0c:4e:82:1a:1d:de:43:c2:1d:c0:71:e0:d0:
                    0f:ca:3b:be:8e:12:19:1b:49:d6:0c:80:2d:cf:7c:
                    c4:24:77:25:c6:05:2b:88:44:a0:5c:c9:40:c0:b6:
                    6a:71:4b:96:f6:18:51:ba:ee:e1:9c:cc:1c:58:f8:
                    05:5b:52:f4:29:b8:1a:11:5e:35:f4:0d:ae:05:b5:
                    02:85:74:ef:43:62:60:ba:c1:1b:2d:6e:f9:e5:44:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:9C:74:B3:16:4A:E2:D0:0A:1E:FE:53:83:A7:66:70:F8:CF:7A
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:97:59:a8:8b:10:c3:bd:84:8a:0e:6c:22:59:09:00:2e:7a:
         71:85:bb:f2:50:f1:28:91:d0:8d:e4:f6:ee:ba:21:be:1c:d3:
         b9:4d:77:d8:88:c0:a2:64:94:81:71:01:a1:6b:38:21:40:e8:
         e0:c2:c2:41:3f:65:50:e7:23:95:d7:bb:24:e6:30:5a:1c:75:
         1c:ef:a4:99:02:b4:60:f3:fa:66:f0:2f:54:d1:11:be:ab:75:
         3e:cc:be:54:5c:30:d2:16:b8:4f:a5:c5:b2:16:4d:04:e0:8b:
         7d:f4:06:a6:9b:a7:c6:0c:e8:52:63:b6:54:69:96:44:3c:dc:
         0d:8e:b8:42:b8:8d:d1:76:33:fd:db:ce:aa:fc:71:c0:64:b7:
         a2:fb:eb:83:d4:5c:63:f2:5c:b4:93:f3:42:3a:69:fa:5f:e7:
         6b:8a:5c:4e:68:f0:42:1e:ba:2d:d2:07:78:84:04:51:49:d8:
         ae:cc:15:52:69:72:53:6f:24:5c:68:18:20:10:d7:22:c4:27:
         bb:e2:13:c4:8c:05:1d:e9:4f:fd:c4:da:0f:c8:5e:ed:10:b2:
         26:9d:40:06:2e:ed:b6:64:c5:63:b9:59:77:04:e2:ba:f0:a6:
         5d:fd:ee:dd:f9:72:54:20:5e:da:12:95:bc:df:22:38:3a:97:
         e3:8a:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----