Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          68/kmcx/0weoSSAty+UWityN697UH293cGkupPdHd/U=
Subject key identifier:   88:79:B0:44:3E:20:C4:DD:B3:65:0C:1C:D4:12:AE:DC:F0:53:02:98
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01A0D50287C80118DC2C04CD026E00665A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1BF1
Signing time:             Thu 24 Sep 2026 20:01:47 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:47 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:47 +0000
Files and hashes:         1: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (hash: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=)
                          2: 1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa (hash: b1isReMzje2eOqP7q5KK1YgmNcLYTYhlgMv1rOjAxw8=)
                          3: 2ndwCQa5uK9SGXTw7amvh8YViz0.roa (hash: MNshJXo3vLTUpr4S/CLHnaCG5DDaH89yW7YggkO0OtA=)
                          4: 5DO2gDG0jIsxWfIdsn6VtS8YzVU.roa (hash: vc1lWKgaQKcWvIEiovIUH6ry7EbnnG5est8nMrCuGtk=)
                          5: 5pX8kJiJCPVmM1lxRsl_efKZJ6E.roa (hash: VjN+Ml3RUlvEn8Cd/Fyc6zoAe8Gd9xzPezlsNJZIkRQ=)
                          6: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (hash: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk=)
                          7: 9OxDWufNnv1B2C-qPmgpikF7iaw.roa (hash: dL8qSlWuBeannbfUKKeK7j1b+LVimlrkYaTHvjJkkuY=)
                          8: 9ycxm4HV4M6oBtkQ0FxIq397L0I.roa (hash: XqZtCHd2v7KOJd8ycJJagKyRkmCuxO52upsQm7ENKi4=)
                          9: AsR8PMxYeWP89FOuspLxoZEjj1U.roa (hash: ARY4kS+u5n58uyYcSBSAEiIPAoo4CIZkyZRdQCxQau0=)
                          10: FaV1fsMbfKNT6fQniZsXgjbEG34.roa (hash: 9sV7lmS9kDoiZ7Wv3kdNHvFjDFag3HbA1N+qgOKu4b0=)
                          11: GFODE-DZ21eHroatRJKIqVrZsaA.roa (hash: oAdEbCipvHFNYnI86ODFnZBMhLMWx82ptyOpEbw1Egk=)
                          12: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (hash: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=)
                          13: Ip1p585eSEewb0IONkaOYazW_0Q.roa (hash: h1M4blMde36vPMnlEH2IroJd96qzWruE2brZEpd0Sp0=)
                          14: JYBgPKpA16-8lG6M4O7EPuTiVw4.roa (hash: mBzvoCHcL+VOx9e/kdW43sQh2RmNJVbq5CtoJwcYdSg=)
                          15: NsHDsBlsQAGgspNiM-HwDV4swTc.roa (hash: eQMEYl3+MQxyvaK6givVIiWlfkYaPSu2MObxqH2imYo=)
                          16: OJDcnZKMbzW_ndCn_Y8xeVCn05o.roa (hash: soAxA3YCjbh3KJriK0iGluXyH4QMgs1fmaVz0A3jO4Q=)
                          17: QggJ5eY0gByoaEixKiNuOhk0OXo.roa (hash: U4DMkB/3xVwMN4uiXFr55EFR8T9dhwrtfKBrzg59+7U=)
                          18: R4rfDQJS4-9o5uASKNRiC3CEINs.roa (hash: /kb4vE0wyjYFEdlQSGPdtmqQ/WIS/0l7tZnH+UzT4W0=)
                          19: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (hash: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=)
                          20: TrTwjbYZVQnpx21mwUQojkF1K7w.roa (hash: /tObYYDcG5it76EMRHtb0fqj7ca14pgmJwbFzVuz53c=)
                          21: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (hash: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=)
                          22: VOBUZ_eDw91r7CGXPGeqAuZ6FYw.roa (hash: sL4uf5VZIGX+X8GiAZ3uoUdq9D9GHGgGHk2PnjhPhkw=)
                          23: X18nP2YXusglmmwBliQYUGVmd64.roa (hash: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=)
                          24: Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa (hash: mVqlUqfy1ZfqJEiJXBtF73ndtl7OOjyi9baetp4Du6A=)
                          25: Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa (hash: fpg/MNxjzlnzTQca/iybfFH8+ZamTAvUzD57YoORWzg=)
                          26: _0WEtVeYmyN6fbjUnvVr6TBrM_U.roa (hash: bBT+7EVpBue35D72uWgKV3lxs36VXuRkVcTO+JKO2S0=)
                          27: e6CoFHLnuAzFa9YTuuhaCMU26lc.roa (hash: asWWpfy+pF699oYpW4nAgJPS4b74gHKC/MJIvU4mjNE=)
                          28: e_8LCfE_pngkPg3O5n81H_tyTro.roa (hash: z2GpZJjZPHBgpOqNxe6EdKGnVRgsgNAoxLNBM3PnZwY=)
                          29: fXi-3J0I08pHCGpMDBfoClmPjMc.roa (hash: 021lBJ+9jhBzDrRbngydXsCj6/uNgbtu04bJTaEzJbY=)
                          30: fzT6m7yfTXCj-_AX_jr_FdABgeo.roa (hash: V87OGI8yShhu6uYBdg9rce79OVzvm1oTgwekYxO+Afg=)
                          31: gYtsibPnBXBPb2nY_SAs-atiQiI.roa (hash: wZHUmXk6L4SjfoRfOx34od7ZFq/bTnT1ojNinmzWm5o=)
                          32: ks2Ide1WxAbJ0usJnuY9q7RlLSY.roa (hash: ItIUrv9B2UX7ToX8RQLw22/2GA3tCSuwSFRKIVwMms0=)
                          33: ku-pFyguE5cHtF69_qC9IQyhWD4.roa (hash: SRmdiGErBs4riF+x6opmEUXvpJ+dRiQ3pdAIUM1No24=)
                          34: n4AMurCrww_nURM0yKJCQWoqFho.roa (hash: Pu6TaTGLhHGntg0HayCe7LPYpIinuWkfBvOuAdu6bq8=)
                          35: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (hash: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=)
                          36: prX2QmznROhgf8aQH5IecY-zslo.roa (hash: LbHo1sJqOtv82DGX7yrtWCmYrA3H8Z4oiQyDZv+bXDk=)
                          37: qdTxmC1M-cLgpOCU4X2vmsVLSxA.roa (hash: A9F9hgF4690mdOxK/7gd71yvYHQZzaHopzHxADwnEzA=)
                          38: ql1haZnROI_A4gtMJ1WOjV3AQNw.roa (hash: etq9X6mBNiExqhsqPZrAcoPMp4nhVPKjSDDkz+uku0Y=)
                          39: rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa (hash: 2K+J256SefSCQUxPHkRrXtSFRiGIJpB2gFkBQ7pPKWE=)
                          40: uvo9qLrP-xQ9FWfoQOzD-ND2gZs.roa (hash: bNQzpEIOSnPK9ZwpcBxEVwm8tiEls+8YjeG+tA3PxQ8=)
                          41: v0JIrMBFpH7tvCvQvSx7puVBU10.roa (hash: YA+s/oHGP7hhJte8WNkK/Co7ljEbNpMQnYFsZLOgegU=)
                          42: vNBxcilTCF9bkKF4Fp5yWCyn6WI.roa (hash: AlHcv2RUOxd4iRm2eYcXjPspXsoC6zy+k/v6jB0x6Wc=)
                          43: wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa (hash: TDDcS+/ukQqSqdHjq0a0vf8SB/v2/c/ZPb4Efbz0S7w=)
                          44: wlZTNZPVMxiXs641En6t5-EeJUw.roa (hash: gKSFJeU2J/eZ0luL9bAhjMHupWPFMTGpHQJ2vR/V7JY=)
                          45: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: oPvKwDQLDmKD2JXwWmo0RPNTqemzCZUFQxNuce7lSk8=)
                          46: zYFfWUlh-P5ldgkEaLd32AaEmqc.roa (hash: d8sg18toB2rZYXSV8ZWT01bPiWhaZN7thdAndhNnLhI=)
                          47: zw5ASt6FbS9gaQdMoTSUrxoQDzs.roa (hash: 05L2f6C89A3oLrnF075R9QF91YUYXPd9ek2Su2pjObk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:87:c8:01:18:dc:2c:04:cd:02:6e:00:66:5a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Sep 24 20:01:47 2026 GMT
            Not After : Sep 25 20:01:47 2026 GMT
        Subject: CN=8879b0443e20c4ddb3650c1cd412aedcf0530298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:62:fd:2c:b2:54:ae:2f:78:45:16:ca:95:
                    aa:40:96:19:ca:b1:e4:74:7d:5b:0f:a0:48:83:66:
                    0e:d9:bd:8c:e7:d0:9f:d9:a8:2d:9b:8e:48:0f:14:
                    60:8f:f5:48:88:31:38:a8:9d:2c:a9:5b:55:82:3f:
                    aa:a3:f2:4b:5b:3a:cd:78:69:46:e5:ef:fc:66:f2:
                    74:03:6b:f1:66:70:78:bd:d3:93:13:39:9b:f8:dc:
                    97:12:f9:50:79:a8:3e:55:5b:79:ac:05:9a:25:26:
                    d8:6e:29:c3:82:a8:58:fc:8c:74:9b:da:2a:72:bf:
                    b4:0a:b7:6a:93:8f:14:4b:77:1d:90:06:60:b9:bf:
                    74:94:cf:9a:cc:ba:3f:44:84:8c:5e:3a:84:3d:dc:
                    aa:65:71:57:57:52:f6:ed:a6:54:ed:be:12:95:9a:
                    7e:2e:84:39:74:76:c1:3e:da:d7:9d:8f:f8:bd:e2:
                    5a:20:fd:bd:fc:2d:48:b6:1d:1e:d1:1a:bb:ae:9f:
                    dd:93:6a:da:67:4f:e2:c1:48:96:92:52:6a:79:d5:
                    de:28:9e:cc:71:9f:d6:ed:f9:ee:28:ea:61:cb:b9:
                    73:47:8c:8f:00:1a:87:f1:ad:ed:91:51:d9:f8:de:
                    8e:08:46:8f:4f:5a:44:42:ff:3d:95:42:bc:1f:d3:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:B0:44:3E:20:C4:DD:B3:65:0C:1C:D4:12:AE:DC:F0:53:02:98
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:55:ca:a4:8a:ff:dc:d4:92:64:8b:65:91:1c:0a:b1:81:
         34:71:4e:42:4e:0d:6e:7e:e9:7d:27:64:d5:49:dd:20:d7:df:
         fb:23:d0:0a:60:93:c5:fa:fa:d0:53:69:26:83:00:75:80:7d:
         41:1c:12:5f:13:25:e8:ba:f2:45:d5:d1:9f:00:8b:5b:1e:15:
         3b:61:7f:af:a6:26:12:0e:d5:38:11:c1:c4:d4:ef:68:44:36:
         af:f2:59:9f:6e:91:a4:45:70:de:cb:94:61:9a:72:3b:ac:c7:
         a0:63:11:c4:67:22:0c:d0:38:73:41:c4:88:a8:31:03:9d:49:
         f5:8a:63:76:21:8d:23:29:2e:c5:a1:c8:d0:be:3f:b8:92:80:
         fe:ac:98:6c:b8:ce:72:46:96:1c:3f:84:df:30:0b:f8:43:c5:
         96:21:9e:27:f5:aa:1a:1d:b6:da:31:5d:55:08:47:a7:6e:81:
         ec:b2:85:e8:c0:84:4a:87:b4:a2:cd:fe:3e:70:17:80:0a:f2:
         60:c7:a0:d3:d2:85:56:69:4d:a5:eb:e9:b0:21:1b:e3:b6:4e:
         a3:c3:b3:46:84:ec:e8:2f:75:35:46:a2:96:b8:b4:40:6a:50:
         ac:63:c7:68:a0:bf:ef:84:b7:f6:76:e4:e4:9d:ea:38:72:e7:
         f2:3c:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----