Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          PKHvAELiDSvWSOoSXbgDDFIQI5he1vjnKL5oBSrfChk=
Subject key identifier:   FD:68:4E:D2:A1:2D:73:F8:41:F4:90:16:8F:B1:E1:DF:45:D0:58:98
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01A0D4CB6968D68D2CF4F3583BD32CD6B86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1B3B
Signing time:             Thu 24 Sep 2026 19:01:35 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:35 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:35 +0000
Files and hashes:         1: 1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa (hash: uANSR1y8ArwMRJWs9G2MLV5dcv0JI9ZhZL82nYHfPJ4=)
                          2: 1yQrs5HP9XIaoTvb72_pfqznw5g.roa (hash: yz35x7CqiZJ94ld5AFj0y0ZNW6s7eAQtnm0UEs/oenI=)
                          3: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (hash: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=)
                          4: 3xzArYOAxgWc4aUVyuLW5cctBic.roa (hash: 1e/deWnq1m7f4YnRkd3T/eFSvZzxSX+ubkiEGm+dFs0=)
                          5: 964mey1ll-AqSTVqRVFMkmj9R7A.roa (hash: /W32m1FUs/kl31E7I7cB+ItUJPiLNdIiU90WMvkjKtY=)
                          6: B3lzECI8w3HbbNBrJuEUc9_EF5k.roa (hash: rCmQl/ONc/o8391GBO724j7HH/p+HUU/e7ohTDKTGvw=)
                          7: C0pO8vmI8i0pyw-YO-sHomGs8Lw.roa (hash: 6noZcpiWmpaT21H7qsONWigBYFMG0N39ym2hGf7vBbs=)
                          8: CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa (hash: JzMpItX6WpyBwW2pJ22HiX4G0oRhcgR43KfhB90tGRs=)
                          9: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=)
                          10: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=)
                          11: Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa (hash: y8aICBxGhhhT6yCX7J0nu8TCySSKB7GMI2H8C1V8oWQ=)
                          12: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: d1V6n+B7tX/kII5D2o3X3DthdkS0sYv/CIG+VLJ6cp0=)
                          13: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=)
                          14: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=)
                          15: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=)
                          16: PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa (hash: 8DMzuZuwaB5js5sn1MRMLjpEkzq82jGppMDxBhQkY2I=)
                          17: QI6P2rjg0KTEHj0abHLeX5NrCNw.roa (hash: cNfX9kMj7jm75WwWsewudy5zy4Y1MC/doZUI28Cxpqs=)
                          18: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=)
                          19: U2pLLOkiHMn0rCPB16cgMVj-e5k.roa (hash: NZC/aPt8M4oyJlk7EBhhsouZdc1pvAlNzS2p5zGb/cI=)
                          20: UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa (hash: 2loeiAsnCgkFA+e/zul6V4oJZslxwq6RTKrln0d3znk=)
                          21: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=)
                          22: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=)
                          23: cZX0XiKgTVRStj-qdJuTen7BOJ0.roa (hash: EC0B5N4ujSfAORvQJwcrZWB4mhWoJIUXusoMRH6vkfU=)
                          24: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=)
                          25: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (hash: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=)
                          26: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=)
                          27: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=)
                          28: tuOyzSJGsdbEh4RXvNAltEvaihU.roa (hash: G2o6sCc5sztEjyYV0w4l3dxyOyYv/hTu3DhW9esUzC8=)
                          29: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=)
                          30: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=)
                          31: v-hy-AA0bMP0YRPYj1qavNzCvXY.roa (hash: 7R193xmOU591Bwip4tiZ71RqXjAryXJbfj2mjnypeSE=)
                          32: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=)
                          33: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=)
                          34: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=)
                          35: wOT7IZMsm5x7gOeHRQ2TeKPsneo.roa (hash: XWPZK9lqHn6jVyfOlaTnmEq4ouLn7+wTN51iKWqUouQ=)
                          36: xUFWVXWG8jvZRSVOePtSKH6GSXc.roa (hash: SPlD00845Cci2SPbrzXpwUia+Xpnie29kSvO/GdHQ7U=)
                          37: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:69:68:d6:8d:2c:f4:f3:58:3b:d3:2c:d6:b8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Sep 24 19:01:35 2026 GMT
            Not After : Sep 25 19:01:35 2026 GMT
        Subject: CN=fd684ed2a12d73f841f490168fb1e1df45d05898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:38:73:eb:98:80:52:7e:ec:49:04:ce:54:
                    65:0c:00:72:7a:aa:0e:a7:b5:e0:40:93:02:df:65:
                    0c:6d:2c:64:58:33:46:51:57:4d:70:dd:3e:57:b3:
                    3c:a4:b6:06:0d:4e:ca:b6:4d:0e:6c:6f:d0:5c:0f:
                    3f:62:c7:af:5e:3d:cb:92:8a:1b:d0:82:f8:f9:c3:
                    c7:2a:f6:0e:15:bf:a5:6c:e7:5d:c8:96:1d:7b:e7:
                    68:77:6b:00:c4:d0:65:99:7f:4b:22:54:72:93:aa:
                    ed:51:77:01:c4:e9:cf:26:07:1d:db:71:99:68:03:
                    8d:e0:44:e9:e4:9e:30:08:49:2e:f2:ce:00:e8:e8:
                    22:d2:e8:9d:f6:2c:ce:db:4b:2b:cc:38:cf:eb:62:
                    48:a1:08:b8:46:1a:ba:31:76:80:0a:96:f8:f3:1e:
                    95:c7:8a:b8:0d:7a:4b:78:0d:0f:f3:e0:9b:eb:35:
                    54:b8:1c:8e:58:77:dd:99:05:52:7c:23:2f:b7:cf:
                    33:06:6f:4b:28:cf:b9:50:1c:f6:fd:78:fe:0a:e0:
                    dc:56:5c:5d:14:53:9a:84:5f:f1:91:f2:49:44:da:
                    cf:e5:48:12:82:22:44:a2:14:66:b8:71:63:38:f4:
                    15:fe:5b:5d:f1:93:c7:d5:f9:28:3f:3a:a4:94:92:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:4E:D2:A1:2D:73:F8:41:F4:90:16:8F:B1:E1:DF:45:D0:58:98
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:ad:1d:90:2e:b5:1a:17:0d:eb:88:b0:67:09:1c:d5:19:
         51:25:34:3f:c4:88:bb:61:0c:95:52:e0:77:a3:5e:38:74:44:
         6a:27:b3:26:cd:08:3b:85:a7:0a:56:90:08:96:7e:20:b2:0b:
         21:5e:b3:f3:23:08:0d:fe:94:21:a6:0e:68:3e:58:36:9f:8f:
         28:0d:77:c0:fb:86:f3:02:13:97:55:f2:bd:ad:35:b0:69:08:
         ed:6f:98:30:9b:8c:b2:4a:72:11:e3:d7:78:fd:bb:6e:4e:15:
         09:57:0e:c7:f8:4c:a3:5b:ba:d0:fe:5c:bd:f6:00:85:4c:6c:
         da:ec:f4:24:4c:6e:d9:4c:da:8c:83:bb:2c:be:b7:71:69:58:
         79:72:10:dc:7d:ec:4e:04:fb:33:86:0c:ff:f6:b7:5e:73:ba:
         54:40:f5:96:33:77:da:3d:4d:6c:c2:31:c8:c0:25:16:f2:47:
         f5:db:94:9a:83:44:e9:70:f1:8e:8a:0b:88:07:ed:2b:b1:a1:
         b1:8c:c3:2b:77:53:19:42:93:1b:04:8f:31:65:95:41:99:5a:
         c7:8d:30:6a:bc:a5:58:37:e5:b3:0a:a1:cc:1d:f5:f1:5f:00:
         10:5f:ff:bf:dc:62:2e:5b:e4:cd:ff:99:2f:f7:ad:a5:1f:9f:
         5a:ec:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----