Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          foy69rUzwNIYz7t1JGqGAOq95/PBTAyDlprjzjFYIyE=
Subject key identifier:   B0:ED:66:4E:1F:90:9D:7E:AC:78:CA:ED:8B:D2:5F:BE:39:2C:C7:9F
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01A1DEDE22FAF34742D1FBA7287BF13C8099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1BCC
Signing time:             Sun 15 Nov 2026 11:01:02 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:02 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:02 +0000
Files and hashes:         1: 1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa (hash: uANSR1y8ArwMRJWs9G2MLV5dcv0JI9ZhZL82nYHfPJ4=)
                          2: 1yQrs5HP9XIaoTvb72_pfqznw5g.roa (hash: yz35x7CqiZJ94ld5AFj0y0ZNW6s7eAQtnm0UEs/oenI=)
                          3: 3xzArYOAxgWc4aUVyuLW5cctBic.roa (hash: 1e/deWnq1m7f4YnRkd3T/eFSvZzxSX+ubkiEGm+dFs0=)
                          4: 8NyInp4NQyeUXdT0-Pl7fDVHE3E.roa (hash: WcPeEgtt73K4ehMT5+jBlt03GxGOky6ICfK40znhj7Y=)
                          5: B3lzECI8w3HbbNBrJuEUc9_EF5k.roa (hash: rCmQl/ONc/o8391GBO724j7HH/p+HUU/e7ohTDKTGvw=)
                          6: CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa (hash: JzMpItX6WpyBwW2pJ22HiX4G0oRhcgR43KfhB90tGRs=)
                          7: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=)
                          8: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=)
                          9: Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa (hash: y8aICBxGhhhT6yCX7J0nu8TCySSKB7GMI2H8C1V8oWQ=)
                          10: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: NDtrf6QCl9yg6Ss25eXam6irbLug1kBGquf1WjPBA6I=)
                          11: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=)
                          12: OaWrgNTcsfTMgZj01K3xk6cBhyg.roa (hash: vPAJEJvm5TZP3JpnL3FA456bm2C66YI3nl6FDcYk//M=)
                          13: Ob_hPRqXemElnS_OHcDQHCG1Hgo.roa (hash: /Dmi2Znm2iMIge4D9lY+rA39RGuk4gqp0W4pPcMqic4=)
                          14: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=)
                          15: PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa (hash: 8DMzuZuwaB5js5sn1MRMLjpEkzq82jGppMDxBhQkY2I=)
                          16: QI6P2rjg0KTEHj0abHLeX5NrCNw.roa (hash: cNfX9kMj7jm75WwWsewudy5zy4Y1MC/doZUI28Cxpqs=)
                          17: RS6nyrjdQbih5Ho229Ls-GBTvKU.roa (hash: +HFCop8vz6modyLs1PtTUmX6Mzwpm0qKSBQTI86y1EM=)
                          18: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=)
                          19: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=)
                          20: Xunso7a2e65k6yGHHSuy_k4MqO0.roa (hash: PyHnhleskous7Yw+GHgIcGsK90j+qnC/2w/Fvu+6MGE=)
                          21: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=)
                          22: _VZhh8EatAxv_Q0OdxEzAgY-osQ.roa (hash: Z4BRdK3qjreVOU9M3pBqxQuJx602M0bhwpUVpyEzqew=)
                          23: cZX0XiKgTVRStj-qdJuTen7BOJ0.roa (hash: EC0B5N4ujSfAORvQJwcrZWB4mhWoJIUXusoMRH6vkfU=)
                          24: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (hash: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=)
                          25: oqsUsGC2TYV8gjezUmHqJzsDx0E.roa (hash: E8QjOnNY5RVfCbtPXzYPc+HJ7r7aQIm8If2D6eFk4YI=)
                          26: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=)
                          27: ppuU4PK9-EVHWo9VkBzM7-JJ_hc.roa (hash: kFBpNwIZXu9zb+ji+S8KQ2NMhHrFzSIVdy4UE/D92yU=)
                          28: sXdJj6bwS2T6yturb0tEJZJS66E.roa (hash: vDoYQ0a0drhXn5BNwyU5HR0nZqsIoQitgPFI9i7K4PU=)
                          29: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=)
                          30: tuOyzSJGsdbEh4RXvNAltEvaihU.roa (hash: G2o6sCc5sztEjyYV0w4l3dxyOyYv/hTu3DhW9esUzC8=)
                          31: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=)
                          32: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=)
                          33: v-hy-AA0bMP0YRPYj1qavNzCvXY.roa (hash: 7R193xmOU591Bwip4tiZ71RqXjAryXJbfj2mjnypeSE=)
                          34: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=)
                          35: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=)
                          36: wOT7IZMsm5x7gOeHRQ2TeKPsneo.roa (hash: XWPZK9lqHn6jVyfOlaTnmEq4ouLn7+wTN51iKWqUouQ=)
                          37: xUFWVXWG8jvZRSVOePtSKH6GSXc.roa (hash: SPlD00845Cci2SPbrzXpwUia+Xpnie29kSvO/GdHQ7U=)
                          38: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:22:fa:f3:47:42:d1:fb:a7:28:7b:f1:3c:80:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Nov 15 11:01:02 2026 GMT
            Not After : Nov 16 11:01:02 2026 GMT
        Subject: CN=b0ed664e1f909d7eac78caed8bd25fbe392cc79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:38:76:94:f1:ef:1f:d3:b6:6e:bf:17:6b:bd:
                    7c:67:45:e0:9b:6c:eb:88:db:f8:39:b2:84:21:a3:
                    e5:80:df:8a:65:8c:c4:c6:4d:75:37:16:b0:e6:39:
                    10:ca:73:c1:50:f5:c1:f2:b8:2c:33:a6:fe:50:e1:
                    c5:1e:f5:11:c7:93:f3:8e:a2:0c:8b:03:e7:86:09:
                    e2:c2:64:d9:5d:83:13:50:f8:8d:d0:6a:f2:c8:2e:
                    6f:58:f1:1f:30:f1:33:fd:12:52:4c:56:23:c7:53:
                    2c:4c:8d:96:29:01:ce:21:c6:2d:9a:73:2f:a1:a7:
                    21:38:5d:1b:85:98:3d:00:6f:2c:a3:f4:4a:99:de:
                    59:a9:4b:16:c9:b1:8c:a8:50:af:2d:10:c4:3a:01:
                    8a:eb:02:14:71:5b:74:b1:e6:bf:5c:81:dd:76:26:
                    e0:93:1e:0f:77:1b:85:0a:67:33:fb:b2:1f:62:1f:
                    2d:2a:70:4b:15:2b:52:6c:cd:88:36:26:2c:2f:82:
                    f0:47:b7:72:ff:a2:52:55:b6:48:52:bd:88:c2:86:
                    1a:e1:70:bb:6e:0a:5f:d6:8b:6d:73:4c:98:38:85:
                    6e:de:73:b0:2e:1c:40:cf:67:3b:3d:d0:95:31:f9:
                    e5:e0:09:1d:3b:5e:c2:56:82:fb:b4:e1:69:17:e8:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:66:4E:1F:90:9D:7E:AC:78:CA:ED:8B:D2:5F:BE:39:2C:C7:9F
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:8e:87:d7:60:41:de:e3:53:d8:80:e0:8d:e5:3b:32:39:21:
         49:62:40:b2:ec:43:32:44:c6:36:de:33:40:8e:7d:cc:1d:57:
         27:23:b4:ab:48:87:e9:a6:cf:10:46:af:75:24:ee:af:a2:36:
         0b:2f:52:ad:5a:e4:e1:20:e6:f1:70:43:f2:a5:15:64:9c:2f:
         99:34:55:9e:06:0f:85:b6:e8:1a:27:99:b1:ea:ef:74:62:82:
         4d:3c:46:e4:6d:40:cc:00:9d:b9:a8:fb:34:e7:5b:d4:8f:7d:
         7f:60:09:fe:b7:26:ca:0c:49:f9:03:7b:e4:51:2a:a7:84:b2:
         36:42:ad:e2:95:ef:8e:af:7a:da:b9:05:6b:e8:06:4e:bd:7b:
         c9:56:4b:f0:b3:59:82:68:e2:2b:d7:7a:80:0a:ee:2c:00:a1:
         6f:58:9d:7f:1f:65:d7:aa:2f:ef:17:8d:67:52:c2:22:d6:c7:
         a5:8c:e8:d4:18:3d:ee:3b:3c:70:05:8d:86:06:73:6b:f7:7e:
         b7:5d:63:87:27:ad:65:cd:9a:88:14:87:d3:f5:ae:63:3c:32:
         d1:ec:1c:fa:2c:1e:ad:84:9f:21:16:a6:9a:29:e1:74:51:c6:
         8a:45:32:5b:c6:ad:e0:5a:8b:8c:94:f6:f7:31:33:97:34:37:
         9b:89:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:40:41 2026 by rpki-client