Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          6X0m8iQfdUXTqhNWg4Q+D3/USUQiPkcp5L9S6K5j88Q=
Subject key identifier:   80:7C:79:8A:B7:BF:A2:09:70:17:05:A1:C0:8B:0D:C5:6A:AB:37:71
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       01A0E02AAFC57F5565FCE6B8C3B0545D9560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          1A9F
Signing time:             Sun 27 Sep 2026 00:01:28 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:28 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:28 +0000
Files and hashes:         1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
                          2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
                          3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
                          4: D97R0f6wcJeezq7lLgqmu7BA_nc.roa (hash: A+f6qmQCetOSAsJLLeyROkHkp5iv9hWhVN2aKLzqLTE=)
                          5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
                          6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: HHIUKfvE38mhlzMT+VcIN18EQTK2dqi33Uy6YSbZGQw=)
                          7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
                          8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
                          9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
                          10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
                          11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
                          12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
                          13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
                          14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
                          15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
                          16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
                          17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
                          18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
                          19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
                          20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
                          21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
                          22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
                          23: imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa (hash: khbN/ig9hlglazApKQX+gYGTDa2dWuU+YgpXL3Ov0Cg=)
                          24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
                          25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
                          26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
                          27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
                          28: rSklrKM9yUBRtmcTZ3JrpV-pbF8.roa (hash: IeInj6Ips0Ggz3WNulyuE5o9Jct1XuzppTnW6FpL1E0=)
                          29: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
                          30: tCNeV_J6VU-7Bj-OfpuXhHy2kfE.roa (hash: fDyZCQSZKGYKwS6K6RL9aN00NMCUW0dVIOA3MqfvcuM=)
                          31: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
                          32: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:af:c5:7f:55:65:fc:e6:b8:c3:b0:54:5d:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Sep 27 00:01:28 2026 GMT
            Not After : Sep 28 00:01:28 2026 GMT
        Subject: CN=807c798ab7bfa209701705a1c08b0dc56aab3771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:0a:92:05:3b:84:9a:b4:91:ad:03:8b:b9:
                    05:42:1f:dd:36:05:65:61:94:fc:50:dd:c3:8a:03:
                    4a:23:a7:ba:e0:98:79:47:12:cd:c4:0f:67:bd:11:
                    43:02:ba:ec:c3:fb:47:af:8a:8e:3d:54:ce:38:6a:
                    fd:3f:97:07:23:ef:1f:fa:56:82:d7:12:47:37:ad:
                    27:44:34:2d:86:af:ab:c9:58:80:8e:eb:35:12:24:
                    b7:b3:5b:b1:13:74:84:d2:ed:0e:ae:db:0d:d0:99:
                    2c:69:7a:b5:50:fa:47:e4:89:f3:28:f6:52:b1:73:
                    98:84:35:a1:04:d2:81:fc:10:3b:0b:48:0a:19:18:
                    79:bf:0a:0d:e5:08:49:39:1f:3d:93:4b:bc:a6:f9:
                    29:08:87:78:21:6a:d0:13:82:65:37:7e:d2:07:2c:
                    23:d1:68:0f:05:33:a0:29:3e:0d:81:47:b5:8c:95:
                    09:61:bb:16:ad:b8:f1:a0:cd:9b:a2:47:ec:9a:2f:
                    4d:8e:7e:e2:57:c9:e8:b0:bd:97:6b:70:40:d7:b1:
                    bf:0f:60:a9:24:3e:bf:41:56:f8:7b:76:16:57:4f:
                    1d:91:af:58:3b:bf:40:55:0a:88:d8:29:85:82:34:
                    9e:52:36:c9:bd:cb:98:fb:b9:2d:57:c1:7c:c8:9d:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7C:79:8A:B7:BF:A2:09:70:17:05:A1:C0:8B:0D:C5:6A:AB:37:71
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:18:72:9d:cd:6e:d5:88:43:58:3f:c7:41:ba:69:65:29:fa:
         47:32:bf:39:e8:87:f7:9d:72:3c:54:0b:0b:c7:7c:c2:99:1d:
         29:00:69:ad:5f:3b:89:5c:eb:e7:70:74:99:d8:ce:e0:ce:46:
         f4:f6:5c:3c:90:0a:7f:d1:a0:b8:84:5f:a7:d6:f2:64:5e:35:
         d3:a8:ef:ff:47:89:db:bb:2d:fa:47:36:d0:65:08:c9:36:92:
         f1:8b:fb:d3:4a:9a:eb:1c:55:57:f4:49:ba:70:e8:67:ff:33:
         4d:dc:d1:16:8f:2c:cb:b6:29:d8:c6:8e:da:d1:dd:0e:79:e7:
         a6:51:27:b0:b1:8b:92:f0:94:5e:d2:03:a2:46:eb:62:01:12:
         75:04:7e:98:48:8d:e5:0d:e3:e7:36:b9:5b:be:68:6c:6d:16:
         58:1b:a8:46:e1:6c:c6:6a:8d:61:90:79:fe:84:59:53:8f:9b:
         97:59:18:8c:97:6f:9f:da:8a:a6:0e:d2:59:ad:07:6c:90:04:
         c5:fc:65:37:d8:fb:48:4c:37:b9:09:22:e7:87:de:5a:f2:77:
         16:29:52:6e:f2:01:d8:f3:5f:ff:63:5e:c1:fc:af:9a:85:25:
         84:4d:ba:6b:2d:c9:7e:eb:09:2a:5e:0d:6d:57:9d:20:38:08:
         8c:9d:5e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgKq/Ff1Vl/Oa4w7BUXZVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjYwOTI3MDAwMTI4WhcNMjYwOTI4MDAwMTI4WjAzMTEwLwYDVQQD
Eyg4MDdjNzk4YWI3YmZhMjA5NzAxNzA1YTFjMDhiMGRjNTZhYWIzNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZEKkgU7hJq0ka0Di7kFQh/dNgVl
YZT8UN3DigNKI6e64Jh5RxLNxA9nvRFDArrsw/tHr4qOPVTOOGr9P5cHI+8f+laC
1xJHN60nRDQthq+ryViAjus1EiS3s1uxE3SE0u0OrtsN0JksaXq1UPpH5InzKPZS
sXOYhDWhBNKB/BA7C0gKGRh5vwoN5QhJOR89k0u8pvkpCId4IWrQE4JlN37SBywj
0WgPBTOgKT4NgUe1jJUJYbsWrbjxoM2bokfsmi9Njn7iV8nosL2Xa3BA17G/D2Cp
JD6/QVb4e3YWV08dka9YO79AVQqI2CmFgjSeUjbJvcuY+7ktV8F8yJ2klwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB8eYq3v6IJcBcFocCLDcVqqzdxMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBhync1u
1YhDWD/HQbppZSn6RzK/OeiH951yPFQLC8d8wpkdKQBprV87iVzr53B0mdjO4M5G
9PZcPJAKf9GguIRfp9byZF4106jv/0eJ27st+kc20GUIyTaS8Yv700qa6xxVV/RJ
unDoZ/8zTdzRFo8sy7Yp2MaO2tHdDnnnplEnsLGLkvCUXtIDokbrYgESdQR+mEiN
5Q3j5za5W75obG0WWBuoRuFsxmqNYZB5/oRZU4+bl1kYjJdvn9qKpg7SWa0HbJAE
xfxlN9j7SEw3uQki54feWvJ3FilSbvIB2PNf/2NewfyvmoUlhE26ay3JfusJKl4N
bVedIDgIjJ1eBw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:25 2026 by rpki-client