Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          ii8Zo1r3QG4OHU514r5bRaboDUDbqcx64LemNXmFMR4=
Subject key identifier:   AB:87:7F:09:06:BC:FC:30:26:1A:61:31:21:E1:F4:FE:30:02:C0:9F
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       01A1D9B8406845B51CB152EF07ACA5B3A478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          1B7C
Signing time:             Sat 14 Nov 2026 11:01:33 +0000
Manifest this update:     Sat 14 Nov 2026 11:01:33 +0000
Manifest next update:     Sun 15 Nov 2026 11:01:33 +0000
Files and hashes:         1: 07W2K7A8Xe28sAtikyjxrZCEYlA.roa (hash: +fCOYk2USu1OXIHjHmc1WZ/uquX/PPpmsNsCh5uJZos=)
                          2: 0ilD8kn0R7q1FBSpS_1ImAaBVIw.roa (hash: r9gpGa/Fs+XSMlMSIjeCe4Ey3b9cLg0idanhrHIE4vU=)
                          3: 1-ePlVqWgDNF4O6uY-q5jLxHIIfA.roa (hash: D4FniEaig9dSUrDSyTGRRyDPROfMPeSlKWDBeQwqgWY=)
                          4: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=)
                          5: 1ZkYJuhh01I2ywyWWDUMERgPTSU.roa (hash: GFdGAvRms/uf+mlsPPV4zRxmAIFw7yh8QsJAEmEiqi4=)
                          6: 51dyEH9mB-2TlQnmwCI1JrmBgNc.roa (hash: 8rWJfuEn+9HWKYdaijzyW6l/fo2ZUakPYbK2Xz7Khfw=)
                          7: 6NBg1-7xGbYHlPC56A6S8nT4oNQ.roa (hash: j2L42vdBQbRReK+YQNWWtw4Bs3Zes4Tm7+MAnJQWLyw=)
                          8: 7qUnNbCSaKjLyMVLzVWG0PH3YYA.roa (hash: UlZz/QtcfVudk2Ha/32gUuS89H8bAd3Hx8j/Eq/yQXk=)
                          9: 8Csyw2xkP3Ww6Yijlwh2Zg8ULgk.roa (hash: lYbJvLMLICdnIMLuBw2VxQdhidP5wZcOMt92X+uvKzs=)
                          10: 9glAW5iAOoJfHUy-cG7x2ioquYI.roa (hash: 1zxEwTZC3c6dBb4g4U0EpOtMIXYAmuje5kxbhNrG4W4=)
                          11: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=)
                          12: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=)
                          13: B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa (hash: +Lzs31fW3zuwQ9tYMA1nRcRlZN8oqEJ97KqkruTLEYU=)
                          14: BMgAsV4nOBZFwgJisGg5AmMxbgA.roa (hash: ABr09LCyaGzifiNlup76V581rOpIY+8Dylrpwk5D5js=)
                          15: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=)
                          16: F8LeksBddc9OIJjgbB5qGaKK1uY.roa (hash: EMMdb2xiMel5tGpy1APcGr5mQRr/jpARHSh17LB/bh0=)
                          17: FHeE551JpVO1KJ65D73fRS5eJhs.roa (hash: jViNbMub4CkJENZLJ5PVL8ARAJIa6OOd0Hf/TI83Ngw=)
                          18: FjWrMeaqmFrb_aVcAmZFH7JXhMQ.roa (hash: BAGPJ78nkyqpVFTQbCNjTsdEpQYs9ixpNRWsmn0g7Zg=)
                          19: GYeHOKTgLiYfwBGKZE8aV2_3anU.roa (hash: ZypODbZlA1DZn04DyblWwqRNZO7IRsg/S+JOcr5rzB4=)
                          20: Ge6c-s-V_8vj5UyTflZU1YT1xzs.roa (hash: 1bVEZVqyvDW+zQd270jcOHXkVFOZ7URVDoBXEpjYO2w=)
                          21: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=)
                          22: UQPgXC5YLyhemh4haDz4UcFUd48.roa (hash: z6cVzQ3w/dJBzwtmqXmHZgSYwWH8t0kMdFDkm5gQmgg=)
                          23: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=)
                          24: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
                          25: aH4by8qy78Kc6wdJSdyTRdRofKY.roa (hash: uhABpTy6HHeKsxXJMDil4u3X524FcnPpyIQWqwHS5UE=)
                          26: aIONpeg1U1xAvnzplTbviGxEF5o.roa (hash: JXMw0yuvP6swm34dMweToitzl08WMMLxpU+GWo9Zkho=)
                          27: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: qtkcCxpXCRnSKMFhiOMs4PqjMkTli6ytwOBnBeEPNGM=)
                          28: bQYx_xQSdi96aXvakBARQlWzcuo.roa (hash: paxG2U4ADDtULZYvAzrh9UihW/30QbEMMaBJ7NEhmYo=)
                          29: d-4qmY002a-_uZF-wZrqxgBd3jo.roa (hash: wELkh8aWcGv9h9k1xpDhpOETMsDuMx2CZz3t9VUJyYk=)
                          30: dGYnsE6kQOIl-2M9vRy_ea7uVkg.roa (hash: soTFWIuBiJb25Q80llp7My327kfMERqZF+fnnxTNZBo=)
                          31: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=)
                          32: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=)
                          33: glWxdut08Vwn-qxiS-pyw1KuV6s.roa (hash: RXAylKSGn5n8hPtBxyqJXbZqVSosVeuUL9onv9ffIJ8=)
                          34: j7Zx2L-t1SSEu9xEPsqDbDPB9iw.roa (hash: /0lpFE1SI6LyzhhMwErxHeZkCTyCGqhojTPEqYt0FKw=)
                          35: jn6YyYn0FZzztmdDPYztetixCgs.roa (hash: ISCpb+MaBSUukepEpdPFOTKvCig34hrAwcmPQhYd7t8=)
                          36: jykdObNTS5gmXRPSDIZXjYSqda0.roa (hash: SW4SpJaZp/J1DP1bUCqihY22gKLr+T1xUxA+SyKRU44=)
                          37: q9JOtDB20inSqEutcUzBqHW1Wug.roa (hash: g565KevR3dHRHEpb2jqrPsd5CI+c9qfAteWBQgmL5hk=)
                          38: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=)
                          39: rE67odVY3FYJB8VvCh4dgKEDRMI.roa (hash: B77Zi3C2hI7WVjVYK03+jHPdUpYDQxkbf7+/G04HaKE=)
                          40: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
                          41: vx3qdX2Wmom1QJZKJCpntQx84V4.roa (hash: QVR03/6AQhx8vpkU1C5AjExoh/5DAFONLLCPlXk/A94=)
                          42: wuAhjlqZE30FVLwQleXy0QZKBvk.roa (hash: 5iJlr5RtTjgZN/jpYBVCGzQoWJShbs43qhZUZnZDc2U=)
                          43: yQjHyjvXgF1aHy0VHjVrMLShZBc.roa (hash: 276LaieWEdAeRTN0/mq1oTphv+Qzm4WUhdsJeR2LiMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:b8:40:68:45:b5:1c:b1:52:ef:07:ac:a5:b3:a4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: Nov 14 11:01:33 2026 GMT
            Not After : Nov 15 11:01:33 2026 GMT
        Subject: CN=ab877f0906bcfc30261a613121e1f4fe3002c09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:1a:de:73:c9:d7:20:64:ad:47:55:71:67:
                    1e:51:3b:ce:2c:3a:53:cc:69:3d:d8:a6:61:b2:7e:
                    fe:c9:77:16:f6:f8:4f:2b:3a:c8:b7:e2:d5:eb:38:
                    7c:55:34:12:6c:6b:2b:1e:78:25:54:7b:90:33:b4:
                    d5:72:8c:00:85:5f:14:2f:30:bc:86:a0:58:6f:04:
                    b7:e0:d8:60:ec:4b:55:4a:f9:88:0e:ff:0a:13:26:
                    14:a5:b7:ad:3f:e6:c6:0e:74:dd:c9:7a:70:36:0c:
                    3f:1b:ea:a7:b0:ea:1f:f0:39:02:23:7e:18:8f:af:
                    54:05:5e:b2:57:c2:7c:66:1d:cd:da:08:c0:38:0a:
                    cf:f9:30:e8:a5:12:06:b5:aa:c2:e5:4b:8e:4b:c7:
                    cb:d7:bb:4d:1f:02:59:8d:b3:b9:6b:28:22:be:a3:
                    12:66:8f:74:26:be:97:b0:a2:97:f1:95:6b:b6:c3:
                    70:34:f1:6c:a2:60:12:f9:94:bd:2f:05:58:cc:8a:
                    91:90:7b:e0:40:4e:75:91:a5:87:96:88:39:bc:86:
                    a0:d0:26:1a:14:16:38:3f:fd:e1:8f:27:2b:95:f0:
                    64:92:e9:f6:65:30:3c:c9:8a:a3:03:1c:21:d1:1e:
                    cb:9d:ed:5b:a8:87:e9:a5:1d:22:14:7c:0d:e6:03:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:7F:09:06:BC:FC:30:26:1A:61:31:21:E1:F4:FE:30:02:C0:9F
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:48:76:bd:3f:b8:48:8a:24:b2:b1:f5:df:e6:7b:ae:84:
         1b:24:a7:ac:12:54:01:1b:77:e3:75:b1:a3:88:43:1c:4b:f2:
         68:35:2d:49:c3:db:0a:f4:ec:81:06:cd:a1:fb:f0:9f:6d:09:
         eb:dd:63:f3:e8:84:65:a2:9d:47:ca:c5:03:0a:fe:df:f7:03:
         66:44:eb:75:e9:fb:3f:64:4a:cd:51:50:0e:5c:1a:fe:f0:e0:
         2d:c3:06:3c:4a:2a:f1:cd:d6:bd:b8:f5:1f:d1:a4:09:7e:1c:
         db:52:0c:64:3f:a2:f6:f3:7d:3c:e7:e1:e9:10:d3:4e:3d:70:
         e8:ff:62:59:0e:57:0b:6c:42:05:6e:1a:05:82:46:10:dd:61:
         f0:37:52:c1:ae:a7:e6:6c:78:76:3b:7f:93:67:de:ab:68:2c:
         7f:e3:81:ae:94:d3:22:9e:4c:05:e5:e5:dd:99:32:b5:8d:b0:
         b7:bf:23:c8:34:34:dd:b1:73:93:8d:20:3c:be:25:d0:72:a5:
         99:80:f6:77:82:29:a5:41:ad:36:c3:90:f5:09:be:8e:d1:d6:
         ea:ab:47:a1:52:cb:91:df:ca:7c:d7:e9:4e:fe:17:9e:0d:77:
         b4:79:72:03:f6:de:a9:da:5e:4d:73:2e:e4:7a:70:69:30:5d:
         99:7c:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----