Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          HPIZ2ECLbzswZ2Ji/9iGhkUcB7tjHnxbej5ePCVQGQY=
Subject key identifier:   7B:98:59:F9:2B:A1:EB:78:5E:A7:CA:54:35:EF:10:C4:B4:4D:76:BF
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       01A1DBA6BB3BD261F4D98227A29E72088ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          1BFD
Signing time:             Sat 14 Nov 2026 20:01:39 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:39 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:39 +0000
Files and hashes:         1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=)
                          2: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=)
                          3: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=)
                          4: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=)
                          5: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: Tz/Yu1uP2gKROHJt8wraXCsS+GR4S7ZzdfokVlULX/U=)
                          6: 8wrMXoTx_3Qa8hFZdXNTjqGbxCg.roa (hash: 6iUBY5VR98XzxRfXdLLY48/7yKnQPkwtpxJ7Lmvs/LM=)
                          7: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=)
                          8: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=)
                          9: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=)
                          10: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=)
                          11: DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa (hash: c3vfVLlIrAY1SyBEM3blDE+VN4LQBi0IdvidL1hF+CY=)
                          12: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=)
                          13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=)
                          14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=)
                          15: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=)
                          16: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=)
                          17: ahe-2Z5fMyAOkNi_EAF1EYlFjEY.roa (hash: p1DQVuc/H1txZA0H/S4ZDm+6tljX8SKbpsg2alHl3MA=)
                          18: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=)
                          19: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=)
                          20: cxK58b8OqyweEEX7ZSzNThByzJ4.roa (hash: ksTlPnVTNF8gujtMt/7QmPYDNk3NsHykT5fC5mx0yFE=)
                          21: derjq_a2xULSiq0hLt8SXBP15vM.roa (hash: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=)
                          22: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=)
                          23: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=)
                          24: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=)
                          25: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=)
                          26: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (hash: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=)
                          27: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=)
                          28: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=)
                          29: yfGuO_RiAeAX-4VWDDK9O80bQVk.roa (hash: wbUMpspJWNO4G0cReSr6miT8s7Y5qAH8rRHGKlw0D/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 20:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:bb:3b:d2:61:f4:d9:82:27:a2:9e:72:08:8e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Nov 14 20:01:39 2026 GMT
            Not After : Nov 15 20:01:39 2026 GMT
        Subject: CN=7b9859f92ba1eb785ea7ca5435ef10c4b44d76bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:d8:ca:e3:86:54:3a:18:38:92:e2:0c:91:
                    1f:34:66:fa:69:4b:bc:46:2b:1b:8a:cd:ea:86:9e:
                    77:0d:0b:2c:5f:d9:51:ec:e3:db:f3:05:66:ab:5f:
                    a6:c9:43:50:b6:f9:74:f3:5a:01:d0:aa:b9:9a:1b:
                    2e:8a:96:13:52:2f:cf:6e:33:34:92:fa:4e:35:c2:
                    9a:81:e0:a6:80:41:22:87:c9:ad:90:94:55:dc:91:
                    b3:09:f9:8f:d4:30:55:eb:36:a2:ce:8f:e0:2b:c9:
                    a4:ba:dd:3a:c8:9e:07:c9:22:7d:a1:24:36:5c:96:
                    5a:ba:43:75:a9:12:bc:30:ed:59:c0:6f:c8:7f:34:
                    6e:18:21:6c:39:c2:23:98:fb:4f:08:52:95:6d:cd:
                    c8:85:1a:ac:c2:91:d8:e9:28:70:24:c4:51:38:08:
                    32:30:86:3b:59:4f:a3:07:56:01:a5:c1:d1:99:be:
                    c4:16:fa:2e:62:a1:72:f6:e9:b0:0e:5c:66:ea:a7:
                    c1:aa:cc:a7:6e:6e:99:a2:0c:7a:18:ac:35:e7:4d:
                    64:1d:93:22:fa:ad:ee:ba:e9:0c:7e:ab:26:64:33:
                    9f:d1:64:69:5e:50:27:df:03:db:c4:d2:1d:a4:cb:
                    6c:33:be:14:33:0e:f8:2f:6e:a1:5f:d2:8c:d8:46:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:98:59:F9:2B:A1:EB:78:5E:A7:CA:54:35:EF:10:C4:B4:4D:76:BF
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:ec:62:5f:6d:eb:7b:b6:d0:51:11:59:7e:61:9f:54:83:
         c9:19:60:5d:b7:a0:44:84:eb:25:25:b9:61:be:73:ab:b1:f5:
         83:47:37:8f:6f:eb:64:37:90:f6:5e:22:b6:fe:13:de:ec:36:
         5e:41:56:dc:ac:58:99:be:30:14:19:ba:3f:a1:96:16:f8:90:
         6a:58:a9:b0:09:91:e0:35:00:05:30:38:b7:78:14:cc:df:8c:
         89:9a:19:d5:7f:3c:d5:01:bf:68:da:cd:37:cc:b8:44:f9:39:
         48:47:73:e5:ae:2e:cf:b9:6c:db:da:b0:6d:0b:18:1d:c8:29:
         00:bb:89:65:84:ca:82:28:ad:2b:32:0a:68:41:d0:b5:25:8c:
         40:c9:6c:a7:07:f6:40:34:36:ea:30:ab:de:5c:ec:f9:04:96:
         fb:4f:16:37:5f:ed:36:61:4a:a3:4b:46:ab:94:fb:5c:67:20:
         02:21:0f:97:c7:0c:9c:60:52:9c:29:da:89:58:88:39:52:ff:
         b3:91:6a:bb:d2:76:c0:06:2f:45:a0:f0:4c:92:46:0f:0b:16:
         38:ff:67:71:4f:dc:24:6d:06:2a:71:31:37:62:ab:fd:1f:b1:
         0e:a5:29:78:82:6e:1e:22:1c:3e:e5:22:a6:f6:e5:47:a3:5d:
         a6:ad:44:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbprs70mH02YInop5yCI7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjYxMTE0MjAwMTM5WhcNMjYxMTE1MjAwMTM5WjAzMTEwLwYDVQQD
Eyg3Yjk4NTlmOTJiYTFlYjc4NWVhN2NhNTQzNWVmMTBjNGI0NGQ3NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/YyuOGVDoYOJLiDJEfNGb6aUu8
Risbis3qhp53DQssX9lR7OPb8wVmq1+myUNQtvl081oB0Kq5mhsuipYTUi/PbjM0
kvpONcKageCmgEEih8mtkJRV3JGzCfmP1DBV6zaizo/gK8mkut06yJ4HySJ9oSQ2
XJZaukN1qRK8MO1ZwG/IfzRuGCFsOcIjmPtPCFKVbc3IhRqswpHY6ShwJMRROAgy
MIY7WU+jB1YBpcHRmb7EFvouYqFy9umwDlxm6qfBqsynbm6Zogx6GKw1501kHZMi
+q3uuukMfqsmZDOf0WRpXlAn3wPbxNIdpMtsM74UMw74L26hX9KM2EYqhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuYWfkroet4XqfKVDXvEMS0TXa/MB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVvsYl9t
63u20FERWX5hn1SDyRlgXbegRITrJSW5Yb5zq7H1g0c3j2/rZDeQ9l4itv4T3uw2
XkFW3KxYmb4wFBm6P6GWFviQalipsAmR4DUABTA4t3gUzN+MiZoZ1X881QG/aNrN
N8y4RPk5SEdz5a4uz7ls29qwbQsYHcgpALuJZYTKgiitKzIKaEHQtSWMQMlspwf2
QDQ26jCr3lzs+QSW+08WN1/tNmFKo0tGq5T7XGcgAiEPl8cMnGBSnCnaiViIOVL/
s5Fqu9J2wAYvRaDwTJJGDwsWOP9ncU/cJG0GKnExN2Kr/R+xDqUpeIJuHiIcPuUi
pvblR6Ndpq1EIg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 02:37:13 2026 by rpki-client