Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
File:                     Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json)
Hash identifier:          LBtkFXKkpDE67uvl1H/wJwWI4oDcdkL1pRja4jz1fcQ=
Subject key identifier:   A8:41:42:6B:BF:2C:CF:AB:D7:F9:0B:EA:F1:CE:9A:C6:1B:2A:8C:79
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       01A1DBA6462F1FEB220AD99DD4B334261FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
Manifest number:          0A81
Signing time:             Sat 14 Nov 2026 20:01:09 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:09 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:09 +0000
Files and hashes:         1: 8Z4cnJPLnuvDnXqgx8BKoKEM9bU.roa (hash: 6Fm2cAinJPnR+GJXlx5vjK077RhAacIcahwr2z1YkDg=)
                          2: 9UtT5GcWwC7TWfNnh2me3mLPlFI.roa (hash: qgqqfceXIM+BVgfwFTl9tcLAUFjeXoDcWcGGai98SQM=)
                          3: A8MjN0eidT6iDCjoo7S-r3ul_Tc.roa (hash: i7YanX6zn3v0DG9D6Ag3WSlhyo5m86D2Igd9CoS0Fjw=)
                          4: AHoAIdWXRAPIrDSl4u1SU8YYqSk.roa (hash: EWMLVeLj+fyihsFBIWnZZJmtFYOU0n6PSicXw/JZTwQ=)
                          5: BQHofkNDdwo8VDxETqm6eOYoHdg.roa (hash: bNhzHl3IkpkYEjbrGYNAAlrHXhlpC4ZSBZr0iWx1THc=)
                          6: CzX--NSlj4j4e_bPOJnrBSnXMDE.roa (hash: T9uZuh47VYQIKvHfzAQBj+kD6w6gwmwKS7XUNwFB694=)
                          7: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: wLP13mP/J8emvVGm5YvwSdPgThxzzGYqlc8QQSV5Kbg=)
                          8: J1aCTCe9S3EttkG3gjoMsOR6Xk4.roa (hash: BW0JcsAW2YXqSEQ+lbB1GbYcVdH4XyQmnvM9e9JVf3o=)
                          9: KvM3StmOZkBwSmEp39O9I_j7k04.roa (hash: tpcdc0S3Vfat1KVvABMTMEmMwO077uZepfs7I1i4yMY=)
                          10: MBFPvIPgNySe2urpIvFCDePV9Y4.roa (hash: f5+yNK9LhJwsFZqjTx+HKOKeKNubN7GeN8d0fxuo2LI=)
                          11: MZ7S-RSHcnSELGMtrXuzvi3LI68.roa (hash: +fq1dXYLe8pvw7cMIz7e2FS56xrJY1Io672b/msokkQ=)
                          12: QTnflRDqAKg81BhqTfvGF5Pz_xM.roa (hash: GASWvWT0LzhuKAbwvS1EOgovlGNitmvN7JCqe3mF9OI=)
                          13: QsrVdj0EDuFeHzbM36_tXIdVYO4.roa (hash: rSlbajiApqcbyUeHEkfPmsSeEw0M5M/pY9jVKn1gC0I=)
                          14: ROQ-Tbim0cZvwTwTc4SRtxkouaI.roa (hash: SGRrqCJNQ7GyVwO8SOgRrr3MSGqTOE8u6IAHGd7bB0A=)
                          15: b3OIDkHF0SCOrHo_420obyvnkmI.roa (hash: sc1FokAaPj9a+a6X7xyvlvbupvhwzdVFtIvrgSiKEeA=)
                          16: bawlKjjRUn-2VUvaXqgMqrmXIYE.roa (hash: 4v7xLDkhU1j/Z9g+fxPJmcjl4ID73clEnOAWrniIb90=)
                          17: cH1U0akjXxWwjePysfs1KMEhgnM.roa (hash: c/aVQw4vYLSrm6+5KMS/RqtZdacZ4uxH0y7aXje0vQY=)
                          18: gB9pySILbpD_ARKbsKBosjbrp2o.roa (hash: P7JIDPQrScNZtIMVCacJw/YIMNuDt6IHyEVuiNcFTOw=)
                          19: ix50fllmTBXH0H6Th11QAkYuvBU.roa (hash: p2NUkXsFZFD0PMPwbkACoAvFJ2EQV4gGlYmOL6mduVg=)
                          20: mnaD-SqMaItcNhqa0LO5p-4uqZc.roa (hash: t1tFSNibr7+MeQN9/FMt6ud4uRozJUnr3W0XaIgm8nU=)
                          21: r1FDlfrTL0hBKBz_EIagW-GX9Ao.roa (hash: 7RaL6Etx3q+xbKYR2Cg8tFQiNAa/86ECIbzS8ZguzE8=)
                          22: rcRoIjuYJtNSn9g4NTDRPBJhZLQ.roa (hash: ZjhmVaUc3HqZVzA0H9v1Qsh5U5MX08HlFP/jm9mqcMA=)
                          23: taNOcFtjGX4XDaLQFSWD9YAKY80.roa (hash: 1nijtZl6vRVqZanQGkkq5xkFpuzGH86d1/U2hfDQy6k=)
                          24: uhIp9qB7kmChMTb7Zgy6ODlmQ-0.roa (hash: JtrRy8K8JfXY6c0h4tIaVxPoTz6vUyxLw4quWDAs64g=)
                          25: usnzEjwTf3Hb8Ns9_jne7bL8qtg.roa (hash: 55lzaab3Q4oNX9z+oCX7fFYT3pDNkQzjAEYIEWThmaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:46:2f:1f:eb:22:0a:d9:9d:d4:b3:34:26:1f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Nov 14 20:01:09 2026 GMT
            Not After : Nov 15 20:01:09 2026 GMT
        Subject: CN=a841426bbf2ccfabd7f90beaf1ce9ac61b2a8c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:77:ec:b1:c1:27:ea:dc:fd:f0:d0:d3:40:
                    fd:b9:1e:f8:3b:f6:fc:54:3d:80:9b:ae:b7:8c:c0:
                    b5:0a:b6:4b:37:69:b1:24:63:f5:5a:1e:70:7d:08:
                    a8:6c:fa:2b:d8:cf:5d:15:e8:ce:9d:7b:51:02:2f:
                    78:f6:fa:ad:fe:6f:71:34:7a:46:bc:ed:fb:e6:3e:
                    c0:1c:1f:f5:7b:f8:c6:ff:ad:11:fc:11:c5:6c:85:
                    e4:57:da:bb:c8:41:51:ac:8b:3a:3b:f0:30:65:de:
                    fd:f5:12:fd:75:04:24:e7:90:42:2a:4f:cf:c9:dd:
                    7e:63:86:3f:4e:34:32:6f:db:80:ff:39:8f:cd:04:
                    4d:68:19:40:94:5e:21:8d:6a:1f:0f:44:d6:6c:ad:
                    34:f2:2a:9d:33:c6:d1:1f:b8:22:7d:d3:78:02:ba:
                    50:c4:1c:37:0d:f1:f9:61:3f:e4:1a:86:3c:72:88:
                    a2:16:4b:6d:2a:54:61:c9:3d:c3:49:e0:f0:84:51:
                    b5:a1:4c:df:25:ee:62:89:dc:94:e0:b4:b4:c4:d8:
                    4e:8d:4c:fa:09:c1:7e:f7:e1:b1:59:41:7d:ba:bb:
                    96:58:07:fd:ad:73:6c:bf:24:4a:46:9b:c3:0a:72:
                    d4:3d:99:a3:23:c7:2a:7d:21:2f:0f:7e:eb:a3:77:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:41:42:6B:BF:2C:CF:AB:D7:F9:0B:EA:F1:CE:9A:C6:1B:2A:8C:79
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:ed:88:ce:04:60:b5:77:b6:60:b9:e7:39:2b:e7:b0:66:
         77:50:f9:05:d7:79:55:a4:60:8e:9e:8b:a2:fc:21:d1:15:29:
         66:09:99:c1:4b:ee:8e:6e:f0:d4:fd:fb:c2:fa:32:c2:73:28:
         6d:df:b5:39:cb:3b:a0:61:16:80:2f:fb:e1:59:3d:d9:5f:dc:
         69:e3:2a:89:d2:1c:09:3c:95:94:55:a4:d8:94:dc:65:3f:ee:
         a6:36:81:9a:28:3d:f2:27:b6:41:d5:02:1b:7d:f6:63:ad:89:
         59:ef:d2:55:d7:13:38:09:16:90:2e:3f:51:bd:af:7d:6b:63:
         db:10:72:b5:8c:74:8a:1b:72:84:16:09:9a:01:80:97:83:ac:
         fd:27:5c:67:ce:57:93:e7:1b:f5:ff:d1:5c:47:c1:7c:b1:1e:
         ac:97:40:82:22:64:18:bb:ef:ea:73:b5:d3:ad:9b:17:45:77:
         33:4f:50:83:d4:f6:07:19:67:80:db:12:6d:48:c9:d3:9d:b0:
         03:88:9a:c0:30:ff:fd:49:f6:7b:70:31:fd:f5:fb:6f:e1:83:
         32:1e:f2:37:d2:82:39:cb:2e:0a:1d:8d:da:b4:32:e4:b0:52:
         ac:01:4e:bf:be:41:8f:0b:c7:12:be:69:63:84:2b:42:b8:d8:
         fd:a2:02:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbpkYvH+siCtmd1LM0Jh+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjYxMTE0MjAwMTA5WhcNMjYxMTE1MjAwMTA5WjAzMTEwLwYDVQQD
EyhhODQxNDI2YmJmMmNjZmFiZDdmOTBiZWFmMWNlOWFjNjFiMmE4Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwZ37LHBJ+rc/fDQ00D9uR74O/b8
VD2Am663jMC1CrZLN2mxJGP1Wh5wfQiobPor2M9dFejOnXtRAi949vqt/m9xNHpG
vO375j7AHB/1e/jG/60R/BHFbIXkV9q7yEFRrIs6O/AwZd799RL9dQQk55BCKk/P
yd1+Y4Y/TjQyb9uA/zmPzQRNaBlAlF4hjWofD0TWbK008iqdM8bRH7gifdN4ArpQ
xBw3DfH5YT/kGoY8coiiFkttKlRhyT3DSeDwhFG1oUzfJe5iidyU4LS0xNhOjUz6
CcF+9+GxWUF9uruWWAf9rXNsvyRKRpvDCnLUPZmjI8cqfSEvD37ro3exNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhBQmu/LM+r1/kL6vHOmsYbKox5MB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2ztiM4E
YLV3tmC55zkr57Bmd1D5Bdd5VaRgjp6Lovwh0RUpZgmZwUvujm7w1P37wvoywnMo
bd+1Ocs7oGEWgC/74Vk92V/caeMqidIcCTyVlFWk2JTcZT/upjaBmig98ie2QdUC
G332Y62JWe/SVdcTOAkWkC4/Ub2vfWtj2xBytYx0ihtyhBYJmgGAl4Os/SdcZ85X
k+cb9f/RXEfBfLEerJdAgiJkGLvv6nO1062bF0V3M09Qg9T2BxlngNsSbUjJ052w
A4iawDD//Un2e3Ax/fX7b+GDMh7yN9KCOcsuCh2N2rQy5LBSrAFOv75BjwvHEr5p
Y4QrQrjY/aICaw==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:28 2026 by rpki-client