Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          IGgQ0UAOyOwEl97qkmdcis9byYNzF/5p9dt41OkHx9A=
Subject key identifier:   74:58:B4:A5:75:45:BA:9C:DD:F1:F9:32:94:33:16:0C:7A:82:FF:7C
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       01A1DFB9BD8C221BDD5918773925A5898D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0ED7
Signing time:             Sun 15 Nov 2026 15:00:54 +0000
Manifest this update:     Sun 15 Nov 2026 15:00:54 +0000
Manifest next update:     Mon 16 Nov 2026 15:00:54 +0000
Files and hashes:         1: 0B4uZYhhW1R6jgcvcPIhqtGXEt8.roa (hash: C92osDmEis3+s0x4aFP3i1QSSHDTDUBWBwGEbISRoUM=)
                          2: 1t3e8Ylj9O0zIjsC2tOOYziuOrs.roa (hash: eehF+OhX6QRPqVel2i0g3hLv9GvHC+fZrbfgBiym6Ms=)
                          3: B8sy3_ktMjmvz_Vx32lg_nQccTc.roa (hash: bK5/40BeY6wg8mqdMQ18mLOTKqKSB1YnA9Zq5nJtUEs=)
                          4: DTm4ZRdrS6o-tB4sDbpyIIHOChM.roa (hash: Md7t3cm1SdQhahQoy1JmBwoUykabgC9sk5N6vavyamg=)
                          5: DVWgWy-a_sJG5kYu8Lg4M6nNxp0.roa (hash: 4VTuZFcYknTd5MGA2sRCKVSTZyQtXFdL48joLAVUgBU=)
                          6: ECtLWMVzwOZgCeREOIEtd2ceymI.roa (hash: fHGaNvUIUj3FjoH0hKJ1fC57VETbpNrkjc9oXVCr5zU=)
                          7: FnEFmJCKdHk7bysnxmMOnQ1m2-E.roa (hash: 601aDMLF6shq3cPPa6X6iOVdRo8AE66iVQ59SXSNf6I=)
                          8: G240TV7s_MsqaPW9S-qQsuoH3Ew.roa (hash: 7KDYnFoXd3QAJ5XIieOG3YLVQdxqt5f1kqqLxxnURZk=)
                          9: GHFK6QR3ShxWnyBwicyyUrfLYRI.roa (hash: y5OOoqpj1Ly2GhsHX3Jc+RR1mH+pBABtokNydDv5anU=)
                          10: Gasfj6rzEe3-zsj4Lj91Mc98mKk.roa (hash: 4yFVsWASC2DVldLBh1GiEJzBLWl9NLqEFtgBbzD84bE=)
                          11: Gu0bMHSDqGjFDauNQ_LHJkfjDwc.roa (hash: F3APMRIF7/q5LGwu23WMnn3XGRIla4I6taCWVoMsA+o=)
                          12: HadOqbA-zW7zuAMsfZ5snCO_uJI.roa (hash: c383oFdITf3uYihF/VSMwy3YXg/GVpIdA63Ws7pcO3U=)
                          13: K3K_I-Dc8ENn6TfKPBPKLKot-Ck.roa (hash: kwAP+l26jz5UjvHCOYHXO8LDdJVxpPlMT5Wh19k0w8Q=)
                          14: NCHumvKgs7NfR8041SZJklVd2qI.roa (hash: F8xI+1meNgniC7FEVl+GsQ49N42uPqVuC2fo0vtO9Yo=)
                          15: NbcI4f3nr-LlP0WjObSw1c3DwAo.roa (hash: Z70k402H+gXJoea55XT/D7IkMhxZNkwbcIeLQcU3ovo=)
                          16: NiJjnS2W8XolKFCF5C-hCnJigso.roa (hash: EyKkMTntRufNQ6fGUNFtsAIez79BZS5wKkj4xW4e4a8=)
                          17: SHL6FVDG0VEncJW7x1poREbu2IQ.roa (hash: nawwSLwOYFJ3f74rT00gDboZL4tjWG7XdXoJmwFGVTQ=)
                          18: SP9bNmf259SVmVyuVWvocbsAb7k.roa (hash: 2yxQulpuVmdMzp77ccr7vVof7HKMLgOv/SLHeQH2cZI=)
                          19: Sk1doWhJ2wr5Ni8PSmBvh-p0Odc.roa (hash: bW8gZPHv4lxyX2ih/CLf/jgt36qadB5Vvxq4k061qS4=)
                          20: T57By2clcSuAenEMv7lZQj6uGL4.roa (hash: Bj1sQ3GwnYhECghYFNY4U6Fca1mVPlNt2X9JRIo2HCg=)
                          21: T8vj1RSK3XjGjOyucs5SLVUbGP8.roa (hash: p4wvYNFnRzMTOmgEcHUG95lgnAhpAaiJ0fl+AHDV7M4=)
                          22: TBHHTYsHOROkPH8gmH7cU4qlJ30.roa (hash: 8GVi4c/FqOgBHVvq6XyCSOI6MVAJWnfPNGtIbICzF0w=)
                          23: TIKuMxTZ67ljS1MEaKEd5nJm30g.roa (hash: i6fwhPwwZDpXVV8+0MCSm5gIe8Cd4dJDq48e6EPNPVA=)
                          24: UWfHZ9Gky2-IAfOocDOcarqgZeI.roa (hash: 6qWgFN9WGxLXXO86E6BAVpLxxavFCmvp7KLDu4mJ5Rs=)
                          25: ZQnjKzMiLPska4NwmS-KarsB6hc.roa (hash: VaTyMYTVE9hwdwkKtBVMYjo3+Z7dKMCqeU0/sZhoqXQ=)
                          26: aVqBDFRHvQquH4WOMH7SkguLIW0.roa (hash: xqz8kq1PxD+Yc0TBepDBB8uWliWrri11n4EFK4fu+vI=)
                          27: dQUFoAb1zq-qjRfxYmionlyUCBE.roa (hash: 89OS46l5E4dafY04qKppEIdmeHybFkT6FCgKIuouAso=)
                          28: eDrzAi9GXEThXh3no2isq2mC-CU.roa (hash: ie+gOn7WFCYqk08KjmqkWdVS8AJtXsDT2UQNmYU+Lto=)
                          29: fC7KgdBOIcOYHmpev9uX8QigwAg.roa (hash: A0h6GzkHYiVxkkqnlynXvvn6nJ+w4hxbtBV8iSoJFNk=)
                          30: fDlMiJWovKMKVpHZJTRO-DdZJck.roa (hash: nx8Sasq9pTIfrgpkAq8eNCRiaDt4MFifdt2A/0muNgE=)
                          31: fOoxZZXoKfFKbUE_dojmHZZTrYE.roa (hash: gdRRDFEZsVqAvwZiFRI39sMYXzD71uw48Ip6EXeGQbw=)
                          32: gRtnIkvfQ2cW14FhA_CMkb2fw1s.roa (hash: DC4irSrhIBP9XMFv6B9hahNdHCOgqyd5fzrOZ6dJ0Kg=)
                          33: guFbtlOz-cVdnWuwUwSINPp7svQ.roa (hash: BNaICbUM99PP5akZrL/wYa4QckctHFIRaBrJZEL3Ams=)
                          34: j2nemTtzASTAmjXz2bu-htaMQRc.roa (hash: Y3E7xQZmw4Uilx70CdzT+WofEpiS4ELYiTPizMYwt58=)
                          35: jOpQFZewmPq2pi8ogPmFximkzeg.roa (hash: FOMOmzLBvdOaek+CYOQB+g3G3vMvPUuHvzObKY0ixQw=)
                          36: jU5WOcgDBMht94m22XFK_kmAjI8.roa (hash: MHrBus9Ogf9bB70LR8dzUAOJTMl2SWUkHml0ysdNNqY=)
                          37: jm8-QyC64SKLapzPwKdGSEmZh-U.roa (hash: K7cfnaOIUk4PYAiHfabhksTWW34e4ilJQVdDrMouZJA=)
                          38: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: xsEKp1rpo5vyNq02GkkKb6sErQmTZRmIaVSdBQVQ7nc=)
                          39: jtbJmQG6scpQKy9LQshvC4S6vVo.roa (hash: WGTdvOmB94rKqvZ1x2HJ/agkaGLiBbn3XIVZyM7FJ4Y=)
                          40: jyE_NYdirOGaX1MTTwN_euOSJ30.roa (hash: l92JiB4AF0ZlKiGDxVb1defpHFhxbwiRHIIwg+1AQjY=)
                          41: kJBGk5-GhB4a1moWN-Nb8HzFpAo.roa (hash: 6m7P2TxWpJieVpLMXXVCsKxcqw2u2ZTPI2S9tg50SPA=)
                          42: koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa (hash: vHwbWKarLLDrFkXHBPDr+Eb8BnaoGU6cB871++he+oc=)
                          43: lj4RgfhoyG5FiDBGDcvbHwFSisE.roa (hash: G/rcqCrsUKzf0c9Y+MEtsvNLT/iwh/sn4otQrQpHRRA=)
                          44: mFGlMTudwn7ALdrNv8GvOwztHCc.roa (hash: umuXgH6LuLdmDkv0+oZev5T0HPHguUPdHaZV3FGnLJk=)
                          45: pr3f_Vyx9e_vf_-0bQjNPiE6gmI.roa (hash: 8UYNtf7B63yOwod177cqEevQ5oC6um/ojCWeUy8Lku4=)
                          46: q9UCiHUCBS94qPU1QBAGbZ80Jqs.roa (hash: tANGaCvjNSRnjvMKOyr9yjsokMbVWAtZxPPxrnZVq4g=)
                          47: qUsAx2DraAMa8Y5SzlSNQuP2bY8.roa (hash: V4y7uRpiHHEvs+KyRNbN4UiObrLMrthyO3Rv6xbOhyQ=)
                          48: qk2AR7jznFXiFm-S-E3sbOW-SkI.roa (hash: yUznZqr9C+30ftomfZZOKQPBfudgJpWTkkmTi0wpzJw=)
                          49: rmfOCXUngu6VbsrOjC8BylUA3Gg.roa (hash: 2tWzXgc3FToTGxYr/7T7kqlA+8uMb6f05pi0Ge4rIx4=)
                          50: sMuPRhM3gm7Vt9eFvsdY_aFefBE.roa (hash: 4QbL6nvh7OKwUhNWNYgcJJ0/aWzLIjGEL86HbnwWag8=)
                          51: sums97Uvm7TdFRWjmVcnOwUzGJ0.roa (hash: RYDFTe1U6hfRaniHkflaE3dJG498svgy21eDqy+x7AM=)
                          52: t1vvR2etKWem9U1A-ahbjlUHopg.roa (hash: G0AJWIVPkm4mok9di6lghZD1/XZGAXhTR1Pi6vIGk0I=)
                          53: ugZw9OpkemL6tPjpeSZpoR7PlxU.roa (hash: 1VtK029vPkKfYQK+T/xSbkQOFcdZqNBLwk2TT4eg+fM=)
                          54: xTRu_tyayD9TCcxsinHLfOj03pc.roa (hash: +uoJZ25NPRo6h6sjEmam2SV9RmTRqXG+rOsQfHYwAF0=)
                          55: za-LnExB795o0ADlEf73NRgBV8g.roa (hash: lixci9OgIWVaYV96kzzTCwvRA6VguOmrjErH/pjJQdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:b9:bd:8c:22:1b:dd:59:18:77:39:25:a5:89:8d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Nov 15 15:00:54 2026 GMT
            Not After : Nov 16 15:00:54 2026 GMT
        Subject: CN=7458b4a57545ba9cddf1f9329433160c7a82ff7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:9f:a6:38:fe:25:a7:67:ae:e3:f9:ea:91:
                    d6:45:26:e9:23:93:4f:bc:a1:fb:48:87:1b:17:3e:
                    c9:b1:82:fd:79:ac:da:47:b7:c6:54:36:e8:5b:76:
                    51:54:af:6d:cd:f7:0e:b8:01:8c:29:bc:94:92:3b:
                    f0:75:aa:c4:bc:80:bd:a6:ba:64:6f:91:e9:38:dd:
                    91:92:41:84:eb:01:93:6b:82:6f:3f:2e:6b:70:26:
                    56:19:9e:a0:a0:e3:d9:7a:0e:63:79:d3:db:67:78:
                    f5:61:8a:fe:25:fd:7a:35:90:99:da:d4:c8:3d:43:
                    6b:59:58:07:f7:6f:e7:4c:38:3e:55:fa:68:cd:fa:
                    ee:15:c9:e6:12:0f:9e:ef:14:15:0c:e5:20:6c:a4:
                    da:ea:7c:38:75:ab:c3:19:a1:b1:9e:6c:e9:77:2a:
                    35:6b:9f:6e:e3:ce:a0:54:41:ff:65:02:5e:58:3b:
                    af:2f:e6:fa:9c:36:6e:02:e6:ac:1a:64:a7:10:3a:
                    f6:fe:2c:0f:46:4f:e5:fb:b1:ee:2f:2a:59:74:81:
                    8b:2a:01:bd:b5:c5:6f:2c:f5:97:23:ac:de:3a:a3:
                    97:8a:b3:75:b6:00:65:21:31:84:0e:b4:31:db:f6:
                    47:cc:f2:71:1a:31:88:16:c2:6f:87:56:32:d1:c7:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:B4:A5:75:45:BA:9C:DD:F1:F9:32:94:33:16:0C:7A:82:FF:7C
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:db:bd:8f:46:0a:bd:bb:32:08:91:58:38:12:5b:c2:da:
         81:4d:a3:69:29:70:55:3b:60:77:a8:9a:61:81:c5:09:fe:46:
         56:4c:41:92:90:86:19:44:28:d6:00:a1:35:c3:12:f2:e5:0d:
         56:79:b0:22:2f:01:af:92:5f:f6:4e:62:6e:06:dc:ad:c8:70:
         15:49:00:20:d5:a0:91:ac:c8:1b:15:1f:3c:6e:ac:72:6b:2e:
         a8:bb:66:be:12:2c:ad:3c:7b:bb:de:83:71:17:d3:0e:f0:f4:
         22:19:3c:c6:cf:be:6b:1b:71:5f:1a:71:e6:ad:de:22:55:51:
         e1:5b:17:3f:1d:57:c9:69:3c:3c:b6:d2:95:b7:47:fe:04:46:
         1c:25:14:24:ac:d5:41:14:1f:d6:de:c5:aa:a2:9b:77:f8:a2:
         d5:83:f5:11:15:bc:d0:b2:e0:49:47:52:67:3e:6a:b9:69:95:
         2c:7d:e1:f6:f2:83:20:f4:55:3b:be:e5:26:ee:4a:86:86:8c:
         cd:02:10:aa:72:c9:4e:11:70:39:f6:a8:97:a7:7d:fd:2c:74:
         31:5b:4a:68:17:8d:2f:5d:80:64:13:60:97:ea:84:cf:35:ec:
         27:ec:e1:ed:6e:02:db:5d:01:74:fe:bb:54:45:9e:9d:e3:6c:
         92:ff:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----