Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
File:                     pXbrLMRi5uS_Deabn2NIdd67quI.mft (raw, json)
Hash identifier:          9UtUdjH1MinDpzNkPzThpyntipMASnUcuI8TNma6Gc4=
Subject key identifier:   00:F5:B0:8B:82:71:4A:2E:D9:E3:B5:59:06:74:58:98:B3:A8:0C:77
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01A1DA94655F510A999C1B06DE49E05BB5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
Manifest number:          1C96
Signing time:             Sat 14 Nov 2026 15:02:00 +0000
Manifest this update:     Sat 14 Nov 2026 15:02:00 +0000
Manifest next update:     Sun 15 Nov 2026 15:02:00 +0000
Files and hashes:         1: 06ltcr-VR0mDGk3DU2V0Qs-Epps.roa (hash: xy2x0t9miUDfzt16/BgNvKW7tRDWVpdYnHH/h+rimzA=)
                          2: 0fZnFf8vYw2u7gGSaiDC11kwrcI.roa (hash: zB9Co8CQovAdtoFO8Oirg8OcBTwP2vhu4tTPYXlt42o=)
                          3: 1-SnT6A8bIuS8ou7zP4my1zHqrOc.roa (hash: aJsxowleE7sR/aPvc4zJv3ud0JqycjWWVi9pWoJuKwA=)
                          4: 1-oGEqahOFkNkQIRe_6IUZEcES3M.roa (hash: MYJXd+XG0CeXetoUYxUZS4E3V5LgJZv3JuaGKGF3UM8=)
                          5: 1-pMl3d4gNxU27FCDZAJAkSHCnQ.roa (hash: 5SWZgCq5BYZHkDe5mSnx1U8yWTgXkvxikcxmv8Yb7Sk=)
                          6: 2PSXYK7RiGtCGo6lHFrZ4YsqmDU.roa (hash: 4TWFFeF3Hdb5/B2o51pGRlZHpk3qG7DjIDAPvFIJfGQ=)
                          7: 8Oc7yZGaKTkBanIXgPYbk2WNQUE.roa (hash: VRHFGWRbTtCED6xXvR0yrUQ50Zl08CMmuoJmDA12A5s=)
                          8: 8xRNA8izIvOih-VejB3XIu5aUCc.roa (hash: aHEGK7vfaVWJt7HbUtt26rq0IBHB0hxrLNPSnL4Rr3s=)
                          9: 97r5twbJVmf0WYDL0yxKnxvssEI.roa (hash: ij9X733Dnzcr6ek0d1dtjzKQMbv66qATxpon6hkWZlA=)
                          10: 9L-xdmzq1vPbVIZE4LGH9lfQdfU.roa (hash: ZFDBKyJNyXJjvUoWiLr0+Z4nHsDCkp8D5fnifpB0xFw=)
                          11: 9qA9sqmUNbTfjHXf5lbIrMrVJ4U.roa (hash: MROtdxgdJSiF4ic6iYN7rINtE9+cgZKF4pOEr5+fMag=)
                          12: ACGjb0Mhintf3niShjVz5gjFo7k.roa (hash: OY3tMeUgCFAya5AYL9vylvvV1EQ2iWlJKOpYWshTRwk=)
                          13: AF8EIAQpgAzqrRetWdRQNWquM38.roa (hash: 5Z4RL0gz7vqBdXNhMxy9+X+RqoDOzxXMbMu9QfhugYU=)
                          14: B0Q_Xv2CCSGwBRd2N5EnGbOwSfQ.roa (hash: 3cuIsi9z8hL9CpLEDy3zaGuNLR9bt9rQc5C+l+npObs=)
                          15: BORX2baZXFSi_y-y3B8t3b5J83E.roa (hash: dnOsSYOCocfCl6/WQXbXn6XrzUHSbY3O7Og03V8AEIY=)
                          16: C0PrDFjg6tEYdS7FGUYA9AvbjNY.roa (hash: t+XZROmYPw3eLWYfe874QIA62oa0drYjVlfaoEDAL5I=)
                          17: CvjKye9QoYot8ER41kU6pPcB3mQ.roa (hash: Og/70Ea5OciFlJJWqDbYc5NckE7t8Qijn42JYoURBjI=)
                          18: EDw81Ndf8QM0hI3Du2-BtictZc8.roa (hash: 0Ie5QPEH8aozKhvRoPlTgN3mrJZoJ2Kdz74uU/Dg7yE=)
                          19: EEQ18MJD-QFM041ezxz0Jr-cpQk.roa (hash: 6f42tqMjwuh7lt1pWqrlzUGqWxEundbWYPEM0xO9PW8=)
                          20: Ge_F9ExwO8_45uYKevZJ8TRrhLI.roa (hash: Kx5DX+vDs5UGFHjBPSnm22s/IMa2TGmIuIccjRdHY/A=)
                          21: HDLoBx6dn1hVxeyNNfrtKu5cJ4c.roa (hash: 9BOP424i31SQG/f/kGszodIMh4zCFrxdHzCs0ciWVpc=)
                          22: I3_C3ESJLh4TbtKnh6RoWVv0fHg.roa (hash: 282moPOvQD49b62lOeikmGVljm0Zp59YdKzwUiIRn0c=)
                          23: JqW1WPPSVZnz4iQHIwTn0BLYEKQ.roa (hash: 2KgOywV1woJUToJzdJgSMQbv7HQALViCU1GtkGFDSEk=)
                          24: LHqHW9JEYIGAstAeujwVjGAnAV4.roa (hash: 44Wfdlv/Jzm8iNDITTVf9J5E21EcMxuIU2n+lftK7bo=)
                          25: MFsq3qu335pSX697onMxFayK-c0.roa (hash: FynggKDh+hLRtiOMsix0QLO/WqfvLoGMaCpUNRkrcIs=)
                          26: Mq4zHrJv8SUNxMLgH4Liadg2gIc.roa (hash: tiLfzaXFRJMpnu63EW5TdAWk7qIWks7TnP5MMQ9XzvA=)
                          27: NZFzkjHlfHCdtQ6S-hl9y7Mx_O0.roa (hash: f3IMQbtL0u8EAnkO8+sS2QnwoNNNuipd718n1qYmzMk=)
                          28: QCOkKhVPwXWq7ZYcjP5XA5__-w0.roa (hash: yCp7nQtUoqbxV6edT97tismvCFyHyPZSJ19bn2y3n4k=)
                          29: SfBnrNJ_WUS1dtNWbITfzkTiNhM.roa (hash: 9gUcD5SLmgCHBGNc2ITvT8oGUHundV2RJ6KAmEpd5mk=)
                          30: UWSPscndFGTS22rrfdXjXjmUZGo.roa (hash: 8jvHYNnuZiFEdx1Q03ylnQb6HTKed6pcPkOBGR/7lKc=)
                          31: V8S9uEMRQHTiJe2Dmi7gKIeY4eE.roa (hash: BnWCyXK61ZzTwl6uSNEjhf+McXpj4KEp4v4nw1JFsDE=)
                          32: WG2DneehVsZLtEB97QmFiozSHtA.roa (hash: w7HadhJfiMg/H4/fTxT7DLgkFiEfL4YiuC2Sf3Vf21Y=)
                          33: WSqAKS32qZddCtX5UkiFXlnkp88.roa (hash: WhL+3anRVyQf5+/PAbPHrY7brX4fpcHT/ZFt4pvR0AQ=)
                          34: YQ-gP0kZeYU2c0LSFwYXjYGj5hQ.roa (hash: E2d/Dy1xrKgHWhv+CLqUXvuhdHClj2t3HDBm46v1VdU=)
                          35: _QEbXOhnZV9n3vJqF96EEUMuwNk.roa (hash: XChvxWori4tfEGM4dfBOVq9EW2lVcg4mXna8rVd0PwA=)
                          36: bKjdtdZf1MexZvwsZU8GG9nJ2Bc.roa (hash: X9PwP1YC3aYFvLjsNt6hJsaqgdzN4NS80AzewvXraLM=)
                          37: b_Jj4ndzbbJhfL1PK08CR3gVb1A.roa (hash: Lt/3+ctYRCJEgjReONFEypD/Cjkx6rt3BOJ652qe5d4=)
                          38: dC9BzkpXeigs_xU4kkaBooTSVeA.roa (hash: rPXka7+O0kIIPTtLpX+lb9Lrx3WAaQtRiwbgRQZE2gM=)
                          39: dDT81OZArp1fAr11sj9VmFYfU0c.roa (hash: Gjy3gDVZzdo7TKolwicOBHEDamNUZG2Mp68wSldVntM=)
                          40: eKwdjDqkgJpnZnLF7bhEep64XuY.roa (hash: 6PvNkU9ZF/yeAnbxrrE6J+6HIvzH4RWXec0DFPywPts=)
                          41: f5NRc42CDlXfYrprC4TWBAU3rsE.roa (hash: JYANubKqFba0N/vnv4S0e+FuEYVufe3rNyzCy2U2QgA=)
                          42: fwKQV1qDoScUWvD8w3jY6Y1H424.roa (hash: pwTRaa+fWbiaEpdC6Ep6GUm5pSF124Ac2gXqDdETHHU=)
                          43: hsKcvSWPO1CU4HkLHvqJIY4FgNA.roa (hash: jjrjI4HfCwNCsIc0HV5NXcWDcLbMHhmdxzYAyvFBJTo=)
                          44: k5qKSxHLP69UXtJMWEuO4QvO_74.roa (hash: KjBF50uY5cvYWG//40sMpHdOZA1nIwQiNLOIne/9LzU=)
                          45: mx3Y97UKzReWa2refDdx6s76_V8.roa (hash: iAIQmwVPfsG75148Pk6RxiYUp7ydaonILqUfYmzqHUU=)
                          46: nYq1bioZ2vuY3Rx5KeiuPIpm9K4.roa (hash: CmOI6EFvrz2q10h/34RtY2ze+cAxMH/PPioWanVwDQo=)
                          47: o8g4Vc3joaDg_8_6wn-aLmOqudg.roa (hash: Ge8kAzJMYUTouk87sT4qfOz3SH/UdiNLCCUaPjk18yQ=)
                          48: pLdekSUaP9qFXtLb6p8E8WZalVI.roa (hash: T48BRSJXGbhmNwVCvSfUPt5qFe21vZiy84Nvh8Y1AjQ=)
                          49: pQR6GwEdEqmheG6MQ1YT7TnY9eY.roa (hash: 83gz5YQmQn5/u8Qq6HbUF1goC2QANvEFfllGwF+288I=)
                          50: pXbrLMRi5uS_Deabn2NIdd67quI.crl (hash: RLXO1onb2xEnLOXNIbOvyl7jlgukmzQDNeOeRNOzGaY=)
                          51: qs9R9aB1EUwzgDT6SnmA4lUTeIM.roa (hash: P/WtHowAVT9B77yx30eKuQRgUp3mHE3I3YvfftlEmuk=)
                          52: sy0rJws5znQcOs3iGuvcxKEefs0.roa (hash: VhHu+av/lXY+oT085B2nq0itRfZ+Lf45zAnVi5gCA5k=)
                          53: x-cXbdNXg6CBnodia6aUDxUJZas.roa (hash: jfl+nhSLGqOL1lAOJyC8wvY/62ojmN9UTLGAHHP5b/A=)
                          54: y3IDHMPafUN66evhs_FGbUIFlak.roa (hash: n9PagArYyrmkf0AtpLcSu8nW6jM2gUrBWKZ+vTugGSA=)
                          55: yP5IZXb_7446VPUdBZ-5do1NIhQ.roa (hash: NXBSg4FpuwKqoQ/ToBcnJwcPWxl5WInzzwqficKUDaQ=)
                          56: zBhmRyi3KpJKMZKH1_lQRYUf9SQ.roa (hash: 2bsZDaJMn75/pG+XjUpjbPVCYXUEJ/cJ76HZaxtGWu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:94:65:5f:51:0a:99:9c:1b:06:de:49:e0:5b:b5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Nov 14 15:02:00 2026 GMT
            Not After : Nov 15 15:02:00 2026 GMT
        Subject: CN=00f5b08b82714a2ed9e3b55906745898b3a80c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:a9:1f:9e:ff:06:bf:81:66:87:d2:89:07:
                    96:90:13:51:c5:47:fe:5d:bd:57:d2:59:ac:aa:03:
                    63:aa:77:c0:45:74:63:70:71:ad:40:d8:6f:58:ad:
                    a2:0b:ef:03:95:bd:99:fc:82:b7:11:37:31:a8:79:
                    5a:9b:dc:c4:ce:5a:2c:94:a0:d0:2f:1c:18:fe:85:
                    f3:e8:c8:7f:ad:83:27:f4:01:7d:bb:ca:60:52:1b:
                    7a:54:ab:a8:a0:8d:37:f2:ff:06:4f:da:40:4d:fc:
                    d6:d2:86:c4:07:52:92:44:86:dd:72:3d:57:57:eb:
                    d4:06:2a:e9:b9:b2:9f:c0:82:b2:5e:c1:95:86:b8:
                    b3:75:a7:a2:f7:25:ab:3d:1d:69:99:93:44:5f:13:
                    0a:23:a1:70:70:38:33:58:6b:db:76:c6:cb:ec:e8:
                    31:40:9a:62:18:d7:6d:ba:47:fc:cc:02:d7:e3:ca:
                    fa:21:38:4d:7f:70:4c:98:af:f4:27:9f:93:42:35:
                    8e:44:9c:28:4b:f7:6c:cd:17:fd:dc:db:3b:0c:32:
                    75:fb:ed:d7:34:99:a5:43:cd:4d:ca:9b:d6:f5:f7:
                    59:5f:b2:da:6b:25:2a:65:30:c5:b1:13:4b:d2:b1:
                    84:65:c9:24:21:b3:09:79:f8:8f:55:0d:1f:36:0a:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F5:B0:8B:82:71:4A:2E:D9:E3:B5:59:06:74:58:98:B3:A8:0C:77
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b8:2d:69:e7:68:0d:83:7a:dd:c6:a8:51:95:b8:ae:b7:e2:
         1c:9f:1a:54:5e:e3:29:96:e6:ac:73:98:26:eb:2a:87:a0:3e:
         32:23:49:c0:51:d8:b5:b7:9e:82:a9:d4:84:f0:fa:1c:f3:f2:
         4b:b7:cc:7e:73:8a:b5:e5:85:f9:9c:bf:5c:80:97:af:d6:26:
         e2:27:5f:6f:0c:a2:9c:4f:d2:77:d4:4d:3e:ec:68:b9:d8:1d:
         8c:b9:d0:ba:84:4a:c3:3a:ad:c2:7d:53:88:b6:bf:fe:ca:83:
         64:8d:24:69:ed:90:3e:2c:91:a8:68:a8:f5:a4:db:43:ee:6b:
         e3:8a:35:a9:b9:37:c5:45:3f:d2:90:87:ee:3e:51:fc:fa:32:
         cb:01:32:a6:0e:b7:c4:0f:31:a8:c6:28:04:e1:33:b3:31:46:
         46:df:4b:11:5c:2c:d7:8b:f1:00:07:ed:10:8a:32:36:3c:2b:
         6f:c1:d7:bb:12:27:4f:18:90:35:1e:05:01:fe:31:ee:19:ca:
         8e:9b:71:98:9c:5f:e5:79:bb:79:4e:e6:b8:98:fb:d4:16:db:
         0b:e4:e0:03:c2:e2:d8:9e:2d:ce:42:44:65:3c:8f:93:04:44:
         5e:09:10:ac:89:05:20:13:c8:ef:d3:cd:d4:86:b5:c2:8b:d7:
         a4:26:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:41:09 2026 by rpki-client