Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
File:                     pXbrLMRi5uS_Deabn2NIdd67quI.mft (raw, json)
Hash identifier:          GIXGadiRlzrnSP2xeGul+ZeOdj8+7fAUAE0k5tQn7qs=
Subject key identifier:   A5:E1:BC:8D:B2:1A:2E:65:EA:C8:EB:62:9E:6D:38:AC:AF:3A:7E:13
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01A0CDECBB34654652473FD428727A1149F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
Manifest number:          1C03
Signing time:             Wed 23 Sep 2026 11:00:38 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:38 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:38 +0000
Files and hashes:         1: 06ltcr-VR0mDGk3DU2V0Qs-Epps.roa (hash: xy2x0t9miUDfzt16/BgNvKW7tRDWVpdYnHH/h+rimzA=)
                          2: 0fZnFf8vYw2u7gGSaiDC11kwrcI.roa (hash: zB9Co8CQovAdtoFO8Oirg8OcBTwP2vhu4tTPYXlt42o=)
                          3: 1-SnT6A8bIuS8ou7zP4my1zHqrOc.roa (hash: aJsxowleE7sR/aPvc4zJv3ud0JqycjWWVi9pWoJuKwA=)
                          4: 1-oGEqahOFkNkQIRe_6IUZEcES3M.roa (hash: MYJXd+XG0CeXetoUYxUZS4E3V5LgJZv3JuaGKGF3UM8=)
                          5: 1-pMl3d4gNxU27FCDZAJAkSHCnQ.roa (hash: 5SWZgCq5BYZHkDe5mSnx1U8yWTgXkvxikcxmv8Yb7Sk=)
                          6: 2PSXYK7RiGtCGo6lHFrZ4YsqmDU.roa (hash: 4TWFFeF3Hdb5/B2o51pGRlZHpk3qG7DjIDAPvFIJfGQ=)
                          7: 4x9FdsuCZT8eQjbR_xFCkkyHceI.roa (hash: bwssY4p6B1jXdqnHRj8lHM3+o/n499u3nrapMoxhK40=)
                          8: 8Oc7yZGaKTkBanIXgPYbk2WNQUE.roa (hash: VRHFGWRbTtCED6xXvR0yrUQ50Zl08CMmuoJmDA12A5s=)
                          9: 9L-xdmzq1vPbVIZE4LGH9lfQdfU.roa (hash: ZFDBKyJNyXJjvUoWiLr0+Z4nHsDCkp8D5fnifpB0xFw=)
                          10: 9qA9sqmUNbTfjHXf5lbIrMrVJ4U.roa (hash: MROtdxgdJSiF4ic6iYN7rINtE9+cgZKF4pOEr5+fMag=)
                          11: B0Q_Xv2CCSGwBRd2N5EnGbOwSfQ.roa (hash: 3cuIsi9z8hL9CpLEDy3zaGuNLR9bt9rQc5C+l+npObs=)
                          12: BORX2baZXFSi_y-y3B8t3b5J83E.roa (hash: dnOsSYOCocfCl6/WQXbXn6XrzUHSbY3O7Og03V8AEIY=)
                          13: C0PrDFjg6tEYdS7FGUYA9AvbjNY.roa (hash: t+XZROmYPw3eLWYfe874QIA62oa0drYjVlfaoEDAL5I=)
                          14: CvjKye9QoYot8ER41kU6pPcB3mQ.roa (hash: Og/70Ea5OciFlJJWqDbYc5NckE7t8Qijn42JYoURBjI=)
                          15: D30wBvo6GdQk07GrbjXC-y7kfQg.roa (hash: PtMGitpAQ1ws80rS+qjGvkY94JZdrap7rW2dJVfQ0rw=)
                          16: EDw81Ndf8QM0hI3Du2-BtictZc8.roa (hash: 0Ie5QPEH8aozKhvRoPlTgN3mrJZoJ2Kdz74uU/Dg7yE=)
                          17: EEQ18MJD-QFM041ezxz0Jr-cpQk.roa (hash: 6f42tqMjwuh7lt1pWqrlzUGqWxEundbWYPEM0xO9PW8=)
                          18: Ge_F9ExwO8_45uYKevZJ8TRrhLI.roa (hash: Kx5DX+vDs5UGFHjBPSnm22s/IMa2TGmIuIccjRdHY/A=)
                          19: HDLoBx6dn1hVxeyNNfrtKu5cJ4c.roa (hash: 9BOP424i31SQG/f/kGszodIMh4zCFrxdHzCs0ciWVpc=)
                          20: JqW1WPPSVZnz4iQHIwTn0BLYEKQ.roa (hash: 2KgOywV1woJUToJzdJgSMQbv7HQALViCU1GtkGFDSEk=)
                          21: K8d5B0NeSuJLNinu1mpIuWPf1ds.roa (hash: VMcMPIRdZruyGgbK0U360ow7dN/FuhCWBVb1ATSY7W4=)
                          22: LHqHW9JEYIGAstAeujwVjGAnAV4.roa (hash: 44Wfdlv/Jzm8iNDITTVf9J5E21EcMxuIU2n+lftK7bo=)
                          23: LUrM5M1jyn9SjE_8bOv6xvYQe-k.roa (hash: LCY9O7UT2HAkFoAxAKXWqDElvt4mcsbUASMy2I+isys=)
                          24: MFsq3qu335pSX697onMxFayK-c0.roa (hash: FynggKDh+hLRtiOMsix0QLO/WqfvLoGMaCpUNRkrcIs=)
                          25: Mq4zHrJv8SUNxMLgH4Liadg2gIc.roa (hash: tiLfzaXFRJMpnu63EW5TdAWk7qIWks7TnP5MMQ9XzvA=)
                          26: NZFzkjHlfHCdtQ6S-hl9y7Mx_O0.roa (hash: f3IMQbtL0u8EAnkO8+sS2QnwoNNNuipd718n1qYmzMk=)
                          27: QCOkKhVPwXWq7ZYcjP5XA5__-w0.roa (hash: yCp7nQtUoqbxV6edT97tismvCFyHyPZSJ19bn2y3n4k=)
                          28: SfBnrNJ_WUS1dtNWbITfzkTiNhM.roa (hash: 9gUcD5SLmgCHBGNc2ITvT8oGUHundV2RJ6KAmEpd5mk=)
                          29: UWSPscndFGTS22rrfdXjXjmUZGo.roa (hash: 8jvHYNnuZiFEdx1Q03ylnQb6HTKed6pcPkOBGR/7lKc=)
                          30: V8S9uEMRQHTiJe2Dmi7gKIeY4eE.roa (hash: BnWCyXK61ZzTwl6uSNEjhf+McXpj4KEp4v4nw1JFsDE=)
                          31: WG2DneehVsZLtEB97QmFiozSHtA.roa (hash: w7HadhJfiMg/H4/fTxT7DLgkFiEfL4YiuC2Sf3Vf21Y=)
                          32: WJ0PcmZhrUHOBXD2AiV-791a1us.roa (hash: IxIVvojLZIR7RokBDSnWLcCkx/Ei9k+QD7DbnhZ+ed8=)
                          33: WSqAKS32qZddCtX5UkiFXlnkp88.roa (hash: WhL+3anRVyQf5+/PAbPHrY7brX4fpcHT/ZFt4pvR0AQ=)
                          34: YQ-gP0kZeYU2c0LSFwYXjYGj5hQ.roa (hash: E2d/Dy1xrKgHWhv+CLqUXvuhdHClj2t3HDBm46v1VdU=)
                          35: _QEbXOhnZV9n3vJqF96EEUMuwNk.roa (hash: XChvxWori4tfEGM4dfBOVq9EW2lVcg4mXna8rVd0PwA=)
                          36: bKjdtdZf1MexZvwsZU8GG9nJ2Bc.roa (hash: X9PwP1YC3aYFvLjsNt6hJsaqgdzN4NS80AzewvXraLM=)
                          37: b_Jj4ndzbbJhfL1PK08CR3gVb1A.roa (hash: Lt/3+ctYRCJEgjReONFEypD/Cjkx6rt3BOJ652qe5d4=)
                          38: dC9BzkpXeigs_xU4kkaBooTSVeA.roa (hash: rPXka7+O0kIIPTtLpX+lb9Lrx3WAaQtRiwbgRQZE2gM=)
                          39: dDT81OZArp1fAr11sj9VmFYfU0c.roa (hash: Gjy3gDVZzdo7TKolwicOBHEDamNUZG2Mp68wSldVntM=)
                          40: eKwdjDqkgJpnZnLF7bhEep64XuY.roa (hash: 6PvNkU9ZF/yeAnbxrrE6J+6HIvzH4RWXec0DFPywPts=)
                          41: f5NRc42CDlXfYrprC4TWBAU3rsE.roa (hash: JYANubKqFba0N/vnv4S0e+FuEYVufe3rNyzCy2U2QgA=)
                          42: fwKQV1qDoScUWvD8w3jY6Y1H424.roa (hash: pwTRaa+fWbiaEpdC6Ep6GUm5pSF124Ac2gXqDdETHHU=)
                          43: hsKcvSWPO1CU4HkLHvqJIY4FgNA.roa (hash: jjrjI4HfCwNCsIc0HV5NXcWDcLbMHhmdxzYAyvFBJTo=)
                          44: k5qKSxHLP69UXtJMWEuO4QvO_74.roa (hash: KjBF50uY5cvYWG//40sMpHdOZA1nIwQiNLOIne/9LzU=)
                          45: mx3Y97UKzReWa2refDdx6s76_V8.roa (hash: iAIQmwVPfsG75148Pk6RxiYUp7ydaonILqUfYmzqHUU=)
                          46: nYq1bioZ2vuY3Rx5KeiuPIpm9K4.roa (hash: CmOI6EFvrz2q10h/34RtY2ze+cAxMH/PPioWanVwDQo=)
                          47: o8g4Vc3joaDg_8_6wn-aLmOqudg.roa (hash: Ge8kAzJMYUTouk87sT4qfOz3SH/UdiNLCCUaPjk18yQ=)
                          48: osdItLYXtqv_3S-fUAWrgx29l0Q.roa (hash: EniukNt9QbYrvruqDzGJT5DRAibkPCPYhoMCwZoVAjw=)
                          49: pLdekSUaP9qFXtLb6p8E8WZalVI.roa (hash: T48BRSJXGbhmNwVCvSfUPt5qFe21vZiy84Nvh8Y1AjQ=)
                          50: pQR6GwEdEqmheG6MQ1YT7TnY9eY.roa (hash: 83gz5YQmQn5/u8Qq6HbUF1goC2QANvEFfllGwF+288I=)
                          51: pXbrLMRi5uS_Deabn2NIdd67quI.crl (hash: XaeEn31EEN4rOg4iGWCTDYyJql30Sry+DdQRFRv3ypc=)
                          52: qs9R9aB1EUwzgDT6SnmA4lUTeIM.roa (hash: P/WtHowAVT9B77yx30eKuQRgUp3mHE3I3YvfftlEmuk=)
                          53: sy0rJws5znQcOs3iGuvcxKEefs0.roa (hash: VhHu+av/lXY+oT085B2nq0itRfZ+Lf45zAnVi5gCA5k=)
                          54: x-cXbdNXg6CBnodia6aUDxUJZas.roa (hash: jfl+nhSLGqOL1lAOJyC8wvY/62ojmN9UTLGAHHP5b/A=)
                          55: y3IDHMPafUN66evhs_FGbUIFlak.roa (hash: n9PagArYyrmkf0AtpLcSu8nW6jM2gUrBWKZ+vTugGSA=)
                          56: yP5IZXb_7446VPUdBZ-5do1NIhQ.roa (hash: NXBSg4FpuwKqoQ/ToBcnJwcPWxl5WInzzwqficKUDaQ=)
                          57: zBhmRyi3KpJKMZKH1_lQRYUf9SQ.roa (hash: 2bsZDaJMn75/pG+XjUpjbPVCYXUEJ/cJ76HZaxtGWu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:bb:34:65:46:52:47:3f:d4:28:72:7a:11:49:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Sep 23 11:00:38 2026 GMT
            Not After : Sep 24 11:00:38 2026 GMT
        Subject: CN=a5e1bc8db21a2e65eac8eb629e6d38acaf3a7e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:30:77:6a:c6:65:80:ca:23:87:6c:c1:a6:
                    73:4e:28:88:97:9a:a1:7f:a1:cf:b7:df:1b:e9:19:
                    bc:f7:7e:08:65:b4:a6:9c:9a:7b:ad:62:d3:6f:bb:
                    0e:cb:9c:7a:bb:86:75:82:6f:68:88:c1:60:61:83:
                    38:f5:de:48:f5:4d:2f:68:b1:c3:eb:23:96:97:71:
                    b1:8a:8a:d3:56:b8:96:78:4e:13:09:c3:02:c3:5b:
                    1b:75:0e:26:20:67:09:86:1f:9b:38:91:5e:be:f4:
                    53:b1:a2:72:b6:b7:c1:2a:7d:ae:02:dc:83:9a:d5:
                    13:d8:6c:e3:3d:a4:73:1f:6c:8d:d9:41:e0:d4:d2:
                    0e:4c:e2:4b:28:19:50:94:ef:6e:3b:3d:18:4a:24:
                    c1:d1:17:b9:b1:88:bd:dc:9a:71:ff:a3:48:25:ce:
                    d3:ef:23:cf:f5:d3:e1:d4:c3:ec:20:4c:68:a4:b8:
                    5e:f1:cb:c3:ba:96:bb:a9:1f:d4:d1:c1:aa:47:b2:
                    83:80:69:90:bc:e2:90:3d:e4:1f:9e:54:56:f5:3d:
                    93:cf:0c:d3:e9:3d:90:cb:a6:68:b8:ce:4f:59:6f:
                    63:38:82:7e:b3:19:55:f3:d8:28:2d:52:a8:d2:9e:
                    40:9b:af:ba:e8:d8:8d:b6:32:70:cb:60:dd:24:94:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:BC:8D:B2:1A:2E:65:EA:C8:EB:62:9E:6D:38:AC:AF:3A:7E:13
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:37:c2:56:29:9e:e1:40:86:f8:1c:17:be:d5:8b:1c:9d:29:
         75:5c:0f:b0:33:5a:9c:7c:b3:46:17:de:c0:a6:8d:55:56:26:
         a7:2f:b2:11:5d:be:1a:58:e3:68:9f:62:f0:27:3c:6f:18:4b:
         a4:71:dd:6a:41:a5:31:67:33:38:e1:4b:19:c0:cf:0c:71:d0:
         43:00:34:c8:cc:43:84:91:c8:89:c7:e9:20:d8:67:c9:ff:d2:
         4b:2b:0e:f2:17:24:24:5f:c4:e9:2b:b7:2f:8f:25:66:0c:26:
         02:f4:e3:d2:b0:00:40:6d:dd:11:20:73:e2:bf:57:fe:bc:07:
         2f:35:87:fb:a5:eb:89:53:d1:b3:30:d3:5a:8b:ec:02:6a:80:
         0c:d5:7b:93:e7:da:70:c6:84:25:ec:57:cb:a7:7a:53:ea:8b:
         d5:8d:2d:f6:73:08:5c:fc:b5:bf:16:86:f9:86:4e:3a:c6:16:
         2c:93:e8:f8:10:92:83:df:43:29:0b:ed:48:f7:a4:ae:36:fb:
         20:41:5a:dd:d7:97:df:c4:7d:a1:70:19:35:d7:9f:39:5d:3d:
         8d:00:39:db:8f:15:7c:6f:37:2d:2b:5f:24:82:f0:cf:65:0e:
         dd:71:89:21:9b:8a:c3:f6:3f:27:d8:d3:e7:60:9e:b0:cf:d7:
         41:93:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:02 2026 by rpki-client