Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          Ux4E7Nb9GzAOO1i66bebRAWAWVix+J5ZKgylmESaaps=
Subject key identifier:   26:7C:19:56:D8:53:8B:71:4D:00:79:38:F1:5B:79:9F:CA:F0:87:1B
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01A0CC3536265136F3931D5DBFE4656A87FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          0723
Signing time:             Wed 23 Sep 2026 03:00:34 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:34 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:34 +0000
Files and hashes:         1: 0YWrZMHXzL_fpQu6UEXfvsOhaUo.roa (hash: D5E1izzcKMP3zRohFMUe7WsnHDjW1oHiWCyMD22hKXE=)
                          2: 6YdauMxwtaJ2XapsEhB4s_XIetk.roa (hash: OrJfyq6brZkbyt8ajKBE0Bg6XcJ1it9g0va1TyaaubM=)
                          3: 6nsjDhn-NUS0eS2znotmTLFb8K4.roa (hash: brgSOLqNkmWevGXCCydMHGGRZ6gS0cHDgCsdzaFEdLo=)
                          4: 6yfl5wriHlRWRW3gXIPTed6SZBw.roa (hash: qw+/ZNQKL/+QGpUMyzcUV5EsmEJeLyy2giX16sQEEV4=)
                          5: 7PfHmGf-ptLWTY-0uujQDxN_ctU.roa (hash: EYVd45QCLI1r9t+cnOTNwN8m8g9VMZQQuSIZh8MozB4=)
                          6: 7Wovjg0WK0CO0eA95rPBJeMNlzA.roa (hash: L5VcjSfuJbBmd44K80gnuYivqpKsaPKZEEuWkNqqRyw=)
                          7: 847zFWn5eVS9knYe8BRZHVv_s2c.roa (hash: BaG3yolbgvhFed4tgUbetMOu3GbXza6kCLC1VVMYbGY=)
                          8: 9PqxwQLy21-4bHijZ43UTh9ei4s.roa (hash: 023sRck7i4ErfynWxL+Abie1/pQDh31WsxstU1jtkXw=)
                          9: A__uftTJfUQScTKvf0ZCZUS0aAc.roa (hash: InE5+Cavsi4Z8kpY1c5G+Ux8kKsvzWwxBaCxmbKO2Io=)
                          10: AkTKpD9hNqiV_5_c6-DMcTgYskc.roa (hash: G2QKxBnm98oc52v99fqhnVJF48h7SOnkbCMrYYDKSd8=)
                          11: CHH3xJ1lzUgyXtbZUmGWR88D-U8.roa (hash: 2I73e56GrDAgMRYeThyxeJT4zvfxFJwpu15CsggS6j8=)
                          12: E1xN2EQHnjV7l4Ud58ayk067t9Y.roa (hash: AvCocU8zRlKp8U4hPAeITkW9sAUVW8+tmg/G+VJUsM4=)
                          13: FUd3_uiRDwfAHqvhswYvKQHbfb4.roa (hash: JisBSYC59fG7+pF5YDGsAkRI8Xm3kc5i0eweb5iAKgk=)
                          14: Fa_E9m89fUIJZtCefkFZ2jvyFO8.roa (hash: ZAwAoX5HJyrrbaR8aOzdSIPtrO8DX2Vvq7HjudQe7SU=)
                          15: Fllda1GGof6P303TUTHwPCCAtQQ.roa (hash: u5lb6y8q8DLuHPCyQSXlgICKuvOtLLt+dBcu770N0Q4=)
                          16: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (hash: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M=)
                          17: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (hash: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ=)
                          18: IjxHTZCreyDc6csZL7ds5BEDMlI.roa (hash: 8ICIGPUgNLulDkRenOqCLyRX2X0VOBveyPRhWy0xOaI=)
                          19: J84D708JiRdF1Cj0OhAXFyT-dDw.roa (hash: h5yfNRw8lKCbHsVms6lwRL8YMmiaidYr9RU7tr43vl0=)
                          20: LZQRNy_ENT-8O34qcLxuaQWSeHM.roa (hash: OON3viUqIKHDsT02HiaCa59c3M67rxH/jkpVWHuyTwU=)
                          21: Nd9KOFXDH4nonVF3CLoZj0Hyts8.roa (hash: cGMmKZgE701PzM2RG0kAHzIsPSvLqz8JKOXln6VOjQk=)
                          22: Ql9OHsZY3se1g1vvUH1wbW5S1qA.roa (hash: BX5RRsqmh87FsNyQRiTV5w4eJ1PzrfrvFTFXvcfPqPo=)
                          23: QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa (hash: xbQrT4SCRDGICNyiKtX8aOdkuj5ohxB0sU4mS/MuyaM=)
                          24: TQY7akU130oo67n82d-ykDHfoSg.roa (hash: AXvCT8Iivy/TjEJ4NtkykOKLnXNWkYcMrnOcONDKwno=)
                          25: TRKH1TE6Wx2-q_jxnnKVpda3BjI.roa (hash: 3Msf9lFY/c7Nxyrt7cbHQgNLt+yHKm9nl4QWIZv+9Os=)
                          26: UctFLwqM_4WOq9unapxPDQOIFss.roa (hash: jsWvt8vWSgSLT5hexwAAInmmfxYwbW5bGxe4i8DxWyo=)
                          27: Un_3OMScs2A-n1B7QSdez87iw_E.roa (hash: Lq4xQb+JOCTaHhv89CfMN+jQ5wmo6XsfP2BFflK5jos=)
                          28: UovVuidSJ6VyOXzaImlvnvDzNZo.roa (hash: FrrmtyyFqx6LliZFwik7dAsD8K6N5OUt4H0X2CLgP74=)
                          29: VaQO35MjmxIvk25kxSxS8V8IT-A.roa (hash: GQYXzidHPzzz2ER38qUc2ZQSsKzCNUQKQ+UjOoI//as=)
                          30: X5uUQdt18p324LUKAUAju_EtV5M.roa (hash: Uh+nx1ykCeq4V/7jtccqXb+9XUejz93sBrc5WkWEX+Q=)
                          31: X8sdbycHT12fl8v3f4JjpsnZTG0.roa (hash: 35gVkSTJeST2VThCOqua4110t4pi9FQFLTgTaz5Gffk=)
                          32: XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa (hash: 5KFbFF9jJpeEzZqgnXb4J0jAscVydeWpilyaP+Yf3mo=)
                          33: aHikDoY7PTlE63g8681nazruKQI.roa (hash: ze8lLrQN/ERMv9fQP68OAX0YeYGfw8cezJvf2Z6IrAU=)
                          34: algNXeBnWxlc8W_yfgEXDKVh734.roa (hash: +8v/ZEG/pBK5GYXIEpGkYZzjhYA72COaS0gR5SOoPO0=)
                          35: cuZj8eYZctJvbxdMgAXJDVanMaQ.roa (hash: RPSnYZMixt6Uuo3FTDTuvO1zf/RtU59/JgKhacEXRt4=)
                          36: f9qu7-XroBlUleKDIHIPa7f_kn0.roa (hash: 0aWF9oheRQqFqcEdbQwzwfDbaBp2PnTquGLHZC+Ljjs=)
                          37: fMSedJSqv9C6sYPgIeTBDq0FJhE.roa (hash: zAkJp90Xulr6wHS8heu3SwA9t6lCNg9Bdvap7WsW6UQ=)
                          38: hrzUT60RppU12sijbO5nUnIsLDE.roa (hash: +JirVR+wIPZ5lVwuA3SZmdQkTSTYsXEklEIVJFUFJXU=)
                          39: iIt06y_hUdGc8HNkpEJC_WYDW5w.roa (hash: G0N9HxEnblWUsnq9try/TNSpWeFRaa0FkNLO3f6+MRE=)
                          40: iurf5I7OwjJvxaeg-v3lapvW0ng.roa (hash: nvYBXAiP6Ei+Kjhf/1Hl6QUpDaIRspIu82KYWDIJ5D0=)
                          41: jJWl15wqYo7fAX2mieRMcRNKpwc.roa (hash: 6k0SbOKQgeP3398DXBEapDI32YYnnGFAuSFvT82tyQ4=)
                          42: kJ4OAD2Svd5bJYqmvYEji53-_z4.roa (hash: t8SioCeXtK9DLdCYfNYnzqNqAYLRXhIt2Q9QBJ+7cUw=)
                          43: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: sN5aNOT5NimEwnJR0ALUSAREEG8PaR/+P+rKB/gehCc=)
                          44: moI9DeBg2QtdD9wbIRCAeujYiCY.roa (hash: xrfXx1gOpxEvA3MW11AUhiF0Qid/L5JA+RuF8pfxLv0=)
                          45: n8R8_YX468DSIuduC6xTqMBQXGs.roa (hash: XkUUH+o4YqvomPSscXttz3rMyHXiogy/8geOkaXdoo8=)
                          46: nTN-DgO5VpUeaPeUymFNpHLdFLQ.roa (hash: M2JpoqgSEwe8aT8p0RazfqJDidhqU12O5Avd9SXsRGE=)
                          47: usONDL8T4fgTBytzqulEpYviayY.roa (hash: Azu+8j0Xu9e6mdLb/nqd9cTH4O1l40KtbUavU6T1tq8=)
                          48: wLR8jW1mcZUvoZV3c0mZMReuKfk.roa (hash: Wo6japZLDr5ZqcodvcMsjsWlXak2QkIZTZ5ptwie8U8=)
                          49: y82g7JzHf3nPY8Heep_XW0P0lPo.roa (hash: 915sGd5DFWPNaKnLsIWJyntUtOaj02nTQpkjEjgoQlc=)
                          50: yLRXDXQYTegT2fvY_9U1e6QFEBU.roa (hash: wd5oKV1ZxNoQJUmhO1JfEjb0Ksgu3a+qs915waW9pSo=)
                          51: yR_bh3rW7Mn6osSNa3vvQx3HDAE.roa (hash: 7zlFeBPjOHrJlX9F1ZZ+5OEyym7/ChhtkPpU0H9up6Q=)
                          52: zCwAAoz5xoPjepAyOAHXKl3uKvY.roa (hash: HNUMDTcYRwuepAWngdJO3EHzEx35g02c0Bdz/koyqp8=)
                          53: zoh-NmzuB-8joUrG-CrXbn87KUc.roa (hash: /HYLytf7EZaD8R3KHEOrIdU84tOnHzF9dFbeKjpHpLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:36:26:51:36:f3:93:1d:5d:bf:e4:65:6a:87:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Sep 23 03:00:34 2026 GMT
            Not After : Sep 24 03:00:34 2026 GMT
        Subject: CN=267c1956d8538b714d007938f15b799fcaf0871b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:ac:95:9e:a7:0a:dc:e8:24:68:1a:6c:72:
                    6b:16:02:51:24:83:4c:f0:aa:f9:06:6c:1f:19:f0:
                    f2:2f:c2:75:96:52:1a:05:06:1e:7f:13:91:dd:ce:
                    7d:10:63:6e:e6:72:82:cd:5a:05:98:fa:b3:81:16:
                    b6:52:16:cc:cb:99:29:37:64:02:24:0f:51:1c:9f:
                    74:29:51:4b:37:41:ee:fb:ee:ee:4a:20:ed:59:90:
                    a0:f6:d1:37:55:29:33:9a:3a:91:01:f5:5a:7f:a2:
                    dd:05:f5:02:3c:2c:8b:49:62:cc:67:c9:86:15:a1:
                    0c:03:44:1b:b4:8c:e0:6b:3e:39:5d:f0:6c:f5:72:
                    1b:02:2b:27:f4:3e:43:39:fd:4b:3b:e6:22:0b:f9:
                    4b:14:da:ce:06:4c:56:5d:c5:ef:47:9a:d8:51:50:
                    03:56:9d:b4:1c:01:16:15:41:d8:2b:f1:5f:d6:13:
                    ea:c1:63:57:3c:15:05:29:5b:c0:f0:ca:75:e1:57:
                    05:12:8d:0b:7f:3e:38:c0:dc:01:a6:7b:70:25:2b:
                    d9:7b:93:0d:27:a3:0e:1b:ca:3b:18:9b:c3:47:c6:
                    77:9b:7e:d7:95:c7:cd:a4:71:21:c5:9f:d3:e7:90:
                    1c:af:68:28:ae:0c:aa:1c:30:41:fa:7a:b1:35:94:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:19:56:D8:53:8B:71:4D:00:79:38:F1:5B:79:9F:CA:F0:87:1B
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:c0:8c:7b:ad:47:13:94:0d:f5:2c:65:bb:37:f8:c8:62:
         3d:c0:b2:7e:46:ea:88:f6:d8:69:0d:a6:7d:bf:63:70:82:25:
         c7:94:d2:7f:61:77:b9:41:9e:8f:52:b2:21:bc:49:4f:fc:a7:
         35:e5:43:83:a5:ef:77:e8:fd:7e:c6:52:6d:e0:a4:34:70:e6:
         33:4b:bb:57:dc:cf:e8:32:34:10:92:8b:9b:26:c0:5d:9c:25:
         de:63:7b:a7:fa:4a:b0:f4:4c:78:8e:22:ed:24:40:16:d9:8e:
         9b:4c:b5:51:29:36:1c:33:26:08:14:74:41:42:d5:cb:ae:dc:
         2f:b8:b3:54:90:ed:90:3d:16:33:42:95:27:96:45:82:8d:01:
         11:72:f6:ac:bc:31:4e:5a:fb:65:4c:23:b7:3d:2b:16:31:1d:
         40:5a:3f:f0:68:42:0c:15:64:93:d7:f3:97:9a:9d:5b:05:d5:
         66:64:9b:a1:53:b3:ab:24:5c:c1:e4:e1:54:e5:59:ed:40:b7:
         f6:28:ff:e8:af:ed:0c:49:4d:80:a9:7d:c7:54:83:b9:fd:e5:
         bb:ff:53:87:81:89:bd:da:ec:ec:7b:12:c3:80:f5:18:65:b2:
         05:19:79:3e:0a:94:92:da:5f:da:bf:bc:fe:29:f7:7f:47:99:
         35:0c:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:26:47 2026 by rpki-client