Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          W0/4aeOw4a9JZxwQW+AtpMgQmDaX88AJhXWmImuvRPM=
Subject key identifier:   77:54:F7:B3:D4:97:AC:C0:3B:51:6C:AA:F2:F0:D7:B9:64:12:5C:2E
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01A1DC82F692BFD903EECDF6054896A321A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          07CB
Signing time:             Sun 15 Nov 2026 00:02:12 +0000
Manifest this update:     Sun 15 Nov 2026 00:02:12 +0000
Manifest next update:     Mon 16 Nov 2026 00:02:12 +0000
Files and hashes:         1: 0YWrZMHXzL_fpQu6UEXfvsOhaUo.roa (hash: D5E1izzcKMP3zRohFMUe7WsnHDjW1oHiWCyMD22hKXE=)
                          2: 3SHL_6Ls-0VRRa-Dfz9ByfuLpxg.roa (hash: 83IwydobDC2Q+h5hToO++Xp+ZTFRKP/4oEVfUWlboGY=)
                          3: 5Q-0Ds-Zu0tGGR5la9VbTln4GyI.roa (hash: +kqgyFT0ZTr5AvGL2NOataqhR3pzitz5p8nxs4ELbTE=)
                          4: 6YdauMxwtaJ2XapsEhB4s_XIetk.roa (hash: OrJfyq6brZkbyt8ajKBE0Bg6XcJ1it9g0va1TyaaubM=)
                          5: 6nsjDhn-NUS0eS2znotmTLFb8K4.roa (hash: brgSOLqNkmWevGXCCydMHGGRZ6gS0cHDgCsdzaFEdLo=)
                          6: 6yfl5wriHlRWRW3gXIPTed6SZBw.roa (hash: qw+/ZNQKL/+QGpUMyzcUV5EsmEJeLyy2giX16sQEEV4=)
                          7: 7PfHmGf-ptLWTY-0uujQDxN_ctU.roa (hash: EYVd45QCLI1r9t+cnOTNwN8m8g9VMZQQuSIZh8MozB4=)
                          8: 9CnCVzE87TxsqaHd706gAAXIhI4.roa (hash: ru6iz9pw32EBdHhcAY6g9mpoUBN/v0CkFPeAKeBdDZg=)
                          9: 9PqxwQLy21-4bHijZ43UTh9ei4s.roa (hash: 023sRck7i4ErfynWxL+Abie1/pQDh31WsxstU1jtkXw=)
                          10: A__uftTJfUQScTKvf0ZCZUS0aAc.roa (hash: InE5+Cavsi4Z8kpY1c5G+Ux8kKsvzWwxBaCxmbKO2Io=)
                          11: AkTKpD9hNqiV_5_c6-DMcTgYskc.roa (hash: G2QKxBnm98oc52v99fqhnVJF48h7SOnkbCMrYYDKSd8=)
                          12: BpOGNiziOqtvisu2hjZbIQ2szMw.roa (hash: TMj0iwbims2JDdIrfbkIhFqm/K34TsO7K58fGYbJ5NU=)
                          13: CHH3xJ1lzUgyXtbZUmGWR88D-U8.roa (hash: 2I73e56GrDAgMRYeThyxeJT4zvfxFJwpu15CsggS6j8=)
                          14: CRHe3h1Kyh2V0i1-Qvn963xg5Yo.roa (hash: INOs1vIjCSZZ+eLmEYRB0kpzd50ACo3jg4Y0BZLIVKM=)
                          15: E-vQ4VBE5BmIEK3Pymf5Bl74aPQ.roa (hash: e/APBHu0Z1p1I3GI0nbRZhfiEz21+ooOMmJwnBq1qrM=)
                          16: FUd3_uiRDwfAHqvhswYvKQHbfb4.roa (hash: JisBSYC59fG7+pF5YDGsAkRI8Xm3kc5i0eweb5iAKgk=)
                          17: Fa_E9m89fUIJZtCefkFZ2jvyFO8.roa (hash: ZAwAoX5HJyrrbaR8aOzdSIPtrO8DX2Vvq7HjudQe7SU=)
                          18: Fllda1GGof6P303TUTHwPCCAtQQ.roa (hash: u5lb6y8q8DLuHPCyQSXlgICKuvOtLLt+dBcu770N0Q4=)
                          19: Fnh5F-6FCHHpG2PkLJ1NSuyaB1g.roa (hash: 9SkWU/SbcqBbTrbrirb2GooVNIz3rCagopFRdzpv2So=)
                          20: FuqNDQgI91AJBcd5SMZ6c7BB4LU.roa (hash: KDecELTj0j5nisrOm67sns0HrjibSju/F9ZZZjQyslc=)
                          21: HUi_CnIsyxzhLZq3XzoZYpxB_tw.roa (hash: OtThXMNgMvyVjRFTbhu57b5YACvQDijOLonyh64tQfc=)
                          22: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (hash: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M=)
                          23: HZf3u1B5WzgbttSL9CZgycfAnsY.roa (hash: VjUsOPUdHNh8ArWZ6hxQ5ZfCh+EQsXzsGLH5OJsCmag=)
                          24: HkCnDFbZcJVC46vN8bHY96-TPbk.roa (hash: 85Cl1uCm39EflxMKXO9f+deaBgoO5WQFlrI+5bXo6V4=)
                          25: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (hash: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ=)
                          26: IjxHTZCreyDc6csZL7ds5BEDMlI.roa (hash: 8ICIGPUgNLulDkRenOqCLyRX2X0VOBveyPRhWy0xOaI=)
                          27: J84D708JiRdF1Cj0OhAXFyT-dDw.roa (hash: h5yfNRw8lKCbHsVms6lwRL8YMmiaidYr9RU7tr43vl0=)
                          28: JbmGc_BBMBohr4NJWag6RLuozg8.roa (hash: m/d7ngwPzR0ECZpo0GE+MinswWlD/YrSUwrw8AE0jhI=)
                          29: Nd9KOFXDH4nonVF3CLoZj0Hyts8.roa (hash: cGMmKZgE701PzM2RG0kAHzIsPSvLqz8JKOXln6VOjQk=)
                          30: Ql9OHsZY3se1g1vvUH1wbW5S1qA.roa (hash: BX5RRsqmh87FsNyQRiTV5w4eJ1PzrfrvFTFXvcfPqPo=)
                          31: QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa (hash: xbQrT4SCRDGICNyiKtX8aOdkuj5ohxB0sU4mS/MuyaM=)
                          32: UP83zuukJze0_50QYhIG7JfU38o.roa (hash: XaR4mpJBzQ6DvPRSlcsaDffJQH5I05OKZ6/EXZfJuFg=)
                          33: UctFLwqM_4WOq9unapxPDQOIFss.roa (hash: jsWvt8vWSgSLT5hexwAAInmmfxYwbW5bGxe4i8DxWyo=)
                          34: Un_3OMScs2A-n1B7QSdez87iw_E.roa (hash: Lq4xQb+JOCTaHhv89CfMN+jQ5wmo6XsfP2BFflK5jos=)
                          35: UovVuidSJ6VyOXzaImlvnvDzNZo.roa (hash: FrrmtyyFqx6LliZFwik7dAsD8K6N5OUt4H0X2CLgP74=)
                          36: X5uUQdt18p324LUKAUAju_EtV5M.roa (hash: Uh+nx1ykCeq4V/7jtccqXb+9XUejz93sBrc5WkWEX+Q=)
                          37: X8sdbycHT12fl8v3f4JjpsnZTG0.roa (hash: 35gVkSTJeST2VThCOqua4110t4pi9FQFLTgTaz5Gffk=)
                          38: Xmiqh-UsEHiVdSJ_2i0z_4E8eqQ.roa (hash: 54c66aAcUVVCP4f23YlMyR3DaS+s66NmvM36bHnbqjU=)
                          39: XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa (hash: 5KFbFF9jJpeEzZqgnXb4J0jAscVydeWpilyaP+Yf3mo=)
                          40: aHikDoY7PTlE63g8681nazruKQI.roa (hash: ze8lLrQN/ERMv9fQP68OAX0YeYGfw8cezJvf2Z6IrAU=)
                          41: algNXeBnWxlc8W_yfgEXDKVh734.roa (hash: +8v/ZEG/pBK5GYXIEpGkYZzjhYA72COaS0gR5SOoPO0=)
                          42: bUwb0HFoYhhloBHJ5QqaCoAuNz4.roa (hash: RimX+kt78Hd9PnPspbMok+1b8ocAGT03P+Hnm7coWy0=)
                          43: cuZj8eYZctJvbxdMgAXJDVanMaQ.roa (hash: RPSnYZMixt6Uuo3FTDTuvO1zf/RtU59/JgKhacEXRt4=)
                          44: fMSedJSqv9C6sYPgIeTBDq0FJhE.roa (hash: zAkJp90Xulr6wHS8heu3SwA9t6lCNg9Bdvap7WsW6UQ=)
                          45: hrzUT60RppU12sijbO5nUnIsLDE.roa (hash: +JirVR+wIPZ5lVwuA3SZmdQkTSTYsXEklEIVJFUFJXU=)
                          46: j5SBtIgf3hGgr_xFO_3iGerGD_w.roa (hash: scuPXLQss30AXdPegq+K7XuxE2iNL5UuDVxKBWQgtHw=)
                          47: jJWl15wqYo7fAX2mieRMcRNKpwc.roa (hash: 6k0SbOKQgeP3398DXBEapDI32YYnnGFAuSFvT82tyQ4=)
                          48: kJ4OAD2Svd5bJYqmvYEji53-_z4.roa (hash: t8SioCeXtK9DLdCYfNYnzqNqAYLRXhIt2Q9QBJ+7cUw=)
                          49: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: k9VocOdnN/gD904NYhofd6Ma2dyZJRg5XGwq8hBLfRg=)
                          50: moI9DeBg2QtdD9wbIRCAeujYiCY.roa (hash: xrfXx1gOpxEvA3MW11AUhiF0Qid/L5JA+RuF8pfxLv0=)
                          51: nTN-DgO5VpUeaPeUymFNpHLdFLQ.roa (hash: M2JpoqgSEwe8aT8p0RazfqJDidhqU12O5Avd9SXsRGE=)
                          52: tyIYmMk_gjnIPbezGVyRNv-H50M.roa (hash: +uH76gT0H9RV3kFXJJiliC2TaV5ae1PZfbZrLsi6EW4=)
                          53: usONDL8T4fgTBytzqulEpYviayY.roa (hash: Azu+8j0Xu9e6mdLb/nqd9cTH4O1l40KtbUavU6T1tq8=)
                          54: vmFt-RmqVoh_m-q8wh6IIIdBxb8.roa (hash: FltAqRb87ts5v2htuSfnYAhowaqVKKWGQQ7zYPxwmUQ=)
                          55: y82g7JzHf3nPY8Heep_XW0P0lPo.roa (hash: 915sGd5DFWPNaKnLsIWJyntUtOaj02nTQpkjEjgoQlc=)
                          56: y8_nvxCR-Qd7EcSmQHcXdPSJCFs.roa (hash: H747siaU4a7zYAxsCbJPNhBXSGCvgDw/VQ9bDYpmQXw=)
                          57: yR_bh3rW7Mn6osSNa3vvQx3HDAE.roa (hash: 7zlFeBPjOHrJlX9F1ZZ+5OEyym7/ChhtkPpU0H9up6Q=)
                          58: zCwAAoz5xoPjepAyOAHXKl3uKvY.roa (hash: HNUMDTcYRwuepAWngdJO3EHzEx35g02c0Bdz/koyqp8=)
                          59: zKKiQ3HKEoFll3txZFlUFQBK_WI.roa (hash: x7HGK7oEhcCYR24vWMnFWIl0shJSf4vIs5noTdJFRjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 00:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:82:f6:92:bf:d9:03:ee:cd:f6:05:48:96:a3:21:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Nov 15 00:02:12 2026 GMT
            Not After : Nov 16 00:02:12 2026 GMT
        Subject: CN=7754f7b3d497acc03b516caaf2f0d7b964125c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:46:f4:fa:b5:7c:79:00:b7:d2:a1:bd:aa:
                    8f:65:fb:98:db:e9:b0:c2:77:d8:3d:6e:98:27:8b:
                    86:16:c4:50:33:5a:a8:82:7c:a4:12:a4:54:8f:5a:
                    6c:38:a0:a7:93:ab:12:45:a1:73:e2:41:21:d5:0f:
                    5c:90:1a:34:a8:28:2a:8b:d9:3a:d1:32:8c:3f:22:
                    1f:8a:77:b0:96:f6:ae:af:17:98:fa:db:7e:e1:a8:
                    63:8e:ad:bc:59:47:8e:3e:96:25:c3:b8:6e:03:68:
                    9c:d8:f4:3b:06:4a:a5:92:6c:24:de:98:0f:49:4a:
                    fc:c8:eb:a1:a6:41:73:4e:eb:c9:55:44:66:45:bf:
                    b1:c9:5c:98:22:72:3c:9d:bd:30:20:c2:d6:46:22:
                    8f:fd:60:d2:b9:63:9b:c9:50:9a:61:84:f2:23:13:
                    0e:60:00:4a:e1:57:2e:fe:dd:de:b2:08:d8:e1:3c:
                    08:cf:e7:8d:d5:35:1c:d2:67:db:9e:61:25:b8:af:
                    25:c9:ef:12:44:d9:87:f5:31:39:69:25:f6:4f:c0:
                    5c:62:25:26:6d:05:3f:83:2b:de:cf:ad:ca:60:c6:
                    93:58:45:42:a6:77:f2:80:0e:0d:1d:a5:c9:e1:50:
                    3f:2e:7e:d1:cc:c9:72:66:dc:80:27:7f:25:37:87:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:54:F7:B3:D4:97:AC:C0:3B:51:6C:AA:F2:F0:D7:B9:64:12:5C:2E
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:ec:b3:c9:9d:35:a0:18:a4:51:ca:8f:e3:ff:87:04:53:
         f1:79:5a:60:b4:08:42:61:9f:36:ae:86:3f:d4:6e:d3:64:71:
         ab:07:5e:53:e3:a7:af:f9:f7:d0:f2:a1:d9:a7:e9:4e:2c:29:
         b4:11:60:23:d9:36:48:19:8f:c2:10:ab:d3:14:82:c6:c3:9c:
         d1:4c:8f:48:13:7e:5d:74:ba:ec:f0:eb:a0:a3:65:b7:5f:6c:
         f6:9d:15:d3:0a:3c:77:f9:3a:96:85:48:70:85:1f:ba:ae:bd:
         6c:52:d7:fc:61:70:6d:f6:75:a5:dd:48:4b:e8:4d:d5:03:1d:
         94:46:04:b7:52:66:e9:66:68:93:67:0f:67:78:8a:37:57:19:
         7b:9c:a4:8f:0e:0c:43:39:50:96:b7:2a:9c:48:05:8f:f6:68:
         c6:7d:1b:b1:59:22:d2:74:b7:7d:b7:95:f3:46:34:81:45:2b:
         0e:15:e9:7f:da:9d:57:cd:ff:e0:53:85:ce:40:f6:fa:52:f2:
         13:87:59:17:07:1c:ba:cc:b0:7f:c8:0d:6d:b1:27:7f:71:df:
         2a:1a:db:62:bb:47:c8:24:bf:c6:f4:e1:a9:9a:79:64:a3:d0:
         b8:27:74:b6:f5:18:7c:e7:05:5f:48:7c:7a:ee:ba:2f:72:0a:
         5c:4f:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:17 2026 by rpki-client