Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          osvR8jtUWHDG3AMfbn5cfsBKBNkr2LPDmlwkNv4kgQk=
Subject key identifier:   F1:B6:79:4E:20:6E:FD:3E:A7:42:D2:5B:39:D5:E1:D5:09:CB:5C:BD
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       01A0CD47FDFA2C46DCA610E457EFE21B5CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0AFB
Signing time:             Wed 23 Sep 2026 08:00:42 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:42 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:42 +0000
Files and hashes:         1: 1-wxgSYN6azWWUrCaPDW7GpWeKi0.roa (hash: DPLds8jCOdoU+9WAoO0XaZ0zlPjKwpJ3akJ+Z80uiZg=)
                          2: Csd6m9ejO1JJZR6uqcgzHjzMB0s.roa (hash: 4OoKitHUM2Cxcji9pDEeODDzqXWMR+bJbVbOObsHghk=)
                          3: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=)
                          4: En3Wic9RJujoNZz1RHxUA6UVUfU.roa (hash: O63V4JVax87JCF0awcaxtenxRZPOPdz5hB0JKaX0syY=)
                          5: FAAYpnv0apJm1WMjsv3PVyWYHW8.roa (hash: cRkV53u9HMf3IlgE7VmUP+PB8n6IJtBSTpmDwitbqpg=)
                          6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: Rr6E1nb29F/S58MIwFqDml+ljqFgbSW6Fj+m+ze5wPI=)
                          7: KacNY2NRCZHAdOB1lxgrSlTUZlM.roa (hash: qllOkGGUcuSdb7HoAuEKwUiZ9/GJv0Ub2eGz8KFRmtE=)
                          8: KnBTzsN71pvNUURw9MTkeAuiWEg.roa (hash: f3UjJWYdOCKN/sjw9LsoQPTsRyO9pJv7bf7OHVWD29I=)
                          9: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=)
                          10: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=)
                          11: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=)
                          12: bqQbHCxttVzgxNcTF0tbCdJVJgI.roa (hash: 1MVaNJ/MdqSqtNMpFBgMNrwtevfOonhxXKKdjTutsOE=)
                          13: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=)
                          14: hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa (hash: l0oUAYvx1+pRIjX6Aa7SZOYLA8siUWlxjSjZBHxavhM=)
                          15: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=)
                          16: sJruewuKaSeVsdcx7O5wYrcqNzE.roa (hash: lXlw+sCAYn9qkIUAMBhvTHNQ6pkSMrMsj6GywXXUL9k=)
                          17: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=)
                          18: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=)
                          19: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=)
                          20: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:fd:fa:2c:46:dc:a6:10:e4:57:ef:e2:1b:5c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Sep 23 08:00:42 2026 GMT
            Not After : Sep 24 08:00:42 2026 GMT
        Subject: CN=f1b6794e206efd3ea742d25b39d5e1d509cb5cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:01:d1:2f:e6:cc:97:a3:ad:8a:1b:1d:8b:
                    7c:23:5e:ad:49:63:12:d4:2d:13:f4:b9:ad:13:85:
                    60:68:7d:6b:a3:44:f8:61:e1:69:49:54:27:30:88:
                    26:60:55:1b:c0:dc:c7:51:cb:0c:27:65:40:29:7c:
                    ec:4b:03:07:73:5f:21:55:c1:fe:9b:81:4b:15:8a:
                    33:5a:d5:c6:00:69:ea:ca:16:f7:04:57:e1:e5:4a:
                    20:21:d5:3c:a1:29:cf:5a:27:68:b1:5e:c8:23:11:
                    ce:13:de:2b:ae:39:bc:75:13:4c:46:3f:f0:c7:ee:
                    37:72:29:1b:63:45:3f:28:47:83:8e:48:3d:ca:ed:
                    e3:9b:7c:8b:9a:60:92:95:e8:d6:62:41:83:b7:bf:
                    53:57:8d:58:6e:85:d1:7d:9b:89:6f:94:51:3d:7a:
                    38:0b:dc:27:22:74:2f:2f:f4:38:c0:66:73:40:7d:
                    a2:63:5e:90:14:b4:71:5b:36:0c:b8:23:a7:a0:3f:
                    99:84:14:ba:d2:31:75:31:ca:eb:b7:fe:b0:bb:c5:
                    9c:74:61:e5:42:a8:5f:15:b0:17:50:8d:de:7b:ed:
                    37:fe:04:05:9f:d3:5c:fe:5c:da:ad:90:99:32:84:
                    43:ec:91:30:6d:c8:95:ed:13:4e:66:dc:2f:0b:60:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B6:79:4E:20:6E:FD:3E:A7:42:D2:5B:39:D5:E1:D5:09:CB:5C:BD
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:97:94:13:04:bf:69:e1:97:26:d5:9f:79:35:00:4c:e3:b4:
         33:92:44:fe:bf:9e:12:48:65:c1:93:8e:10:bc:10:bb:8e:0f:
         8c:43:ac:1b:24:04:6f:53:a4:0a:a1:f1:d2:a9:ff:4d:94:83:
         f9:db:39:57:e6:42:5e:d2:3b:da:9b:df:0c:76:dd:e1:c0:f9:
         5a:76:02:fb:52:c5:be:d8:8a:a8:c9:ff:83:71:48:3b:89:31:
         47:e9:b0:86:01:eb:c3:a3:c9:7c:c1:c2:8f:dc:ad:31:2e:4b:
         e1:7d:d5:0e:3a:03:b6:1e:8e:d3:13:13:d8:8c:6f:59:cb:ed:
         88:88:96:61:b3:a3:23:5b:71:05:9a:22:e3:fd:64:9b:4d:0d:
         4f:d7:ac:79:a5:91:87:62:8b:d9:ce:85:a4:66:5e:d1:c9:43:
         2d:a3:da:8d:d3:b8:c3:00:83:85:16:fe:81:78:62:ed:39:8d:
         0b:b2:b7:6e:c9:b8:a9:1a:f5:20:4d:e8:37:81:c7:02:b5:61:
         29:13:bf:7f:23:d9:20:da:ad:68:76:12:a7:f0:a1:f0:e8:51:
         f0:d0:a8:79:16:61:2d:6e:67:b3:86:1c:6c:20:ba:23:5b:01:
         e6:1f:f2:08:dd:02:77:9f:06:b2:94:16:88:f2:73:32:5e:89:
         8f:a4:f2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNR/36LEbcphDkV+/iG1ylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjYwOTIzMDgwMDQyWhcNMjYwOTI0MDgwMDQyWjAzMTEwLwYDVQQD
EyhmMWI2Nzk0ZTIwNmVmZDNlYTc0MmQyNWIzOWQ1ZTFkNTA5Y2I1Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wYB0S/mzJejrYobHYt8I16tSWMS
1C0T9LmtE4VgaH1ro0T4YeFpSVQnMIgmYFUbwNzHUcsMJ2VAKXzsSwMHc18hVcH+
m4FLFYozWtXGAGnqyhb3BFfh5UogIdU8oSnPWidosV7IIxHOE94rrjm8dRNMRj/w
x+43cikbY0U/KEeDjkg9yu3jm3yLmmCSlejWYkGDt79TV41YboXRfZuJb5RRPXo4
C9wnInQvL/Q4wGZzQH2iY16QFLRxWzYMuCOnoD+ZhBS60jF1Mcrrt/6wu8WcdGHl
QqhfFbAXUI3ee+03/gQFn9Nc/lzarZCZMoRD7JEwbciV7RNOZtwvC2Ci3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG2eU4gbv0+p0LSWznV4dUJy1y9MB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJeUEwS/
aeGXJtWfeTUATOO0M5JE/r+eEkhlwZOOELwQu44PjEOsGyQEb1OkCqHx0qn/TZSD
+ds5V+ZCXtI72pvfDHbd4cD5WnYC+1LFvtiKqMn/g3FIO4kxR+mwhgHrw6PJfMHC
j9ytMS5L4X3VDjoDth6O0xMT2IxvWcvtiIiWYbOjI1txBZoi4/1km00NT9eseaWR
h2KL2c6FpGZe0clDLaPajdO4wwCDhRb+gXhi7TmNC7K3bsm4qRr1IE3oN4HHArVh
KRO/fyPZINqtaHYSp/Ch8OhR8NCoeRZhLW5ns4YcbCC6I1sB5h/yCN0Cd58GspQW
iPJzMl6Jj6Tysg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:00:31 2026 by rpki-client