Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          rI7V2xgXThV25vIP1p79hXaV+eHLmB5gQPjxN1AIL8Y=
Subject key identifier:   5F:41:DF:79:BD:C9:82:39:D0:6B:6B:70:4C:3E:0E:AF:F9:EA:7B:2C
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       01A0D2A62CD1814A7DE343AFD44CF9D0624E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          04C9
Signing time:             Thu 24 Sep 2026 09:01:40 +0000
Manifest this update:     Thu 24 Sep 2026 09:01:40 +0000
Manifest next update:     Fri 25 Sep 2026 09:01:40 +0000
Files and hashes:         1: 0MThwc4dXYxn4L8jsKgRgHG69GU.roa (hash: MKgBpJ/UU/ZtKigtHysf59U625q1r0cBUzNiuUSy1qM=)
                          2: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
                          3: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
                          4: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
                          5: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=)
                          6: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
                          7: S5Oy7oscdtTcE5PBdD76sxyxh8g.roa (hash: wjsYCyEbFrcGXZDDLcR3Z02bldg/o6w1jakXsiZwWwo=)
                          8: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
                          9: aPo9aKd2phX6IWiBvTkLJP8xZtM.roa (hash: ncpZr6Zu5WNnsN4SU+6F0b3Jkur0FLP5e1Yt6yA8ajA=)
                          10: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
                          11: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
                          12: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (hash: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=)
                          13: jPK12EYF_F8N9qChJCYpeTggBjM.roa (hash: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=)
                          14: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
                          15: ot2MZTCpP9nZaT3V6EzfFvrzrkw.roa (hash: TYtFpB5ZnIdcgyHQu349+PWyQhvze7WRX2PQON2Vge0=)
                          16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: W9vzu4i8mNtMtRbZ76yai4vvo8dgArgEHa5OFjRaPQ8=)
                          17: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
                          18: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
                          19: x8XmJx41-rS3oQopw9axsmo7U5o.roa (hash: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=)
                          20: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (hash: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a6:2c:d1:81:4a:7d:e3:43:af:d4:4c:f9:d0:62:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Sep 24 09:01:40 2026 GMT
            Not After : Sep 25 09:01:40 2026 GMT
        Subject: CN=5f41df79bdc98239d06b6b704c3e0eaff9ea7b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:c7:d9:01:b6:e3:15:95:88:a5:2e:e8:1a:
                    29:2b:5d:b2:fc:4c:21:db:ee:0e:02:8c:95:8b:72:
                    85:e5:36:06:c8:92:4a:df:ef:d4:c2:41:8a:dd:ab:
                    63:61:f7:07:f3:29:e5:aa:a8:fd:96:a1:40:1d:eb:
                    27:70:28:1f:99:99:d9:ab:c1:a4:d5:95:cc:d7:c7:
                    31:cb:e2:a5:99:e8:32:67:08:ce:fc:92:01:41:95:
                    04:f5:dd:7f:42:9d:0f:f2:5c:f2:6d:d1:5a:6c:6e:
                    8d:47:f6:20:36:2a:79:73:54:0b:78:9a:71:f9:82:
                    fa:cd:6f:d9:cf:98:e6:e9:fb:66:e0:7e:12:8b:39:
                    ba:e3:f0:e5:6c:cb:e9:d0:bd:7b:5e:32:51:3e:fd:
                    18:7d:9e:c2:8e:eb:96:8c:4a:ac:e9:66:6e:02:67:
                    27:31:58:57:a5:1c:72:22:44:e1:3d:d3:68:8f:ec:
                    9f:ce:9b:49:4f:92:3c:7b:46:53:f0:4e:13:1d:4a:
                    c7:a8:8c:f8:e4:da:3f:78:59:fd:7d:30:a5:48:30:
                    ae:99:61:16:94:34:73:13:d0:b1:08:c2:da:22:db:
                    16:86:4a:61:e3:57:e0:33:df:fe:28:96:e1:28:48:
                    80:23:68:d0:32:2b:62:e8:8c:12:f4:42:f5:5d:73:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:41:DF:79:BD:C9:82:39:D0:6B:6B:70:4C:3E:0E:AF:F9:EA:7B:2C
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:94:dd:72:44:5f:a4:3c:de:fc:4d:f5:f6:6a:70:95:1b:5b:
         f8:4a:5d:55:2d:f2:8e:e5:43:ce:39:c1:c8:88:35:16:f5:bc:
         45:9a:b9:d8:32:09:e2:88:e9:2f:57:1e:ed:4e:7d:40:45:72:
         b8:70:a9:54:58:a4:c8:16:a3:54:a5:bb:f8:57:ff:0d:00:fa:
         ad:a5:1e:43:31:76:28:5b:eb:f6:60:ae:a1:19:6e:ff:cb:e7:
         c8:0d:df:b1:68:6c:ff:12:ca:c9:ff:a1:20:a5:f1:70:cd:be:
         4f:a4:c8:c5:a5:d4:c8:e6:11:50:59:8e:cb:09:0a:01:38:4f:
         c7:26:31:c5:72:df:b8:61:2b:e3:49:b0:61:8d:c7:af:6c:32:
         1e:aa:6a:67:8d:16:63:a4:41:c2:73:da:e9:22:b7:19:22:57:
         81:fb:20:60:70:8f:3a:ad:e9:5c:6b:9e:df:ee:8f:47:c6:55:
         5c:4c:d0:cd:e1:63:83:58:1a:3a:14:5b:26:ea:c6:2a:a0:77:
         b0:c1:da:a1:41:e3:01:13:e4:35:cb:95:ec:35:2e:2f:3a:f2:
         fd:d8:ae:be:5c:06:17:d6:7a:f5:7f:61:5b:af:64:ae:38:45:
         57:4a:98:16:34:93:77:eb:9f:e7:ed:ff:8f:4f:e6:30:9d:74:
         30:d2:2a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpizRgUp940Ov1Ez50GJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjYwOTI0MDkwMTQwWhcNMjYwOTI1MDkwMTQwWjAzMTEwLwYDVQQD
Eyg1ZjQxZGY3OWJkYzk4MjM5ZDA2YjZiNzA0YzNlMGVhZmY5ZWE3YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5bH2QG24xWViKUu6BopK12y/Ewh
2+4OAoyVi3KF5TYGyJJK3+/UwkGK3atjYfcH8ynlqqj9lqFAHesncCgfmZnZq8Gk
1ZXM18cxy+KlmegyZwjO/JIBQZUE9d1/Qp0P8lzybdFabG6NR/YgNip5c1QLeJpx
+YL6zW/Zz5jm6ftm4H4Sizm64/DlbMvp0L17XjJRPv0YfZ7CjuuWjEqs6WZuAmcn
MVhXpRxyIkThPdNoj+yfzptJT5I8e0ZT8E4THUrHqIz45No/eFn9fTClSDCumWEW
lDRzE9CxCMLaItsWhkph41fgM9/+KJbhKEiAI2jQMiti6IwS9EL1XXNOHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9B33m9yYI50GtrcEw+Dq/56nssMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJTdckRf
pDze/E319mpwlRtb+EpdVS3yjuVDzjnByIg1FvW8RZq52DIJ4ojpL1ce7U59QEVy
uHCpVFikyBajVKW7+Ff/DQD6raUeQzF2KFvr9mCuoRlu/8vnyA3fsWhs/xLKyf+h
IKXxcM2+T6TIxaXUyOYRUFmOywkKAThPxyYxxXLfuGEr40mwYY3Hr2wyHqpqZ40W
Y6RBwnPa6SK3GSJXgfsgYHCPOq3pXGue3+6PR8ZVXEzQzeFjg1gaOhRbJurGKqB3
sMHaoUHjARPkNcuV7DUuLzry/diuvlwGF9Z69X9hW69krjhFV0qYFjSTd+uf5+3/
j0/mMJ10MNIqRQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:25:08 2026 by rpki-client