Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
File:                     dWEnxs1ONdmPCkujYs4nMWSXGUI.mft (raw, json)
Hash identifier:          q3wokDOB6jSA03VbExJbjcpk5t1I7uOcNsoxHl7rXYA=
Subject key identifier:   45:1F:FF:37:49:F3:E5:99:76:67:E6:36:9A:4C:E1:D3:7E:52:EE:E9
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Certificate issuer:       /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial:       01A0D57016B6707DD40FFDC0619B99B7E06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
Manifest number:          E8
Signing time:             Thu 24 Sep 2026 22:01:27 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:27 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:27 +0000
Files and hashes:         1: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (hash: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=)
                          2: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (hash: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=)
                          3: EIkyoQiaHQwFX0yl3QCnz70zobQ.roa (hash: TreOi4k2EXby9E21239vBZMbdO6JXQp6FeGHzvuMLWY=)
                          4: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (hash: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=)
                          5: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (hash: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=)
                          6: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (hash: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=)
                          7: JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa (hash: 60TmXCWov36c+x54dXI2m7Kjji7w3A2ev0Z1f/72VRg=)
                          8: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (hash: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=)
                          9: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (hash: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=)
                          10: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (hash: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=)
                          11: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (hash: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=)
                          12: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (hash: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=)
                          13: dWEnxs1ONdmPCkujYs4nMWSXGUI.crl (hash: KkzNs7rv66S+iZILw/MeHpYqEyBjEX06VHCyhNQMxYk=)
                          14: f3cr88yivxk7Bgm731ewrTZYRmE.roa (hash: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=)
                          15: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (hash: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=)
                          16: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (hash: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=)
                          17: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (hash: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=)
                          18: itsbDKOcLvYTL1wL-BLv0v4776c.roa (hash: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=)
                          19: ktAcfwaispPfbZlu2PcWbivGiDc.roa (hash: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=)
                          20: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (hash: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=)
                          21: nwLLLJnWeUevVC1axaBKhwaHn44.roa (hash: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=)
                          22: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (hash: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=)
                          23: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (hash: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=)
                          24: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (hash: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=)
                          25: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (hash: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=)
                          26: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (hash: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=)
                          27: wgx1sqQMaS-I2L2y6gRiBobGYlg.roa (hash: 7eLb6fN+zf4qJF/TPfiQ9qgt4nim0I4itE886o8X68g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:16:b6:70:7d:d4:0f:fd:c0:61:9b:99:b7:e0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
        Validity
            Not Before: Sep 24 22:01:27 2026 GMT
            Not After : Sep 25 22:01:27 2026 GMT
        Subject: CN=451fff3749f3e5997667e6369a4ce1d37e52eee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:9e:32:4b:ef:a2:39:d7:f2:e6:9e:a9:2a:
                    00:1c:ac:5e:d3:6f:c3:61:f5:11:51:52:ea:68:16:
                    70:df:df:86:49:63:cc:37:c2:ae:b7:a5:27:b6:6d:
                    09:98:d3:97:0d:72:66:a6:07:0c:9a:a3:21:e2:dd:
                    ee:6e:13:37:d2:4d:82:2c:9b:9e:01:a1:3a:19:93:
                    07:a9:5a:46:2d:87:13:06:53:b6:84:9e:08:65:e3:
                    37:a3:54:0f:dd:59:12:ee:be:31:11:8f:7f:c3:60:
                    74:92:e0:4d:50:43:2f:f7:85:e6:31:5b:0a:62:24:
                    4e:e5:24:8a:4b:b6:88:d5:b0:df:be:2f:da:60:33:
                    d3:31:d3:ef:96:93:83:08:49:d9:e6:f4:08:22:04:
                    3c:30:16:1b:cd:4b:dd:de:f2:d7:04:a4:ac:aa:c6:
                    b9:17:e4:d4:ca:87:d4:84:f2:8b:7d:76:e4:a3:94:
                    a7:fd:86:bf:7a:b0:04:a7:d3:d8:6c:69:99:1f:39:
                    07:ec:af:f5:56:60:6b:7e:77:5c:cc:ef:65:d4:b9:
                    2d:ac:e0:3c:6e:01:99:b8:d9:23:15:7f:7a:b8:10:
                    26:56:9c:2d:a1:8a:d4:cc:56:1e:41:80:3f:da:7e:
                    69:4a:6c:ae:f0:b1:69:a1:ac:f4:27:83:a4:dd:1d:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1F:FF:37:49:F3:E5:99:76:67:E6:36:9A:4C:E1:D3:7E:52:EE:E9
            X509v3 Authority Key Identifier:
                keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b2:04:e7:d1:7d:55:e6:22:2e:17:0c:d5:83:53:97:8d:91:
         79:9c:a4:b8:9a:eb:c9:bd:ba:89:46:6e:46:e4:db:37:28:e2:
         e7:1f:92:aa:c3:7b:69:49:4b:67:7d:d2:51:8a:7d:d0:e0:7d:
         75:fd:7b:59:5e:3e:74:26:7b:ca:93:9e:ec:a0:da:5d:b3:8e:
         c2:85:6b:d1:eb:41:ef:e7:6d:7f:75:08:7f:e2:6b:33:8a:0c:
         10:48:8d:82:bb:9e:e8:12:cc:17:af:5e:96:95:ef:42:ec:f4:
         af:64:68:bc:f8:f6:61:29:56:24:00:2e:3d:5b:c4:75:24:c0:
         22:86:e9:f0:68:39:3f:d4:46:43:d5:a3:2e:11:11:80:f2:6b:
         62:e8:9b:ca:e7:f6:da:a7:55:18:74:7f:e6:2c:34:d5:23:ec:
         89:50:9c:ee:18:12:62:5f:d4:2f:02:5a:84:c7:fa:6c:1d:bc:
         7a:e7:3f:31:a1:fc:15:12:c7:59:fc:f9:bb:15:2a:ab:54:6d:
         32:6a:40:dc:d8:9a:09:e4:df:e0:56:9b:72:88:2d:ff:14:b9:
         5d:a6:a5:60:ca:f9:14:30:35:0f:35:58:3d:56:3c:f0:fe:78:
         13:59:1a:c3:e1:12:46:25:5c:6a:58:08:27:c5:19:9c:06:47:
         ad:90:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:20:47 2026 by rpki-client