Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
File:                     ffEy3xPkvlPYJQyMSEICZO72wUw.mft (raw, json)
Hash identifier:          Aqvt2AtnsshkTwhhmyPip6bXz/jEDr9GoJgxff+uN+I=
Subject key identifier:   9F:92:FF:E1:F8:60:EA:AE:9E:BD:57:3E:F7:FF:47:50:10:8D:3F:BB
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       01A1035AEF6E9E66226DC388870AA736A4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
Manifest number:          1AB8
Signing time:             Sat 03 Oct 2026 20:00:53 +0000
Manifest this update:     Sat 03 Oct 2026 20:00:53 +0000
Manifest next update:     Sun 04 Oct 2026 20:00:53 +0000
Files and hashes:         1: 1-4comhwHdavycedG5af_NJHeVMI.roa (hash: 5qWlsLXDCrFmr9a26dr0gVGLlb4iZ7b+LmGljRk0f8M=)
                          2: 2BAj2yNVBB9Ev29x0JnI5pjY0DY.roa (hash: C7WqvAG4TV6woujjMJ/K/2cinKEEkZ4WkuUPwQJzEyE=)
                          3: 3R5oD25q8ASU9J1x-IPhjpfW5lU.roa (hash: sFq24exEIQ3gwJ1y1cbivjeqJul4IsZanZzpZo/9X2k=)
                          4: 5X2HMKIwoWjPQrJSOgXwCfR9WFQ.roa (hash: Lnef119KZpGhPNrqg8r/PadlU1mmGHZIiXMz5ZSsb6Y=)
                          5: 6hmaFV9jZHUcH1iQEHoAEka2t_A.roa (hash: UL9Iu2DQB97jVnXQQoV3u5Hmjd8xH9DJ3iagfVBUVSg=)
                          6: 8K6yEDV0GauQRpR6Sz-mkYqf9kA.roa (hash: YFRdhlSOv6gfDujKBW+Exh92T4B9OKrIe8impdCqMJI=)
                          7: 8iuwSKbcD40JlrWc-UFGLUuEj8g.roa (hash: 6fOJSxE+CIikpa4WVDqWmdZFK3k2eETcYaoppQLIdkI=)
                          8: 9byo0_23K-pPagHkBEh9rEJVYn4.roa (hash: QnNz0j7vOzWCez4Rl0/thDpiJUI/ItzPOoJw8bCwA4E=)
                          9: 9d7R4B921poYOUCch4EUtyiJ_Ag.roa (hash: QKpiWx2I5mpXI/7+RHEcqA/fsL2GLYe/E020xVaN1UM=)
                          10: 9mJ_jPfo-pyvEX3fuvZsQyvPapc.roa (hash: JlO2a5doMxY6Lc2f9Y9l2GvdDf+o4rfwJprnFnjxRH0=)
                          11: BO427x2c7jIqTdgpqBoUV4GBfMs.roa (hash: Z+LPI5HQTMc7FwlY1uBiG1UEgvyt8D5Gy5/1/idKBvQ=)
                          12: BQZ6Oso9XyIw-_fRReCon2Q2CO0.roa (hash: Vk7BTUVJlS3mqXlydk0orpTB0WzRZDycZ8OJYxRVsjw=)
                          13: ByeONhKPbtfcZIgmOWUkHqOuix4.roa (hash: ttWur3O9+40ydS2Ly4OWefpaqA3EaxZKhb2MJiO/Prk=)
                          14: CUo08eCGhsUGAERyMcyWLHgw0FY.roa (hash: OZrR5kxOfzyV1paUyeUHWcbrdMnl0Gse1l0uDH06X7I=)
                          15: Db8mCIGfJVU0oHlWlgmVI5YkWiM.roa (hash: UUMtDrWLZuUOVch14S+v8tau5+e/fVW5DmdRag7fXjU=)
                          16: EQqG5pO47lNfEEMJMQXnfFhHy0g.roa (hash: oqfH/2bzTNUQ0aWLtfdu9eQeVvBb2v0lxrHYYZEWqOM=)
                          17: GrG7vPu708RcvR9EyQrpPJIP9FA.roa (hash: wSkBFPUkGNeEscBpQyvJ2k6O4BBwKNzgZko0/pGwIN8=)
                          18: HtmUv1MImlT_Q2Ld2vBonJv4FQk.roa (hash: rdQWy4NfeGzGEtDfCEAH9I7qgIEMNI8fOB5dq3BSkR0=)
                          19: IDazm0i-YL73zhAR97qXr397VAU.roa (hash: grUltrPQixzf/EBMLv3w9ETYdkHP09w+MFIu5/yc/TU=)
                          20: LQ_UIvfDgJ4bWRqpBkYtedt__s0.roa (hash: 3p7xDB4HYyDUah8fRasyl1V8TZZX8wHpIxxT1mwg3dE=)
                          21: M4cDIpRWsEUHm5a4sTzRttlAuvk.roa (hash: q9zjX7dOD7oaVX47BAp2xiQ0yxG0DW0f2ZWOvHM7Mbc=)
                          22: MBsdxh-LXbNXykKWto175FvyeUQ.roa (hash: BP/WY6c9buETJzS18HNplpCeUeRUolXnAY6xufbABdU=)
                          23: OB9NvslZkXFzxy32PcpXI2EyQZQ.roa (hash: q4LuPvxaGGvRgBUk1E4OV+I9UNu1yAKIJx/K7ECFDzE=)
                          24: P8KmbZWWgRdk-XM7xUKLxYGxAmE.roa (hash: bwi5QGQZIafQpR432V7tvQOrPpYLc/VPfEkf1pEmD3c=)
                          25: T8EMDfdTagVi8bf6NhEesbphXJM.roa (hash: 6hI+AFXo6hDL1fXoGqP37i5aqqR9mXhECfOEwKoiPow=)
                          26: UfCAkeXS16U-O0tnGDUi2biM96c.roa (hash: rKJ1KQWN6U0GI2Z4ebJcTGG2Hqs65XmTgZkq/7LOYI0=)
                          27: Uiq4tI4aFo8MuCH2Wj2ZUXl_8Mw.roa (hash: AECglWV3pbtawdnaRrEiiI/NUJmfjgabGaryHLABawI=)
                          28: VtsQqODOgBOBhgToCFu24GJli1U.roa (hash: OaJ4X+o78i0uLl2uzsMi+XQ+i+kff2xbksXiCJsUpcE=)
                          29: ZiaCd-XqJjaKPgBcQHbbtH_qliQ.roa (hash: sf1FkJQh5KYSlRVuT4SsB3yCgRn3WQbS7zmnzb3jc5E=)
                          30: _KaR4wLwZ7labGWt6arnKIQd96w.roa (hash: nGupux0rLke8QsDU9pv8mG8OuJgGPA7rc9IB5osDncU=)
                          31: dfuNshyma_Nem6DMpPCtDr7EzSw.roa (hash: 6tyMeZp4EGk3XnSVadagS0JLq5sNS5bexT4gfycy7UU=)
                          32: ffEy3xPkvlPYJQyMSEICZO72wUw.crl (hash: t9ffwzmF1DM+RhKRFEQtqPYTBRBX424paofZl0j9acM=)
                          33: gKz1-Mt7Jzv749qmMArquMsARKQ.roa (hash: VGdRm8WsxCojNaCRCyyIwadV6IxmzEv1hZx2rLAE99E=)
                          34: gZtg_MDg7U_9YxcpljwnuIyUhqM.roa (hash: jHewOm49wVW4fvno6jYv6CwHUX/j4MlAWi9l9F1uvH8=)
                          35: gvcCAe9K6U4m6beyZ2h_rYZRE_w.roa (hash: o0yjHQjjZGVG8PAPR1psf9bfDnlgb5ytOsSX82j9YlY=)
                          36: ki2sLtb1kOWwRxC06ynnzw2LhWE.roa (hash: fHmG3zfIJ6DVQiynfpYmHirBXvs2fFUtg5pSjvN/3u4=)
                          37: nIRK_5BNBnw0BOToPD9Ug32Jo3s.roa (hash: x9G1Iq+NtdVi63p//emczmZZMCgqQAa74W6f9TfCdmE=)
                          38: qB15O1-jns9cCJruWrN8kl5vYPI.roa (hash: sCMQ1QDWGule+jMAKLoXn+v3opLMdZQ1xTIi9AoaLA0=)
                          39: qcq-5L5ItDTVwFQKgCtK_jcEX4k.roa (hash: RVNxPTWiH8kAxJ7TFlnJ6K1cNzawOicZ15SsJo3W/tc=)
                          40: r0DKP13mPB-xssYLayXGx9SRXqU.roa (hash: NgBO3Fd7UXEUj0OE/dq4bFMuMpxXZFFmnu/MxIzs/t0=)
                          41: roOXBhGFAF86gv52BSTW1-GJ5Ww.roa (hash: sU4TCChOSQ9hmPCHcaruiP1ZI0w7ReNQ3FWvH2HypdM=)
                          42: sWGnDVwimopkL3RZ1VddUdr6UVQ.roa (hash: 3ebBFe3M69O9ovZ86/tHdRoJbVlqNSPTb4bi7x1ufJQ=)
                          43: tC-SnLwiFD2qkUWb34ZJlHrEwL0.roa (hash: W2oX38Ug4hCN4nWmTJExGxqNgP/EzMkmtz9vGCWN0AQ=)
                          44: tp8BPVq0KjTwHXYUIw4XFpeAYL8.roa (hash: nECNwtss5M0OS89DUiXg8f0rEwC5xat+BWJ+gmhlIhU=)
                          45: uOeb2HXnksoFhAKr1737Vt2QvvQ.roa (hash: Thz8AYTCFqxx1Z8s09Xc2JfhFGugEC9hFmozDHQPEmo=)
                          46: vo_904xTbu-Z-e7AuWMIWjqgSQQ.roa (hash: 1p2W4XwoRIWC/E307zPmQjLc2d7vud+9t26XZ5xVWME=)
                          47: zHQC9oODWJyuv4dCSJ0cQpeKY9w.roa (hash: qm0isQLc/mdcuOloWYUWp+10DgtUEWS3AI4xGI8keoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:5a:ef:6e:9e:66:22:6d:c3:88:87:0a:a7:36:a4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Oct  3 20:00:53 2026 GMT
            Not After : Oct  4 20:00:53 2026 GMT
        Subject: CN=9f92ffe1f860eaae9ebd573ef7ff4750108d3fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:f8:30:f5:c0:18:7e:61:59:0c:e6:68:be:
                    ba:d4:fb:0e:85:c3:15:09:ab:2a:29:ce:64:98:46:
                    aa:21:5c:a3:e2:d2:56:6c:97:6e:df:b5:ce:61:7f:
                    1a:50:cf:9a:fc:93:d0:b9:8a:37:93:15:dc:e8:d2:
                    b4:23:03:1c:69:f2:d6:d0:e2:72:40:9d:6d:81:a6:
                    ed:19:3e:e0:ce:da:dd:a2:e0:ff:fa:65:0f:23:60:
                    cd:17:7f:56:a0:d2:8c:66:21:18:76:62:e1:7b:d3:
                    b8:b0:f8:7f:d8:e5:94:45:f4:cf:d3:83:7b:4e:46:
                    68:6a:74:f4:28:27:82:c7:56:c0:cb:07:79:87:3a:
                    84:8f:d6:56:90:86:74:8f:6a:07:aa:0a:5c:6d:9f:
                    0b:f8:88:50:26:b6:a1:4d:81:b8:b4:1e:ba:32:32:
                    02:b6:6a:74:03:b4:a8:99:55:1b:1b:ff:64:0f:86:
                    ea:59:fa:7b:d0:e1:be:f9:04:a4:73:6d:7c:e7:ef:
                    b3:8b:d9:09:43:8f:50:4d:ab:c4:cc:10:ce:7e:7b:
                    37:7f:58:98:3e:05:77:47:fd:be:a7:de:d3:16:ae:
                    e6:1d:78:0f:02:11:7a:7e:dc:de:5c:03:9a:8c:2b:
                    98:26:2a:fb:d6:67:38:8d:9a:cb:f3:4f:67:d8:11:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:92:FF:E1:F8:60:EA:AE:9E:BD:57:3E:F7:FF:47:50:10:8D:3F:BB
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:05:0f:3f:7f:e0:05:08:03:a2:31:02:84:dd:45:98:e4:dd:
         c1:e9:35:6d:b6:08:22:7a:66:e6:bd:9c:ee:3c:86:13:cf:57:
         b8:80:05:c8:e7:fb:b6:21:37:9c:90:e0:9f:d2:3d:2d:f2:32:
         7a:a1:db:a2:2f:aa:86:fe:86:7a:52:4e:17:94:06:b7:8d:2a:
         20:62:68:1b:3a:c2:d4:71:5e:65:d3:11:d1:5d:f9:45:46:be:
         b2:7b:14:6e:9f:c4:88:18:99:8e:8c:03:96:88:11:71:d5:73:
         5c:98:d5:52:99:b5:c0:60:54:ee:b6:36:b9:fc:db:f2:5d:b2:
         3f:88:a1:78:6a:64:30:59:29:30:45:78:02:78:1a:c4:f2:da:
         78:48:18:90:97:b7:32:1b:46:85:ae:c6:f3:a0:db:db:e3:79:
         8b:68:f8:fb:21:51:d7:31:c5:a6:c1:d9:7b:7e:13:54:a2:c0:
         37:df:a3:83:1d:59:e2:b4:37:d5:34:06:1b:e8:27:6a:8f:6c:
         b9:6f:d4:b1:e9:4b:e3:56:40:a9:ef:22:2d:81:fe:56:2a:93:
         a1:cf:5a:33:c9:07:15:96:c1:bd:ca:39:e1:09:a0:39:da:03:
         8d:65:5b:da:15:28:3f:5d:59:57:d3:ad:5c:4b:2f:57:b0:bf:
         5d:8f:ef:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDWu9unmYibcOIhwqnNqS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjYxMDAzMjAwMDUzWhcNMjYxMDA0MjAwMDUzWjAzMTEwLwYDVQQD
Eyg5ZjkyZmZlMWY4NjBlYWFlOWViZDU3M2VmN2ZmNDc1MDEwOGQzZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeT4MPXAGH5hWQzmaL661PsOhcMV
CasqKc5kmEaqIVyj4tJWbJdu37XOYX8aUM+a/JPQuYo3kxXc6NK0IwMcafLW0OJy
QJ1tgabtGT7gztrdouD/+mUPI2DNF39WoNKMZiEYdmLhe9O4sPh/2OWURfTP04N7
TkZoanT0KCeCx1bAywd5hzqEj9ZWkIZ0j2oHqgpcbZ8L+IhQJrahTYG4tB66MjIC
tmp0A7SomVUbG/9kD4bqWfp70OG++QSkc2185++zi9kJQ49QTavEzBDOfns3f1iY
PgV3R/2+p97TFq7mHXgPAhF6ftzeXAOajCuYJir71mc4jZrL809n2BE49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+S/+H4YOqunr1XPvf/R1AQjT+7MB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAUPP3/g
BQgDojEChN1FmOTdwek1bbYIInpm5r2c7jyGE89XuIAFyOf7tiE3nJDgn9I9LfIy
eqHboi+qhv6GelJOF5QGt40qIGJoGzrC1HFeZdMR0V35RUa+snsUbp/EiBiZjowD
logRcdVzXJjVUpm1wGBU7rY2ufzb8l2yP4iheGpkMFkpMEV4AngaxPLaeEgYkJe3
MhtGha7G86Db2+N5i2j4+yFR1zHFpsHZe34TVKLAN9+jgx1Z4rQ31TQGG+gnao9s
uW/UselL41ZAqe8iLYH+ViqToc9aM8kHFZbBvco54QmgOdoDjWVb2hUoP11ZV9Ot
XEsvV7C/XY/vBQ==
-----END CERTIFICATE-----