Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          8ktddwOcYIlYc552xkppSCecWjmboJZrGDyBvGC5afc=
Subject key identifier:   2E:A7:0D:C4:0A:1B:EC:87:C5:DF:FF:FA:9C:6F:6E:5D:37:B0:13:81
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       01A0DEE0E7EC445FBE0179F03C2BE4CC7EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1AEB
Signing time:             Sat 26 Sep 2026 18:01:16 +0000
Manifest this update:     Sat 26 Sep 2026 18:01:16 +0000
Manifest next update:     Sun 27 Sep 2026 18:01:16 +0000
Files and hashes:         1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
                          2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
                          3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
                          4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
                          5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
                          6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
                          7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
                          8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
                          9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
                          10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
                          11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
                          12: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (hash: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=)
                          13: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
                          14: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
                          15: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
                          16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
                          17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
                          18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
                          19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
                          20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
                          21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
                          22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
                          23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
                          24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
                          25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
                          26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
                          27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
                          28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
                          29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
                          30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
                          31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
                          32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
                          33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
                          34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
                          35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: 3mNDnCBDhikiU+VozGpIC+vN8ZrhEf/PdfbX0151bOg=)
                          36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
                          37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
                          38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
                          39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
                          40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
                          41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
                          42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:e0:e7:ec:44:5f:be:01:79:f0:3c:2b:e4:cc:7e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Sep 26 18:01:16 2026 GMT
            Not After : Sep 27 18:01:16 2026 GMT
        Subject: CN=2ea70dc40a1bec87c5dffffa9c6f6e5d37b01381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:75:22:e4:da:9d:e5:66:6f:7c:f9:e0:60:
                    cb:64:c9:6c:94:8f:d3:5c:9e:ff:ba:e3:b3:7d:2c:
                    db:64:90:1b:2e:db:4f:20:6b:04:27:45:18:58:db:
                    15:ad:0b:11:68:75:cf:c7:37:54:fc:a3:b1:a9:98:
                    7e:12:14:b9:cf:a1:ce:b8:e4:21:0e:c2:77:45:e5:
                    73:01:82:7c:00:83:6b:53:78:14:59:1c:f9:52:8e:
                    0c:29:7e:93:9c:c3:69:b6:6d:60:f1:2f:3e:fe:cc:
                    72:82:d2:23:f1:f1:7c:74:0d:65:d8:24:cc:1d:b6:
                    7a:83:68:7f:df:fb:44:4f:2e:12:14:27:d3:9f:12:
                    e4:77:5c:4b:45:4e:43:f0:4e:08:31:fd:3d:c7:78:
                    61:ee:a5:40:a4:d0:76:8e:c7:55:e7:8e:3f:4a:58:
                    50:90:e9:bc:04:98:7c:c2:ef:22:9e:77:93:00:38:
                    3e:29:d5:fb:73:66:14:db:61:73:92:fc:1c:3d:e3:
                    ce:a0:c4:2c:42:73:65:35:97:79:d5:7f:be:55:af:
                    c4:7c:03:22:c8:85:45:0d:dd:3b:8e:a7:d9:55:b8:
                    d3:23:f2:22:5e:ac:3f:42:00:f3:b4:6e:1b:99:b4:
                    59:fc:03:79:d0:25:f5:a9:1d:7e:2c:ad:27:d3:88:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A7:0D:C4:0A:1B:EC:87:C5:DF:FF:FA:9C:6F:6E:5D:37:B0:13:81
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ca:80:03:77:d1:d1:de:39:30:36:ec:ec:c8:c6:e6:c1:fa:
         c0:7f:77:ec:fb:a1:bd:ba:82:a2:c5:5c:04:d0:21:cc:dd:7a:
         f3:a1:8e:3a:1d:fe:9f:83:8f:cc:6f:77:5e:e6:7c:dc:ce:f7:
         91:84:99:96:6c:ca:a5:45:ca:e4:c7:38:b6:ca:9a:e2:02:20:
         89:3a:90:6d:89:63:48:2b:87:24:f9:b7:b0:25:03:70:0a:82:
         0c:dd:b7:5f:ac:e8:b9:f7:1d:a5:14:f0:16:bd:3f:eb:44:29:
         ea:49:1e:b6:82:4c:3f:bd:49:4e:40:8c:f7:35:e1:23:4b:c2:
         2f:80:e3:50:34:16:ec:95:71:34:09:a4:bd:d1:f0:b0:b1:2a:
         41:8f:91:64:ca:d3:28:57:bd:8f:2c:75:a5:c0:cc:1a:49:3c:
         5c:ed:65:b5:10:2d:9f:27:7b:53:7e:c2:95:6e:56:c5:7e:7c:
         47:77:86:ca:a1:e9:f4:19:65:db:3c:0d:51:4f:20:60:37:53:
         33:81:75:a2:10:e7:0a:67:65:e2:37:fd:d9:6f:97:59:57:08:
         11:76:0e:e8:bc:8e:ab:74:59:bc:5b:02:82:12:b2:c7:35:6a:
         9a:6b:58:08:95:1b:34:37:b1:1f:29:58:a5:e9:48:f8:69:9f:
         16:cf:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:10:12 2026 by rpki-client