Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          NKG8tYVvl3uTXMnquOEQDs0TwB2n0az0f1NVso686VU=
Subject key identifier:   28:8D:49:82:28:4F:60:21:10:7E:CE:73:FB:C0:C4:FD:D7:5C:F7:E5
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       01A0CEC85E42B0CBD468FEBF70F26BBB4DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1B58
Signing time:             Wed 23 Sep 2026 15:00:32 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:32 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:32 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          4: 1VLg1aY9v7jaSjHtofK36IMeBaE.roa (hash: HI2whi4CG4KcDsjD2jvuiBEFXV0jVOJ6ZL1iFW2q1Rc=)
                          5: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          6: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          7: AicKbn9V4_76pgwuedyA5GCzyLU.roa (hash: DOJ7MbETesSOMJObiYp+iD6VIbQrVHtez3kgGi0aHjk=)
                          8: BIWjRS8zCx6Ly9GztEn53lyLVuA.roa (hash: hj7SZXrhwEnqVdxbCJjZfYsJMWRsRO2+uJmorDiv/VY=)
                          9: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          10: EBpR3i23vUkI49lNzqmTeKLSSBw.roa (hash: XZfvnb/5MBlYoFOBhUzu8s1Mc/IWCCgUnnwIxTGM8dA=)
                          11: FCWyxYdxxzcdWFtvfMNDkjRUf3A.roa (hash: V4BQBleRmp+guLlwaIkwqgLs5ZiIiwrfqMeVkg7bquk=)
                          12: F_YKIDk3-c3q7nLSxKia4y8l2UU.roa (hash: mzxplP5wbB6OgrEsYuV9ctgrKZByMRtoj3kAQWkgbps=)
                          13: GowNRMREZKR5ilcFNbirUlolLCA.roa (hash: kqqGe8oFBgbqeSQiGXRf2DzunqvURIFQWNtSiG/14AU=)
                          14: Gug5FnCDjB47_b4b7SpuDZOyPmc.roa (hash: k9gAW6SKI0/aYjwjKLHuKj0KrVsMFyU3zgWsEogPtww=)
                          15: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          16: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          17: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          18: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          19: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          20: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          21: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          22: TSkmbBltTbG5oGpD_Y2-gqHiTBQ.roa (hash: mAgMntzkdDIt94yA57minmvIvDyj/f3wCfM5fqmRxjE=)
                          23: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          24: ZAkzvDuShqbgdA4si8lgDBLLYcM.roa (hash: gpLWb00jmi2CBQgo9H2EFZ0+OdBOrkyQzKyxnR7pVDU=)
                          25: cYI7hShRzFcEuWRGSDSmNo5vLqg.roa (hash: UmsupbsK5Mh+LPidO6EpoMFIGucQ1xImIa9euVny9OE=)
                          26: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          27: d_drZEi75KbJpWGAU1kWAxnMOt4.roa (hash: mIzjxMSAtp0q7cgMj5Il09j/jt2ws8ao19RUeSe5pn0=)
                          28: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          29: duH5i6Kj1hWUJ7lpkj5WRA3KMoc.roa (hash: 9eDuQ2k6LA/RA0m8rrspBTd/eZocOclB7P+1x5v2y2M=)
                          30: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          31: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          32: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          33: jxAGCxrwlE5EgLA0btOJyzNEpY8.roa (hash: 3iJ62ep1M0jqBaOO+Ubf1RPdkkXY7NA+pqYnAW6bkEE=)
                          34: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: KvqpOvMfbWM+MVDqiQZIO/j8bun5YoJTlfGV/oxdF9s=)
                          35: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          36: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          37: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          38: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          39: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          40: nP2t3ktCtxmXvJfQm70RczMv8go.roa (hash: X/RDZwcgP5StNkfUGKSyti4zr1ll+jsvxVTWJNRuwLk=)
                          41: oLiuEoOBIaZFRHkiJUFfiSKKHwk.roa (hash: HDxlhV6rveassmnQwwofOMmIF1p19Y9g4WnshEZXckE=)
                          42: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          43: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          44: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          45: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          46: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:5e:42:b0:cb:d4:68:fe:bf:70:f2:6b:bb:4d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Sep 23 15:00:32 2026 GMT
            Not After : Sep 24 15:00:32 2026 GMT
        Subject: CN=288d4982284f6021107ece73fbc0c4fdd75cf7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:e9:e0:a6:a0:0a:68:fb:b3:a0:b6:34:0b:
                    a7:85:79:74:25:28:87:e5:3c:a8:a5:5d:b8:36:ce:
                    db:8d:96:56:bb:bb:10:9f:61:cc:4e:de:14:26:df:
                    9c:58:d2:d8:65:a5:9d:b7:a2:bd:4b:69:db:11:62:
                    f8:63:e6:99:18:5c:d2:08:e9:99:e3:11:3e:93:86:
                    3b:91:d1:a0:96:fc:32:b1:70:16:95:ea:0e:4d:8b:
                    4f:fd:6f:32:35:3c:c8:6a:e8:8e:a5:2e:f8:8e:b5:
                    78:79:3b:64:0b:b6:03:3b:e9:9e:7f:c8:62:87:17:
                    b9:f4:b1:55:59:ea:4e:8a:32:39:b1:56:44:27:d1:
                    13:71:f3:08:c4:a2:6b:fb:37:2f:c1:44:f2:76:d9:
                    74:ca:a6:d9:89:a4:62:d7:fd:01:cd:0b:eb:e7:5e:
                    2b:46:6d:34:c4:c1:ab:ed:76:4b:55:e5:97:34:cd:
                    37:f9:66:de:21:18:e2:3d:33:66:fc:74:3f:ca:cf:
                    d9:1c:12:53:d5:77:5d:d2:b8:64:80:be:f9:2e:88:
                    f0:43:13:ac:10:2b:b1:e7:7d:b3:aa:21:a2:e1:69:
                    7d:f9:ca:3f:6b:8e:d7:4d:12:48:ae:de:f9:78:e9:
                    e8:e4:e1:1c:6e:d1:a6:13:f8:0f:65:5c:96:fe:43:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:49:82:28:4F:60:21:10:7E:CE:73:FB:C0:C4:FD:D7:5C:F7:E5
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:25:19:b3:0d:d1:39:4e:1b:5a:1a:9c:87:9b:bb:83:52:
         8a:99:2d:84:0c:f2:dc:00:5f:5f:ee:6d:3a:f7:9f:6c:e2:84:
         62:b8:5b:d2:1e:5c:a9:db:8c:2a:7f:bb:da:d3:c6:5e:57:a9:
         3b:e4:ba:98:a4:99:03:04:e2:d2:36:1a:e1:84:9e:e6:90:f8:
         96:b9:79:c7:f2:a4:54:b3:df:38:f6:41:4d:bb:07:c4:bc:5d:
         21:81:96:cf:8b:16:7a:1c:01:94:f5:16:6b:5f:67:c7:9b:ae:
         86:51:e2:15:48:c7:37:87:ce:01:3e:4b:ae:88:93:a9:24:1a:
         b2:40:18:bb:e9:47:6b:9b:4f:c2:44:af:9c:18:3e:1d:9e:38:
         eb:c0:c9:38:33:88:4b:73:b2:c6:c9:47:7c:e7:2f:c5:0b:1c:
         4a:7b:0c:0a:95:57:8e:0e:e7:89:65:c5:ca:03:b6:e4:d0:35:
         e5:79:d3:64:22:88:0e:9f:97:22:f0:5a:74:39:37:a1:30:cd:
         0a:7e:50:cb:40:33:45:53:52:43:06:90:43:6b:aa:4d:bb:fe:
         3a:32:56:ba:b6:40:f7:db:7b:9c:09:39:e1:5d:89:f7:af:51:
         79:2f:9d:db:54:95:34:a3:94:ab:96:9f:fe:de:e3:fc:03:d4:
         cf:16:1c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:29:25 2026 by rpki-client