Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          jKpslhEf4cZgWWC7p2skPuF3wN2meprlGyh8ig0jLrY=
Subject key identifier:   1C:CF:EE:44:7E:70:16:72:53:0D:C1:FE:28:C5:D2:06:29:E8:CE:9A
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       01A0D3834CC4E79B8807A440B5969F789E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          0686
Signing time:             Thu 24 Sep 2026 13:03:12 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:12 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:12 +0000
Files and hashes:         1: 1ZSlZp8Pb29fgzIVq0Xf5BVabwc.roa (hash: Fhk9zgQnXWaUZjAp1jtrqS1/0PfYFEN/wvAhiUGmdkE=)
                          2: 4WkSsluIVPvOQ75uo-CwC7bAJAI.roa (hash: iLoEphNORlY6upCSD3B79ceZRAJUkFM+nGa9d9Pk0ys=)
                          3: 7xOGvUid5wgR_viXaJCs-_E41Dc.roa (hash: scuGxNCLA5L3YCe/NBi2qwEMiltJqBLZuIhGsoKzXm4=)
                          4: 9Jn0hC1d4_qB3BpCvZ7mNnqc9Gg.roa (hash: zUW+lZMwkJLWLUiPUzgAXIHWemjMCwN1XV1ZteJyZJo=)
                          5: 9c5vdKgHzyOZwXdqcZN8dzT0Xgc.roa (hash: d1kTybQji+83QMBeS1ShD6qnVoJM2WKb/sGfUyRcNFk=)
                          6: B4taF8vxr_BO-k8PmtG33Mlyo9c.roa (hash: kVgCh+cJlUxukfM4sDuKn24NAxWFzvYDZdvUrddUB8g=)
                          7: BuDVfpBLd2oZ0tI1S3qWwZl1ymA.roa (hash: LPmbsLui2s0k1tW2bMfsBKfiqN8iTqHjcDTuslwicf0=)
                          8: CkraNljOqkeSekJdoAbtNjJUZxU.roa (hash: o4lFQ2jvZtAY9Qkbgut69KisZCd4iL38+vgSPqcwEK8=)
                          9: DDF34ADFjw2ffmD7jZCRIwPC0f0.roa (hash: aW6WqLBP0i1UkY8EAdBr72Jv0mP6eXJY/K5MM7ir6Zw=)
                          10: DPSfvDhpe1b6QFI2PW6n7TYO3_k.roa (hash: G1MtgzpeM9nW/lViOj/+N0ux77lUSJzG5CV9it6DWeY=)
                          11: EjelrFGAqaDDsQ53Q_DBGg1N-4c.roa (hash: gJviYE3tvppz/ZKrMzdy8neV607RXFhOXU+Pt2VUBDo=)
                          12: F0DsUwtjcsCFIkHdf0uZYEsNk1A.roa (hash: MJldlBmmTbUuFNsIiIy5OrIVclgIPB0rA5Rez/d3Fz4=)
                          13: GGR6CICD8f4vCT5b8i26ZiiKr6Y.roa (hash: sueo7SKbYX5TtJjrRB2cAxagocRRAL71jNkiFAWKRr0=)
                          14: MfosKcS0BPLX-4ZFR-qwMolw0Mk.roa (hash: VoKgpqmZ0Ulmjv8OIQE6Op5zpK5Oaclek24g4CvoIas=)
                          15: R6XMwFpcp2UJ16Ql8QFVP6Rp9ec.roa (hash: 0t3mzIeTNynKr8VMHod3xlGeVo/HmsNEjXTbtx+kp8Q=)
                          16: RjdXs8LNEhNvClQ5M_7qaGHlqFc.roa (hash: YGakURUtgJEKWelFa/cPVQh0kgMzzNJSjiaSnMkFeMo=)
                          17: STnrWZqW7jSi72JzmGyUlK-2Zvs.roa (hash: kgx/RS7lkkRSjhP2xtORABvdzJMR1IFzaugpVObBB54=)
                          18: VOMVh_thSJP-NnQuUuaBb_bDrKc.roa (hash: 8AIiAJoD9lmnykKpNP7JQo6/DYsUJUi1SaRT4mNDMo8=)
                          19: WosjHObpSZ8Ehhslkr2rU7t5GH4.roa (hash: KzCinsBNi7eihM3nBQPuyjUCIy5zaqd0d8R2ZQgG9wI=)
                          20: YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa (hash: Qq6ogFgDN4EOjnq+f9NCyesKbJbW/svA1UdP0OEqezc=)
                          21: a72f_EAVkd02dnKeMLyYzgheNuk.roa (hash: /EoQ2iaka+5rJ992IxIiC73to6yZlBsz6efJT8eS4g0=)
                          22: aNNxwXM4RLWcgiojbyE7ayki1ds.roa (hash: aXD5NXX15GN3LeS7Ev04287erJQ10IqS/qwsHUN++xk=)
                          23: d_pz12527gkL8fcWRRMybOlxS2w.roa (hash: pysysDFIE2iHUMKMLBIhP6e4+wGbdqNfWTLzd/HeoHo=)
                          24: fOFmhN3fX6vX86FHhMpi-J-clKQ.roa (hash: 5XSxOs32LMiWr0T2y/oScxTyQKmFpXXYcmYwuUDStIo=)
                          25: gRctUEFtImgXMWVw8iA46tlp-hA.roa (hash: THgiYp/POLSUlNuaLGJhiJUzxk+vuqzoLLmZlA1a2K8=)
                          26: ig_VBpviDFPO2k9TLvdj_dWYYIw.roa (hash: WqPhG6OmFgIAQlSVATvrRDw6cG27/lSxwjfUp8XUsZY=)
                          27: j04AzGHtQN9y3V-mmp0UkbVVrr0.roa (hash: BrXZA3rEKGpF6BxdjkRuek0SDdjl0Okk2gMlss5MAsw=)
                          28: jNIo4jwvqz1IelLRu8GvtQg4OJM.roa (hash: NZFhvQtEgj4btkeWoTCHHe2LlPOEV+ZMhUCQO45Afok=)
                          29: n6W7J3PbeyEHNaWCBAkAzitrLUg.roa (hash: GvadsITjBB/vM+bpH1snxkrl1M/SUjPS6QRZxV9LGEA=)
                          30: nVvWiVFUWk5xU_QxdG5WMTrBP7o.roa (hash: IkvpCjizseztm8ptjXmBpCTOT/92SKkuHmzEAvTFl/4=)
                          31: o98NfeDK9CRHez9q6wLGlITiQ6w.roa (hash: knhKVoHKZ9gBPHJ7HZTVX8GdKMHhMGkjA+da43LunF0=)
                          32: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: BpRQes3+xyQk/UYC9/gfR/wSfa04JsSi+mbzHPulPmQ=)
                          33: s4doa2uCWT8wlElRSQYnyEhb-io.roa (hash: q2luMe75BiPCJy4TtTk1lDnNUZzVDgGLlpHp90uHA98=)
                          34: sAGamYEhbnHCnU7m8PZEoIKvEMY.roa (hash: kYoAzOYWIAnrZzFCKREU7TViuU3EVuBWBB8vGTGQyn4=)
                          35: sMrBExcBNyZbEnrVywVSOFeLcb4.roa (hash: eoOQQ8Kblfu/hBOPnWF2JYYp3Cnwq5S5/rfMWegrtbQ=)
                          36: sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa (hash: W/MQGBKbXxcpb0fgJqS7ufdVgzl0yD0EsDfR255WBk0=)
                          37: tiDdo7f_XnHXVSPuaqaPMrDsKhk.roa (hash: Em/xqGeMG3uE3/7i6rZf96M2M8BnQMuwUIR5KYsOWPw=)
                          38: wt2r6Yzd8Hwx_GZYha_gsGeRDHM.roa (hash: 668Gqe0Yb3WWkOx8z4hLgB7Db8Qd1jcbGhi1id4FSxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:4c:c4:e7:9b:88:07:a4:40:b5:96:9f:78:9e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Sep 24 13:03:12 2026 GMT
            Not After : Sep 25 13:03:12 2026 GMT
        Subject: CN=1ccfee447e701672530dc1fe28c5d20629e8ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:e6:bd:93:a0:2a:2d:b0:b5:6a:3d:f3:9b:
                    8a:96:63:4c:54:33:2b:0c:93:b2:ab:4f:0f:25:71:
                    b7:c5:60:18:b3:2f:fe:72:9a:7f:8d:a8:9e:f0:b8:
                    37:12:8f:24:3e:5e:57:c5:68:56:94:3d:20:68:19:
                    2d:c8:7a:40:c9:04:60:59:68:f4:1e:1e:00:b6:c7:
                    b6:32:17:dd:70:6f:14:85:bd:4d:a9:56:22:5d:45:
                    10:c3:b7:54:18:06:d4:85:c2:4e:67:06:1f:94:b7:
                    90:b7:9b:1c:be:2d:9d:bb:ec:64:16:36:ec:e9:8a:
                    4a:e9:6e:24:7a:e8:fd:ac:5f:f9:67:9a:e1:66:75:
                    4e:dc:9a:17:96:d5:95:4c:d9:d3:00:f3:26:96:3c:
                    46:a9:8f:30:6e:08:50:d9:76:53:21:04:f3:05:f7:
                    9f:a3:a6:53:a2:da:c7:91:38:3a:a6:70:62:bc:75:
                    cf:58:76:d9:c8:0e:26:a2:20:c3:64:a8:fc:70:92:
                    fd:83:5b:27:fb:72:71:3c:17:48:89:da:dc:d5:1b:
                    86:c6:bf:a0:07:7f:7a:7a:c3:e4:5a:65:f4:31:d9:
                    1e:a1:14:7a:86:d6:ed:5f:fe:f5:58:ab:66:d2:64:
                    cc:a9:5c:e6:db:5c:1f:90:4a:9f:1b:aa:08:7d:67:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:EE:44:7E:70:16:72:53:0D:C1:FE:28:C5:D2:06:29:E8:CE:9A
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:84:9d:db:7f:9f:1a:52:9c:ca:a5:c4:36:65:bb:0a:72:0e:
         17:07:92:2e:fe:d2:4f:9b:64:ee:a6:b0:54:4c:75:27:5f:87:
         e5:ee:9d:13:09:13:b6:8e:6f:bc:36:bc:ce:b3:d2:e1:08:d2:
         b2:ed:38:ac:57:e1:d6:90:ea:c0:fe:40:d5:5f:9f:6e:5d:2f:
         81:08:29:6f:db:e4:d3:74:b4:f8:9f:d7:58:f2:54:c5:51:9e:
         5a:0c:81:23:ad:39:0c:9d:da:d7:48:93:6c:91:72:c0:88:8b:
         bd:aa:b2:3a:66:b2:c2:1d:d4:98:6d:52:13:84:73:73:47:bc:
         72:aa:2d:d4:70:ec:0a:a6:0b:ba:a3:1e:9b:18:ec:25:cd:15:
         66:20:d7:b7:10:b7:3a:3f:4c:51:07:4c:8e:e3:aa:8a:c9:d3:
         5a:d9:7d:d8:77:27:33:00:86:dc:25:c8:cf:b3:e9:1c:98:50:
         87:52:b3:b6:f9:45:a4:4d:59:47:97:d8:3e:a9:e2:c9:09:8e:
         91:8f:53:be:06:59:d1:83:37:45:d8:67:1d:ba:78:a7:23:1b:
         63:60:37:77:7a:77:1d:15:3d:32:cd:41:ba:f9:7e:96:dc:b7:
         d8:e4:8c:50:7e:59:0d:e8:4a:f3:0f:f3:0d:e2:4c:48:c0:01:
         20:87:30:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg0zE55uIB6RAtZafeJ5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYwOTI0MTMwMzEyWhcNMjYwOTI1MTMwMzEyWjAzMTEwLwYDVQQD
EygxY2NmZWU0NDdlNzAxNjcyNTMwZGMxZmUyOGM1ZDIwNjI5ZThjZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1zmvZOgKi2wtWo985uKlmNMVDMr
DJOyq08PJXG3xWAYsy/+cpp/jaie8Lg3Eo8kPl5XxWhWlD0gaBktyHpAyQRgWWj0
Hh4Atse2MhfdcG8Uhb1NqVYiXUUQw7dUGAbUhcJOZwYflLeQt5scvi2du+xkFjbs
6YpK6W4keuj9rF/5Z5rhZnVO3JoXltWVTNnTAPMmljxGqY8wbghQ2XZTIQTzBfef
o6ZTotrHkTg6pnBivHXPWHbZyA4moiDDZKj8cJL9g1sn+3JxPBdIidrc1RuGxr+g
B396esPkWmX0MdkeoRR6htbtX/71WKtm0mTMqVzm21wfkEqfG6oIfWeF2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzP7kR+cBZyUw3B/ijF0gYp6M6aMB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoSd23+f
GlKcyqXENmW7CnIOFweSLv7ST5tk7qawVEx1J1+H5e6dEwkTto5vvDa8zrPS4QjS
su04rFfh1pDqwP5A1V+fbl0vgQgpb9vk03S0+J/XWPJUxVGeWgyBI605DJ3a10iT
bJFywIiLvaqyOmaywh3UmG1SE4Rzc0e8cqot1HDsCqYLuqMemxjsJc0VZiDXtxC3
Oj9MUQdMjuOqisnTWtl92HcnMwCG3CXIz7PpHJhQh1KztvlFpE1ZR5fYPqniyQmO
kY9TvgZZ0YM3RdhnHbp4pyMbY2A3d3p3HRU9Ms1Buvl+lty32OSMUH5ZDehK8w/z
DeJMSMABIIcwvg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:32:51 2026 by rpki-client