Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          vN31P9HKpgV77vlxlVN730BP6L8ICeYsd8VKF4yRoRE=
Subject key identifier:   C7:0C:1C:67:80:DA:F6:FC:D2:9E:37:AC:08:5F:66:21:40:DB:E3:36
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       01A0CCFC622B538716FF0F231A62F1FA5642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          09B8
Signing time:             Wed 23 Sep 2026 06:38:07 +0000
Manifest this update:     Wed 23 Sep 2026 06:38:07 +0000
Manifest next update:     Thu 24 Sep 2026 06:38:07 +0000
Files and hashes:         1: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
                          2: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (hash: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
                          7: K9S1a8pb9Ku2gurXootjdoLxqNk.roa (hash: Vj20bIk9YxCcwY9U+ElYXLduppjaUw153U6C7JRQWew=)
                          8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          9: NOTd4-A4PmSQj4XSSOacvmdiako.roa (hash: 8iobNGMtq59P99qMnRi2vFVNNvHMw8CEZpBCxMHYatM=)
                          10: T-2zrQ_BVpBEq1UjJnBtpid0T9M.roa (hash: stpa5ENJ3skvAQ/auK7c/OEeGkvBZIEqkeze92t1QPw=)
                          11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          12: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=)
                          13: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=)
                          14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
                          16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          17: f3jhbY_gIkYJlG66YPHL9CELrKA.roa (hash: P9/795AGn5WxQVcAaPxONrO6IpW+dBt+ePqrhqEc80E=)
                          18: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: eqBhAsxG6JW46lOMLpeFdiGWuNELxF/pjkW+VFS9BF8=)
                          19: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          20: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=)
                          21: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=)
                          22: nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa (hash: bTjCfnE77NEactYbdS6nJYXWVoGC6Uw3L9qEunQvAs8=)
                          23: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:fc:62:2b:53:87:16:ff:0f:23:1a:62:f1:fa:56:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Sep 23 06:38:07 2026 GMT
            Not After : Sep 24 06:38:07 2026 GMT
        Subject: CN=c70c1c6780daf6fcd29e37ac085f662140dbe336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:78:6e:5e:b0:4f:d6:23:13:ed:77:12:22:
                    51:f6:94:e6:da:f3:d4:af:42:b2:ea:56:f4:1c:7c:
                    72:ab:3f:d6:f0:48:e0:74:2e:92:14:60:cd:7d:78:
                    63:04:c0:9c:aa:f4:e7:3b:c1:bb:8b:2d:70:11:1d:
                    37:c6:9e:66:a2:bc:33:bf:66:fb:4c:b9:5f:c2:62:
                    8d:49:21:8f:ca:b6:3d:9e:f1:12:2b:cb:a2:62:46:
                    71:c7:03:de:ba:20:68:e7:99:cc:b1:7e:27:48:50:
                    6c:cf:ca:ec:44:ea:ac:f6:2e:62:36:07:9e:20:59:
                    a7:f7:2b:c6:78:ff:e3:29:8f:41:a3:03:1a:76:d2:
                    4a:c8:03:1a:25:06:78:db:68:fa:50:f9:6b:17:50:
                    44:54:bc:5b:a2:ce:20:a8:28:9d:b7:b6:08:5b:ba:
                    fa:42:e0:17:17:58:a9:42:1f:29:04:94:69:1e:59:
                    8b:60:b0:84:6d:81:32:6a:9b:33:6c:ed:e7:7a:c3:
                    b7:d9:2e:81:54:af:bd:91:c9:7b:e0:78:c0:fb:f1:
                    66:57:9e:48:d0:4d:51:e7:ae:e4:dc:ca:59:b6:c4:
                    3a:46:7a:cb:f9:66:8c:84:00:15:91:93:69:3b:d3:
                    de:f7:5c:cd:a0:ae:50:00:5c:2c:7e:32:48:66:79:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0C:1C:67:80:DA:F6:FC:D2:9E:37:AC:08:5F:66:21:40:DB:E3:36
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d2:2b:ee:d2:f8:44:58:8f:83:e4:50:63:84:93:9d:fd:7a:
         38:d1:64:fa:de:8b:18:85:ef:99:7e:6d:4a:a5:b9:22:f4:98:
         52:4c:46:a3:41:9b:91:9a:2a:ba:1c:b0:4c:23:5c:4f:f9:b1:
         aa:ce:c9:eb:96:e7:f3:f3:c3:4c:6e:4f:84:f3:f4:97:91:7c:
         17:c2:3a:1d:c8:6f:81:db:4c:da:5f:6d:8d:f9:c9:e3:91:12:
         ae:95:e3:31:db:45:b4:12:63:a7:8a:25:b2:07:7d:b2:a5:0d:
         d8:af:49:3a:2c:cb:70:70:2d:89:22:f1:52:84:c8:68:87:e3:
         a1:92:18:d4:a0:c6:64:cb:b7:1f:12:29:18:16:71:39:11:c4:
         91:b1:92:70:99:08:7b:ec:26:43:ca:3d:46:58:79:bc:7e:4d:
         71:f3:d1:1b:5f:b6:92:56:a4:d5:da:5d:f3:ca:81:11:b2:e4:
         f3:00:32:bc:f1:de:52:c9:69:ba:84:85:40:ea:19:e7:6e:77:
         52:54:c6:ff:db:cb:9e:e9:55:ec:74:10:91:53:6a:53:48:49:
         fb:d9:dc:15:13:59:4d:8d:9a:ec:83:71:5c:d9:3a:2a:b4:ac:
         5c:b3:e5:ad:4a:7a:76:ed:fd:d8:cf:4b:e9:2d:e3:c6:90:a5:
         92:58:cf:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM/GIrU4cW/w8jGmLx+lZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwOTIzMDYzODA3WhcNMjYwOTI0MDYzODA3WjAzMTEwLwYDVQQD
EyhjNzBjMWM2NzgwZGFmNmZjZDI5ZTM3YWMwODVmNjYyMTQwZGJlMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA94bl6wT9YjE+13EiJR9pTm2vPU
r0Ky6lb0HHxyqz/W8EjgdC6SFGDNfXhjBMCcqvTnO8G7iy1wER03xp5morwzv2b7
TLlfwmKNSSGPyrY9nvESK8uiYkZxxwPeuiBo55nMsX4nSFBsz8rsROqs9i5iNgee
IFmn9yvGeP/jKY9BowMadtJKyAMaJQZ422j6UPlrF1BEVLxbos4gqCidt7YIW7r6
QuAXF1ipQh8pBJRpHlmLYLCEbYEyapszbO3nesO32S6BVK+9kcl74HjA+/FmV55I
0E1R567k3MpZtsQ6RnrL+WaMhAAVkZNpO9Pe91zNoK5QAFwsfjJIZnkHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcMHGeA2vb80p43rAhfZiFA2+M2MB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudIr7tL4
RFiPg+RQY4STnf16ONFk+t6LGIXvmX5tSqW5IvSYUkxGo0GbkZoquhywTCNcT/mx
qs7J65bn8/PDTG5PhPP0l5F8F8I6HchvgdtM2l9tjfnJ45ESrpXjMdtFtBJjp4ol
sgd9sqUN2K9JOizLcHAtiSLxUoTIaIfjoZIY1KDGZMu3HxIpGBZxORHEkbGScJkI
e+wmQ8o9Rlh5vH5NcfPRG1+2klak1dpd88qBEbLk8wAyvPHeUslpuoSFQOoZ5253
UlTG/9vLnulV7HQQkVNqU0hJ+9ncFRNZTY2a7INxXNk6KrSsXLPlrUp6du392M9L
6S3jxpClkljP0Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:03:49 2026 by rpki-client