Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          qgpPEkD43I+1xFnhXhYX4Dq0BPukdL8bLOp6PfsGzIs=
Subject key identifier:   84:D1:C5:8D:C4:1C:CE:A7:A8:67:02:84:2B:8D:53:5F:59:1E:E6:28
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01A0D538F7FC6290337F8B613328470EDC4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1B84
Signing time:             Thu 24 Sep 2026 21:01:15 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:15 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:15 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1-_wSAB9euFQ6fT7w4DWJ5Xgo5Kk.roa (hash: BjqjTxy1Woefud4gcppujNascH6RjJHEx2c0AzjfX6o=)
                          4: 1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa (hash: XxYQOLtcDO+kKRh93RlmwzW/qtvNS82kdLybB49Wy7E=)
                          5: 3iuK2PePzlzkfIjA6PU7qCf7bWU.roa (hash: jmTVl7eRtiftjiuAnsGPt6gtZDbCLdVGFoxxlHgA3Rc=)
                          6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          7: 8fhRtiu_Y-7BuakqbAP1YnjY4eg.roa (hash: 7RxX4BpwVFrs84OiwF2XdVBqm5xQUd4i65cOFdlTJJ0=)
                          8: 9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa (hash: QpTn0BF+0f7mgbKz+dsPiNhRke1XKcJNUsuUcG4FoJo=)
                          9: C8ZLaFAbyVjIOedw3NULKGBNaHs.roa (hash: o7bLJ4x6imfQVFB8Ci4Xwe9P3Rv1x12r6bmWU8fyebo=)
                          10: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          11: F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa (hash: w95uLEhSRW0HEpsxo2sLSthAa84cXprY24xXtceKquw=)
                          12: GIKRF0nXi7INomLIm1n0MXoVX7g.roa (hash: kHr494+YoPwvcUNQ/4OPxtKZy199ghrNKf/OpsmU2nI=)
                          13: Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa (hash: cGNycfZbTmQsfCD7PYzBfa8+3CZ+9W0RQ36+xTRQr5g=)
                          14: KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa (hash: Y+VyjlDROYbrCdf29xH6G3H2D1QPefe6usrsIsZCitM=)
                          15: L0enPaj_4hnZXqV7ZMEztaTZBC8.roa (hash: uzNqXLX0MMTGTUP5cxjMKgQ19ZYg9VfOrFLtYCvWoxk=)
                          16: LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa (hash: o6FBkRC3i3TODQqiIL4EQ6bdbi9ADeAh/bdI0nc31nk=)
                          17: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          18: QhR_79csT9O5oeIFdHW8gjPKFdQ.roa (hash: 23ArOcO4LB9jNTgcelJzPDcJ4dVoSawShlKbhyVD/Eo=)
                          19: Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa (hash: BOLwzKWftfPH8kNDI+1UZ4UUN8tIZ6CvXDApVSqljyQ=)
                          20: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          21: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          22: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: XyzoMV2fWSbWfhuj1IFNRTPzFPl21XvihkncLz6J+QQ=)
                          23: Ss4fVycWbzrbsGfC-UotFuMZAfI.roa (hash: jWq8iYtN0x0FwpUA7Gu/Lr/cnfU6eTDqvTSInxcOStI=)
                          24: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          25: Vkob5ykG1uTUoQxf-Y0lIElf748.roa (hash: rf3qd5Sq7pbldPkOkD+TRHnqHAa77Pp66pn/FP0ieM4=)
                          26: Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa (hash: ImBcIaHYckQlyUn7qD0gyo0OZpqemgaOxC20pRlncvA=)
                          27: ZGRufHjaEOQfZDX946W9j6Kmqp4.roa (hash: 9yXb0jdoscPhoz5VZ5tNsNxnKaSTWuDYouPvk/pE4eQ=)
                          28: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          29: cFl5ywq_13udVfRgQTEhw9bpSjU.roa (hash: TsFLhPPc4CKImjOhB5y40oTij5TztHWmIPHSHN3U630=)
                          30: d1FmpnCLtN9xWz258z_vo0evfQY.roa (hash: 99ktEN8EQTUBIhZ9BGIWGyL3Ti91GsDxlW00ORFmRCI=)
                          31: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          32: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          33: efLppXHlERCKKYaJTde-86Ghjlk.roa (hash: QKED85n+T67n9kk+tVSC2dGP5JLesJDmpO536eK8+nU=)
                          34: gID46NhD6hvl2nv_cf_eSX2tonc.roa (hash: YHrB9LZc1doQx8FMo5EWouRxMXkXccU8/QjTJjtf9to=)
                          35: jlG9y1XwIb8wc_C_We-qtbjo09Y.roa (hash: tx2ZQ5ic2oGjyxJfXoPm9eCoE4D1ij8/jlq+e5xg560=)
                          36: kR435wmWIR3POPSkhvuwY7LHnyU.roa (hash: P+t8d1X/83Jtvdac/hXKsX74pnVuVk0EELmCtBin0HM=)
                          37: mTzcSCxpm7gYApAoDUjX2gO7n9s.roa (hash: sVKa96WPI4bXLyvj1lNXogTGlDkJL+Tp5ovZB+WR0mc=)
                          38: p_-F_gZNwSja9HlusE4TYmgaUwY.roa (hash: 9uZH8FSVLCXJ4Mozz5c3Fj+lNnWQV44dFhzKdriybFs=)
                          39: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          40: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          41: sxCoOQjmxxgwH6aI9s_WrtXuu14.roa (hash: bTkGW/1MFHpv7MRl6T642YhhVQpoIaWD/+3bHqmoib0=)
                          42: u1LOjR3EgK565RLjZFRRNHL-Np0.roa (hash: alCXKITiCiwN2ST2B1hZQDz3KdcIWj1GfF0th4BrEY8=)
                          43: yrGe1giYiFqb8KNEn95n_cEAV4g.roa (hash: PqbsR8D4YGwmFWmv31QqoUBTUMq86kqCaK+pMgxowcs=)
                          44: z6JfI-sh2bNRE1whfbGOorsLuCw.roa (hash: 2ZqxwsXOn5MxMkpYtNE4aWeK6vzR7/Jj0bboBJ14PZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:f7:fc:62:90:33:7f:8b:61:33:28:47:0e:dc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Sep 24 21:01:15 2026 GMT
            Not After : Sep 25 21:01:15 2026 GMT
        Subject: CN=84d1c58dc41ccea7a86702842b8d535f591ee628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:c3:0a:55:50:e4:0a:5f:1d:3c:ab:d0:f7:
                    6a:f3:25:11:24:bb:b4:63:f7:96:5d:1d:4f:91:76:
                    d6:2b:e5:36:79:5c:d3:78:30:cf:dc:e1:4a:f4:ff:
                    93:09:10:81:04:01:2a:f9:56:04:57:67:28:85:93:
                    28:ed:29:6d:fd:3b:2d:d3:3f:2b:1a:15:0d:ed:fa:
                    2b:0a:f0:c2:a5:0e:4d:9f:e5:40:2e:99:4c:70:37:
                    41:99:24:6b:03:91:72:c2:9b:68:81:63:82:2d:5d:
                    85:cf:a4:7e:30:fd:a9:0d:b7:bb:f2:6f:cf:da:1a:
                    85:e6:6c:76:a6:8e:e1:77:64:9f:0d:83:da:55:a6:
                    d8:26:8b:2d:2d:6d:f1:38:8e:fe:9f:39:80:29:f9:
                    3b:e5:4f:bd:ad:43:40:e8:96:24:89:5a:c5:1a:2b:
                    26:95:30:70:1e:8e:da:d9:2a:ee:b7:c4:f0:96:20:
                    e0:5a:b2:ae:da:73:6f:ca:ed:f5:53:99:54:20:ee:
                    02:ca:ae:10:de:8c:37:d1:5c:0d:43:d4:27:59:8c:
                    41:8f:fb:31:87:02:99:01:91:cb:c4:19:1d:8b:6c:
                    c3:3e:53:f9:36:1e:21:d0:78:81:8f:55:c9:d4:d1:
                    12:8a:33:ee:55:1b:f5:4a:ac:e6:09:00:fa:10:27:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D1:C5:8D:C4:1C:CE:A7:A8:67:02:84:2B:8D:53:5F:59:1E:E6:28
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:14:44:cf:be:bf:f4:d1:fa:37:54:92:d3:46:de:2e:28:13:
         e9:12:f0:2f:60:ed:f8:11:03:6f:53:22:d1:29:07:e3:66:29:
         6b:b4:a2:e5:90:9c:dc:37:a2:63:cd:60:11:5e:83:f9:8d:a2:
         52:0c:22:46:1c:6d:91:b7:6b:2c:63:01:92:24:9f:8d:3b:4a:
         42:c5:1d:28:91:9d:a0:38:28:a1:3f:0c:a7:4a:a4:f9:4f:ce:
         1e:ae:58:6b:86:13:8d:e0:a3:f9:ed:f3:66:04:35:ee:03:70:
         b4:96:b2:52:62:30:c6:cd:d7:49:58:1d:de:f2:8a:9b:8f:ca:
         7d:c9:69:d9:9c:dc:fe:de:f7:12:44:d4:97:b3:7d:59:82:a3:
         7b:fe:04:85:80:39:eb:80:22:56:fb:40:71:59:00:b3:ce:d3:
         16:56:b5:4c:3e:38:c9:aa:22:0a:26:40:b4:c0:59:c2:4f:e3:
         30:62:87:fa:7c:a3:70:1b:1d:73:82:fd:45:14:83:5e:e9:b7:
         bc:18:a6:72:8d:f3:67:96:6f:6f:1e:88:b8:1a:54:f5:be:95:
         60:e0:1f:26:02:e6:bb:d5:35:15:79:28:da:e4:4b:2e:02:1c:
         50:08:33:5c:9d:c2:12:bf:fa:29:d2:6f:df:55:73:40:04:b2:
         e6:b2:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----