Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File:                     _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier:          X6EShwNpftjRxL+A97y2emzD+IND0c3b9ChhrK5LgXU=
Subject key identifier:   0E:EE:C3:F4:3A:EF:29:F8:BD:8F:F1:67:C4:C6:25:13:55:1A:B3:48
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01A0CFA4747825E4D9A70D6B6F49D8BE4EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number:          1AD5
Signing time:             Wed 23 Sep 2026 19:00:56 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:56 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:56 +0000
Files and hashes:         1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
                          2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
                          3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
                          4: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=)
                          5: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
                          6: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
                          7: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
                          8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
                          9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
                          10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: sqjX4GLpiHTvs8+M488TZuAKl5+s+7KggCnqjvjF1EI=)
                          11: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
                          12: hzo97s4v3GMC9JemawE_G_69_xQ.roa (hash: be6E5XX2tZu6F19eYf6ITco22ZDHl9eZTJ8uq+1gKPc=)
                          13: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=)
                          14: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
                          15: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
                          16: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
                          17: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:74:78:25:e4:d9:a7:0d:6b:6f:49:d8:be:4e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Sep 23 19:00:56 2026 GMT
            Not After : Sep 24 19:00:56 2026 GMT
        Subject: CN=0eeec3f43aef29f8bd8ff167c4c62513551ab348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:da:72:26:cd:52:5a:af:55:47:60:01:ce:
                    2a:33:66:93:9e:0c:5e:7f:c6:a7:30:2a:10:c4:98:
                    11:b4:c7:60:60:69:05:a3:92:12:f9:e0:41:b8:d8:
                    b7:1a:5d:69:f1:bf:0d:be:1c:9f:79:7d:c7:bb:f3:
                    07:a4:b1:ad:c4:5b:e8:69:30:b3:3e:32:23:48:bd:
                    a9:ba:95:5a:ca:fb:31:15:03:29:a0:6f:6b:1a:d1:
                    f9:0f:63:7a:78:7f:a9:64:29:12:fd:fc:39:84:f8:
                    b3:c2:96:ae:58:19:c1:11:24:00:12:e2:16:28:ff:
                    78:95:df:52:5c:21:83:30:40:8b:86:fd:c6:1f:91:
                    21:68:0d:0f:c6:3a:0a:b5:2f:08:43:60:15:ef:03:
                    cc:31:c0:1d:6f:a6:de:d0:f1:65:8d:1c:9c:f1:7c:
                    c7:2e:af:3d:69:d6:af:9a:09:05:01:b2:10:3d:27:
                    15:cf:70:c2:74:01:20:6c:ab:a8:38:be:f9:ef:c6:
                    aa:67:98:29:03:2a:86:9b:5b:fb:6f:36:00:2b:4d:
                    6f:2b:9a:eb:3c:65:ec:59:0a:b7:bb:e7:5d:77:79:
                    16:0d:d9:ad:da:c4:07:9f:e8:84:c6:49:3b:5f:f9:
                    48:2e:e7:8d:40:5b:05:de:89:62:76:ca:eb:2a:7d:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EE:C3:F4:3A:EF:29:F8:BD:8F:F1:67:C4:C6:25:13:55:1A:B3:48
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:03:81:03:65:64:af:11:4f:d6:e2:6e:24:c6:8e:c3:9a:85:
         3a:bd:5b:16:d8:3d:d5:c8:0a:e3:12:7c:1b:36:a0:2b:f5:19:
         d2:64:13:b4:82:14:77:e9:a6:95:9b:f7:ba:0b:e2:93:72:dd:
         eb:fc:b3:1b:5d:07:78:cc:71:91:59:93:c4:88:f5:d4:b9:bd:
         94:f3:cc:00:8d:83:0e:55:05:dd:96:0e:d3:25:3b:70:4d:f1:
         0e:cb:e2:07:b1:c6:49:f9:b1:e1:80:6f:1b:bb:9b:df:8f:2b:
         28:a5:33:3c:34:6b:df:82:5b:b1:d3:42:80:2e:4f:bb:90:c1:
         05:db:70:00:1d:e5:7d:34:c5:4c:86:03:01:23:2e:00:7a:9c:
         eb:03:fd:d3:d6:13:a8:33:91:f7:18:0c:d1:1d:52:c6:51:d1:
         96:ee:1c:cb:77:4a:94:3f:75:de:72:78:82:83:14:f7:bd:23:
         18:b1:79:d1:57:2f:fa:60:a8:a1:b2:bb:dc:aa:1c:f7:68:af:
         80:e9:3f:bb:65:c4:d4:00:68:ae:1a:24:b4:f7:32:ef:a2:6d:
         cf:6d:6f:30:e9:ff:7e:44:75:69:99:ba:b0:80:11:fb:28:00:
         28:78:0b:38:d4:81:df:ba:82:80:67:37:fd:6b:05:41:f3:08:
         b3:50:e1:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpHR4JeTZpw1rb0nYvk7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwOTIzMTkwMDU2WhcNMjYwOTI0MTkwMDU2WjAzMTEwLwYDVQQD
EygwZWVlYzNmNDNhZWYyOWY4YmQ4ZmYxNjdjNGM2MjUxMzU1MWFiMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKHacibNUlqvVUdgAc4qM2aTngxe
f8anMCoQxJgRtMdgYGkFo5IS+eBBuNi3Gl1p8b8NvhyfeX3Hu/MHpLGtxFvoaTCz
PjIjSL2pupVayvsxFQMpoG9rGtH5D2N6eH+pZCkS/fw5hPizwpauWBnBESQAEuIW
KP94ld9SXCGDMECLhv3GH5EhaA0PxjoKtS8IQ2AV7wPMMcAdb6be0PFljRyc8XzH
Lq89adavmgkFAbIQPScVz3DCdAEgbKuoOL7578aqZ5gpAyqGm1v7bzYAK01vK5rr
PGXsWQq3u+ddd3kWDdmt2sQHn+iExkk7X/lILueNQFsF3olidsrrKn3RZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7uw/Q67yn4vY/xZ8TGJRNVGrNIMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwOBA2Vk
rxFP1uJuJMaOw5qFOr1bFtg91cgK4xJ8GzagK/UZ0mQTtIIUd+mmlZv3ugvik3Ld
6/yzG10HeMxxkVmTxIj11Lm9lPPMAI2DDlUF3ZYO0yU7cE3xDsviB7HGSfmx4YBv
G7ub348rKKUzPDRr34JbsdNCgC5Pu5DBBdtwAB3lfTTFTIYDASMuAHqc6wP909YT
qDOR9xgM0R1SxlHRlu4cy3dKlD913nJ4goMU970jGLF50Vcv+mCoobK73Koc92iv
gOk/u2XE1ABorhoktPcy76Jtz21vMOn/fkR1aZm6sIAR+ygAKHgLONSB37qCgGc3
/WsFQfMIs1Dhew==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:27 2026 by rpki-client