Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File:                     CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier:          QyvQbnskZ03mcx9NgBYFQcu/DslHBo1MpSzOC60FkzA=
Subject key identifier:   12:50:67:9C:D5:82:3E:DB:9D:07:A7:13:CC:F1:A2:FE:D1:0C:1D:D4
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       01A0B9532CE0F0CB1D068507B2DB58AA8175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number:          1A82
Signing time:             Sat 19 Sep 2026 11:00:30 +0000
Manifest this update:     Sat 19 Sep 2026 11:00:30 +0000
Manifest next update:     Sun 20 Sep 2026 11:00:30 +0000
Files and hashes:         1: 1-6AwkgX1FMK4_Ko0mKFcJ8edvm0.roa (hash: tKUozaQ39ea73+P1a3NKi94lOX/X8IQKkspnuFoW9eg=)
                          2: 14WoekfhkLXxAS06CnB3g-cIjMw.roa (hash: MVYZfQxMUBAoXupy2mGEC8jlMhPeLSN4boghrPq2PGY=)
                          3: 1We3sM1PJzJjh431T2RewyKy7qc.roa (hash: TwjuUkz+WwHOXiQ9h/horDxuIN/qowEGiYayrZl3rRs=)
                          4: 1elNs3CyfXMunzQLfBYP-U8K7Gk.roa (hash: w9zovo1S0ml/8Ow1nEoZv1qRbfQBxU2d93NrR4rwVxY=)
                          5: 1j9DJV9MjnKXa5ixkpjU4rsspH0.roa (hash: TY0mkQwq6+kCeWNBcAhfn8BLNy+gb6Rq0kdAVdbTSV8=)
                          6: 1mHwjPse8dBa3mTY0ngPxZy2fF4.roa (hash: 0jWnXLeeExEdfigqwPsBPDCzZxgAjAQtznk6zQvb5Zk=)
                          7: 1sCBBC80-b387uFvyo8gem0qgBM.roa (hash: EMdTPavEe7DHxlSw4p3yZh2opqJKAxl5uGVTTYPAb48=)
                          8: 1xAY6nf6bhffY1bramdmANJZguM.roa (hash: InOt9rXki+in0THMVeBakB6EoQ9+ZbMyIjr4bHquWqY=)
                          9: 2a-W31onNiq0P4jZYsOq6cktHKs.roa (hash: piKQ/orqtUMianHlky3opOkohv1nKhRucZj+NR8lslQ=)
                          10: 3PYp69Isl6VmDKrE8-_c0R_s0QY.roa (hash: 4MhpSOARWnFvB3IeWDhAMEL60atNMrQJ9zm0TOa/gKo=)
                          11: 3dCExH2cQ3AwBrUhpOwTQZxBr3c.roa (hash: DaT6zSsVgNzssXsoUQLL8dxsy9Ivm2hlBuq9k1+WKeY=)
                          12: 3lfjDZ_LyMbB8PjRnMxPCrvVikA.roa (hash: lHB/WmiejVwebpUIQdg5G2VpXchvQiJHaJHJxGNpYIs=)
                          13: 5L5YO6O362HNIylk8JgyA5EYFPk.roa (hash: IZuegZrgDlTtynSC78Vomk2yVDu9mi2qhjUEemSFZl4=)
                          14: 5bTbov2vGcJbN7vkkm8HHwB76jA.roa (hash: 5QyqxIyT6Sifuoap6r1mophGR/3BA1CE/nr94210ZVg=)
                          15: 7Xrwmhrg_gk1TSfb5HQWtLeYSyw.roa (hash: jnzYvaFScNPNn/hYq4GU8Vjj7fRUWEERctCQEuyXXJ8=)
                          16: BOEBBBh-wUY9a-sztOKP9U3lKUQ.roa (hash: itktgNiqDRBYsQDnVyPK2t6X3lC4am+OkFbJtafybJE=)
                          17: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: S6g04SQujyt5t25LcnBDLRqWtyEoQqbo4fQTm4E2Gbw=)
                          18: DF4qx1DNox0FJE2H-D0ZUTMQcKQ.roa (hash: Y2WFD4vu36lVNJG1rXcR3AVi/f0D3YYRbsZI0ZVNT0A=)
                          19: EUbcJKYp4l2A_7ZNItE_wS9IkZs.roa (hash: /Sp8zX73TUdqSeWr9V+B4KpQknP4qFgV3pGresv3OHY=)
                          20: Ec6xx1LGOAqnO3xr8TXlK25WXOI.roa (hash: P5cxezkPKyfNQVX7JIKGSuvktL5d4uVzE/ictGTTWaU=)
                          21: F6dm6rbFCCa1zY93BjJGyeETnt0.roa (hash: rxY7ve2qQTaZM6DINcyNbHpjuzjA22sFgi08sTK9Teo=)
                          22: FwZwmrBonBKjGUPaxKOdW9tJPZE.roa (hash: 6AkuMHZSZQWDlZZzrArdItO9G17pQLWA8eR+XLyo3G4=)
                          23: GmXCp-ryty__BS-cMpg7Kzz_9zc.roa (hash: CX9a+ejz3MuUVit0PYjhdyQyZtSmsfc0Blvt0HfHTTs=)
                          24: H8YoN4cZRGQKS0rAWtWUFSIVNC4.roa (hash: OMznwq3IiJ/u8ws+4cjxPVNfDGqlT+0CgLV4+JO0kU0=)
                          25: IB4kpRXfN9uF936LivmcILxsHKY.roa (hash: 5mZKCslxXERs71x3zlgmnZzQrGQsC9EfZx9YdIERIG0=)
                          26: JODr69-NdaIhqMsgmSCOuYn53H8.roa (hash: +iLXG8g1PiijENvmf0d+SHQHwxyXOPIbtKP03tOoopk=)
                          27: KVp-X6pskFOLFA64Y6Du-D-F51M.roa (hash: HH/+DRSaTYYGlAkGSve0C9OsQuWiUipWN0YkNPz01Dc=)
                          28: MwGfkhoVY9yczHNnMmopKOkQDQ8.roa (hash: bMcTFE62Bn8JSiStl6gdzWQDI2iODh7ZXTG2oU+wKww=)
                          29: NB4xnTAn1RNn-vKgoloy8gS60eg.roa (hash: EZrWgvp/yuFOGkdGh7Bk3VNJiuUHm1vRc0weE8SV8LA=)
                          30: O1MPhvu4d3pHIkDu0lMOleZog6I.roa (hash: oSY03wl4A0aLdGeJ42G+K8hUDUp93yYUE1W+f4Xtqts=)
                          31: OuUgPMDiVgWEYNd2BtOVpNrZ6hY.roa (hash: P5f1XjiYANfvf96nSn3cE35oeXR7m62v2srju0CYx4k=)
                          32: QZKPOW9fdaZ6CFZZuHr5O3FdSo0.roa (hash: w3kv2Hh/xkZB3qu7NtFf6C0ytmrzwo58vPyVoDXMw14=)
                          33: WU6rhKIDYlOBv_KujW4inrtjlG4.roa (hash: 2rbgw8A9EQVeZV9x2K7KWn9IeU+joxL6h/Zkl0kTa98=)
                          34: X3OoEc4wVuVwfk_vi-BedRHiVe8.roa (hash: IkEEbLoP+8jmiN0OcnpPt7LEqVzNMYcyeFyPjMqY22I=)
                          35: XZTw4KFczy0Ar8IqCJPDnCcipmc.roa (hash: T2Q5bH+6BDTYW67ls/KJ2Hzqb6SSUc6QBDh+WpjZUpI=)
                          36: YSY_txXwMkHdM6rWqITHXWNrMx0.roa (hash: yVuL5VVBfVsU2v5lXPaJcCeDth6XQ1mjX5ArOuZxxDY=)
                          37: YziHvLlX14Bti0NY0Sx9Yo0T07A.roa (hash: BqFk3R+lISgdo5MfFHtGUi+lKU/wYg9RUvKXdhv9EyM=)
                          38: ZcIzEiJwYxPPkm7Y7dv9lgoJaO4.roa (hash: JNU/zVs/QkSh6LxJiN5Vq0jrPYqEK//Cnc3GvRNfkSI=)
                          39: _CFbTUX76fNe5IBcq3MPcZlEtZQ.roa (hash: h74Tfn8ZJCfINzx1IshDwodGNgfiv419Rx5j9paQnPM=)
                          40: a9Rpht6AbCSSrUCu5Qo0lLFufA4.roa (hash: YbTv2Sx0z5Y5mlyL06fWpp8efAU8mcnO8mEi3/k+h7g=)
                          41: bR6IrI6IRBWDhHioFM0omeWX7i8.roa (hash: crwSUTpmdjAStqPHzp+6HwQh32ozDg2gBGMop2ftlyM=)
                          42: cXX9bAZ77mllTc24Rs11ApMBOt4.roa (hash: u6kZlsRKN4vR06ERgmYB+NC0fmg6/3nuEqaSfJpiAHM=)
                          43: cb0EEAKvHHk6_aqJKin8YWvHIXY.roa (hash: YDpP9XOCMWs39OOIHnBxhZZcAFGUEpXeEqdMZZFTkP4=)
                          44: d3rejRbUmYFr35-vLeZclqKXvx8.roa (hash: d9vdGuX+pqEbHEeXPkCALX9/MW/hcSbcEnVvwtApLDQ=)
                          45: dDH3JtUTrsvQnVBKVO7yHBntw-w.roa (hash: mfCB3VeF+mi9XRi1tKveWq8k9D8F3zzZ0DMoRWnR5Kc=)
                          46: dhTd6pQkdcZtziuGC_DE5cb_F00.roa (hash: LQtyf9un2S8HccFPJLYelD7n40x7iaFSSl5U5VCqaVc=)
                          47: fFFAMOimUOHtZ0P2EST6cc5eFys.roa (hash: z3O1rdXJNJiP4+IK6Eicrxx0Y0tbtDOd2jjJD9KkLHk=)
                          48: g1QZJFDUWcI6meJLRY34DSK6DWk.roa (hash: v/SDRfu3pCuA6fUj45FL2i7iRC9I2pKDfIdXLMvFVoI=)
                          49: iDAdYckwJ-cMfTZQzbOAuVNBPQE.roa (hash: 1/067i3fw6b+0AnVm88M01ZfwqO6rPWe5th/RiPzphI=)
                          50: iWdn0SfXIARXAoGavF-tJqA__v8.roa (hash: L7H4nDBc7qcTPVHc0qlRD2IQzpDawAZ7Ei6t4itV5to=)
                          51: jK0B1Odx-DON8kFCWSliovgRtnw.roa (hash: CRAL0nVC/AWRKZs3Mefu2T0wlgwV3ReA6cAR1onshxY=)
                          52: jmgnzzXKHNWCXs1YUwHet_VC_5g.roa (hash: IuYNZZ+cdQ4E7zjrKhZDgx+d3EvESgb/tI8LTJT2/+s=)
                          53: kMa3jYCmN7waNwsLMbRxg8toUX4.roa (hash: 8Wv4epjiq8kJysZgLrpdXKcPBVyOj3sbTfiO2uuE99k=)
                          54: neTZwdUrsvjvhEOVdhB7zsbctJU.roa (hash: 63MePPCn/rJDWdkOz9zyLAtuyWHAkx1hOc5iIXs9UC8=)
                          55: r1jEpAmwbttHC_NlYHCGTRBo1J4.roa (hash: KNjzSwPg/5u1YZ/73y/8b7ro/20GYgw/rgE7l+oyh+0=)
                          56: rEm_zkT8RkXOo6rrSI9S5ochz18.roa (hash: rmCUxRvddsYBO6Xa4X/4nPN4nbj09KJMyqWyGAgYBBo=)
                          57: reWnB99ZgyKfDxLMYCU0eB60oMM.roa (hash: zmOzk6zG/XUr+wMEv4S5Xft1/xA0B0cNXZlAxmFFu9E=)
                          58: wIzlJythJ95TmQTuoVrNf4UhbHc.roa (hash: UAuTe0NrAW1OWhtqr4YDAlRDzjgT1hn90G7ZXFo9x1A=)
                          59: yqWqycxDvODXOPVo60dSBqjaSe8.roa (hash: EZtFEMVoeITSA0JZ/DBD86/mXpaTIrHY/lFYqHddSSQ=)
                          60: zPO2AAYP4fSolIgxQyCrbObDgdU.roa (hash: /PEkT2RqsPLi4LdqtolHB+s3Gvd0guochWMoJPM13nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b9:53:2c:e0:f0:cb:1d:06:85:07:b2:db:58:aa:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Sep 19 11:00:30 2026 GMT
            Not After : Sep 20 11:00:30 2026 GMT
        Subject: CN=1250679cd5823edb9d07a713ccf1a2fed10c1dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:bb:84:1c:9b:da:18:e0:fb:2f:e7:1e:3d:
                    d4:47:3e:59:2c:c1:5a:54:5b:4c:11:59:3c:ce:e0:
                    b6:11:97:71:51:d7:78:b6:d8:a9:ba:82:15:3c:23:
                    5b:d2:cf:48:74:96:f1:ae:2d:96:6d:26:7e:51:41:
                    e8:c9:c6:e9:41:03:2d:28:32:87:b6:bc:89:2e:4c:
                    78:9b:0a:de:4d:6b:fa:7a:7f:2c:0e:07:78:65:d3:
                    ee:81:7f:52:1a:76:d0:66:9b:01:10:cb:93:57:fd:
                    c5:92:dd:c1:85:03:d6:47:7f:b5:3f:f0:8e:7b:00:
                    bd:b9:64:49:2e:2b:1f:09:93:b5:c2:0e:bd:54:2d:
                    33:71:23:e8:00:44:91:6e:15:13:33:5f:51:e2:de:
                    10:09:d7:6c:37:c6:8d:7b:8d:19:f8:c8:f6:57:04:
                    c8:60:33:1a:6b:a0:b6:cd:6b:97:07:60:37:4c:45:
                    d5:11:03:ad:d1:a3:91:c7:1e:35:1c:e5:09:19:2e:
                    34:71:36:4c:5c:8c:9a:1b:bf:c4:4c:6c:ae:49:2d:
                    85:1b:c4:52:ba:06:99:ae:9f:81:a9:dc:e0:99:e4:
                    11:7a:ef:ff:eb:d0:3f:ca:d8:b8:a3:69:62:9e:9b:
                    9c:7f:c0:ad:8d:6a:0e:1d:54:f1:82:78:97:94:48:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:67:9C:D5:82:3E:DB:9D:07:A7:13:CC:F1:A2:FE:D1:0C:1D:D4
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b5:4d:e9:22:58:9f:fb:2f:fa:8e:0c:a8:8e:97:8c:ad:9f:
         d3:52:36:85:00:cc:be:f0:b6:c5:d1:b2:fb:a9:b3:9d:c5:a8:
         07:ac:73:2d:8c:06:4b:bc:f1:19:65:bc:25:ef:bd:e6:67:18:
         83:e0:e2:69:b8:39:fa:5a:c9:17:7f:9c:ee:ee:37:02:0c:92:
         8a:fc:3d:40:6b:2e:0e:8c:76:d5:20:e7:1b:b8:e1:85:57:3c:
         4b:29:2f:a6:84:62:57:2d:b0:36:3a:3f:73:c3:6b:5b:1f:71:
         64:82:8a:1a:96:f7:93:91:df:8e:68:9e:8d:43:40:c0:40:a9:
         fa:26:f8:5d:61:b6:dd:a7:30:23:e1:9c:45:85:c9:50:1d:02:
         74:a9:14:7f:93:f7:ac:4d:a5:57:eb:f6:53:d4:7b:1b:3f:b3:
         09:44:37:88:a6:70:e7:86:61:53:d5:30:ae:6e:b0:bf:a0:e2:
         2b:2f:fd:ae:aa:07:0a:09:9e:1f:5b:e9:1b:7b:fa:36:f7:d0:
         7c:ac:e5:8d:30:b4:9b:72:01:5f:86:f1:f5:65:99:82:1a:be:
         8d:3a:7b:e4:76:24:b2:d9:97:94:66:04:80:83:9a:98:16:f0:
         95:90:7a:b7:55:4b:7c:3e:c4:f3:3e:75:c8:90:30:9c:5c:c5:
         a0:62:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----