Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          Jh4ta1NuiJRRogRNLb13xIpQHxEdwCIf9JBsxEbrih8=
Subject key identifier:   FA:50:76:77:4A:42:3B:C8:B1:0C:49:28:A9:3E:FD:70:CD:9D:64:32
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       01A06E704B8ABC3C9F587F411004D0149A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          1BF2
Signing time:             Fri 04 Sep 2026 22:00:47 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:47 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:47 +0000
Files and hashes:         1: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (hash: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=)
                          2: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (hash: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY=)
                          3: 2v5KfbbqXypEdvnneh-IvevrJYk.roa (hash: yAxI+DeCo7N6vLDv1UWF5TQ29JSR4v2FexiT7L1EZvg=)
                          4: 34KmZ8VrdL0919mvZ699Gx_xpwQ.roa (hash: Q5D7jFgCzQNL3luiUnYO7ELZV2sJxrboi490AwwO1mY=)
                          5: 7A_Wg-GrnQXpFUXuOQAivYNJ_rQ.roa (hash: 2k5I60ryuJpSRHrRxZ/1aGdhd3wJv6KTjrP7UTeG+LM=)
                          6: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (hash: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU=)
                          7: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (hash: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE=)
                          8: 9--7k8s2vBgfv9cOtklxxBdlhTg.roa (hash: JcI1d/J1LHsYTNe6jH8TPu1qVojYT6V7vlT9I10CzUc=)
                          9: 9TEom2qJCbi-WYi6qmqT3hSFwhw.roa (hash: CH3B6IY6Y6wuvlMYVvPTvyxektEMQVmFRpYyNTrssk4=)
                          10: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (hash: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU=)
                          11: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (hash: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw=)
                          12: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (hash: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds=)
                          13: DsLRswrIL2bjarddWXxgMaYz0pk.roa (hash: cLYKT6oBtCkgrNFlRquRG12LDkvlkhXPXiMWFdBt32w=)
                          14: E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa (hash: bIj2Xc2XKCsJfzUcbvZ5kW4+OYzoOdbLVfr+TNdbU8c=)
                          15: EzAvUa-DIA3eEDtJjO0Um9queOI.roa (hash: ECobVUBnXH2oYzCAfJ9XXnwI5lQiPG4kGFA/d4iPWJo=)
                          16: F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (hash: WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=)
                          17: GUfx0kxQaRuU4ZNreYw2APXI9pY.roa (hash: RF1Q4ReKdRsen02ofp/EoLwpUqLRnY2vebMTfBPWYSM=)
                          18: Iv5goV36XyJf8h8Jg9f5HpjvVkY.roa (hash: /qW7a3x4Bqdh0z0vzoFyz5jEY3aTbOB6BSfGATNwGVI=)
                          19: K1et99aGlCbRN0atD8laA6wCpoM.roa (hash: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=)
                          20: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (hash: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE=)
                          21: LOHkKboHHj98Sud03cU5OIAfDEA.roa (hash: jTKW2wbQOoCIA97EofLg3elq1L7+ob1lcwso1uyxnO0=)
                          22: Lq1_kC7K6rSER7BBOksIzNMYSkk.roa (hash: PUuNNwZQh6bBg3pgTnG0BSz1bnW6aW1AJW36sfA609k=)
                          23: OUXpbUvVF0LfM_h99NKRVrTpQbA.roa (hash: 4+n7cJZdT1l/mo+WAz2dgVCBA4UOyFCPZjMK/L+QZts=)
                          24: P4YSKS8c6CQstzUK8NO_qKzuTQU.roa (hash: NX+f4HFf+ZhlPyEWL+di3zE7DxnY4ZI9ugs4SadT1rg=)
                          25: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (hash: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic=)
                          26: Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (hash: cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=)
                          27: Z8LmUM-GU0jq0b-exMtt-gLqFl8.roa (hash: BF9VNl1VSdTRVDJzeZcHMUu08FF1duVEeS4jSsf1yS8=)
                          28: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (hash: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg=)
                          29: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (hash: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk=)
                          30: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (hash: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo=)
                          31: h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (hash: 9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=)
                          32: hGFaHcwrovzGAIYRLQIthoUbz9I.roa (hash: EW//8vzHeEI6MBxbWRLHvlhu2IW8hbQriarbUOI8bI4=)
                          33: kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (hash: uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=)
                          34: kW-r8QIEYmaxCVGniGM_-GcqcR8.roa (hash: 1yJS120qcY92Wdy/2Q7V4YtAL73+3bhSuulyPTJkyZ8=)
                          35: lHNKO7sNNTzQ5Qf7iXFu2MykVlY.roa (hash: gSBFoF7U8vP8sddt6bGyOP5IVVcu/X14ckwK7nmTGi4=)
                          36: mREkMg5h2CoIwruTXu13t8R24-k.roa (hash: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=)
                          37: mWE26VhH4aZItoNdm61WGalJaz0.roa (hash: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=)
                          38: qMZAruuP9Gr2FFvtpEgI6qI05r0.roa (hash: 6zZjV59ARMq9jQ+jwaDkzg9JMhzsPAyhLlLAT5gFk7w=)
                          39: qnBlcf9JhW8TObXs73jvCcNhtKo.roa (hash: TxuaE98VMv+izUH1dBB+VT7KFcTz64Gs4C9a9Q6XFPc=)
                          40: rmbYhhizFW4e8aPwl_hv-9YaUiU.roa (hash: sui7cnrZW8UE7Gl/bNAaYZnnZ/dhGFrEXksCYskVvBs=)
                          41: tv--uDVRTnOlBD4wLkX6klTWyHk.roa (hash: qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=)
                          42: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: d1jbkRuwzusa6tBm2qzyBCTpSCkgyVqMJ/xaOW+06Aw=)
                          43: ye5JAz107-QVpFyi481T0DZx4h0.roa (hash: r2POUNpr2WCW9cC/BotLIDBkPCKZVoCCOPc5NI5c8Vk=)
                          44: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (hash: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:4b:8a:bc:3c:9f:58:7f:41:10:04:d0:14:9a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Sep  4 22:00:47 2026 GMT
            Not After : Sep  5 22:00:47 2026 GMT
        Subject: CN=fa5076774a423bc8b10c4928a93efd70cd9d6432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:f8:48:8d:1c:01:0e:f1:93:97:5d:2f:72:
                    7c:24:c6:a8:ec:a7:54:dd:54:d8:50:0d:29:79:4c:
                    aa:a8:63:54:4c:ea:58:90:cc:24:30:f1:42:d4:65:
                    2c:91:5a:1c:ce:5e:19:5d:1e:da:e5:c0:8d:cb:61:
                    15:53:93:11:89:cc:a5:0e:04:99:34:7e:6b:e7:96:
                    27:fa:8b:25:f2:21:15:18:3e:55:cf:69:a4:26:b2:
                    3d:68:b0:60:4f:3a:e1:f4:c3:db:f2:93:b3:af:3e:
                    6a:9f:5e:f7:da:ad:76:f4:ee:83:50:66:c8:00:e5:
                    36:00:b1:b2:12:cc:9d:a5:d5:5c:12:5d:91:7f:93:
                    02:1c:3f:01:78:8d:63:ca:0e:2f:6f:ec:8d:4e:71:
                    17:67:e2:10:db:db:09:e4:60:41:6d:14:22:da:a9:
                    14:b2:98:b4:14:ea:d9:b5:d5:bc:f6:da:00:f5:a7:
                    99:e9:ba:94:d8:4c:fe:5c:6a:e2:f3:4a:67:ad:e3:
                    76:94:53:a0:f1:86:02:59:eb:7b:ac:e5:16:63:e9:
                    f0:3c:b9:47:d9:74:d3:c1:65:f8:4f:03:e4:c8:d4:
                    87:ec:7c:37:38:93:54:40:41:21:27:51:85:0d:25:
                    20:75:80:9c:e5:a9:ec:fd:6f:a8:43:f9:b4:0f:09:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:50:76:77:4A:42:3B:C8:B1:0C:49:28:A9:3E:FD:70:CD:9D:64:32
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:68:78:ae:c4:39:a0:15:21:df:d3:bd:e6:fa:59:3d:00:cc:
         35:77:0b:1d:58:d7:8d:37:bd:53:40:7a:bc:76:ed:96:96:a8:
         a5:b3:72:b1:ed:16:ae:3c:f5:1b:8a:8c:b1:5d:13:05:ea:1e:
         78:fb:0a:4b:cf:aa:61:d7:68:0e:f7:48:6f:30:4d:df:34:bf:
         c8:8e:9a:66:dd:1d:d5:86:4e:1d:7c:1f:8c:d2:ee:e7:7a:2d:
         73:4d:8d:01:af:13:d8:ea:84:4c:68:e9:8c:8e:2e:0b:dc:56:
         1e:46:b5:e6:45:25:2a:e8:e6:04:b8:e2:62:71:9d:5b:96:c1:
         4b:7f:a5:91:91:de:8f:2b:4b:7a:2b:37:5d:91:4f:c6:9c:98:
         b2:23:60:35:f8:28:68:a9:b5:0b:23:7d:07:a7:5b:93:fc:22:
         25:3f:28:de:b5:6c:e8:a8:53:11:3a:62:07:9a:a1:ce:70:07:
         47:2e:87:a3:d0:16:26:90:fd:3b:07:bb:1c:75:c7:85:38:9f:
         be:c1:75:fc:72:b6:ea:75:d8:ae:28:62:f4:3e:fb:17:80:ad:
         2f:e4:5b:db:9d:7d:99:aa:f5:a7:dd:a7:cc:7e:5c:db:ba:f8:
         cb:b7:9b:e0:da:20:65:38:af:cc:37:9c:65:36:e3:48:69:a0:
         fb:1d:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----