Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          g2U6hWzG8/dD4Q8N+EExiZBLEorPl258G0ZqCyxOslo=
Subject key identifier:   85:87:37:7F:9F:8D:AB:21:76:EA:EF:A1:C7:29:DB:0B:B0:1C:88:1B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       01A15F9FA2DE7F573C6A4FF26331443B1FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          1C73
Signing time:             Wed 21 Oct 2026 18:00:59 +0000
Manifest this update:     Wed 21 Oct 2026 18:00:59 +0000
Manifest next update:     Thu 22 Oct 2026 18:00:59 +0000
Files and hashes:         1: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (hash: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=)
                          2: 1-AzKGhO1e1-VFJNTOfdyjclw52s.roa (hash: jAf9VTsYtuY+Cq6A1aThYIqSUsKwIIxl7HpjFV0A63I=)
                          3: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (hash: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY=)
                          4: 2v5KfbbqXypEdvnneh-IvevrJYk.roa (hash: yAxI+DeCo7N6vLDv1UWF5TQ29JSR4v2FexiT7L1EZvg=)
                          5: 34KmZ8VrdL0919mvZ699Gx_xpwQ.roa (hash: Q5D7jFgCzQNL3luiUnYO7ELZV2sJxrboi490AwwO1mY=)
                          6: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (hash: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU=)
                          7: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (hash: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE=)
                          8: 9--7k8s2vBgfv9cOtklxxBdlhTg.roa (hash: JcI1d/J1LHsYTNe6jH8TPu1qVojYT6V7vlT9I10CzUc=)
                          9: 9TEom2qJCbi-WYi6qmqT3hSFwhw.roa (hash: CH3B6IY6Y6wuvlMYVvPTvyxektEMQVmFRpYyNTrssk4=)
                          10: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (hash: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU=)
                          11: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (hash: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw=)
                          12: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (hash: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds=)
                          13: DsLRswrIL2bjarddWXxgMaYz0pk.roa (hash: cLYKT6oBtCkgrNFlRquRG12LDkvlkhXPXiMWFdBt32w=)
                          14: EzAvUa-DIA3eEDtJjO0Um9queOI.roa (hash: ECobVUBnXH2oYzCAfJ9XXnwI5lQiPG4kGFA/d4iPWJo=)
                          15: F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (hash: WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=)
                          16: Fok1sJSzqFAOs0PgWQR8nTPxRAg.roa (hash: /2v7b+Z1LpSiystE58hXYj8P8zZCBHlC7D6hQtbgbE8=)
                          17: Iv5goV36XyJf8h8Jg9f5HpjvVkY.roa (hash: /qW7a3x4Bqdh0z0vzoFyz5jEY3aTbOB6BSfGATNwGVI=)
                          18: K1et99aGlCbRN0atD8laA6wCpoM.roa (hash: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=)
                          19: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (hash: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE=)
                          20: LOHkKboHHj98Sud03cU5OIAfDEA.roa (hash: jTKW2wbQOoCIA97EofLg3elq1L7+ob1lcwso1uyxnO0=)
                          21: Lq1_kC7K6rSER7BBOksIzNMYSkk.roa (hash: PUuNNwZQh6bBg3pgTnG0BSz1bnW6aW1AJW36sfA609k=)
                          22: OUXpbUvVF0LfM_h99NKRVrTpQbA.roa (hash: 4+n7cJZdT1l/mo+WAz2dgVCBA4UOyFCPZjMK/L+QZts=)
                          23: P4YSKS8c6CQstzUK8NO_qKzuTQU.roa (hash: NX+f4HFf+ZhlPyEWL+di3zE7DxnY4ZI9ugs4SadT1rg=)
                          24: SK8oD9dX1pex-XWcg_LOZDDixjk.roa (hash: Tr8N/vICSjt7whYDjmOpQ2Z/wmcXO7qKFL1jtEkqVOg=)
                          25: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (hash: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic=)
                          26: Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (hash: cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=)
                          27: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (hash: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg=)
                          28: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (hash: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk=)
                          29: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (hash: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo=)
                          30: dnNJ8Xg2PhHkyr0BWrokQD0nir0.roa (hash: 3UsQ6p+AwwG0Mc6mxa53PsthOFPtpwqPhHVJgBzbHwM=)
                          31: h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (hash: 9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=)
                          32: hGFaHcwrovzGAIYRLQIthoUbz9I.roa (hash: EW//8vzHeEI6MBxbWRLHvlhu2IW8hbQriarbUOI8bI4=)
                          33: i_Xm1397X-jAOLpGs6qho2vW37E.roa (hash: q7qihAUwSOVusXS3esPN5K8fN8urlFyMTMcP99WhlZg=)
                          34: kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (hash: uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=)
                          35: lHNKO7sNNTzQ5Qf7iXFu2MykVlY.roa (hash: gSBFoF7U8vP8sddt6bGyOP5IVVcu/X14ckwK7nmTGi4=)
                          36: mREkMg5h2CoIwruTXu13t8R24-k.roa (hash: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=)
                          37: mWE26VhH4aZItoNdm61WGalJaz0.roa (hash: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=)
                          38: qMZAruuP9Gr2FFvtpEgI6qI05r0.roa (hash: 6zZjV59ARMq9jQ+jwaDkzg9JMhzsPAyhLlLAT5gFk7w=)
                          39: tv--uDVRTnOlBD4wLkX6klTWyHk.roa (hash: qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=)
                          40: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: vovXra/oyBXOjcl17TioSI+V16SR4atkDHnrHf3RjHY=)
                          41: ye5JAz107-QVpFyi481T0DZx4h0.roa (hash: r2POUNpr2WCW9cC/BotLIDBkPCKZVoCCOPc5NI5c8Vk=)
                          42: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (hash: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:9f:a2:de:7f:57:3c:6a:4f:f2:63:31:44:3b:1f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Oct 21 18:00:59 2026 GMT
            Not After : Oct 22 18:00:59 2026 GMT
        Subject: CN=8587377f9f8dab2176eaefa1c729db0bb01c881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:24:a1:f8:c5:f3:60:cd:4a:c5:48:40:36:
                    62:72:e4:07:ab:71:40:31:e9:76:45:62:8f:df:48:
                    4e:54:a1:2c:65:58:b9:d1:0d:a0:fe:c8:20:f1:04:
                    b6:d5:04:33:00:13:b5:35:71:33:ab:e3:67:c3:6d:
                    4e:d6:75:1f:03:10:59:92:9f:8f:79:a2:a2:25:3d:
                    ea:65:90:34:a0:a5:b3:e3:fa:72:d2:f3:b8:68:eb:
                    bf:4e:bd:c3:d4:99:17:44:9a:5b:1e:dd:f1:df:c1:
                    1d:f8:83:94:17:87:5d:61:6a:e0:05:b8:11:6f:44:
                    72:e0:00:38:6b:3f:5b:53:ba:c6:fc:fa:13:53:98:
                    19:08:d4:d4:13:f9:d4:94:a5:89:28:42:39:64:64:
                    76:8a:5e:fc:00:11:48:ea:f6:93:4a:43:be:9e:bf:
                    ae:0e:6c:2e:7a:80:3b:f2:e4:e9:a0:38:29:bd:d5:
                    ca:83:af:8d:3d:7b:11:9c:ec:10:9f:55:f7:4e:14:
                    59:05:ea:cc:5a:22:39:d3:08:11:05:ad:4e:c1:03:
                    19:d4:91:c2:47:48:67:f2:8c:7c:ee:91:b4:7a:f9:
                    21:cf:7e:32:f4:94:34:fd:fe:e7:70:39:21:72:86:
                    a1:94:37:27:a8:50:a4:a2:8b:e8:0f:de:9c:ca:9d:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:87:37:7F:9F:8D:AB:21:76:EA:EF:A1:C7:29:DB:0B:B0:1C:88:1B
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:98:fb:e1:07:26:73:73:05:0a:46:52:6d:71:5c:c5:c0:cf:
         e9:f6:fd:0b:48:dc:89:cc:f4:96:0c:a4:9a:9d:9e:7f:4a:af:
         e3:c2:ad:69:74:6c:89:0e:73:6b:48:06:d4:05:87:7b:b7:85:
         2a:7f:1b:ff:ce:c4:aa:80:12:42:11:4d:ca:0d:57:5e:3c:f8:
         e5:87:75:05:5a:41:52:d8:15:36:df:7b:56:9f:63:ed:b7:03:
         cf:5c:18:8a:53:1c:77:cf:ff:de:f7:4a:c0:65:94:d4:05:d7:
         79:68:5c:b1:1e:68:26:38:00:ff:57:5d:c3:74:a2:5c:0c:3a:
         25:3e:4d:09:7f:fc:1e:6d:36:38:72:ac:b0:f4:e2:91:aa:6b:
         dd:b2:cc:87:61:e7:4a:d4:58:fb:2c:48:c1:0a:a6:d8:67:fe:
         24:f4:8d:ea:b3:32:97:3c:41:d3:fe:df:f5:e3:ae:dd:46:72:
         8b:62:5b:0c:fa:5a:a1:b6:4f:57:5c:b6:fc:17:a5:0b:8a:01:
         1c:65:61:fa:6c:c0:a6:03:bd:cb:0d:9e:fd:b6:d6:f2:07:51:
         f6:36:3e:61:02:8f:da:2e:b2:85:1c:0f:63:36:bd:51:0f:20:
         ab:44:8b:fc:fc:39:35:e5:66:c8:e5:e9:c3:43:44:f8:4f:47:
         87:69:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:53:15 2026 by rpki-client