Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          BCN6KpSlBnXXQ0EzHWHzDhlUEtx6FHHg1y60JAxYeS4=
Subject key identifier:   EC:FD:AD:65:F1:E8:CB:D4:93:A5:73:19:C8:F4:F6:38:9D:27:F3:7F
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       01A150D126B002BE1A7613A7BE761CA56667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1B13
Signing time:             Sun 18 Oct 2026 21:00:46 +0000
Manifest this update:     Sun 18 Oct 2026 21:00:46 +0000
Manifest next update:     Mon 19 Oct 2026 21:00:46 +0000
Files and hashes:         1: 01kfrBCLXsb_MBRY0V39-NQ7rgQ.roa (hash: 0enDaZKwuYkATDRkwnd98W7Je5T9WDnrNDfkylmrhd0=)
                          2: 0GwtoUzvyeaOyVgiz5_5u_fQDK4.roa (hash: ZzkFfie4rwQqLWELgA2gskNhetqEHZ8eQDpZfZACQJA=)
                          3: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: l4U7mTGWjsmLMOffOFCX5/JSETa6oM5cG2QiuqNmP9I=)
                          4: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          5: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          6: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          7: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          8: 2f2KbLWLRgefrh1jMcyUmlWtbBM.roa (hash: 7abS44zNq2ylx4BaFqOQr8b/IG7Bh+rBDu/FXXp3Wbc=)
                          9: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (hash: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=)
                          10: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          11: BAIynlsyHU_iC9dbEPMu0P4DC0o.roa (hash: NwY40F+kFG2yfJLJ2eEnwJuZ8Y7l5nWAQmBeMkshuLg=)
                          12: BBqUDSX3Fvve-FGx1jFivIUVEmM.roa (hash: FfIefLDtd+nMu7zbtyHVxd8RpD4OF2BShpnpm9l0ac8=)
                          13: DKUyPVhbJsr2YpyxzKhcANpBlPM.roa (hash: 3IVWZ466itIGvJTvHp9kr/j/W5qFrG3UKLMoT1PFcaU=)
                          14: DSpPfa2LINgSn4RWcauAPaZB7b0.roa (hash: wojB04WWLh5GW0+3aZJmnkXoyFmBS/vwNcYkevXsFQo=)
                          15: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          16: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          17: I1bm7eXIZpq2tqGKBIuB8NRWQPk.roa (hash: N9y61MIeJ5NO8Eq26x4lUQLtlEQG0sukKq68n6T3Z5U=)
                          18: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (hash: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=)
                          19: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          20: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          21: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          22: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          23: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          24: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          25: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          26: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          27: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          28: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          29: ez3sINlMTISdZyBV_hJqmoLINo4.roa (hash: SrEIOLPfYZlxkGiTaWbM6ObQhoWyRVfvSGT8gHOAs4Q=)
                          30: fp6ictf1RPii-adx7W70IlYl6fU.roa (hash: la/94xMKQ4s79JrZBaZczox0+eCbLMhzaojbkXnVslo=)
                          31: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          32: iU_edoD3dro4LI12qpTJkL677Ok.roa (hash: bwRIWWpKMtUImsL0W7xsf4seiN9R8OMV7A35cOsyuOY=)
                          33: llUAWrZ6WaIBtR2t4OAaWBwaSqw.roa (hash: UAG91y2VTNbr1ydtABh+tZjSseWuO8r4OTw1KcbR7Mo=)
                          34: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          35: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          36: pjDB1GDdcVVreVj-Q3zh-jUvRg0.roa (hash: 0rt1hCmLolk7xz/j43eQn2e6jlbNvi4KzsoV0vsgSVc=)
                          37: qAjo8mLZ3rYz_2SXK-qI4TMpe34.roa (hash: oi66aoEjMzmqwegaEM3aSTTOTAnD9IyZCaAtgddggOA=)
                          38: sCp-ic69EDxQ8ZLfJ7taL1pp0CE.roa (hash: xaCYWU/obHtmqJSwbSvW3HJlolsUeKexX3oOqFczu6g=)
                          39: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:50:d1:26:b0:02:be:1a:76:13:a7:be:76:1c:a5:66:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Oct 18 21:00:46 2026 GMT
            Not After : Oct 19 21:00:46 2026 GMT
        Subject: CN=ecfdad65f1e8cbd493a57319c8f4f6389d27f37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:f5:28:39:d5:5b:dd:87:b6:38:59:a9:20:
                    a1:17:84:7a:b2:84:7d:5c:53:8f:f5:b8:da:5b:a5:
                    e2:37:e3:96:f8:aa:ba:8f:08:9e:48:cf:5f:5a:66:
                    5b:bb:e7:47:94:ef:1e:ed:26:cc:41:04:fc:8b:85:
                    d2:79:51:5a:cc:9e:87:23:1b:30:57:ef:eb:13:e1:
                    9f:5f:6e:3f:ad:02:0a:6d:19:34:76:f7:72:fc:47:
                    79:bb:e5:7e:87:11:77:b8:2d:4b:57:2a:52:bc:f7:
                    50:29:0e:8e:a2:79:ac:ae:71:b3:5e:94:55:21:39:
                    a6:7c:0a:01:24:37:45:be:31:62:50:61:74:9b:b3:
                    9b:a7:59:d0:46:db:63:e6:b1:eb:9d:c4:70:33:fd:
                    46:06:9b:69:7c:f8:a6:16:f3:05:88:6f:af:91:64:
                    57:6c:ef:06:ff:ae:bc:a3:02:8d:db:31:97:14:e6:
                    aa:be:92:5f:b0:40:ae:61:02:5b:ac:77:7d:77:67:
                    33:dc:0b:17:11:e8:de:9a:41:0f:4c:02:2a:8c:6c:
                    0f:33:4a:d0:82:9c:07:08:37:d4:03:61:3d:5e:76:
                    64:a6:f1:aa:0a:19:5c:38:ad:1f:d8:87:1e:54:68:
                    9b:ce:22:8c:c8:19:bf:72:45:08:39:44:ee:d3:6f:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:AD:65:F1:E8:CB:D4:93:A5:73:19:C8:F4:F6:38:9D:27:F3:7F
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:33:2a:81:ea:d7:07:8a:b8:9f:91:2c:60:4a:e6:6d:75:95:
         3c:8e:6b:e5:ec:bb:c2:5a:ac:c9:18:de:fc:bd:ae:50:ba:63:
         cb:39:70:4a:cb:04:9d:ac:32:d7:20:89:f4:9b:08:eb:23:9a:
         d2:b7:44:4e:55:ba:68:6b:0d:a7:a6:8b:b7:8e:79:52:6a:31:
         c2:6c:b6:a4:ba:7a:a6:0f:05:4e:91:f8:3a:b8:a0:8e:2f:9a:
         3e:5c:45:3c:a4:b9:ad:2a:3f:8c:bf:54:fe:67:7b:26:12:49:
         05:0a:06:cc:c8:95:30:19:97:96:42:96:a0:5e:34:03:19:1c:
         21:1f:1a:c9:48:64:00:59:3c:ea:3b:4d:7e:64:1a:04:4c:dd:
         e0:7d:4b:fa:de:3a:04:3c:15:b9:f6:86:7f:ed:e6:d9:a0:10:
         47:c1:0b:f6:60:63:cc:3b:ee:f9:a0:15:98:0b:f5:7e:0e:c9:
         f7:72:70:ea:6a:2f:66:df:b3:87:36:ee:a0:2e:c2:b6:69:82:
         d9:d2:81:a5:15:1a:34:08:a4:7b:ed:7c:5d:f5:51:ba:49:b9:
         ae:80:7e:47:4d:76:ac:17:2c:c5:5f:1a:0b:0e:98:80:5d:39:
         5c:ab:a8:20:88:bf:ca:45:a3:ef:32:1d:54:32:2c:df:3f:6a:
         3c:d4:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----