Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
File:                     fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft (raw, json)
Hash identifier:          oEW+Wa6wi/Gk2xX+WKHPGm9neN6z8NU2MnvQjC7hdzs=
Subject key identifier:   4E:5D:3B:AE:27:B2:8B:DB:4F:1B:A9:39:02:0B:5E:22:FD:82:22:7D
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Certificate issuer:       /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial:       01A12EEA7C5F8E65A143805EE407AAA29DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
Manifest number:          0118
Signing time:             Mon 12 Oct 2026 07:01:21 +0000
Manifest this update:     Mon 12 Oct 2026 07:01:21 +0000
Manifest next update:     Tue 13 Oct 2026 07:01:21 +0000
Files and hashes:         1: 0CJ9u17zIPcruLsVJEts_CUZ3fw.roa (hash: Gg5SPXWp5505pInWA62OkVBNCjh/Ak+0D6VAOWzVDdM=)
                          2: 0xZa5yWUtoc-24jdugiflkmmIc4.roa (hash: qEcPxa3jNxSXYXEJgRMGQ6gYdmaxH+Dt3Hzpzwm1GXk=)
                          3: 1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa (hash: 0v6Z94OQ8OEYuVPUX/BBkgAoPKUlQ0dv8VbYzRMpkfw=)
                          4: 1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa (hash: DwYLVMYxwptlKH2Jo7VsqdJLNSIsspd6i0cEzgvakYU=)
                          5: 1gbHCEbgQwjeiouKm5GaF97BBGc.roa (hash: ybmEELamwbI3k/0S59jWHQ3NihRk/30dBtI2TdBBoS4=)
                          6: 2BycUX4OMpp_ONmpWqOOx8A7GP8.roa (hash: fBXfZQwwJARK7+JDrhcq1IBYyI1YOEEWIdgMx7lYI70=)
                          7: 2JFfv659oPFGOkGk_bNMMZy8rbs.roa (hash: 9gs7l3uhLE7j+4RGYjBCct/pVQeRefhiDRoUa8kkxMY=)
                          8: 31IuJXymzyCCz-nBx80UcTy2KJM.roa (hash: N3OXjTJ7vPVzKKs9xt/0Z8rYQDz7GcNmVIDCtknzJo4=)
                          9: 3OKNlLRJJnY0WTL3jmhbPyh3QVM.roa (hash: jE4i9KPU+4ZRPuD5yVgasSVEVq5ZbrevQvdkI1ApONA=)
                          10: 4w9eMhz25cgw3wBmUofTq4aW9uM.roa (hash: Yu6i3q4t0BYz44PAfY8hgxLUoKL6ChdFdr0U09RhdHg=)
                          11: 53nVjykINhU1E1uARYyClLYic88.roa (hash: zoRw839yzl1D6EZAFd7ggDldbFRrTlMpGkY1G7jePDM=)
                          12: 5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa (hash: NwWWrwv2iEIMkY7yf+unqyAydilFqabTc8rRRuphZ2s=)
                          13: 5pDS3kHKWiU32-QZaJs7OmwHgaU.roa (hash: 7a9hnytsdQqjYSTUgg430pVu5zqq3po37oF6uG0MC0Q=)
                          14: 7rCdRbLq6hIcfsQnA303r_W7D30.roa (hash: erc0IzcRLIFTs6Qge/GkDnIJ6SiitmFUuwWwrs3G+Xw=)
                          15: 8d1IalPXfs0mlmk2FgzdLLr1OuQ.roa (hash: twW4N52rkz8GHbPzPt85ACh973N+eEARK2hpJgcEEds=)
                          16: 9e4nhDBDV7BzN-doC3Rdukk4IwM.roa (hash: kDPiKKf9CtaPCGXBNFKViWoi33U2OU7GaDd0TDYj/II=)
                          17: 9xIOZBHwAAkNANpknXvG8dZrLL4.roa (hash: OabLyuPtexleKLH5wRVOVV9OaUguM+6/MQcUPjkveC8=)
                          18: AKdP_WnCYSC6ouwGRCd07y2VJDk.roa (hash: gnjZovsh4NDuHzxJtWk8Vj/NpReZ+7VV6PpuQ1xNrgk=)
                          19: BJy-8q5rdLqS1VrgzjydPMIrwPc.roa (hash: 2+PepOInvhAWOYeDFTDRuwPrzFlVe49zW1KY3Vp4ZYc=)
                          20: Dnv6uILkWUS1v_KPYuw5SnVEXb0.asa (hash: yPbKBIOVqPlMzEgCK07iafSaBNUrtik8ciRuhN3kEs0=)
                          21: Jb5fhsHpDrmyLdjGRz0uFhEem98.roa (hash: UCI+d59xT/eDs0DShUfWDjWNMDQWAEcZTjIhSv7QN2k=)
                          22: K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa (hash: g076Y7WvmqIjLiy3ZLB52YNXxeeqiR1jHUxs7vXARmE=)
                          23: MUHAo43ATksR-SLPdrPtyQpVw8I.roa (hash: 8g6eM7AQ3CGLVzNv2I7I6eXU5p8aStR5V5IVK5ftuSY=)
                          24: Np7zLmXKA3yA-ioGsFaWFV5ebns.roa (hash: ite+WatU4VDz5FpF5VICtwu7wBAE93/8nd6qjBjs2Jg=)
                          25: Q_m5E5Z7LMb5OuLyiA01P8oV7Hs.roa (hash: o2Gw3Dx2Nrdktrx7TjfEXgk1J5nJb9Zxl25czXEgF8U=)
                          26: QsmDC0xumyz5MRI0VCdCEwmFohI.roa (hash: h8GNRtwjDCB9bY1Ozw+rHXsw0nChaonJyo4obxp9+nE=)
                          27: R7Vr98elCl8-XI40OwgjbRBy2ok.roa (hash: uXZhX4GIglHQod9UoZAg4FOS+PXKnbh8c2QJQLW5IfY=)
                          28: TXUKJJoKGveOWU1d4MKKpC7vG9g.roa (hash: +6CW9WY885Em14YZDApYOXXY83soIXGmk3RqofjJhjs=)
                          29: ZAaTnU6s_eFv366TC0JclDW0ZhE.roa (hash: YT//ILFoSXtbMg4NnvN2nPtXhEErfTq55aBeha2nE1E=)
                          30: Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa (hash: 4PwFjqVYHtrMdoqJtqZUtQgbid0TJjs+0mXNy+Un5T8=)
                          31: _nI_PNVjm1tzW7fbPHRQ_UNXGio.roa (hash: 7b8iKmGmZaMSXOaqiUPziUPJsSVF6OMYA76iGGmqXEs=)
                          32: baE-uTGXhUmXS65TJe0eoTaAdTA.roa (hash: AjzX6VNfFo0NJGvUKk2w+nDwgkPWIsuzZYkfZRHLP3E=)
                          33: bybU-ALtdFOAYGWPJIdrXnlJpsE.roa (hash: IhoD5+ZK284yvX7U34qLp2ObNOIWs6rJkCYkyy0P2oI=)
                          34: cAZ9pFFoJ2zhoSD5UHgH9xQkSKA.roa (hash: Upfym8cWm9hUGkNLSusIrU8RFQubfsySUw7WwyXAjHs=)
                          35: dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa (hash: 7YBcg3eoh/u0arCV5cilBpldW9SOARulU+iJYPbWCbY=)
                          36: ext-QDDWINcKwa2Mw4rXO7S9uXs.roa (hash: fWesDUJo13M+KG37vYxdJdEn2ynVJZfDjSl1lpbRFz0=)
                          37: f2zJwbsJQDjbgUwAMqBn3yhf67g.roa (hash: HoFw8uwofu/rWBg89N7bjQ91Fy2ImP28Tf0BytyeuJg=)
                          38: fB8XWNLLHNgHnYx78o3T2kcAKPs.roa (hash: jj9t1chBJ2t0t3tOHNeIqeQLqq+L6Q2JAiPF62ls9ac=)
                          39: fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa (hash: 9Pj2j1VDZ2oEcMkOoN8txqGGDjWHMZWAwK3n7bTvCg0=)
                          40: fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl (hash: WKkZxkQKzw6aTJ+sH6M3BbIBbs9eeSqUmfRL8oERrGU=)
                          41: gcB9OLOx-KqwqMp-e_TB7COz-xw.roa (hash: zOEacADZrsOUIT8na1aHga1C9RSgmdETsExbU8pE4Dc=)
                          42: jg6hfYCoXuAuPPoa7YinNKFlL28.roa (hash: rY+k9rbHpeWLCQT7qtOX5aiLx5RJnRuBw9S8uvo5yHI=)
                          43: jlFc5NpGt74_oDqgxwbh_oUqWRw.roa (hash: DciZoXOI6etcmmM8obtBaoffqMMBlF7e1baiFAPLUpA=)
                          44: oBfZRDR6FjLvr_-XU2lAaHQi0-Y.roa (hash: UyvbGxYl+EH4oQJaaT8IlVRUYz3dVoAAV1AeA249Oqo=)
                          45: oN6JJatzLo336CTblNZNKlHW7do.roa (hash: q5KHKCdbs6gJ4OP0+u1pdK9DEZupbyyK5LLY66y6Wi8=)
                          46: rKMXOu1LAkitTnIIuffCkZ36o8I.roa (hash: WkIoax7Ob7CGue2VjVswuJpb+FMRnB0LCAFbENC607M=)
                          47: rkXmkXfMN96unGF951D4RUAZm7s.roa (hash: DOvHWXPvMRR6+Gmo9Hh9n91hxEM9f/WGszHqiHPudYU=)
                          48: t1H1WeUKIekI-A1M_0yvxre-Cbw.roa (hash: pVeGrAx4QubBe5v7/7IYgcs8DtMQFCIpeWaaPUnESSA=)
                          49: uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa (hash: OuyxmyR7qFi2pZrcmF4ecIE7EgJUQ6+HiBKeZV/ae5E=)
                          50: w2Zllddsp3ETUfwlekfQFAQqlxo.roa (hash: Om10yXY3nPE/Bz/T/FmfqE3jNsjHIMUKT6SBgFk16bM=)
                          51: wAZtAE_3By_Xf-nupeBBOmp5mhY.roa (hash: hc/J/aEXc6fO3eZxYzWtgyBj0rsf+xPtP36ty39IdFA=)
                          52: x5guuAosMFmq5eJvD3KWfyibJEo.roa (hash: 0TT2fn2DQ/oQeYAJOgp14i1XmJQ6hYMiNIM3lUNvqpE=)
                          53: x6odgv4GBx7koYM0lfehBGyNvyM.roa (hash: hiMJKGkjwzFZrEmaNtZ57Yu5ODoeuShCdiRgVeJUTjM=)
                          54: xJmKkBU_6pGBGJ0NkbFR4R-7L7k.roa (hash: vjNNKW6FfN0Njf5+Jh/bQgnhiyKq9w9GA3uAf37wjig=)
                          55: xlfcRKaFcsMxbU98Nn3IsjnvEWo.roa (hash: v8hp66YtzHnMWY7lZCrnZ5MeLMLXbo1tlMs+Ycfpccw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:ea:7c:5f:8e:65:a1:43:80:5e:e4:07:aa:a2:9d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
        Validity
            Not Before: Oct 12 07:01:21 2026 GMT
            Not After : Oct 13 07:01:21 2026 GMT
        Subject: CN=4e5d3bae27b28bdb4f1ba939020b5e22fd82227d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:ff:00:cd:a5:46:cd:5f:21:0c:b9:1f:86:
                    f3:e0:55:53:e0:93:bd:52:b8:0b:de:cc:2e:6e:87:
                    1e:1b:9b:bf:6a:49:60:df:fd:c6:6f:09:58:92:59:
                    e0:83:fe:b9:f9:0d:07:22:01:e4:26:ab:b5:3d:a7:
                    cb:25:3d:69:23:3c:92:cf:a1:85:27:84:30:e6:b1:
                    8b:e4:42:ff:9c:7c:ff:cb:aa:4d:47:58:5b:d2:f2:
                    47:f3:85:1b:2f:c1:25:64:01:18:3e:4f:04:a3:b3:
                    66:fc:7f:bb:7f:3b:47:2b:b3:1f:08:57:9f:92:19:
                    46:4a:dd:d4:2e:f4:f0:26:36:5a:44:40:8f:7c:b0:
                    58:40:38:fa:72:17:45:e2:3e:25:13:ed:11:bf:31:
                    ca:9f:22:a3:c9:96:85:18:4c:cd:1f:3e:2f:84:bd:
                    8c:e5:66:1a:c6:23:16:16:db:b9:75:5d:af:d4:1a:
                    dd:06:cb:bc:59:16:26:ef:b4:13:e6:52:ac:19:33:
                    d8:4c:ea:a4:fb:20:a5:2c:4b:3b:11:d5:3f:1c:ff:
                    fa:d0:e5:06:25:8a:4c:05:95:2c:5b:96:2f:0a:7c:
                    c4:0c:1c:f7:bb:da:35:39:70:d1:65:16:c5:ae:c4:
                    bb:f8:b0:13:cd:1b:66:ff:1c:66:56:5c:b8:d7:92:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5D:3B:AE:27:B2:8B:DB:4F:1B:A9:39:02:0B:5E:22:FD:82:22:7D
            X509v3 Authority Key Identifier:
                keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e0:e5:c1:c1:80:07:01:73:8d:01:2a:90:2e:03:6e:e4:3f:
         97:ab:b9:64:3f:32:87:27:b4:19:7a:e3:d9:80:a9:b1:f1:d0:
         c3:4f:f7:97:5b:9f:6c:b2:dc:4e:fa:3a:a9:c7:b1:2f:9a:73:
         76:4c:f0:6c:2f:17:0e:0d:43:c4:71:c7:bc:29:fd:79:01:43:
         a6:29:91:e7:f6:fc:d4:06:8c:58:a4:05:d8:9e:97:0c:da:c9:
         20:55:57:c2:01:23:ce:d7:05:31:77:30:6a:04:a8:3e:70:da:
         b3:c2:b0:72:73:8a:70:92:24:69:3b:b1:f4:6b:9f:b7:4c:c7:
         a9:8a:90:dd:bb:c9:3b:d4:ab:f0:50:7b:c1:67:c3:f6:ef:70:
         6a:ec:1a:33:73:31:67:e6:7d:07:94:d9:4e:33:7a:a7:ce:0b:
         0c:77:d9:10:7c:e0:7f:08:66:91:6b:98:19:fc:b1:9b:39:3f:
         f1:1b:f6:76:48:82:ab:1e:1d:0f:1f:eb:11:91:a2:a7:d4:76:
         d6:5f:35:64:70:35:5d:df:62:24:74:67:c6:df:28:b8:bf:4c:
         1e:54:b5:76:a6:86:a8:f2:da:48:6e:b9:3b:70:c2:e1:bf:f4:
         c9:f5:0f:8c:8a:95:f4:46:44:40:a8:d6:77:ee:c3:02:66:1b:
         ab:17:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:43:01 2026 by rpki-client