Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File:                     ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier:          ATrubmpnXFBROr8Dns/FgrCtcUnew0qo8pO46MyHZi0=
Subject key identifier:   7F:1B:FD:5A:02:7F:A9:F9:8D:1E:85:F3:48:B8:6C:37:1F:97:FA:CC
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       01A17C60985D1FBD86D66F840D31EC9BD86D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number:          1C11
Signing time:             Tue 27 Oct 2026 08:01:07 +0000
Manifest this update:     Tue 27 Oct 2026 08:01:07 +0000
Manifest next update:     Wed 28 Oct 2026 08:01:07 +0000
Files and hashes:         1: 1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa (hash: u5eV4Uv1MiiJKh19sA1D3lrEkUoskPq0E06VtKGTPQ0=)
                          2: 2VzxNAD5xu9qC7p4x02lMD0GwhQ.roa (hash: CAlmRrgnozD3WhBbxiuTcmh3DcHksqgcq9qNexpG6IE=)
                          3: 4wKJGi00TfJEUaZBXXehCJACzsY.roa (hash: EGXlq5otTfqzYWsP0t4JP1phVZrmx1cNdvt5bkAJb9M=)
                          4: 5DIXYN3iWyCCglaKPyTEISwSvcQ.roa (hash: wzPomSvtsUqVc3cXXuStopuzX0SMyf27R/3+Wz39SlQ=)
                          5: 8ytmRdbaYIK-p0argiKofaoScHY.roa (hash: NzZjhETEPOV9qOe2iCOKukIBBkV+9EAmc6ndeYhO0Yg=)
                          6: 9ooz9b_e6pHWMlAuH55rcu6Y1vI.roa (hash: z9n0EkwTD8zfbj6iuYYJ7TWAU4nOskFjruLg1WEgFJU=)
                          7: BN3uTsvLVfLQEFEGegnn9TgGMCc.roa (hash: odMOUTahv8T8UIit5Zs817beNixUhfCh509OUC0pTXM=)
                          8: DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa (hash: fLmSqodUAGL/yoED3chUFJFBL41B6P99W79IRZINO/g=)
                          9: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: 90dp834iFtFChDUkc3/Ac37GKRjRYOy7AoTVCNxoUxE=)
                          10: G54XLkaMlrOl_RIl-BBLFf32j_4.roa (hash: 1HmrmYZ1lX0kzUUafKsHyk1mrTGQ2bqrAlLdgPA1QtM=)
                          11: Ga2QoPplZN3qKWPe3jkeI2wCvbY.roa (hash: pyCcsaIPtu6Vo+y1Dhxv1YatwFjCk/g8B0UeKITfXUI=)
                          12: IPLGv0US97sSy2so8ybZW-F94GU.roa (hash: FxRxqqR98ewhv60P9Joq8XQAeUir1CuoS/ZVeTaCiq8=)
                          13: LC8JdHb7mQK2U35xl1WDG4Ecgco.roa (hash: ZOsWFR7wNV8Rqt3zChMJWe1z+CmXOSdrTussL35X9v4=)
                          14: Mq91aHgILLYinYVbGX30JTicK2Y.roa (hash: awH0fZT5nCVQDV/n2dA6uOcYfxt3myd+QXH8nt5Ehzs=)
                          15: NAvPU3PvWk2BT8zglyKAPm42uoo.roa (hash: 1bUbDIdnIXubMQt2eslQ/ZroPi0FRkjK8z9itzf2nhI=)
                          16: Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa (hash: wx8arTEOltxp00f50ADtRMGBaOT600gG2onw7S76NlY=)
                          17: QwqY3xCcCgwIwIboEYJaKH-kb2U.roa (hash: o7oLfHZu1x8Ar12k66Qvb38ZRBeIiBIVHglZulHBXqk=)
                          18: RG7rOxM8Ma6H0vB0Nnbvb7QSb7o.roa (hash: 9oIF71M4azDz9Rp+FJePfIdA+qSKXEhe8fe/V/zE+yU=)
                          19: RtdT3axTfmWPymViBZqZaqZKpVY.roa (hash: xtwwjn7DzhN5b7BbjlImOVuCLYyjwLWW/osFbNbKEZQ=)
                          20: SudU71UvkOpYbLyB5oHg2RyZNWM.roa (hash: xefx53ev5gZHT0Koi4CdtQgqvR9rIS+NoeeLgTHek6k=)
                          21: XrDTmDzs64c5qX1gh7L5krKuVkE.roa (hash: 1JVzR17fJnA+go53ILZNeVknKR2J/wMTrwUVn89IGUg=)
                          22: YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa (hash: 3JFwMa2Ti1yTw1Xq6RCOz5frDtvKldeHr5rO5JZfbrM=)
                          23: YJS-MeNYCL_epOUC5Dr8RF8zFZ0.roa (hash: m2DE/6ZTamnRJyCEcFcrnUs7f1LULWgHmaf4oy24rvw=)
                          24: _gqR0WwGA3glTlyF8yiHIFlb8dE.roa (hash: mFyXN2DxlKKJyDR5JPAfUo4hQrC8BxOn6sp6aAgxtac=)
                          25: kUSxd1B8AxZq-RVoBSLSqa7QXIk.roa (hash: t+qukMxzE/OHfBy8j/pvykT6K/D5uPcDEid5KQapwrk=)
                          26: lTPOzMZpg6OdVupew9ZjU2_lpvE.roa (hash: ZPbvR2hjypfPkQpNeYSZpOXKwwYAVSdHPl7WM1QQ/xU=)
                          27: lm0JDakseN4M9k5prGS2OV01r6E.roa (hash: tfEpnDtBaRvT6Y+MzPXehc/2PbbXY6lqNNMqfIJXsn0=)
                          28: nFQ-4d9mVifHam7-is3uppf5zEE.roa (hash: Z0H1orr4k7Fxq1oyTd7PjbF2cno+QKF/rfOWpuxdOPQ=)
                          29: pF6WBbamDqigpwnYyY54RICcftY.roa (hash: ygHT0Xa9Cg9CYX3EOU9uQc00YLGDZAbjxPnyMu8NUAE=)
                          30: rfm_-0reLf7PYtJuEP1buHiDkqo.roa (hash: Sj5Ujw/g8ofIjh7PyZ0sM4i+kvY8IKqDptv6WN3btA8=)
                          31: sGL0IpkAAnhvKoGAh5UWQwRpfVM.roa (hash: mpibMWOyOdzjLVDF60aD5dDfWs60rSKxiTiv1sDZLv8=)
                          32: uSSKGqOBXnTR7MVUEQlQOSZ9RT0.roa (hash: NX7M1wXUZXHf/C4RkIE/pAqdDJdNXJnIC49rcaGZIgQ=)
                          33: v2VfTa7zgDDUSueW5M0x4B_McRo.roa (hash: S+YGBrBrvZW9pavreBXFebt4/41gIio3hTT0WdcvbWU=)
                          34: vNKJbq7sgPhqXw5SMPwr35OOBKY.roa (hash: pnAoWrIMlPjHRDA5XzS4i12EZLWJqtsj6vsVfzM7HuM=)
                          35: x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa (hash: N+Vr1Wpn9wUw6j07nAIbueMPkuP8xWs0XtxciVf3414=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:60:98:5d:1f:bd:86:d6:6f:84:0d:31:ec:9b:d8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Oct 27 08:01:07 2026 GMT
            Not After : Oct 28 08:01:07 2026 GMT
        Subject: CN=7f1bfd5a027fa9f98d1e85f348b86c371f97facc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:06:55:8a:88:80:62:c2:79:e2:6d:cb:53:
                    79:6a:07:79:5b:ba:e7:e8:47:61:37:08:df:b8:a8:
                    fa:b5:0d:53:f6:eb:dc:a6:17:dd:04:3c:7b:bb:65:
                    29:6d:97:9b:76:ad:de:1e:27:18:67:13:ee:e1:1c:
                    62:9c:bd:a1:66:cd:61:00:b1:df:c6:32:5d:d9:09:
                    d7:3e:8b:c6:89:d5:ef:c8:32:a3:88:bd:63:58:3e:
                    4a:e7:4b:10:d7:c4:d5:75:25:cc:94:06:3a:78:c9:
                    5a:02:e7:4c:2d:d3:f0:01:2c:66:5d:22:4e:a3:fd:
                    1b:7c:93:3f:01:55:49:58:96:f2:b4:fc:0e:1e:cd:
                    c4:4a:ec:35:db:86:bd:a1:cc:81:7e:02:37:d7:7f:
                    6b:ba:39:2e:1a:b5:cc:a6:86:2c:19:ad:4d:57:3d:
                    a5:03:8a:a4:52:ae:7c:d3:2b:77:27:1c:ae:64:2e:
                    1d:db:77:25:cf:2c:17:ad:cd:56:0a:d5:0a:e9:a2:
                    5d:88:65:99:a7:59:56:b9:f2:41:88:47:77:67:69:
                    00:05:35:e1:ff:72:e1:a5:24:45:ff:bf:ee:75:7c:
                    74:6b:36:62:6b:c9:cd:bd:74:74:4d:79:86:48:03:
                    11:d9:b4:65:7d:84:3a:86:92:1f:fb:a0:8b:cf:43:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1B:FD:5A:02:7F:A9:F9:8D:1E:85:F3:48:B8:6C:37:1F:97:FA:CC
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:e9:81:83:3c:1c:13:36:0e:cd:4b:ae:b0:a4:27:ab:8a:
         42:35:1e:d1:14:d5:2b:7e:b4:31:69:74:1a:56:42:da:2c:6e:
         67:ed:c8:23:7a:87:a6:ed:3c:8b:e3:97:f3:85:38:91:c4:48:
         05:40:00:7e:01:70:05:63:a0:0c:fd:14:24:72:ce:4d:d0:c3:
         b8:d7:1c:7d:1b:2f:09:5d:af:f7:63:23:0d:4b:b6:d9:66:a0:
         08:bd:68:39:db:23:dd:1e:89:b5:98:98:2e:be:0f:38:0b:55:
         1c:de:1c:fb:93:d0:01:25:fd:b4:7c:83:3a:fa:a1:ec:42:7d:
         93:6c:e3:0b:c6:e0:0a:e3:77:49:94:aa:50:19:28:00:98:ee:
         47:f8:71:94:38:e7:49:11:52:38:2c:da:c8:ba:dc:a8:40:b3:
         7d:0c:38:b5:cc:f3:ac:de:d1:db:96:ab:ec:1c:e4:a0:00:0c:
         08:10:af:50:23:8f:2d:27:1e:a8:df:a9:22:a6:b2:39:78:7e:
         5e:e6:bf:4e:8f:57:ad:24:b6:fc:29:2f:c9:dc:a9:a3:37:10:
         e3:1b:34:af:e9:c3:05:ab:24:68:9a:50:12:6d:a2:c2:ef:74:
         c0:89:02:c2:49:15:c4:0f:d6:d9:56:73:a8:1c:3f:b1:2f:75:
         a0:50:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:53 2026 by rpki-client