Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          DU++X5fFGVbDJxwArEdEro4/wktZ0bX5Nq1GBEoP4qE=
Subject key identifier:   AF:9A:73:4A:BC:E2:BA:FC:76:5F:EF:35:98:3E:13:2B:D5:BD:C6:91
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       01A17C2944F2933E059D3E570333284B1DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          1B28
Signing time:             Tue 27 Oct 2026 07:00:41 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:41 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:41 +0000
Files and hashes:         1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=)
                          2: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=)
                          3: 6vVxzg1To3jRLZRe5eAGfm3AXO8.roa (hash: J5x0w+XQYRKdT8cjk+sBpm9ywaXeHXB36cqOs9BFfgw=)
                          4: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=)
                          5: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=)
                          6: 9iqhMwnYSX5ByoMRX9SAo8AlvHI.roa (hash: BJfARuPttpbMngkfJ7n8tMQBGZgrTZz0L0hbWWeGa8I=)
                          7: 9y9vUW18OgMTeEnJ_6NHhJaCuGE.roa (hash: VPYfKLh4X+Cxtn4NwGg/AMQBRlBu4LVEqeIjyHaPvbE=)
                          8: CRbRvhC1uKqes8IR89lmtpIQTt4.roa (hash: EO562tiebnOW6btwaNkc9PtYJgNjll1/iyRvRluHUWM=)
                          9: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=)
                          10: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=)
                          11: EZeSNrP0MK30ejCuYgIhM6caA70.roa (hash: flHaHqDCTcC1cqHG8lWK1yfFrTANkG3VRX/1cQ2TR98=)
                          12: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=)
                          13: G2OFpfa1J1UED7EhV9_Ey2WJa30.roa (hash: Qm5YypiChtpU49wgI6/BP99C+XkqUrO71U6Go/O5Cdk=)
                          14: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=)
                          15: KV59OO7KJClf-nV-SktyqxjeQD0.roa (hash: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=)
                          16: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=)
                          17: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=)
                          18: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=)
                          19: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=)
                          20: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=)
                          21: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=)
                          22: RNLAho-QCCsGT4LlSBmDznPzISI.roa (hash: k9qrK3CB3pZBI/+ijf1H63IQuNeWEj/N3CKMuUtiwh0=)
                          23: RRKsQC6M9AkjMNnb6Dbgy31a89c.roa (hash: RgVs/FEdPi9iuMl4X4UjocrvDXfBoeU0x5T2+6iJk9Y=)
                          24: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=)
                          25: SfVssagpmlLqkacWNaVNOz0XlmM.roa (hash: uCMy1ITfrqfwsVTW0YgDEO2gh3l99Zy01fzA2hgxApQ=)
                          26: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=)
                          27: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=)
                          28: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=)
                          29: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=)
                          30: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=)
                          31: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=)
                          32: f6vxDfNcKmbcRMocWBWqx0klFfU.roa (hash: yF/U9wmEqkEVL+v6ftdK6mnwfqDPE8fyPj5MQZHAAd8=)
                          33: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: tjPPEZSsmd5DOTaqjVRv9ls3LW0AvODx+DQPx9hvChI=)
                          34: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=)
                          35: oqbInV5y5jVijngnsT6Z4KkwCJs.roa (hash: Jofbkqy8kOPIsDBzvJum0QcsSO9pDkw/9K4nko6x7wQ=)
                          36: qt1QwLqwucEqiS_HCsqZaECHD-Q.roa (hash: MG72GciveOCAsSd/PHOMOToEY9AgjSuj5ZNePoC3YD4=)
                          37: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=)
                          38: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:44:f2:93:3e:05:9d:3e:57:03:33:28:4b:1d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Oct 27 07:00:41 2026 GMT
            Not After : Oct 28 07:00:41 2026 GMT
        Subject: CN=af9a734abce2bafc765fef35983e132bd5bdc691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:38:a2:21:b3:ff:2d:34:d5:55:1c:76:25:
                    3d:e6:08:8c:3a:55:c3:95:d1:3b:c8:5f:65:2c:5a:
                    27:32:dc:55:0f:99:66:a2:51:f2:c9:71:70:3e:3d:
                    e7:03:e9:72:5a:da:6f:e5:79:de:3f:9c:18:64:e1:
                    38:a8:11:3b:93:5c:f0:97:fb:a7:3a:44:41:dc:ba:
                    1a:65:42:12:76:db:af:73:59:15:f6:b8:68:39:b0:
                    1e:34:a9:91:fe:88:3d:ed:fc:2f:ce:8e:a8:a0:ab:
                    14:b3:93:fd:9c:c7:ea:93:16:67:4a:9d:e0:02:4f:
                    4c:e6:64:db:b7:92:03:3d:ba:15:89:f7:4e:fb:46:
                    aa:80:a6:73:d7:c8:59:7c:44:8b:f7:51:41:45:b0:
                    f8:7e:ac:b9:e4:1b:af:df:34:a5:9b:5c:f9:a7:2c:
                    f8:18:2f:c6:34:e6:aa:58:f7:8c:c5:07:71:b8:8e:
                    e9:95:de:a7:9f:b8:39:41:5f:4d:30:de:44:4a:c5:
                    3e:c3:b6:1c:80:c8:dc:f5:b9:89:32:36:dd:8b:ef:
                    d3:43:f9:39:65:d1:4d:8c:25:5d:53:64:55:d7:9d:
                    85:2e:00:e5:63:ac:6f:c0:a2:4e:77:22:d9:c5:23:
                    7d:ca:d1:d5:d7:74:23:71:a5:f0:cb:98:f2:f6:ad:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9A:73:4A:BC:E2:BA:FC:76:5F:EF:35:98:3E:13:2B:D5:BD:C6:91
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:cd:af:12:1b:27:85:02:4d:0a:28:50:cf:5a:79:69:76:
         a0:42:9e:b2:b9:70:b2:8f:9f:d5:92:a8:d5:e2:42:22:69:1b:
         38:a4:a9:71:8c:75:a6:a5:0c:10:83:19:8a:dc:b1:fc:35:83:
         40:3b:a4:bc:f4:ad:75:70:63:4c:c6:b2:9d:b5:12:27:30:2b:
         67:2b:c8:6d:1e:86:72:fa:63:94:c7:e6:db:cb:a9:21:29:79:
         0b:89:c8:c5:e0:7d:0f:f4:1f:de:f9:db:6b:23:0b:ab:95:1f:
         f4:33:85:2c:2e:dc:e5:15:49:02:9a:4e:ba:18:f3:22:d4:f9:
         d1:8d:fc:f8:af:d5:d7:9f:9a:98:32:7e:94:e4:26:3b:67:e3:
         5f:3f:34:a8:39:03:74:4e:de:9d:0d:81:1a:3c:72:28:44:44:
         d3:72:3c:a2:fd:81:dd:b7:18:1c:77:b2:e6:34:8e:c3:91:4b:
         db:b3:1d:58:a9:76:7d:cc:70:da:df:5a:76:06:3b:8e:4a:4c:
         9b:15:f3:50:ef:50:e8:94:6c:94:8b:bb:c9:12:8a:92:fb:9e:
         8a:00:67:54:f7:52:05:c1:2f:9a:87:fb:21:a6:24:0c:23:30:
         2f:1f:1d:ca:3c:5a:66:1c:e1:4e:82:a9:9b:51:2b:6e:ff:b4:
         99:fb:b0:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KUTykz4FnT5XAzMoSx2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYxMDI3MDcwMDQxWhcNMjYxMDI4MDcwMDQxWjAzMTEwLwYDVQQD
EyhhZjlhNzM0YWJjZTJiYWZjNzY1ZmVmMzU5ODNlMTMyYmQ1YmRjNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp804oiGz/y001VUcdiU95giMOlXD
ldE7yF9lLFonMtxVD5lmolHyyXFwPj3nA+lyWtpv5XneP5wYZOE4qBE7k1zwl/un
OkRB3LoaZUISdtuvc1kV9rhoObAeNKmR/og97fwvzo6ooKsUs5P9nMfqkxZnSp3g
Ak9M5mTbt5IDPboVifdO+0aqgKZz18hZfESL91FBRbD4fqy55Buv3zSlm1z5pyz4
GC/GNOaqWPeMxQdxuI7pld6nn7g5QV9NMN5ESsU+w7YcgMjc9bmJMjbdi+/TQ/k5
ZdFNjCVdU2RV152FLgDlY6xvwKJOdyLZxSN9ytHV13QjcaXwy5jy9q1rUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+ac0q84rr8dl/vNZg+EyvVvcaRMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8DNrxIb
J4UCTQooUM9aeWl2oEKesrlwso+f1ZKo1eJCImkbOKSpcYx1pqUMEIMZityx/DWD
QDukvPStdXBjTMaynbUSJzArZyvIbR6GcvpjlMfm28upISl5C4nIxeB9D/Qf3vnb
ayMLq5Uf9DOFLC7c5RVJAppOuhjzItT50Y38+K/V15+amDJ+lOQmO2fjXz80qDkD
dE7enQ2BGjxyKERE03I8ov2B3bcYHHey5jSOw5FL27MdWKl2fcxw2t9adgY7jkpM
mxXzUO9Q6JRslIu7yRKKkvueigBnVPdSBcEvmof7IaYkDCMwLx8dyjxaZhzhToKp
m1Erbv+0mfuwHw==
-----END CERTIFICATE-----