Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          yRVo9kIz5dBCAW+N46p1HQH9pwMlfn5KfR7DGSSYtfs=
Subject key identifier:   7D:E4:A2:48:1C:B0:DB:B9:0C:69:F8:0C:1D:C4:EA:E0:AC:B0:25:5B
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       01A08FE963D4E47E9E8B5F417A038560914B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          1AA2
Signing time:             Fri 11 Sep 2026 10:00:32 +0000
Manifest this update:     Fri 11 Sep 2026 10:00:32 +0000
Manifest next update:     Sat 12 Sep 2026 10:00:32 +0000
Files and hashes:         1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=)
                          2: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=)
                          3: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=)
                          4: 4-OxTRvKsE-KfsPGgyR1V3t99X4.roa (hash: L2A7Kx7pcANTVtohacYGiY2IpmYiWV3MjmG+5heBuCc=)
                          5: 6vVxzg1To3jRLZRe5eAGfm3AXO8.roa (hash: J5x0w+XQYRKdT8cjk+sBpm9ywaXeHXB36cqOs9BFfgw=)
                          6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=)
                          7: 7nT8XALHUuYGLw19lxws4CDKyCI.roa (hash: W7vAi5uZI/nCWSVS2gW6IW3/NsxpF7bQkVhL7K1q/CI=)
                          8: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=)
                          9: 9dA8EvCEVrYq2zG3X3SwFZS8ML8.roa (hash: rQocUBNGb7VmNrgLJw4undjYiQjWn5aQwBkG6+PziNs=)
                          10: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=)
                          11: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=)
                          12: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=)
                          13: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=)
                          14: IxteufJj4fF75xV58EqzQgYcsIo.roa (hash: Nh9kOJGnKXYTWMkaH2Xq//J/zhrI7SfQl1Qso7ySr+E=)
                          15: KV59OO7KJClf-nV-SktyqxjeQD0.roa (hash: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=)
                          16: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=)
                          17: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=)
                          18: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=)
                          19: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=)
                          20: Msm0CfNKc2NQbDNlopaTwAKNTxE.roa (hash: 07dSY8XgqSRoFl5jsJCKlKLDItme7Y+Kfp8MrCvTuD8=)
                          21: MvLpv7U5hRvMRNf8qDOqBL0JiGw.roa (hash: CG2qmfPLpAg8DAuH34q/KpW3OuhDGC9Gfmm3Zy5Kiuo=)
                          22: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=)
                          23: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=)
                          24: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=)
                          25: RNLAho-QCCsGT4LlSBmDznPzISI.roa (hash: k9qrK3CB3pZBI/+ijf1H63IQuNeWEj/N3CKMuUtiwh0=)
                          26: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=)
                          27: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=)
                          28: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=)
                          29: YwPRZNc30MUKEtXEMZMozQckpHs.roa (hash: VKxyqQ6A43/siOTGviZ3VHuSFKN1OGNrTT25graeSAo=)
                          30: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=)
                          31: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=)
                          32: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=)
                          33: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=)
                          34: f6vxDfNcKmbcRMocWBWqx0klFfU.roa (hash: yF/U9wmEqkEVL+v6ftdK6mnwfqDPE8fyPj5MQZHAAd8=)
                          35: gVl71Z9b8wU-S9yqhPd5ZdFteVI.roa (hash: sswgZk6i6rrlOBQqzZIh6p/aw0/5hvDwbsqXElGm9G8=)
                          36: gZUOlIzqhKz5srdBEwvo7aBCBHY.roa (hash: QYerguIuOXfl4vzShXRMaYeKTMX7gJ2V58FjjoR20A8=)
                          37: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: wuCOALvuKmwCtdJYCV6YEYAFYpl46MWTMPo2MUtFSz8=)
                          38: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=)
                          39: oqbInV5y5jVijngnsT6Z4KkwCJs.roa (hash: Jofbkqy8kOPIsDBzvJum0QcsSO9pDkw/9K4nko6x7wQ=)
                          40: pvqnTAmZTCtaDIGRIJLpV3RVRq8.roa (hash: ELaRN/1CLckouMuTm/tPdmNa5GWM0lES+K7y8P8juTs=)
                          41: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=)
                          42: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=)
                          43: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=)
                          44: ukeeQgc1qQ-vF29y9LoNJsvaP4s.roa (hash: K5QO1YvJwo4eZmewT8GbQ87g0G9iR3nxd59JfY8KzwI=)
                          45: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:e9:63:d4:e4:7e:9e:8b:5f:41:7a:03:85:60:91:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Sep 11 10:00:32 2026 GMT
            Not After : Sep 12 10:00:32 2026 GMT
        Subject: CN=7de4a2481cb0dbb90c69f80c1dc4eae0acb0255b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:c4:80:96:b5:69:c9:e7:85:5c:11:73:a6:
                    a2:f8:63:df:e7:32:89:a6:99:bd:1e:3d:ae:67:37:
                    06:eb:b6:6a:2d:3d:97:f2:b8:bd:4f:3c:c2:a5:16:
                    6a:47:19:77:f8:75:2e:f6:74:69:14:a0:f6:1e:6a:
                    0c:96:5e:16:ba:4e:4c:77:5c:6d:d3:88:f9:18:52:
                    67:b0:57:12:ab:78:f2:c9:3b:61:9a:82:88:71:da:
                    79:6c:07:13:f2:7b:e3:3a:63:6e:35:31:23:8b:9e:
                    30:ed:2f:23:50:f3:e3:e8:3c:d0:6e:bc:51:11:74:
                    eb:8d:cd:59:3f:28:77:13:6f:e1:44:da:1a:c8:6a:
                    e0:09:d4:da:06:24:a3:78:13:96:33:b9:07:7f:23:
                    33:44:c4:7b:2b:26:f0:9a:45:76:ad:7e:70:f2:22:
                    3c:58:fa:3a:67:7f:09:b6:7e:90:48:9c:9c:5c:0f:
                    af:ad:dd:41:40:0f:7d:9e:db:29:83:32:ac:42:92:
                    f6:6b:a7:58:ea:c1:9c:5a:e6:b7:bc:70:23:f0:0a:
                    a9:a2:64:53:5d:18:f6:c4:52:c7:12:77:46:35:d6:
                    a2:b6:c9:24:08:15:fb:73:65:39:68:48:0d:b7:d5:
                    b8:39:e2:2a:c6:71:a9:1c:81:c7:54:1f:c6:9f:5d:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E4:A2:48:1C:B0:DB:B9:0C:69:F8:0C:1D:C4:EA:E0:AC:B0:25:5B
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:9a:01:65:6d:5b:f1:13:59:ad:bf:c8:9d:2c:b9:d4:93:
         8a:cb:de:87:67:86:31:e4:a2:84:2d:52:92:71:04:d8:b5:3a:
         eb:f9:80:26:bf:65:f2:4d:ac:af:90:3b:81:d2:15:66:bc:76:
         2a:9e:16:7c:4e:f2:0a:25:21:7d:a7:69:08:4f:b4:93:71:f8:
         42:d3:e0:7a:38:24:d9:4e:7a:48:21:36:d1:3b:c3:e4:14:32:
         e8:4c:bb:04:98:9a:07:d0:c2:f4:c5:8a:94:6f:6d:61:56:b8:
         91:f2:f0:76:0b:be:d1:b9:67:08:cb:48:c6:6f:09:06:2e:24:
         d6:7f:ee:97:88:e2:f5:0f:0a:ca:c0:ec:e9:af:66:9c:af:44:
         b8:00:71:0c:36:98:02:19:18:5f:21:33:ce:7d:1d:82:d2:b2:
         3f:bc:fa:39:02:3f:0b:e6:d5:a3:48:1a:52:f3:86:e5:9a:c8:
         97:60:00:0a:32:6b:42:8c:c8:cc:a9:72:13:18:80:6f:36:56:
         59:6c:7f:47:b4:0a:05:96:d0:f0:1c:f7:a8:7e:28:26:b0:06:
         83:8a:fc:fd:7f:f3:7d:ff:0c:d6:d7:ef:ec:83:4c:44:d8:b1:
         29:5a:46:36:01:c6:29:b8:82:32:91:4b:a6:03:51:03:ab:8a:
         44:ac:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----