Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File:                     _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier:          eFZVn5Z5xVr18p5eFN9wWuGJltEyI0ngyeOvOtwLBrk=
Subject key identifier:   79:11:D9:12:17:F9:65:5A:0B:AC:54:BC:97:3A:BF:E1:99:12:2D:77
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       01A08B9F0C614EB81D5111F762AB964C4568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number:          0BFE
Signing time:             Thu 10 Sep 2026 14:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:51 +0000
Files and hashes:         1: 0V41IrPL9797nvcWEWG2FOZRVs0.roa (hash: 2ssmd6CA4RuDZaqZAWLQB4prRBUYd7qy+OjXYkfyY8U=)
                          2: 0mnvSdoOq2Np1ajRjxABIHng1iU.roa (hash: uW7MfVSOJl8bfntjxT5K/usy+W6G+cF+ATrwdjzTAsE=)
                          3: 0webfAWJBJhCymTfG1VV_l-6GdE.roa (hash: CU8VIzZUokgtCWuCy3VjIwnuAfnY5SJwkztl+JWVmLk=)
                          4: 2jmGEk4OVcICepreDNCO9eAT7tM.roa (hash: BFDa7KtVd8lP+Nx0xYbBnf+5dOJVnOedVDkc++Nuqto=)
                          5: 2mwrv0wD9Ii-22EalCpS3LzNa0I.roa (hash: yXx5oyiBSRzMOJnnZeVF3Q5wlRyj2BpyADDVZrn3lvk=)
                          6: 4pV68l2U_OBI_KTxAoUjIOcjUzI.roa (hash: B8v0b/yVI8T3veKWEXtdL1LMqczUDHMKi7SYPYiViEE=)
                          7: 6EvVe1iSCny24nuXxCceU1INn48.roa (hash: sr6pla8qayIY/DqIMDGG8xE9TOAtMeSL1wSO8tlpa+s=)
                          8: 6N99IBxeOoNouvWvldkTfkLCHBM.roa (hash: FPUrB9KogOAZBQW/PgPueBWp/lZvjFKhVmz9dPu6AUY=)
                          9: 8B2OpR0uRL2FMmC1O2ZU7nlPPyc.roa (hash: poPicSh/MHjn+zNOSYV7bGTSnbO9NymTUGa9CPZhEBE=)
                          10: 9_iEf91RWS6Or4zXi3xHqglPXuU.roa (hash: nfq16D2TXOKtFwSZlC1l0j0NZwkuSugZlNqjJes2gvs=)
                          11: 9euNyWZww10dUcwium3SKofSFMo.roa (hash: +JOKxowiMT05XyUwYWDe27B5gTyN5fMXDPrSBu4Dh0U=)
                          12: 9ynuhrMRe01fV95Cyr9pzp74us8.roa (hash: CPCA7Ls7etQTzU55irYgM6cXEy0L5hugJu12dcKcECk=)
                          13: ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa (hash: A86PQ/iyszG+BWtmyVBkR/FpnfeQe0gn6PRItvHkIl4=)
                          14: BKueLsOieGAX9FvG3x_kc_Syo6Q.roa (hash: +P5r5MnLAE+8y6qPH4D2f3RLLlxkb9rqjIzieNdiiu8=)
                          15: C4VDDLP3JAcEGxzpnk2rLngwLKM.roa (hash: ezMl5H9+rFaX3DPnZBbhAph0MJGwxBItopj9xyJgOS4=)
                          16: DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa (hash: XscIXOZDUssyO6/A3Rjz1yEV/LM4VTXT03e5bCTp2JI=)
                          17: DsEZUka67hhfO45y0N6lQLEhbNg.roa (hash: LO/Q3S/bHcnl/lLseLM9cKTvP0KfkNsY1jmwaQR9rFI=)
                          18: GLUy85p7VAjXBh9Flqb-k7SxKms.roa (hash: KFpZaWuTqKAMlOo6VTrDxS2jbsfzEvFfCW6Kj5PqghI=)
                          19: JQyOnqpGNBPQEPAwlMww21vi4-w.roa (hash: jQkSRE1wjqlaqj1a5xqclo3SlJv480zaA7qkOH+fatU=)
                          20: Kbw2jQDKKUAch--LSnsiSysNhCo.roa (hash: pVoIQCTA6UweJb5TuDljAh9meCCtnKx5/7ZRkaiybCw=)
                          21: Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa (hash: zUSTD6UjYoCFyh+6Fa+acZar8+oT8zvNBGsiOc1YI1k=)
                          22: MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa (hash: K2zRk3RmxZ15QcwuR8MLsUcx4p8qMykaf3Ogb1jzldU=)
                          23: NG9CUSktO1msekZw9a1EZVWAEs8.roa (hash: /FXKoISQTR9dI6X0WpRKq7Dp9cupm3YGG13vpCFZWMQ=)
                          24: N_2U4grFu5nxrIC9KlTuX1giSbM.roa (hash: hqGwhEQ2nYAefg3hkWNmS4mDHtwG/bdG2tIurSMQLtE=)
                          25: Pq1wHGL74BEeLVteAs5lNhrtrQM.roa (hash: qDOFqoYVDkkHM0mfgfSDEdkESOTUNO4RV11uRnuEsT8=)
                          26: Tr29gpXA1jmqDBgka1nUTKOJCJo.roa (hash: hh8K875PIUFVA9mwH3l4qIdJG1FDE5Nj1NE6V/fpg5s=)
                          27: TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa (hash: BR22m/9Pfevw9R3uzbROoQfrnEnpQGFkpw8PiR4jomE=)
                          28: VMVAg1mMGfwQjKGmhI2WJPLGw6g.roa (hash: sbJO9slojJrSc3KUrqgi5tvXF70X4AOB6i96b8KWC70=)
                          29: Va_MfV2xGChXe2w-ujnKmKCX7rA.roa (hash: SUriIB/QcSARZo6IB0o6EwANvwMVBodokTc+4FO4rlk=)
                          30: YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa (hash: Gwnm4Vsq48kLU0hCIA+oRgHTCilqqqVQhr/04UYg0wU=)
                          31: ZdmVPyHws7wLbvYLCWlfPQr9mo4.asa (hash: x1rd8+Osm1ltcmtxto09G68w2nA+9BXwU0Gudv2yBt4=)
                          32: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: KxAv9oHHwj5zeBEXtyr2QaDsIsW+QRxr/PDnnHaIFbM=)
                          33: _uhmDxy0bPKVDKE3_BuDsYOFfc8.roa (hash: Ej7uUDNCVZsLavhouVACJHkTzDzHQuvQQWR3StpOuic=)
                          34: bDqehv-L-gpmy2f6tCgYpNfSY8g.roa (hash: q/ItbJkPl3hPXHnLP+1Umv3w88TYukseKTWgdWG5dUk=)
                          35: i-hpQGQD_olSPkbON4yJ260Gn4k.roa (hash: VMX6kwlqgvD1HXkveYx6V7xEhwbg/d6QkZsoa+esubE=)
                          36: iOFBBEucpLe9YmdNyAo6szbNfu8.roa (hash: GDyyJB6XxA+2hW5dQo4bOWL/P6vz2lzwT7Z9ivIB5e8=)
                          37: jWjO8-wSvBOssXbwVdeDWOB3qHA.roa (hash: HFg6SCICEBCBfT3PeWcuYl6The082NB7uewpDCPBR9Y=)
                          38: jevtop49ZKMuRcRaPkGaEAbTEkk.roa (hash: QjyMRI/Mc8K1IMpgCKVrAsTAnEAdXqZBMcNfsE25sYI=)
                          39: k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa (hash: F4dOSuK6+r+jv3VvsH55u1uhJuPtq3hth/malk/i538=)
                          40: lYdRv68QBXjRttIYgVZzJoyauyU.roa (hash: jql5Zexhye487EU51RRPsc6wqZg3movkURm8VfWxyu0=)
                          41: nU5CDN2WGtUSleKd7srRFrfbDEk.roa (hash: cwVMrEsXanlUoOBqTwjSGD/5fQxRrPQBN7g36AxdSMA=)
                          42: nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa (hash: RD1NNAQbVUTLFIC0p8IpyLnW0lNI6MJeVxWZuDg6dNQ=)
                          43: o4lWv0LTRgPVdk5_FDzu00CQE4o.roa (hash: TlyDKYcMYDLXc01RpmsEuHDeSoE/K+GLiN11uaTR1mI=)
                          44: oDeQkGiiDpeW8Fb417JF-HeUY68.roa (hash: RfpJKZvP9NXaT8zUBt4vh5O6YG2vInwoG0F+j91Wx8M=)
                          45: pIP-J3Hr0bjQHlp_icnps7koRX4.roa (hash: wHGf3sOGDCSkFAvYxU0RGmIHZCDG9ji0dNgVFOg+Lwk=)
                          46: pUzPMt6BClGR1jFtNbviU7uarko.roa (hash: sTTxUsOajdJkBsH0LES6qRuCFvwILKUemPpUZvl8VgA=)
                          47: qEMGytWik2DoEBSunWlsAAW5JgQ.roa (hash: +olxdTWs4qt18DJ1bRxrfArORMjXdrDBommXdamDh6U=)
                          48: qdsgnJLfsFWH33m2j8fQRH_oBc4.roa (hash: 14/o0pHoZE4Ok/K+TgqTI/JKDxsbxv6pE8FKQiS3VWI=)
                          49: qt-VylqqZXmuhP5jTDffqyTPIeQ.roa (hash: NBYMZ8I2bI+aHaT/8renW87P2lw9r3jn3jIl3tUx06Q=)
                          50: rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa (hash: J39PyKLqvzHrXAZhA3OlBu2zPyXmjRuY84Ppooaj7xg=)
                          51: rKzCV3qhqu1jLwpYK4I2MJzM5sI.roa (hash: umG/JZ3YnlzuwNb541YIz1vycxqQQRaiCRUFhZzfyvQ=)
                          52: sB-L4JrKA9D3H7uMQdIKSAlPulA.roa (hash: NJvVl9eks4BHzKayTTKdpdPVy4jCLKYpuFF0TROWgBo=)
                          53: svwlxCw6x8aLg32dvOkpW_ij20A.roa (hash: WuukgvNZpJW0D6P5ULOewj5mtR4xQZ8fxZG033GhXZs=)
                          54: tIxWkdRjQM6AUyf4Fw_Xzyi3joY.roa (hash: jNYZxsHoHaK1jILM9/oCfLoPW92uI3bYlyUW81wDh3U=)
                          55: tVLBynseYuOMdYlyvWgVoSg2cm4.roa (hash: 7PKUWnEbOhh4JsQVjHSmYDZuYa3TgU9j80nH25oP8cc=)
                          56: ulFl9xA3_r04YuUSK9eoNoTFJKk.roa (hash: isVq8MJvxi135zQJ1rz5EGzvGDurQFrlBVCGVWBIULU=)
                          57: vRnOd3PnfHy_jU5pZ4WIsTYRCWw.roa (hash: 7FlXvhfa90lex347GsLnc36ToXN40osfZPSoD2JqSaU=)
                          58: v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa (hash: OPqb//I3XcXtiQdXp1SgTW0v2Oirred4OSIVhm80n00=)
                          59: vyQV9XKLquyOTEUcjaYGj-gmJlY.roa (hash: ZxbS06oju48UIMZkoTdqvqbm+RzA9DpQpzPigYDcfuY=)
                          60: zFna-BoaGJdoThTqDyocBjbxh7c.roa (hash: gtBmRdu7997d5OMFKSqKQSnnlDKzakUC2ak//FUPRGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:0c:61:4e:b8:1d:51:11:f7:62:ab:96:4c:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Sep 10 14:00:51 2026 GMT
            Not After : Sep 11 14:00:51 2026 GMT
        Subject: CN=7911d91217f9655a0bac54bc973abfe199122d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:04:0d:da:8b:35:c1:55:f4:51:bb:0e:2d:
                    e0:3a:91:4d:3f:17:86:ab:fd:90:ef:9c:2a:d7:e1:
                    b0:0c:95:64:66:f2:b5:92:8c:16:41:40:96:e8:b3:
                    f9:23:34:c3:08:92:1c:c0:fe:93:85:3e:1a:c0:f8:
                    aa:5e:18:f1:38:36:c3:fe:b0:7b:1b:39:36:2e:df:
                    7a:6d:9d:90:26:3c:43:ce:a2:83:02:59:35:1d:c7:
                    68:61:99:53:ee:82:cb:38:91:47:5a:35:ac:73:32:
                    db:ed:60:27:d4:3d:fe:09:52:df:55:0c:9d:d6:71:
                    9a:f2:a4:66:55:ae:97:7c:d3:a7:9b:f0:dd:90:df:
                    11:65:f5:d3:16:45:dc:8e:fb:5f:3b:50:40:15:0e:
                    b7:e0:1b:b0:ef:99:17:4d:a1:71:60:e9:c1:78:70:
                    88:3c:c2:a7:60:fb:9a:fd:5c:8f:13:e8:c4:dc:ae:
                    2d:b3:7f:bb:f5:8b:87:71:a5:3e:1b:a8:b7:2d:02:
                    f3:e3:0e:ad:b7:b1:25:7f:5c:61:37:53:92:68:fd:
                    f8:32:0d:d8:ca:71:60:b4:ca:cb:0c:d4:dd:ff:f8:
                    0c:bc:83:d4:3b:78:7e:62:0d:f5:d7:5e:c6:ff:65:
                    58:c7:b2:46:2e:76:c1:40:bc:d0:ef:af:38:9b:43:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:D9:12:17:F9:65:5A:0B:AC:54:BC:97:3A:BF:E1:99:12:2D:77
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4c:82:a0:1c:4c:89:db:0f:4f:06:7d:17:ad:de:3c:a4:cc:
         33:c9:48:d7:d8:f2:d4:10:fb:e5:7f:d3:49:25:22:7f:b6:9c:
         19:3f:63:e6:6b:92:24:b7:65:d1:37:0e:4f:87:3d:57:3c:ed:
         40:fd:d8:23:84:a0:77:d4:a7:4f:b6:ca:bb:b3:4b:c8:06:91:
         88:0c:50:ad:a9:ab:22:c0:07:78:ac:44:d5:f1:c8:31:45:3e:
         45:f6:33:fd:50:74:53:d9:45:e5:80:1a:35:1a:b7:84:a2:a1:
         20:0b:15:65:d9:81:34:de:f2:44:92:11:0b:95:b9:d7:a0:b4:
         5f:b5:b8:c1:57:18:6b:5f:e8:ea:34:f6:ce:15:0d:f7:97:c7:
         2d:9f:16:ce:09:73:75:df:5e:75:92:af:3f:cc:40:b3:a0:d3:
         cc:2c:8c:cd:ea:87:37:b6:6f:3c:8b:19:c2:70:25:20:d1:0e:
         a0:7b:4b:a9:61:d3:b0:8e:6d:3b:54:44:ed:56:70:d8:0a:9f:
         bf:88:e4:da:c9:a1:42:b2:36:2c:8e:33:9e:a4:3e:90:05:53:
         75:7d:10:76:79:83:fd:cc:e9:63:6a:4f:07:3a:ce:87:a7:bd:
         1d:f5:14:f6:74:16:96:d3:67:4d:96:b1:2e:29:d4:3f:74:a9:
         2b:57:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----