Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          rsqMP07b/4gkIZQd9ytBvkrHF43TvUgWwZz5/BRtGuE=
Subject key identifier:   FC:18:D5:7C:E2:E2:15:11:93:76:EB:A7:A4:B2:63:F9:23:D4:33:4B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01A06D19C763C25EB09557EAA65555E97D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1BA8
Signing time:             Fri 04 Sep 2026 15:46:41 +0000
Manifest this update:     Fri 04 Sep 2026 15:46:41 +0000
Manifest next update:     Sat 05 Sep 2026 15:46:41 +0000
Files and hashes:         1: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (hash: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=)
                          2: 1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa (hash: b1isReMzje2eOqP7q5KK1YgmNcLYTYhlgMv1rOjAxw8=)
                          3: 2ndwCQa5uK9SGXTw7amvh8YViz0.roa (hash: MNshJXo3vLTUpr4S/CLHnaCG5DDaH89yW7YggkO0OtA=)
                          4: 5DO2gDG0jIsxWfIdsn6VtS8YzVU.roa (hash: vc1lWKgaQKcWvIEiovIUH6ry7EbnnG5est8nMrCuGtk=)
                          5: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (hash: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk=)
                          6: 8i5NwxiZ_LO0QHDoh6piT7Z7jSU.roa (hash: MtNwQsIxZyP8HNAnHCvJCitmJzsQ9t9Rar7QeUT0PaA=)
                          7: 9OxDWufNnv1B2C-qPmgpikF7iaw.roa (hash: dL8qSlWuBeannbfUKKeK7j1b+LVimlrkYaTHvjJkkuY=)
                          8: 9ycxm4HV4M6oBtkQ0FxIq397L0I.roa (hash: XqZtCHd2v7KOJd8ycJJagKyRkmCuxO52upsQm7ENKi4=)
                          9: CXZTxSrdXW2NRwHM1PSbhVGQYdw.roa (hash: f1t5qIJ+0jzjWZqXS+Tw6FScbUWl63IFD9BH7VmGFPo=)
                          10: GFODE-DZ21eHroatRJKIqVrZsaA.roa (hash: oAdEbCipvHFNYnI86ODFnZBMhLMWx82ptyOpEbw1Egk=)
                          11: H5jiHDmDZpH5dCanovylWuhKWdg.roa (hash: weqLDFwGRCA1K3CvRT4uVmRU0TMgiNat70D8wc2p/1U=)
                          12: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (hash: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=)
                          13: Ip1p585eSEewb0IONkaOYazW_0Q.roa (hash: h1M4blMde36vPMnlEH2IroJd96qzWruE2brZEpd0Sp0=)
                          14: JYBgPKpA16-8lG6M4O7EPuTiVw4.roa (hash: mBzvoCHcL+VOx9e/kdW43sQh2RmNJVbq5CtoJwcYdSg=)
                          15: NsHDsBlsQAGgspNiM-HwDV4swTc.roa (hash: eQMEYl3+MQxyvaK6givVIiWlfkYaPSu2MObxqH2imYo=)
                          16: OJDcnZKMbzW_ndCn_Y8xeVCn05o.roa (hash: soAxA3YCjbh3KJriK0iGluXyH4QMgs1fmaVz0A3jO4Q=)
                          17: QggJ5eY0gByoaEixKiNuOhk0OXo.roa (hash: U4DMkB/3xVwMN4uiXFr55EFR8T9dhwrtfKBrzg59+7U=)
                          18: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (hash: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=)
                          19: TrTwjbYZVQnpx21mwUQojkF1K7w.roa (hash: /tObYYDcG5it76EMRHtb0fqj7ca14pgmJwbFzVuz53c=)
                          20: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (hash: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=)
                          21: X18nP2YXusglmmwBliQYUGVmd64.roa (hash: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=)
                          22: XBEejVS1a9Owxo7c0gVxdKvWS2g.roa (hash: fSI0QRXy+kjW782iKVZa88uSVKLeiVw+9MG/v2gwXMw=)
                          23: Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa (hash: mVqlUqfy1ZfqJEiJXBtF73ndtl7OOjyi9baetp4Du6A=)
                          24: Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa (hash: fpg/MNxjzlnzTQca/iybfFH8+ZamTAvUzD57YoORWzg=)
                          25: _0WEtVeYmyN6fbjUnvVr6TBrM_U.roa (hash: bBT+7EVpBue35D72uWgKV3lxs36VXuRkVcTO+JKO2S0=)
                          26: fXi-3J0I08pHCGpMDBfoClmPjMc.roa (hash: 021lBJ+9jhBzDrRbngydXsCj6/uNgbtu04bJTaEzJbY=)
                          27: fzT6m7yfTXCj-_AX_jr_FdABgeo.roa (hash: V87OGI8yShhu6uYBdg9rce79OVzvm1oTgwekYxO+Afg=)
                          28: gYtsibPnBXBPb2nY_SAs-atiQiI.roa (hash: wZHUmXk6L4SjfoRfOx34od7ZFq/bTnT1ojNinmzWm5o=)
                          29: ku-pFyguE5cHtF69_qC9IQyhWD4.roa (hash: SRmdiGErBs4riF+x6opmEUXvpJ+dRiQ3pdAIUM1No24=)
                          30: n4AMurCrww_nURM0yKJCQWoqFho.roa (hash: Pu6TaTGLhHGntg0HayCe7LPYpIinuWkfBvOuAdu6bq8=)
                          31: nJR5Pa0PzQ0BmKXNQ9kFurYwvTM.roa (hash: Qswnxlod0XQLWSmfbGA37zgOZAKM1aXOGhiAxhufPjM=)
                          32: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (hash: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=)
                          33: prX2QmznROhgf8aQH5IecY-zslo.roa (hash: LbHo1sJqOtv82DGX7yrtWCmYrA3H8Z4oiQyDZv+bXDk=)
                          34: qdTxmC1M-cLgpOCU4X2vmsVLSxA.roa (hash: A9F9hgF4690mdOxK/7gd71yvYHQZzaHopzHxADwnEzA=)
                          35: ql1haZnROI_A4gtMJ1WOjV3AQNw.roa (hash: etq9X6mBNiExqhsqPZrAcoPMp4nhVPKjSDDkz+uku0Y=)
                          36: rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa (hash: 2K+J256SefSCQUxPHkRrXtSFRiGIJpB2gFkBQ7pPKWE=)
                          37: uvo9qLrP-xQ9FWfoQOzD-ND2gZs.roa (hash: bNQzpEIOSnPK9ZwpcBxEVwm8tiEls+8YjeG+tA3PxQ8=)
                          38: wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa (hash: TDDcS+/ukQqSqdHjq0a0vf8SB/v2/c/ZPb4Efbz0S7w=)
                          39: wlZTNZPVMxiXs641En6t5-EeJUw.roa (hash: gKSFJeU2J/eZ0luL9bAhjMHupWPFMTGpHQJ2vR/V7JY=)
                          40: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: cr2ut5u2uJuL2S3QDBe+l5z5JV0K8wKyH5DfWJWVLNY=)
                          41: yer03pmH6SIs0nqVKhWdrS2aciQ.roa (hash: hidSPdxxMCs5YGj76wIsTiK9tc65CoMTtEqXLLr5NP8=)
                          42: zYFfWUlh-P5ldgkEaLd32AaEmqc.roa (hash: d8sg18toB2rZYXSV8ZWT01bPiWhaZN7thdAndhNnLhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:19:c7:63:c2:5e:b0:95:57:ea:a6:55:55:e9:7d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Sep  4 15:46:41 2026 GMT
            Not After : Sep  5 15:46:41 2026 GMT
        Subject: CN=fc18d57ce2e215119376eba7a4b263f923d4334b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:db:a4:20:03:ff:92:01:36:43:e9:8b:c9:
                    04:1d:08:5c:a7:1f:93:34:04:24:0a:a2:2f:30:94:
                    53:ca:fe:8d:10:7c:c7:fe:e7:fb:97:9a:71:d9:94:
                    5d:83:ae:63:1a:4c:06:3f:77:c8:2f:3b:7d:ab:b7:
                    f8:17:5c:86:6a:7a:f1:a7:86:61:03:0a:f1:40:d5:
                    3a:1f:ca:06:f5:50:b3:f6:ca:c3:75:49:e2:86:22:
                    1b:99:67:a0:3e:fb:e5:6e:9d:79:6d:9c:f8:78:f2:
                    ce:c5:92:6b:6e:4d:3a:1c:c5:a0:85:60:82:01:52:
                    55:76:21:cf:60:e2:3c:80:60:aa:3b:08:4c:4b:2d:
                    14:fa:46:06:80:e2:e7:ff:f8:af:8d:96:df:82:7b:
                    c3:0a:0e:d1:e0:19:08:48:dc:47:f0:62:c2:e2:df:
                    4c:42:91:7a:de:92:e2:de:f2:d8:55:cd:ed:a8:8d:
                    39:a4:03:d4:49:59:99:0b:c6:4d:b0:1b:f6:aa:51:
                    33:00:db:10:8f:bc:b0:66:89:ef:00:a2:fe:e3:0a:
                    b3:16:e6:6d:9e:67:fd:e7:6e:62:1b:7d:61:61:54:
                    14:ea:3c:53:da:f5:f2:8f:00:2a:56:d8:f9:8c:9d:
                    7d:85:72:2a:a3:c8:6b:21:bb:c8:ad:dd:34:1d:2b:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:D5:7C:E2:E2:15:11:93:76:EB:A7:A4:B2:63:F9:23:D4:33:4B
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7d:14:da:e2:6b:de:05:39:62:cb:19:60:c0:ae:49:2f:12:
         31:db:d5:f9:6d:d0:f9:b8:08:31:64:96:a9:da:7a:d7:29:0d:
         f0:55:b6:69:66:d6:a8:72:2d:7e:f4:f9:4e:48:02:8a:94:e6:
         f4:94:95:04:43:90:9c:b5:29:d8:db:28:b6:85:18:76:15:6c:
         8e:8c:6e:19:4e:f4:a6:73:2f:f1:73:69:76:73:d1:c7:12:f0:
         38:2c:5e:84:7e:4f:ec:73:79:cc:76:90:88:72:5e:07:32:26:
         08:6d:4d:44:cd:01:55:c1:7b:ed:cb:ef:97:8f:32:44:55:95:
         f1:92:6a:51:90:77:43:59:3f:ed:74:70:27:a3:a9:f2:23:41:
         12:bf:06:67:76:41:cc:59:9b:e7:50:5c:29:d0:7e:07:17:2c:
         d7:0d:1a:93:7e:96:09:18:a7:21:80:e3:34:be:15:2f:0c:a1:
         a5:9e:0b:3b:59:a0:20:0c:44:82:fa:6c:bb:20:73:96:4b:28:
         78:5e:a2:0a:20:22:19:6a:5c:80:b7:78:fd:9d:5a:55:10:9f:
         3c:0d:3f:09:57:d2:a1:a5:2c:70:8e:cd:0d:4a:22:df:b8:f9:
         c8:a9:39:15:84:bc:ba:63:b8:20:30:a1:de:7e:dc:e7:64:6d:
         88:c8:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:22:34 2026 by rpki-client