Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          dbe+aZ86nd1jd6BZnFjyYGt91ftk2SHZl11aZw/Xm7k=
Subject key identifier:   1C:EB:30:76:E3:C7:3B:56:40:26:A4:2A:77:BA:C1:8A:FE:6E:63:83
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       01A103C9F2A7564D74E55555E2A06415319D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          1309
Signing time:             Sat 03 Oct 2026 22:02:08 +0000
Manifest this update:     Sat 03 Oct 2026 22:02:08 +0000
Manifest next update:     Sun 04 Oct 2026 22:02:08 +0000
Files and hashes:         1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=)
                          2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=)
                          3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=)
                          4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=)
                          5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=)
                          6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=)
                          7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=)
                          8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=)
                          9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=)
                          10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=)
                          11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=)
                          12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=)
                          13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=)
                          14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=)
                          15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=)
                          16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=)
                          17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=)
                          18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=)
                          19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=)
                          20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=)
                          21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=)
                          22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=)
                          23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=)
                          24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=)
                          25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=)
                          26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=)
                          27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=)
                          28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=)
                          29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=)
                          30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=)
                          31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=)
                          32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: V72BASjvOYZk49WITKc/2c6Mh88ovBjsbtus0dcDdxg=)
                          33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=)
                          34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=)
                          35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=)
                          36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:c9:f2:a7:56:4d:74:e5:55:55:e2:a0:64:15:31:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Oct  3 22:02:08 2026 GMT
            Not After : Oct  4 22:02:08 2026 GMT
        Subject: CN=1ceb3076e3c73b564026a42a77bac18afe6e6383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:35:b1:8f:69:d3:3b:cf:62:d6:94:65:f1:
                    89:ee:46:60:3e:26:03:da:dc:f8:de:6c:47:ca:ad:
                    f3:a9:2f:30:fb:8c:67:a7:ea:e7:d5:34:83:4d:3d:
                    66:d1:b7:a8:65:b8:10:7b:2e:e6:78:75:f3:2b:a8:
                    e4:61:d1:c1:d1:90:c5:26:cd:e0:27:04:73:50:d7:
                    58:ad:ef:a9:02:70:c0:2c:3a:85:7f:0b:ee:f1:21:
                    a9:cc:bb:36:76:30:18:1e:22:45:25:81:98:73:26:
                    03:97:88:c8:1d:c8:d0:96:dd:55:61:c5:53:c0:c8:
                    19:65:94:2f:a1:8d:a4:e1:29:f1:6a:35:c4:ea:27:
                    c0:32:3b:21:5b:f1:99:3b:32:43:7c:64:4b:34:97:
                    d7:39:37:2c:86:5f:ab:e0:cd:01:7f:1d:bc:7c:00:
                    cc:e1:b2:d7:a8:04:99:90:60:8a:1e:43:85:05:90:
                    db:38:08:a4:1d:09:22:d3:91:8d:d1:44:f5:c1:d4:
                    fb:3d:6b:82:c4:eb:a3:64:28:93:5f:e9:45:a0:c4:
                    43:22:a6:d7:52:68:ce:12:86:88:c7:87:1a:80:51:
                    a2:04:b9:02:26:8c:0d:ff:cf:64:02:6b:49:9b:16:
                    f1:6f:61:c1:34:35:9c:9c:64:d6:7d:25:e7:d9:61:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:30:76:E3:C7:3B:56:40:26:A4:2A:77:BA:C1:8A:FE:6E:63:83
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:a8:9d:26:c4:81:3b:9d:b1:9b:64:f3:07:c7:3f:31:b9:
         4b:73:d8:96:9f:65:27:f3:a6:53:4d:a8:b0:ed:77:6d:22:72:
         e0:f1:34:f2:da:2e:3e:ab:9f:3b:94:6a:d6:38:93:31:c0:b4:
         f0:e4:30:d1:06:55:9c:2c:83:d8:b7:8b:f5:80:ab:d9:a7:53:
         f6:c4:80:32:ce:c4:18:d1:39:4c:20:19:59:bc:ee:1b:e3:8a:
         6b:c4:e0:c3:2f:db:df:f7:c5:9d:1a:52:aa:8b:b4:7d:9e:b0:
         74:ab:1e:28:09:dd:b2:50:7d:d8:d0:4b:f8:d6:3d:bd:4e:7d:
         34:fd:6c:35:d8:91:c9:df:1f:74:bf:a4:62:7e:76:45:a3:99:
         fe:c4:6f:f0:1a:ca:02:c8:f3:97:56:d5:54:61:25:2d:ad:5f:
         76:63:a1:c7:1c:80:73:4e:28:b6:e7:a2:bd:6c:34:2b:75:fa:
         c1:62:bb:c7:f7:7b:3d:c1:4b:be:a5:31:e1:f6:43:28:a7:71:
         d1:f2:66:8f:53:03:f4:28:95:90:21:a0:fa:95:03:aa:52:fe:
         7e:28:59:3e:f0:c9:8f:79:6e:40:2e:a5:41:5d:e0:70:ca:92:
         f0:22:c6:b1:c7:0e:bb:4d:3b:aa:2e:fb:ca:36:d1:22:d6:15:
         c1:ea:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:20:24 2026 by rpki-client