Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
File:                     FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json)
Hash identifier:          UggHNHQvw5/7K80dBChSK/ZiLXlpBfsnrq2wIVWh2qk=
Subject key identifier:   F9:D9:0D:5D:F1:1D:CA:CB:0D:B9:1D:8B:BB:DA:8F:05:39:D1:F1:CA
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Certificate issuer:       /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial:       01A105EE3B8AC4CC98163068EB8631E7AB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
Manifest number:          0890
Signing time:             Sun 04 Oct 2026 08:01:01 +0000
Manifest this update:     Sun 04 Oct 2026 08:01:01 +0000
Manifest next update:     Mon 05 Oct 2026 08:01:01 +0000
Files and hashes:         1: 9QabwwHqPhYKxP3gl0P9iQp-4Ik.roa (hash: RUl0Z99zvEAva+EAvwIVa5ruzB7qQYp5FRSsO8ORHMI=)
                          2: 9lpk2brynM2xPsQoD2BpQ_zryUY.roa (hash: 5503yAKytxSCjrZG64w1D2L5jLnQ2qWaYtDDiQB0YCw=)
                          3: BK_YNC-4CZnLpU2MN5D2SU1_Nww.roa (hash: 4wgC/AlBtg0IhhyUhxOmG6AUSQksH1PWPid2yPZTqaY=)
                          4: DeXRHNQguHL5MnAkd4vLEkBdPuk.roa (hash: jikgNispZLFdYZRRNfLqNGOKvltI0BZLoTS7Ocsy8To=)
                          5: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: 3fnhlsZUssjw/VLljMlW2Vmy+AII/SqZ2Di2WWqZFJg=)
                          6: HYxJ3SB2TSW99lTxlPt8S4QtcK4.roa (hash: gRS9zeeuV8SKM1nbKlfewy+rOaMm993XLsQjTHdF2UI=)
                          7: ICFYqu77x7I38XLSO8ssUz7L2Vs.roa (hash: dMMfHQ8neHfvmT2WRB8flQYBAjRbWn4Uktvrdq2TvDk=)
                          8: LY1Imffq4Tcht5lhn85h0T6M9rU.roa (hash: E8Ebqp/NAXsQVPhPFl6lWRLOqdKF4bgvi6IDAVvWdyI=)
                          9: M9Eq9TxB4ELCxYsSFSWqEOMd0yI.roa (hash: sGrNFgQoEqArMHwvAcAPBCRxd8TSnLVWDJPczgQN9pg=)
                          10: NVG3gQx-M4fHtifzv7Gyok8fpcc.roa (hash: /yXcKa69rk23MJXdzFX1OFbHvmWVWxkOlwFrDG248nc=)
                          11: O5y78XV4Ecu2TJ7JJQf2PH8bl_A.roa (hash: KA6ob2zHuXK4B8VHXnfSX9RWYGxeK5RUOPu+8Ce1iyE=)
                          12: P-7YT_stn3QjMbmeVSoj54vRTCs.roa (hash: fJS0qp2+kgQkR2L1HUuieZMpuL7XJ7LFlXT3cDzvL5o=)
                          13: RjTmN8HMf7x_UmglxDEhp9feldQ.roa (hash: FCQFOL6JXeSqN4gUCj0DUzq8bOvziLhFb5d4EzXrbIw=)
                          14: RuO6KIVhjozoJ0kD2BkdhQgX4B8.roa (hash: QibHxSQu8SWRhQzt1nTT+aioz4rYu6SGZB+KmUsIJdc=)
                          15: XSfH6TkOWLKUaJiwEVKslm53W7k.roa (hash: R4rmSWlYOJP+yHbi/praA3gZ9kPC7hWIxosq032+G6I=)
                          16: YT9wjytAT5xPrOJL8NePaRpFhtA.roa (hash: gUaJHgcMSRYWjqhF6K0pHVyX6mcCIJDcHqHD1PkGi9Y=)
                          17: _kGEBUGq7kLWBkMzztsmxUt8Yac.roa (hash: aHzwke5AaVNef0xFHBn6zKYduyTSoACw0f4GdOnv2LA=)
                          18: _y9_oZ1j9QVoa3Pm6QWHGmvccL4.roa (hash: 0GxSZz5/AYTFV7FMif3LWKuWNI9TyrkDP3Z8t3AIe88=)
                          19: a1gVEKKTftm8RFl4rZhQFY0OyO8.roa (hash: Hnw9r4+kKuPwcpnlnTqy2eDwjMjpPBIyp4q0R4PbHX8=)
                          20: aqiBrEg-iKFR9AZa1xcJa27xMh8.roa (hash: dBYZHrjqoynYw+4Tgz+CPKzSHIlth9jMY838qtkzwqI=)
                          21: d2KfiOCFI_CHiAtNAM6oRrogzts.roa (hash: aGnK5W2VWJxKvb8pA/bvp+T8gfh4IxqlBIoaRp1QR/M=)
                          22: dn6G1pY2LNbKrUDJw7SxMUtrFAI.roa (hash: wPo7zgIgs1nz24VCLDjd5mZqRSRNNELTR2RI/qtTA14=)
                          23: eLvozgAuYfxaIGoHirLhqZjYV6A.roa (hash: ZUBOvdPe1xW/PCbTW1HvwAv+AhE++2YwPZTLvVDoPjk=)
                          24: fT5RRSA7pYFmUqyJ5T-gWaj1olk.roa (hash: rJof0lgyDLnpsks9qHJvaOJA2mGjhW1JNLu9CMyexnQ=)
                          25: g9AVu06_Q4WU5cWW9_ns2zOeruY.roa (hash: MshMHXaQOpksxof8uOqYOWVufG7jEPpOyFRZONQHAc0=)
                          26: ld67joj9v_zM9_tZso1t8wGiMSM.roa (hash: xvopnCuUdWmVK8QrNOdd4mAsv5Icpn4OWN9IOiXh0x0=)
                          27: oehIIoaZwZTKKEJpI7pzoDQzJOg.roa (hash: iIVEnI4TyBaI6WOcZK2wpHlkxlOZIo7j2YeYWbFpavQ=)
                          28: opqnkFHoEXKhvq7OyH14rnf0YP8.roa (hash: peA61QsKsh1y16MIgAYhAd+NF8dzDFvXn+YtYDv8l2w=)
                          29: pgwGH_17ikEwMf3MSqbK3IV4Cq0.roa (hash: f7JKzP80aFNEtVInpJ0ZAyyv7JxQqcN6q5Cb3slS9Uk=)
                          30: plJYxIK0uTSpo5nZGzrS9dTvMjs.roa (hash: mXzNxEKcjNdbVuEa3wi+IEpVoTR2mdx8i3sCA1w+QxI=)
                          31: rPmv-ZYTtdxBIObiZFXTTrXUPMo.roa (hash: DhrBMkiedUW5Z/x0EpV6Br3pjQNT7YFHGurp1RJwipw=)
                          32: rsRNqWRJzQ3V1aoBKBx0__FfudY.roa (hash: o03gIgkgFKkVWOszmOOFbX6P7Fdr43ZfJ1ZJg4/EUa8=)
                          33: tVOX2uf11NejASRvEd8XuTvbYz4.roa (hash: 4/hQ/jdm5dv3t9r3Ns+INICr4iM1pFkFIGNBqvYO3YM=)
                          34: wQf3slSjcDcszDC3iCvBsgcbLck.roa (hash: WEx/rS+gh4VVC8ZVkRxH+m9dal/YGGtlbKf92wSvNJo=)
                          35: z9XB5hGgaOmBuEO-Dz5QRBmeAks.roa (hash: 2ECBZl5uI+4aqCeiR9AYAgadSZzAc8zxKgfahb2aHj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:ee:3b:8a:c4:cc:98:16:30:68:eb:86:31:e7:ab:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
        Validity
            Not Before: Oct  4 08:01:01 2026 GMT
            Not After : Oct  5 08:01:01 2026 GMT
        Subject: CN=f9d90d5df11dcacb0db91d8bbbda8f0539d1f1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:27:80:53:49:5d:55:12:65:e5:32:13:35:
                    e9:e1:75:ce:e5:d9:84:35:e5:34:a8:5c:e5:02:f3:
                    e7:9f:b2:7a:25:7f:dd:e2:46:2a:e9:9b:03:97:7c:
                    f1:ad:30:4e:dc:11:a7:05:fd:c6:87:ff:35:86:af:
                    e8:24:51:ce:ec:2b:97:e1:a5:be:ab:ae:c9:56:05:
                    45:d0:62:4c:75:c3:d3:56:e9:1c:ba:d3:fb:17:50:
                    63:80:93:2d:68:1d:28:e3:b8:a8:d3:4a:7c:88:45:
                    b6:bc:4e:ec:42:a6:0d:ab:7d:d2:73:b3:b5:d0:17:
                    85:2d:27:a9:02:1a:56:d5:4e:d3:3f:66:b4:ad:c5:
                    70:1c:56:3d:b8:6e:ef:2b:ef:40:79:34:b8:f4:b8:
                    43:7d:88:43:29:c9:c4:74:e1:88:4c:69:af:99:87:
                    fd:ba:d2:e8:0b:46:79:8c:1d:a3:6e:42:d7:09:91:
                    fd:85:43:35:43:ba:c2:83:2e:81:eb:b8:6b:c9:83:
                    f4:14:74:1d:c5:3d:76:58:28:b4:c5:fa:81:22:82:
                    49:b9:ad:d1:90:2e:ec:39:f8:2b:8c:82:f2:0a:73:
                    98:94:2c:e2:12:81:0e:31:c8:d5:94:eb:71:a9:a6:
                    bc:2b:31:80:e5:50:8e:ab:bf:00:48:c2:a9:3b:5e:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:0D:5D:F1:1D:CA:CB:0D:B9:1D:8B:BB:DA:8F:05:39:D1:F1:CA
            X509v3 Authority Key Identifier:
                keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:71:49:fc:79:8a:a1:ef:6e:d3:64:bf:fc:78:9d:f4:9e:
         24:92:09:96:df:26:9d:9c:19:36:27:58:8e:b7:70:2d:e2:27:
         01:96:dd:e9:98:1a:33:f8:cc:40:33:7f:6a:af:ce:3e:f9:08:
         96:87:0f:6d:05:54:5d:ad:71:f1:9d:d2:f2:e1:59:77:b9:8d:
         4c:a9:fd:9e:00:26:ff:43:19:82:4a:b4:33:d7:f1:6e:66:d3:
         bf:92:65:1f:72:bc:a2:5c:bc:90:86:8a:6f:b1:d5:36:32:1f:
         7f:49:83:4c:73:a4:26:84:7c:64:0b:8d:9b:d6:f6:c1:c7:7d:
         58:bf:1b:29:e2:5c:40:69:7f:ec:5a:3e:04:05:30:e0:71:3a:
         23:46:33:34:b8:e3:5f:e3:38:a2:d7:8c:f0:48:f3:56:34:d0:
         0d:27:b7:ca:49:56:6f:c0:a6:46:b0:9b:4c:af:53:1c:48:77:
         da:82:e6:5d:89:0b:fd:78:7e:01:27:f4:95:1c:93:49:6a:ad:
         62:f0:15:73:d4:2c:7e:42:5a:de:0a:f1:2d:c9:61:78:9e:ea:
         18:0d:8e:05:2f:14:62:00:00:47:08:b2:85:3a:a5:38:36:c4:
         d1:64:cb:a7:48:a4:fc:9a:7e:1d:a1:52:34:bb:20:67:ac:a7:
         a9:0e:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:58:50 2026 by rpki-client