Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          JYxlv7IuuPTXf2uLK1M+STgXbzKA4c9c+Kws62S2po4=
Subject key identifier:   23:E8:3A:EF:8D:6D:90:A7:5E:BD:50:21:5E:FA:AE:24:EA:73:8F:3B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01A079626210803F91752D29094F213DE40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          1687
Signing time:             Mon 07 Sep 2026 01:01:25 +0000
Manifest this update:     Mon 07 Sep 2026 01:01:25 +0000
Manifest next update:     Tue 08 Sep 2026 01:01:25 +0000
Files and hashes:         1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
                          2: 1xo9uRwazGPExjT15gHLTmOfVnY.roa (hash: alhQ3MkblKkYV6C77axeZ7FdHmqDD77jedDHF6Ew1Xo=)
                          3: 2Mg2AzsXoeYsfaLwlaFlwLqoeyg.roa (hash: /+Kdmi4z3S0vYlB4XVCOSf4BcQg3jjVkAmy+Jt18ho0=)
                          4: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
                          5: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
                          6: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
                          7: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
                          8: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
                          9: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
                          10: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
                          11: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
                          12: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
                          13: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: j02qf0oQ+EmVW2cSrVTOvgNwU4+GC9AgjDunf4dprGI=)
                          14: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
                          15: GxIHXjt6YycYTUa0XRCVghpAj-k.roa (hash: HhhKZCdKN9/SlwUoWfOdsnSeB0lEPNK2Xjfhma7psx4=)
                          16: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
                          17: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
                          18: LqvZMyaViQE8cvR-F47kJnjdaLQ.roa (hash: Gq/ZoEi72BnNGVU9SCunho4/vjXss/Uq7uXk6j5dM08=)
                          19: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
                          20: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
                          21: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
                          22: OMZm50TF-0TjdbGTe4qpNY6HymI.roa (hash: EmrHb8bt4TIzH8KbFgFCCmPS1nU9iqhgX/3pO6pCP54=)
                          23: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
                          24: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
                          25: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
                          26: bOeqVcjduzTNYznknBbCbfzjuzA.roa (hash: 2Xgmd+Qy6DDYlZhvOt6kmK19jFjlisCRB5ORjUTvxu8=)
                          27: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
                          28: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
                          29: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
                          30: hrKQk8S9GiG42BHkba_0lz9WsDs.roa (hash: OQCsqQw6CcQx26SWXLj0loNJ4hKx+OfgZi4HoUmGcV8=)
                          31: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
                          32: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
                          33: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
                          34: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
                          35: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
                          36: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
                          37: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
                          38: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
                          39: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
                          40: u7iEmRQisSf83RBqjjO6HMVH_uM.roa (hash: hiSgmMMSf/VUxaoPszyD77C2EBYHq8JpPtq0tK9fiAI=)
                          41: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
                          42: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
                          43: ySc4DnCxLI5JdvxrV9JDuZIj7eA.roa (hash: XLHqAnDkuXHaPgmxAfCQCJFWfzPqs9OndrjVRU9ghIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Sep 2026 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:79:62:62:10:80:3f:91:75:2d:29:09:4f:21:3d:e4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Sep  7 01:01:25 2026 GMT
            Not After : Sep  8 01:01:25 2026 GMT
        Subject: CN=23e83aef8d6d90a75ebd50215efaae24ea738f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:d0:02:e6:4e:ae:ec:81:17:fd:ef:7a:dc:
                    b1:8b:14:95:d9:5f:8c:eb:21:ae:c4:1b:5d:bd:07:
                    53:7d:21:c3:21:1a:c0:c8:1e:9f:42:65:b2:31:7c:
                    fa:5f:db:52:37:4f:50:ca:7c:d4:c9:1b:c3:76:dc:
                    0a:66:c8:da:ce:7c:28:31:cd:9e:fd:32:3e:05:fb:
                    4f:dc:13:8e:a1:18:b9:aa:00:0b:de:df:c8:bd:9b:
                    40:bc:52:23:27:3c:c4:08:ad:bb:e0:26:36:64:8b:
                    1f:16:f1:f1:fe:4b:a6:f0:37:08:f2:33:a2:c3:49:
                    b8:c3:bc:cd:91:5b:ec:e8:c0:7e:d6:ae:11:70:ee:
                    3d:4f:c8:84:1e:a0:eb:bc:47:eb:67:1f:70:a0:e8:
                    65:e0:a6:3e:a1:b4:f5:26:1c:4b:8b:4e:ae:ab:47:
                    02:a5:42:a5:b0:89:8e:e8:b1:60:a8:22:44:a4:f7:
                    91:14:5a:a1:13:03:46:01:16:99:a4:88:ab:7f:78:
                    92:c3:73:5d:26:a0:ee:c7:69:12:77:73:4e:0b:db:
                    dd:75:95:39:6e:dd:78:03:ac:f3:0b:ab:51:1e:ca:
                    4f:52:75:eb:be:ac:f6:60:4c:ee:01:6c:76:66:91:
                    9c:61:39:00:91:02:75:9c:c9:60:f4:03:c6:e9:f1:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E8:3A:EF:8D:6D:90:A7:5E:BD:50:21:5E:FA:AE:24:EA:73:8F:3B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:43:63:c8:6c:d4:ad:62:77:37:55:4d:e1:66:a0:68:a4:6b:
         3d:54:49:b6:19:8e:6d:a4:b3:b9:1f:ee:5f:b6:ce:10:70:d4:
         4a:42:6d:fa:c2:3d:0e:b9:5c:e0:42:2f:6a:32:fb:18:b9:f5:
         e4:d5:87:07:5a:65:69:96:32:43:2b:8f:ab:d8:ff:62:38:17:
         1b:eb:b6:6b:95:38:c9:f2:0d:d9:36:29:ce:2f:1a:42:d4:e7:
         19:51:46:40:6c:a7:f1:56:b7:38:af:38:82:eb:fb:8f:4a:e3:
         84:87:d6:90:65:4e:90:96:d3:40:77:0f:dd:a9:a4:56:a5:2c:
         19:70:b2:df:98:81:16:7e:97:bc:35:1d:0f:f5:11:0b:ad:f8:
         af:35:77:0e:c3:6a:3d:8a:c4:f5:dd:55:88:1c:88:a0:15:ce:
         41:70:72:bc:9b:a3:ec:4f:87:98:ff:82:34:a9:b4:6f:7f:d5:
         1e:c4:09:79:da:0e:a7:81:da:51:01:ed:ff:63:7b:03:23:9e:
         b6:0b:79:1c:cb:3d:b1:6a:be:e1:b6:2b:fc:09:02:8b:39:cf:
         d0:7b:56:0a:88:6d:53:0b:70:1f:8d:62:3f:67:67:4f:87:07:
         69:ee:f5:5f:5d:82:7a:b2:5d:4b:f0:03:e9:88:8a:4c:32:43:
         ee:3f:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 09:44:38 2026 by rpki-client