Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          2EjCVSeQ1/Uo7e2JjVugMsfijHU4CGYioknA4xE3p7k=
Subject key identifier:   01:D3:CF:62:0A:C7:EB:48:28:A6:85:AA:FD:9F:0E:E1:B5:E4:CB:7F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01A17B846705384D285195F5693DD2262584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          1714
Signing time:             Tue 27 Oct 2026 04:00:37 +0000
Manifest this update:     Tue 27 Oct 2026 04:00:37 +0000
Manifest next update:     Wed 28 Oct 2026 04:00:37 +0000
Files and hashes:         1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
                          2: 1KNNXZL6ouoopWh_53dd61ybf1A.roa (hash: cq5OwFDQKl5GHE8H8MFFcqH18XWpoUYy00ArlQZuRPE=)
                          3: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
                          4: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
                          5: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
                          6: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
                          7: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
                          8: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
                          9: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
                          10: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
                          11: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
                          12: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: R6Wt+P1g4yO6428CFAVShvPAJviwd/ZPkDAiktVa07c=)
                          13: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
                          14: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
                          15: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
                          16: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
                          17: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
                          18: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
                          19: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
                          20: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
                          21: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
                          22: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (hash: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=)
                          23: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
                          24: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
                          25: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
                          26: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
                          27: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
                          28: jFOOiVIJXUplo5sbQn459HQ3ZVg.roa (hash: leW7ID8jgMsQdyPHewYzl9kELPvtbc87rM05EgGaQW0=)
                          29: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
                          30: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
                          31: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
                          32: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
                          33: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
                          34: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
                          35: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
                          36: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
                          37: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:84:67:05:38:4d:28:51:95:f5:69:3d:d2:26:25:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct 27 04:00:37 2026 GMT
            Not After : Oct 28 04:00:37 2026 GMT
        Subject: CN=01d3cf620ac7eb4828a685aafd9f0ee1b5e4cb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:03:f4:ca:36:e9:e6:6f:0e:48:5a:42:28:
                    66:c6:72:06:19:00:c8:98:77:32:36:5d:12:02:db:
                    a0:4e:6e:5d:b4:7e:cc:fe:32:77:3a:41:e7:e8:07:
                    fb:58:de:96:e3:86:31:94:0d:9f:16:0d:46:97:51:
                    04:74:d8:64:e8:d5:37:85:8e:5f:c6:55:be:14:d9:
                    96:f4:59:0c:9e:23:89:c3:69:de:4d:e6:90:92:2b:
                    cf:8a:15:a9:a0:6b:27:7a:7f:96:d7:cf:95:97:42:
                    ce:f6:33:35:1f:fe:31:06:3c:f5:c9:7e:40:8d:06:
                    da:0e:07:eb:78:08:d1:10:d2:c7:3f:cf:d2:1f:73:
                    c0:dd:37:a2:10:1d:71:4f:a4:11:c2:24:fc:87:ea:
                    dd:aa:86:37:db:0f:0f:4c:b5:66:53:6e:80:10:a2:
                    fe:ed:31:3c:c9:b1:38:5f:d9:d9:37:74:e0:d6:08:
                    5b:78:88:fb:c0:76:07:d6:b8:9b:4c:32:86:11:25:
                    9c:a2:31:20:59:7f:18:a4:a9:f4:4f:ea:bf:1f:04:
                    1b:d6:b2:d3:43:6a:41:dd:e2:92:0c:67:53:d5:35:
                    17:f4:d3:8f:bd:26:0c:12:c2:07:43:23:ea:48:99:
                    46:29:43:13:3c:26:57:cd:9f:49:ed:59:bc:40:16:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D3:CF:62:0A:C7:EB:48:28:A6:85:AA:FD:9F:0E:E1:B5:E4:CB:7F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:68:d4:bf:b6:7d:ae:8f:f9:bb:18:a9:8c:b3:be:bb:69:
         35:8f:c9:2f:82:69:10:bf:72:8f:82:a0:7f:7f:9f:af:a8:fe:
         3d:d5:73:18:b3:b2:9e:70:f2:92:b9:4e:4f:fc:e8:7b:54:fb:
         bd:49:de:2c:4f:35:69:c2:bc:c4:20:76:98:6e:fd:79:ef:85:
         cb:65:4f:a3:f5:a4:22:19:b0:72:06:04:b8:e0:65:4a:6f:27:
         d0:40:18:e3:6a:67:b3:31:20:72:93:d9:a4:17:52:b6:7b:80:
         ac:f8:69:e2:e3:1b:20:f8:8a:b6:7c:1b:fc:61:81:3e:f0:47:
         aa:8a:b7:af:2b:45:d5:6b:47:c5:38:4c:3c:79:64:24:87:f0:
         a8:22:73:27:4f:c5:17:d5:c3:8c:5e:39:58:18:47:e5:1b:b9:
         90:5b:d2:09:46:c3:6c:30:ce:1e:06:c7:f9:73:9f:53:36:64:
         30:53:0c:eb:f8:70:04:94:2e:f8:06:b5:9c:e7:ef:1d:aa:b9:
         35:ee:95:43:57:c5:13:32:60:34:27:18:32:63:fd:15:e0:20:
         fd:d9:6f:04:15:d0:e4:b9:7a:8b:d3:68:25:46:2e:ba:f4:77:
         e3:1b:33:a1:c0:e7:87:64:47:22:49:23:c1:0d:65:19:14:db:
         2d:6a:7d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7hGcFOE0oUZX1aT3SJiWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYxMDI3MDQwMDM3WhcNMjYxMDI4MDQwMDM3WjAzMTEwLwYDVQQD
EygwMWQzY2Y2MjBhYzdlYjQ4MjhhNjg1YWFmZDlmMGVlMWI1ZTRjYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjMD9Mo26eZvDkhaQihmxnIGGQDI
mHcyNl0SAtugTm5dtH7M/jJ3OkHn6Af7WN6W44YxlA2fFg1Gl1EEdNhk6NU3hY5f
xlW+FNmW9FkMniOJw2neTeaQkivPihWpoGsnen+W18+Vl0LO9jM1H/4xBjz1yX5A
jQbaDgfreAjRENLHP8/SH3PA3TeiEB1xT6QRwiT8h+rdqoY32w8PTLVmU26AEKL+
7TE8ybE4X9nZN3Tg1ghbeIj7wHYH1ribTDKGESWcojEgWX8YpKn0T+q/HwQb1rLT
Q2pB3eKSDGdT1TUX9NOPvSYMEsIHQyPqSJlGKUMTPCZXzZ9J7Vm8QBZaSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHTz2IKx+tIKKaFqv2fDuG15Mt/MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOalo1L+2
fa6P+bsYqYyzvrtpNY/JL4JpEL9yj4Kgf3+fr6j+PdVzGLOynnDykrlOT/zoe1T7
vUneLE81acK8xCB2mG79ee+Fy2VPo/WkIhmwcgYEuOBlSm8n0EAY42pnszEgcpPZ
pBdStnuArPhp4uMbIPiKtnwb/GGBPvBHqoq3rytF1WtHxThMPHlkJIfwqCJzJ0/F
F9XDjF45WBhH5Ru5kFvSCUbDbDDOHgbH+XOfUzZkMFMM6/hwBJQu+Aa1nOfvHaq5
Ne6VQ1fFEzJgNCcYMmP9FeAg/dlvBBXQ5Ll6i9NoJUYuuvR34xszocDnh2RHIkkj
wQ1lGRTbLWp9NQ==
-----END CERTIFICATE-----