Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          IOlw+fGMQOuyzMptF+52z58xrjlFUDDTeov6zSI+8sA=
Subject key identifier:   F3:44:E6:A8:13:4B:82:41:9A:12:14:17:BB:3E:D9:2F:F2:74:F9:0F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01A10392498C77FEA6869C09FEBD584957FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          16D4
Signing time:             Sat 03 Oct 2026 21:01:20 +0000
Manifest this update:     Sat 03 Oct 2026 21:01:20 +0000
Manifest next update:     Sun 04 Oct 2026 21:01:20 +0000
Files and hashes:         1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
                          2: 1xo9uRwazGPExjT15gHLTmOfVnY.roa (hash: alhQ3MkblKkYV6C77axeZ7FdHmqDD77jedDHF6Ew1Xo=)
                          3: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
                          4: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
                          5: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
                          6: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
                          7: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
                          8: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
                          9: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
                          10: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
                          11: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
                          12: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: BhvT55v9fQm5wvhseYgMfKDOarPdCM38zqxu3gMtfe4=)
                          13: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
                          14: GxIHXjt6YycYTUa0XRCVghpAj-k.roa (hash: HhhKZCdKN9/SlwUoWfOdsnSeB0lEPNK2Xjfhma7psx4=)
                          15: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
                          16: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
                          17: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
                          18: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
                          19: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
                          20: PYCVbJ1vffPW_TvvIq_XI2iZ0N0.roa (hash: 7eoowYLymhOX2Fm9X0fOsfGTIcRqtUS7w/PgW47/j14=)
                          21: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
                          22: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
                          23: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
                          24: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (hash: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=)
                          25: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
                          26: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
                          27: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
                          28: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
                          29: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
                          30: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
                          31: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
                          32: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
                          33: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
                          34: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
                          35: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
                          36: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
                          37: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
                          38: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:92:49:8c:77:fe:a6:86:9c:09:fe:bd:58:49:57:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct  3 21:01:20 2026 GMT
            Not After : Oct  4 21:01:20 2026 GMT
        Subject: CN=f344e6a8134b82419a121417bb3ed92ff274f90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:97:8d:fe:98:5a:e3:0c:5b:86:5e:28:0b:
                    58:c7:c2:fb:f5:c6:b6:13:8e:5b:22:37:ff:b2:c8:
                    c7:28:91:26:c5:e8:cb:1e:a1:3e:bd:d5:8f:4a:e9:
                    0a:2d:bd:be:fb:84:18:af:14:2b:2c:91:f9:a3:b7:
                    8e:e8:e4:c2:c2:0d:c6:77:91:e6:c2:39:31:bb:57:
                    1c:f2:e8:c9:22:96:97:4b:b5:95:0b:25:ad:79:5b:
                    fe:a6:1f:30:f4:01:00:8c:99:50:d0:09:83:ec:1c:
                    83:01:a2:28:41:aa:5e:de:c5:79:16:23:63:92:cb:
                    83:df:c4:34:63:0a:58:79:05:9a:24:45:d3:7a:fb:
                    4a:00:8e:4d:24:09:3d:07:39:e2:40:ff:f4:7d:ff:
                    bc:a9:f6:cb:73:30:fd:0f:52:44:93:b6:b6:52:1e:
                    e3:fa:c0:9b:e8:a2:b0:4d:4d:85:93:da:c9:bb:36:
                    6d:8a:88:89:39:87:e8:0f:39:37:7e:de:d8:50:24:
                    a1:97:25:eb:09:65:41:26:cf:c6:56:62:07:9c:73:
                    fe:31:5a:93:d4:41:66:24:42:1f:09:6c:88:56:81:
                    0a:85:f7:91:99:60:66:d4:0b:f1:42:4f:88:53:f7:
                    fe:d6:7f:c6:b7:e5:2c:7e:85:24:34:63:09:63:08:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:44:E6:A8:13:4B:82:41:9A:12:14:17:BB:3E:D9:2F:F2:74:F9:0F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:f6:9f:5c:38:ef:eb:60:a6:76:7b:58:c5:21:3a:b9:62:
         0e:6d:c2:f9:8e:73:0f:a5:e1:bf:e6:ff:3d:f5:b2:34:4d:dd:
         6a:17:6f:40:8e:e5:50:73:3d:e1:9a:c0:71:14:7b:0f:6e:75:
         84:29:ca:93:38:c2:63:e6:5f:d5:3c:6a:a9:ca:77:df:df:ff:
         ca:6c:08:fe:da:48:00:11:08:05:d2:2a:62:34:a9:18:6d:95:
         41:4b:58:93:4a:e2:21:02:7c:3a:03:b0:6c:42:fa:42:d9:60:
         7f:4e:b5:af:a8:01:99:cb:38:af:8c:2c:4d:6b:7d:01:9e:e8:
         7d:c5:90:eb:7a:44:05:b0:b6:da:0e:a8:46:5c:03:85:dc:1f:
         13:9d:85:da:b5:83:32:97:41:ca:96:82:b5:d4:65:79:55:64:
         c6:7c:d9:f2:05:55:1e:fc:f8:02:fa:ca:76:1e:f3:f1:c0:aa:
         d2:8d:40:db:4a:38:dd:cb:3d:ca:7e:29:a3:67:82:f5:ee:1f:
         87:f8:65:27:67:07:68:a4:58:63:5a:5d:ba:e9:8f:2f:e0:bc:
         52:68:bd:39:44:1b:23:dc:62:a9:9c:7b:84:3d:7b:7a:fd:2d:
         9f:b6:9d:23:42:a2:42:0b:2a:ba:ac:1c:08:d3:70:5e:73:78:
         09:35:37:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDkkmMd/6mhpwJ/r1YSVf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYxMDAzMjEwMTIwWhcNMjYxMDA0MjEwMTIwWjAzMTEwLwYDVQQD
EyhmMzQ0ZTZhODEzNGI4MjQxOWExMjE0MTdiYjNlZDkyZmYyNzRmOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpKXjf6YWuMMW4ZeKAtYx8L79ca2
E45bIjf/ssjHKJEmxejLHqE+vdWPSukKLb2++4QYrxQrLJH5o7eO6OTCwg3Gd5Hm
wjkxu1cc8ujJIpaXS7WVCyWteVv+ph8w9AEAjJlQ0AmD7ByDAaIoQape3sV5FiNj
ksuD38Q0YwpYeQWaJEXTevtKAI5NJAk9BzniQP/0ff+8qfbLczD9D1JEk7a2Uh7j
+sCb6KKwTU2Fk9rJuzZtioiJOYfoDzk3ft7YUCShlyXrCWVBJs/GVmIHnHP+MVqT
1EFmJEIfCWyIVoEKhfeRmWBm1AvxQk+IU/f+1n/Gt+UsfoUkNGMJYwg4jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNE5qgTS4JBmhIUF7s+2S/ydPkPMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrL2n1w4
7+tgpnZ7WMUhOrliDm3C+Y5zD6Xhv+b/PfWyNE3dahdvQI7lUHM94ZrAcRR7D251
hCnKkzjCY+Zf1Txqqcp339//ymwI/tpIABEIBdIqYjSpGG2VQUtYk0riIQJ8OgOw
bEL6Qtlgf061r6gBmcs4r4wsTWt9AZ7ofcWQ63pEBbC22g6oRlwDhdwfE52F2rWD
MpdBypaCtdRleVVkxnzZ8gVVHvz4AvrKdh7z8cCq0o1A20o43cs9yn4po2eC9e4f
h/hlJ2cHaKRYY1pduumPL+C8Umi9OUQbI9xiqZx7hD17ev0tn7adI0KiQgsquqwc
CNNwXnN4CTU3ZQ==
-----END CERTIFICATE-----