Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          +Iaecslp+5DS5MNAGlRtPale/bsr8wMuKCOYZQzMKyE=
Subject key identifier:   33:9B:35:4E:EA:CC:58:F1:94:39:AB:D4:82:CA:51:42:C3:77:B8:21
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01A19A6ACD47AEBFA93FDE15FCCDDF30D761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          1724
Signing time:             Mon 02 Nov 2026 04:00:52 +0000
Manifest this update:     Mon 02 Nov 2026 04:00:52 +0000
Manifest next update:     Tue 03 Nov 2026 04:00:52 +0000
Files and hashes:         1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
                          2: 1KNNXZL6ouoopWh_53dd61ybf1A.roa (hash: cq5OwFDQKl5GHE8H8MFFcqH18XWpoUYy00ArlQZuRPE=)
                          3: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
                          4: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
                          5: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
                          6: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
                          7: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
                          8: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
                          9: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
                          10: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
                          11: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
                          12: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: uOun5xvIw8Sy0MTE+pvcaI5UCvWNpZPefF8l3EH3RcU=)
                          13: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
                          14: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
                          15: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
                          16: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
                          17: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
                          18: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
                          19: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
                          20: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
                          21: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
                          22: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (hash: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=)
                          23: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
                          24: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
                          25: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
                          26: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
                          27: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
                          28: jFOOiVIJXUplo5sbQn459HQ3ZVg.roa (hash: leW7ID8jgMsQdyPHewYzl9kELPvtbc87rM05EgGaQW0=)
                          29: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
                          30: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
                          31: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
                          32: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
                          33: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
                          34: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
                          35: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
                          36: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
                          37: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9a:6a:cd:47:ae:bf:a9:3f:de:15:fc:cd:df:30:d7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov  2 04:00:52 2026 GMT
            Not After : Nov  3 04:00:52 2026 GMT
        Subject: CN=339b354eeacc58f19439abd482ca5142c377b821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:f0:3a:1f:c5:36:16:4f:06:ca:70:f8:cc:
                    e5:bc:c5:07:1c:14:23:5a:ea:7f:90:ec:05:34:be:
                    23:47:8e:24:81:aa:9a:0e:d3:57:97:ee:08:c8:66:
                    01:92:4c:0d:48:01:c1:43:07:95:1a:70:44:b7:d4:
                    1f:af:b8:19:20:64:9e:17:25:a7:c3:93:6f:0e:8b:
                    a7:fc:c8:99:ad:57:85:eb:ee:52:6d:b7:6e:e6:80:
                    e8:1f:8b:ec:a5:e3:e3:c3:8e:ff:0f:e6:ed:61:0a:
                    7a:d7:84:6b:96:10:de:17:03:ab:e9:fb:12:ce:2e:
                    12:ae:b3:36:a2:e9:14:c0:fb:cd:a4:76:9c:6f:fc:
                    97:a4:d4:3a:bd:5b:5e:28:6f:a8:70:c3:98:15:b9:
                    fc:97:27:ef:7d:8a:65:ac:ed:4d:91:41:14:3f:7b:
                    f0:e8:38:b1:00:98:25:07:28:6b:48:99:fd:3f:44:
                    c3:23:53:fb:aa:e2:93:e0:ef:6d:3c:1a:c5:8e:f0:
                    f7:5b:0c:a0:58:59:9f:5a:49:0e:b3:6c:77:33:82:
                    0c:f0:eb:cd:1b:3d:2c:66:37:a0:a0:06:26:45:3a:
                    bf:7a:be:88:f7:ae:b6:94:0a:61:b1:63:70:ff:66:
                    d9:0e:e4:d0:ae:da:a2:2f:69:94:c6:7e:6d:b5:a0:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9B:35:4E:EA:CC:58:F1:94:39:AB:D4:82:CA:51:42:C3:77:B8:21
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:52:52:56:e8:fc:94:9a:63:74:63:3e:b8:aa:de:d6:6c:80:
         07:ce:9e:0c:4b:97:22:08:c9:45:75:af:ab:0e:6f:bd:20:fb:
         36:e3:7f:b7:fb:d5:b0:f8:ea:ad:57:56:ff:b7:7c:0f:05:0e:
         a7:53:6b:5c:23:c1:b4:a8:ee:de:17:61:91:ed:36:27:1b:b4:
         ed:cb:12:36:d4:68:6a:b8:6c:09:27:ec:df:d1:3f:ae:63:ce:
         70:bb:06:5e:b2:33:a8:d6:1e:9b:d3:02:b2:25:d4:01:0f:80:
         95:c4:2b:f2:06:3d:b3:d8:d3:94:02:93:c1:bb:20:db:d6:03:
         64:7f:a1:e6:cd:68:fd:e9:a2:97:32:a1:cb:35:7b:63:43:48:
         f5:12:f9:b1:b4:43:0b:e7:7b:05:07:7d:bc:27:49:7c:02:3c:
         01:f5:20:9a:b4:c9:be:fa:88:1a:50:d6:da:6b:59:83:10:49:
         2d:ce:13:46:04:a1:f3:29:55:1f:21:60:f6:18:72:a2:c4:32:
         2b:54:26:15:fc:48:5b:ce:89:9e:65:c6:54:7e:5c:f7:61:81:
         7f:69:0d:0b:ed:ee:24:bb:15:08:0b:c3:d4:7d:d1:34:03:7f:
         36:a6:fd:0d:d5:39:f7:63:0b:6c:6e:6d:7f:a9:8e:a1:9a:b6:
         fe:19:21:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:42:54 2026 by rpki-client