Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          D2QQPf1XCDEOKNmzizl+Jja8V/rPVEuc2fHCN0AGVuk=
Subject key identifier:   D0:E1:3B:A1:6D:90:BC:0A:4F:E3:0C:80:67:95:36:AB:53:20:96:E0
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       01A066EDEB226288983CB8C31ACBF3E1F0DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          1B3B
Signing time:             Thu 03 Sep 2026 11:01:03 +0000
Manifest this update:     Thu 03 Sep 2026 11:01:03 +0000
Manifest next update:     Fri 04 Sep 2026 11:01:03 +0000
Files and hashes:         1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=)
                          2: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=)
                          3: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=)
                          4: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=)
                          5: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: vKt3iwljT5qHdTKS/zfskmDrIcp743F5lRiLN058KuQ=)
                          6: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=)
                          7: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=)
                          8: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=)
                          9: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=)
                          10: DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa (hash: c3vfVLlIrAY1SyBEM3blDE+VN4LQBi0IdvidL1hF+CY=)
                          11: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=)
                          12: G0j4IoE-ugCMEr84DNMqH4xjHZw.roa (hash: NdFWvMVet+G455uF6ZrnwIrwjrfOSjTkt3TcUmOzIEY=)
                          13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=)
                          14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=)
                          15: KZa0_YbQudyugjKyiPylUaqa8cM.roa (hash: a784ru0dQdWa0IZvtgp9kIyG4IBuCvFCniVmgSRiiKk=)
                          16: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=)
                          17: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=)
                          18: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=)
                          19: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=)
                          20: cxK58b8OqyweEEX7ZSzNThByzJ4.roa (hash: ksTlPnVTNF8gujtMt/7QmPYDNk3NsHykT5fC5mx0yFE=)
                          21: derjq_a2xULSiq0hLt8SXBP15vM.roa (hash: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=)
                          22: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=)
                          23: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=)
                          24: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=)
                          25: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=)
                          26: mu8sewjnHs63ljc5EPin04mGuqc.roa (hash: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k=)
                          27: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (hash: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=)
                          28: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=)
                          29: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=)
                          30: yfGuO_RiAeAX-4VWDDK9O80bQVk.roa (hash: wbUMpspJWNO4G0cReSr6miT8s7Y5qAH8rRHGKlw0D/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:66:ed:eb:22:62:88:98:3c:b8:c3:1a:cb:f3:e1:f0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Sep  3 11:01:03 2026 GMT
            Not After : Sep  4 11:01:03 2026 GMT
        Subject: CN=d0e13ba16d90bc0a4fe30c80679536ab532096e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:85:f5:91:b4:b2:db:a4:fd:18:c9:d3:27:47:
                    9f:49:6c:90:ea:f2:21:bc:29:09:ba:47:87:31:fe:
                    b6:34:d6:9c:52:2c:4a:e8:e5:1c:06:af:69:08:3b:
                    8e:ee:72:69:0e:e6:45:09:6c:64:21:f1:57:7a:49:
                    2e:5d:85:26:50:1e:86:2a:ec:d3:26:44:bd:66:7d:
                    41:c3:02:5d:de:f7:de:84:f9:bd:ba:f9:a9:7a:dd:
                    41:8f:82:25:8a:bf:9b:8f:99:b4:67:ef:c1:56:5c:
                    ae:3e:65:9c:ab:48:a2:4a:17:9c:4e:ab:f6:05:51:
                    c6:3a:39:b5:44:de:90:8b:dc:2d:eb:da:c1:05:25:
                    af:b6:e1:16:2e:5c:be:7a:62:14:69:a9:3e:56:32:
                    d0:90:28:1a:65:b3:bb:1e:3c:89:09:b7:f5:51:2a:
                    ca:cb:04:fd:80:b9:30:01:fe:7b:d1:c7:36:84:4c:
                    e3:8a:78:6c:1b:7f:e8:d2:30:90:6a:e7:4b:2c:54:
                    e2:cf:bd:6e:49:c9:aa:9e:1f:af:7f:82:de:3f:20:
                    26:0f:37:cb:42:50:ed:53:b4:48:f8:0a:6b:24:89:
                    6c:23:81:98:35:57:74:d0:e6:d3:fd:8c:27:42:75:
                    10:35:dd:1f:59:02:54:16:62:cd:4e:12:e0:fe:63:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E1:3B:A1:6D:90:BC:0A:4F:E3:0C:80:67:95:36:AB:53:20:96:E0
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:50:07:fd:4a:b4:83:f3:36:47:ed:41:c9:ae:37:54:32:
         60:2e:4d:25:30:0d:d4:8f:5c:e7:b0:90:65:7b:3b:9f:d8:68:
         10:0e:02:c9:1f:93:ac:81:7d:fe:be:69:4c:7a:19:15:9e:c2:
         e6:d9:37:03:16:1a:31:1e:54:f7:34:5e:87:c7:53:5a:cd:0f:
         d0:41:fe:96:7d:ab:b2:92:1f:69:60:ce:ee:53:4d:91:29:b7:
         4f:5d:3d:00:e2:fb:9d:b5:40:88:aa:3a:de:ce:34:19:b8:b3:
         c1:9b:95:2c:87:67:d3:e4:bb:6c:af:50:41:e7:4b:86:d5:c0:
         f0:be:91:79:0f:e6:57:4a:eb:ad:5b:93:2f:9b:29:c5:74:60:
         9f:4a:a8:e3:ac:02:d3:9d:f3:a3:22:f6:b4:c8:b4:64:5c:b4:
         62:c8:ae:06:01:df:0e:6e:e6:38:f4:70:cb:cf:3c:53:7c:c5:
         db:54:d7:3c:b6:0b:dc:d7:f9:da:a5:4d:ce:e2:d0:16:94:00:
         9b:e1:ca:c6:fb:b2:da:f6:39:1f:f4:a6:4e:95:70:e1:b4:63:
         09:b3:56:3b:3f:18:eb:c3:06:f6:60:02:6d:04:27:c0:8a:d0:
         f6:df:e3:bf:d7:99:e8:73:51:e7:ed:ad:0e:f4:9d:4c:e6:36:
         87:75:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:22 2026 by rpki-client