Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          MpMGHpgdwbgFITLKRgECb4uBzv0rpM9lFRF3bmGQdC0=
Subject key identifier:   97:77:BC:5F:25:80:37:68:91:59:9D:9A:38:B8:53:43:17:98:26:7B
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       01A17B84BFBFF60FA14B20315C1E13FA0CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          1AEE
Signing time:             Tue 27 Oct 2026 04:00:59 +0000
Manifest this update:     Tue 27 Oct 2026 04:00:59 +0000
Manifest next update:     Wed 28 Oct 2026 04:00:59 +0000
Files and hashes:         1: 1-5hlvMiawPJhDesGa1hua0Z8BCA.roa (hash: BfnuRMvzsKjw1r6Bbn0LN0nj8+jvf67Ex6NtuxitDqQ=)
                          2: 1nmLtwr3_xN50X0yyl7WQKTVv98.roa (hash: uJrw+w0+LATHhQU+jXTMfZ98iGwXOHwn/VgBuobhVEA=)
                          3: 497otZddeNozXBoDa4RW_3BJUUA.roa (hash: RrfBGeLjLrahf5Fq8xtl0pH9MkRki42Oz1D2w2x2gcg=)
                          4: 4uQiIz-NMAyBiXKYAOFesJYFaTo.roa (hash: sgg7t/axC5+BJccoHRq2eZqdOKI6JJ+dD5n9PgXCumE=)
                          5: 6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa (hash: MRty88BfOMZk7CPSt+WkF0Jw+KzFd+Cug5OdTNKjyKg=)
                          6: 7ytwb7Womq08ykvieFP3In40-Rw.roa (hash: osTlvrBih0cPXahWkQhNIUbUc1RlCh2qx/FZaxLigMw=)
                          7: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: fxeoJ/Hgldrqod+RcSyw6O41qEpvEF5u27HzUbc9gdY=)
                          8: C9o_73_XlKWwZbFCnJva18iPkB8.roa (hash: uD75t1SS6PfmQHvP9mDG+mDve1RgK0EmPySeWbN7cPI=)
                          9: CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa (hash: IVdKTM0Yxp2TPDqtVbZnlReXxKJAgo4s135GUv5aFjI=)
                          10: DROi7Rp35sbr_86r7xv563blIMY.roa (hash: 7tFkBPwhrQlBuEG6rIRbYO1U6Y/jsLvlcfB6EpkaFjw=)
                          11: DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa (hash: WblU2LEBXlZHlgqM8eisTMs9DCuuDvc8/DOwyfHQxh4=)
                          12: DXxFsnXwwNOGBcXslTr_wxOHW5U.roa (hash: WbVnLGOKZKrDUXnOGjZKmIubU2SC7h17bYnLNJHVzpE=)
                          13: DZf9TSOhIl01Wj7q_PAfd6SKgC0.roa (hash: CNq3YHFBPR2HgonCmBELHEPsZzqD94xOnuMspOcb4Sg=)
                          14: Eq0lVbnpwt-j35Pt16fwKtpYWlg.roa (hash: 8XgY8nFFV6rMdltJ5ykRgUQrFC+LRpa8w5mJU4kQ77s=)
                          15: Er970agph2hLDyUlRJlJHOLFcbA.roa (hash: oKGHOBpG4eQUVxF3qK1OSzoiisohDbRhmk7gK3ibtXg=)
                          16: JaxfUROoj6_NE96Q3__O9cwsQjg.roa (hash: ILIdmkOAIzD229XH8RpeKSfXmuZBzViWpFrbxXXN1Q0=)
                          17: LN31RTvGNNs31aCpj-wD6ee3dXo.roa (hash: C8SYZE0oqDJoDWLfNKKDQCP77oIU9jXrR3D5bTf/XTE=)
                          18: LrIq3yv1RE6T_G5fTsyEiBHJC9w.roa (hash: KZeppNLsQGbaS62+IPxzV/xqyVyehH9tx8dfR8ms5Hk=)
                          19: LtMkeVGzz7h7CkGqERqV6V4qsFw.roa (hash: RGCmsp7/VHcixBUIVcMwlIa1/oiBpWlQTFWDvtpCknY=)
                          20: MaIYiMv9oMH3UrGRpQxs3PmnAkM.roa (hash: t9r1ASd9rgul0//4WLxQCfdWKzz9owsa0TXBcSfyu0w=)
                          21: NuqPhouRONL44rUb1cLtqoOo1jg.roa (hash: cnRw58Xkwpz25Kb8YVWzU5CREedmYPvRcaBJ1jenGwY=)
                          22: ONeqkPnIGoNNtO8mGjFbkXmPWcw.roa (hash: kYO1wyTB/f6FZFDGDpkcy3vl9zMFVUkU3iINvS8pdJw=)
                          23: OtCGjso3OIWCT91z-dIAYXRLgaE.roa (hash: WzB/mkhNLhkBDDIyblbVxHLJteaxiC10uxzpbmBXXEA=)
                          24: R31qObxiyQRlsNG-FXBwOBiVcU8.roa (hash: u2PZhnDmqyjhRjCWYLGVizKep6XRYMVgkRgwc2jvHNo=)
                          25: WOaZgUiFG3331FVBQatZCXAC0dE.roa (hash: hlsZVOzwIyp+sFW7ERc8C9T73C489aiUFZqPHUBwG7E=)
                          26: WyBzP1akOaPSMtH83i7cdE8IRJI.roa (hash: xYMkoOWF3Z1or1lZb3hlI7rxmaHJaALyTgSuHbLZoNg=)
                          27: YpEIU7oBXpQHjZnpi0wheo8-1x4.roa (hash: timvsij1t+AwdE8hg7UZpIDt/dbM6PaXZ26qNPAglrA=)
                          28: _3HkKCfyg2p0JgvR26Gejd3Jyr0.roa (hash: IvyxG/8DsPEwSYh6UOg3Oba63B6pRVilCWEvL9ZX0K4=)
                          29: _n6zTWE5SpfSTPhy5YLorMZeiUg.roa (hash: eMCHBXlIbla8Sso8GtkKSwTjb6V35xuvU5uz7iYF9ik=)
                          30: bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa (hash: mFM8fPDKlogmsI5AE4bX3ek/ET4zQQFwwzKp3y4dESw=)
                          31: c2cpLShv5rQ9tAnCfLPQGcIi9zQ.roa (hash: keHfC6hFIV+uXABwxXoJHILHVWnfDzah70mShL6VTc4=)
                          32: caCNERnJxfTGouZNM-ZhrZMZ3Dk.roa (hash: QxIZr8silfyaFcfQ4eLDZhsTooVK0dikoa7i3WYvqgc=)
                          33: ci3wqyDprqwbhq0cWz8ci3-6Cao.roa (hash: licFYzWIjztrfnZ7+8ryd0A2Wh1SW3GkTCtGQYIfjxc=)
                          34: e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa (hash: oYoj+Ap4IHXg1gtH78drwk88Ptq15W+fIpoCre/+UjE=)
                          35: gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa (hash: Hgp5BhkZ1R5EgXib6KjQEGqRGTYiApeWX+wRLpcWukM=)
                          36: h8j2rZi6YE0oBAImebndnjRdDAM.roa (hash: y8g6VlOFnaXteE+vwuQSHx1ywVH7Kmooo6Pd73iGin4=)
                          37: iBNkdxjoFZSykmkB0JSA3w3U7r0.roa (hash: fGAEdD7pbx6+gbCw5REx9yU5OTaVPQoHov6zQrqTWxc=)
                          38: ihTWirRVFtiifabGL54o1Hr7CZw.roa (hash: wQkCs7eQ2rpkelVIqbWJ+aWjqbRePWvwVn2KuudiplQ=)
                          39: jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa (hash: AWBZLQMuBiaZN340mhPRyITSlDhQnxohD2VrtfAI5E8=)
                          40: kxil1Z63WH5g5nMISzgclUNYVfg.roa (hash: bW6nN7sMwjxCwELFXsQx2gQTfa2q7HuAdDBSc++BMGc=)
                          41: ne1Hve3IxHD6J17bvXlDCoPZloI.roa (hash: E85TTNY9E00OvFpACeu2MfPIAJt6N64uMbnXW5x8sCM=)
                          42: s_XOUNE27Rt9EfkW6tpKIzfnB74.roa (hash: BJWU9WY8p23Wc9XLAEAvNVCPXfxDvC9l2as3ADvyFPs=)
                          43: sb9NYEHASJQ8rASkYUIiJ_hADHk.roa (hash: eVCnk3lLJ6eEaX9eyj8I8AsqhGoadKAGqnF2yOjkiig=)
                          44: t6o9CcRozbZixEiqMV0MRsZpTM0.roa (hash: /sMmNa9m743M2OGS7Cbc67P9Pek3pHjvDg425PY1NVE=)
                          45: tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa (hash: bvY4/tharyuzDPrRsmC185qxD3sZT9but5rOBl+Adzc=)
                          46: u3JKV-adkwKGsv5hodSaNbHzPB4.roa (hash: c3YsJQeJHhLtbxb9inM4xaKttWXYOVN6+JQXx5fxGOs=)
                          47: uwWeM12akfviVBKgj5V4jKYX10s.roa (hash: GWFPsvp4uvzRWxgRHQVC8crG4d3ea80ySU8gEcTXtgQ=)
                          48: v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa (hash: Jcz9P2Y4QeuqZOaA28xqXNYGZV40OskOqiuBj2qNWnE=)
                          49: w70489xMl6X6aCjHRjAC8Ah5HNc.roa (hash: rqJZ3tCvcXQJoQ6aJMbBqiFsgTmKKLtIm5U+CF77FX8=)
                          50: wAB319bF59pbqogEGue3dUyMfyU.roa (hash: 7tbkhOvjhN26XlWaA9QFm7KpD6qs3B3JEKiopbBlJO8=)
                          51: y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa (hash: 9QPX2u4tZEN3H/22+qKUcxXcBFy2u4JGqbw8FLY/7C4=)
                          52: zAff6ilnehpGGi5BDUZ7hLHheXA.roa (hash: 4vg6QTx+7Obl0HEsR7tGfz+AKdR30zhHteU6BT4n1so=)
                          53: zxXgFrqVOHijRHiRR71FP7_iwAY.roa (hash: gW3oGK3WuYusfZYDVwP28OguyD2JdnpNIpD21g+ThnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:84:bf:bf:f6:0f:a1:4b:20:31:5c:1e:13:fa:0c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Oct 27 04:00:59 2026 GMT
            Not After : Oct 28 04:00:59 2026 GMT
        Subject: CN=9777bc5f2580376891599d9a38b853431798267b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:85:12:5c:e8:06:c9:9b:ad:86:90:35:a1:
                    ef:d0:54:b6:e2:9e:97:1d:62:14:5e:0e:65:d7:c4:
                    4e:a9:ad:86:1c:a7:9f:89:ec:b0:ab:34:cb:3c:1a:
                    4d:91:50:a8:1d:b1:d1:40:f0:77:ab:b0:71:29:b3:
                    9f:a8:83:bb:19:e6:49:69:70:9a:13:bf:d9:5d:9b:
                    be:a2:e7:e3:c8:89:84:4a:6c:90:15:94:49:b4:a2:
                    20:05:3d:b6:4b:d6:e0:a1:4a:ac:fc:83:b5:a3:3a:
                    e6:de:87:43:49:06:2e:0b:56:e4:6e:55:7e:84:a9:
                    9e:d3:b6:ee:fa:a8:d7:54:cd:f7:ff:81:b2:88:00:
                    ee:ed:57:18:3c:16:72:a0:53:62:89:9c:7b:a4:b9:
                    d2:7e:f4:3b:f4:ff:18:08:03:07:23:d3:fe:e3:b7:
                    31:d6:3a:a8:1e:16:0f:b8:aa:cd:f6:38:f8:1c:81:
                    f5:cc:19:b8:22:84:3e:15:fa:b6:15:f2:99:43:e2:
                    a3:33:7e:b4:22:4c:b7:0c:6e:3a:9e:05:3d:a9:77:
                    73:bf:e8:4d:19:5a:0c:34:cf:53:88:a2:27:10:06:
                    a6:12:93:39:f7:09:2e:f7:49:78:51:b3:ea:0e:b0:
                    a9:0c:77:c9:d9:ba:8c:15:55:27:f1:81:6e:f6:d7:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:BC:5F:25:80:37:68:91:59:9D:9A:38:B8:53:43:17:98:26:7B
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:3a:52:f3:e8:02:66:af:62:9f:23:41:a9:7c:70:77:02:
         7f:c2:35:9d:29:60:19:7f:46:f2:42:4d:e2:9e:70:d9:77:ef:
         29:d6:81:6e:99:3d:71:20:15:88:28:f6:29:cc:39:1b:3b:fd:
         6d:a0:58:5b:67:b2:d4:5d:18:02:5f:be:2a:50:3c:72:77:04:
         b5:50:1a:d1:71:3a:06:19:33:f4:4f:5a:4c:1c:77:96:b0:36:
         16:a7:0d:55:9b:b0:8b:b7:68:79:9a:3a:a6:2a:9f:7b:9e:bd:
         88:e3:87:8b:29:6d:2c:74:f9:22:c8:52:55:9f:b2:07:f6:c3:
         2c:cb:f2:79:30:17:aa:5a:f0:93:70:e1:59:a0:c9:3e:12:b5:
         31:23:cb:0f:ea:88:66:d4:ad:00:b8:6f:8c:64:72:15:48:5b:
         71:0c:21:60:e1:3b:5b:20:d1:4d:38:26:36:4e:24:f6:34:e0:
         36:7a:16:a4:49:bf:fd:06:ac:9c:7f:a5:6b:66:88:90:7a:67:
         3b:6c:c9:22:0a:e5:d5:fd:98:54:d2:39:33:ee:30:08:08:85:
         d1:99:87:2a:44:3f:4c:8b:9e:7e:55:18:8e:0d:2e:90:49:2c:
         b4:3d:fe:c7:82:d5:a1:2d:e1:29:30:17:f5:53:8c:95:aa:38:
         7c:fb:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----