Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          q8vEMv6wv/rAZquWm1kBm1UG7xTsig5bhN3f3yv8c9g=
Subject key identifier:   3F:DE:EE:B3:50:41:E3:1A:D9:CE:0B:24:57:EE:7B:E8:9C:C2:57:C4
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       01A08AFAF4168528C988CC7D20369947B5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          1A6E
Signing time:             Thu 10 Sep 2026 11:01:37 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:37 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:37 +0000
Files and hashes:         1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=)
                          2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=)
                          3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: sIqCWO3jb5iDB4tXbA7rAs3ixDXN5LfqanU4EwKT+U8=)
                          4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=)
                          5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=)
                          6: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=)
                          7: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=)
                          8: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=)
                          9: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=)
                          10: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=)
                          11: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=)
                          12: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=)
                          13: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=)
                          14: SvEm-yXVhiOKZ90phjAW_AA8ALc.roa (hash: 7Oq7qPwBODUfGC8UgiLRJC3+bMOGG/2kfdhFT0x3Ngw=)
                          15: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=)
                          16: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=)
                          17: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=)
                          18: dNvl41gDXbZfsDZ9RFpBvP6cYow.roa (hash: NaucFK+oQglGEexzweska9RmpWnDV2Wpe/l4R51xpK0=)
                          19: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=)
                          20: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=)
                          21: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=)
                          22: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=)
                          23: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=)
                          24: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=)
                          25: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=)
                          26: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:f4:16:85:28:c9:88:cc:7d:20:36:99:47:b5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Sep 10 11:01:37 2026 GMT
            Not After : Sep 11 11:01:37 2026 GMT
        Subject: CN=3fdeeeb35041e31ad9ce0b2457ee7be89cc257c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:c5:84:e9:3f:60:ed:fe:fa:fa:d2:5a:24:
                    e1:7c:45:db:37:e4:69:29:3a:61:49:bc:66:d9:28:
                    a2:f6:4c:c6:50:46:a0:51:78:c0:ff:05:e3:1d:5c:
                    d9:ba:7e:8b:fe:6f:1d:d6:49:e4:cf:d3:83:e8:08:
                    48:f0:f4:e9:2e:bb:0b:08:d2:4e:c5:6c:ea:0b:11:
                    b0:23:e5:98:2b:c1:68:dc:18:b8:a2:e8:94:4b:7c:
                    86:a7:54:42:72:68:18:8e:1c:87:7d:3c:af:87:b3:
                    c0:76:5d:32:29:40:f2:53:95:7c:4d:96:2a:66:9f:
                    f6:6e:f1:a7:15:c4:de:1c:29:25:bc:8f:9b:ef:fd:
                    73:85:76:9f:94:9d:b3:fe:28:c9:7a:d2:2a:29:74:
                    31:6d:cb:7f:06:28:89:64:9d:a9:a9:1d:8f:ac:04:
                    2b:80:96:da:c0:27:c4:08:19:13:bd:84:22:36:d0:
                    8f:03:d2:00:c1:1a:1d:89:b0:3b:f5:fa:70:5f:0f:
                    36:78:51:9c:34:b8:73:02:19:90:a6:04:fa:22:62:
                    c4:cd:84:75:42:1d:5b:28:8e:b1:6d:b3:49:7b:6b:
                    3d:8c:fd:1f:15:6f:d2:03:e7:ea:78:cf:8b:df:e3:
                    52:8e:5c:87:0e:da:7f:dc:5a:79:b6:08:0b:c4:8d:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:EE:B3:50:41:E3:1A:D9:CE:0B:24:57:EE:7B:E8:9C:C2:57:C4
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:43:0d:7b:5f:31:45:56:65:da:2b:d6:1b:59:0c:ae:72:
         48:8f:cb:fa:89:a2:a2:41:bb:c2:ac:f0:b9:f5:07:41:91:a2:
         bf:67:4e:0d:f0:5f:ff:fe:7b:52:20:36:3d:6b:82:8e:a9:e7:
         23:c0:a2:50:77:07:f1:13:41:08:7a:20:a6:f1:7e:41:c2:e5:
         0a:82:3a:9b:c5:7f:4b:d7:23:b5:f3:03:41:9a:87:90:f7:65:
         15:33:06:ac:db:93:84:32:9d:5d:45:d8:e0:ce:6d:c4:d1:2d:
         dd:75:00:e8:2e:cd:45:fe:46:d8:1a:e5:bb:c6:3b:b0:78:95:
         0c:61:62:9c:41:4e:83:55:ca:eb:0d:6d:33:b0:21:91:60:22:
         fe:a7:22:25:22:98:ba:93:f9:09:13:de:57:7a:10:43:0a:43:
         91:1b:7e:02:ab:23:f1:e8:3e:38:69:2b:51:82:48:d8:66:68:
         52:98:59:20:92:1f:04:3a:9c:48:f6:63:1c:93:f5:88:6f:34:
         38:17:e7:14:73:42:a3:8f:5f:80:8d:24:05:c8:02:f0:c7:15:
         df:87:87:c4:2b:3f:ba:68:19:5b:21:7d:5b:29:16:7a:02:33:
         14:8e:3d:89:b6:c9:bb:a1:50:49:8e:9d:e2:81:81:70:ec:0e:
         5f:6f:a4:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+vQWhSjJiMx9IDaZR7XTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjYwOTEwMTEwMTM3WhcNMjYwOTExMTEwMTM3WjAzMTEwLwYDVQQD
EygzZmRlZWViMzUwNDFlMzFhZDljZTBiMjQ1N2VlN2JlODljYzI1N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwevFhOk/YO3++vrSWiThfEXbN+Rp
KTphSbxm2Sii9kzGUEagUXjA/wXjHVzZun6L/m8d1knkz9OD6AhI8PTpLrsLCNJO
xWzqCxGwI+WYK8Fo3Bi4ouiUS3yGp1RCcmgYjhyHfTyvh7PAdl0yKUDyU5V8TZYq
Zp/2bvGnFcTeHCklvI+b7/1zhXaflJ2z/ijJetIqKXQxbct/BiiJZJ2pqR2PrAQr
gJbawCfECBkTvYQiNtCPA9IAwRodibA79fpwXw82eFGcNLhzAhmQpgT6ImLEzYR1
Qh1bKI6xbbNJe2s9jP0fFW/SA+fqeM+L3+NSjlyHDtp/3Fp5tggLxI2KTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/e7rNQQeMa2c4LJFfue+icwlfEMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8FDDXtf
MUVWZdor1htZDK5ySI/L+omiokG7wqzwufUHQZGiv2dODfBf//57UiA2PWuCjqnn
I8CiUHcH8RNBCHogpvF+QcLlCoI6m8V/S9cjtfMDQZqHkPdlFTMGrNuThDKdXUXY
4M5txNEt3XUA6C7NRf5G2Brlu8Y7sHiVDGFinEFOg1XK6w1tM7AhkWAi/qciJSKY
upP5CRPeV3oQQwpDkRt+Aqsj8eg+OGkrUYJI2GZoUphZIJIfBDqcSPZjHJP1iG80
OBfnFHNCo49fgI0kBcgC8McV34eHxCs/umgZWyF9WykWegIzFI49ibbJu6FQSY6d
4oGBcOwOX2+kWA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:03 2026 by rpki-client