Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File:                     izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier:          /0bwNtRNvZPWZeXbknPXPfeCsEn4k32WUjNUMfuI+9E=
Subject key identifier:   A9:A0:3F:C5:36:54:9B:A8:74:31:B9:2B:B6:3E:79:35:5F:50:D0:FA
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       01A0BAD455C710CA5B62AC78DEA63035A869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number:          070A
Signing time:             Sat 19 Sep 2026 18:01:12 +0000
Manifest this update:     Sat 19 Sep 2026 18:01:12 +0000
Manifest next update:     Sun 20 Sep 2026 18:01:12 +0000
Files and hashes:         1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
                          2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
                          3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
                          4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
                          5: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
                          6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
                          7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
                          8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
                          9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
                          10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
                          11: PI0GWokWQCIYbfxBSxMKrWG4rlA.roa (hash: qRwJTh2gHSy2lv6qJPXbAlMzsB4kzURHt7CqQP0XkRU=)
                          12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
                          13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
                          14: Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa (hash: upN3TgIZvGzCE5YLEWAdPuZbKmynb15EXTQ5pfRhfMc=)
                          15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
                          16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
                          17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
                          18: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=)
                          19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: XDSEBNL5aCd8m51fgi8EFm45nnuR6+nlKXmtrQCJm5M=)
                          20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
                          21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
                          22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=)
                          23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
                          24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
                          25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
                          26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
                          27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 11:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ba:d4:55:c7:10:ca:5b:62:ac:78:de:a6:30:35:a8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Sep 19 18:01:12 2026 GMT
            Not After : Sep 20 18:01:12 2026 GMT
        Subject: CN=a9a03fc536549ba87431b92bb63e79355f50d0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:ee:de:d0:ec:fe:b0:d8:de:2f:dc:9a:f0:
                    6e:34:94:4c:07:fc:bc:f3:ee:5a:c4:c7:58:ba:16:
                    95:3e:14:38:65:e6:90:6c:f7:46:16:67:ca:ad:5b:
                    0e:00:02:2b:2f:c7:a4:56:a9:a4:0b:08:c8:ad:77:
                    f6:6e:81:f7:24:42:16:5a:1e:98:8e:cb:97:54:4e:
                    07:50:a9:c1:a9:f2:12:2b:86:35:59:a2:6b:7e:e1:
                    49:d5:9b:46:fe:9e:b3:84:0c:51:0b:f7:0b:48:55:
                    b6:54:0d:28:00:9e:6b:59:ac:82:79:2c:05:a9:f9:
                    3b:75:44:20:ca:89:4c:3f:bd:22:46:b6:10:0c:92:
                    31:92:f7:b0:66:ef:fd:4a:ad:93:11:c5:e4:99:fc:
                    88:6c:ad:2b:9e:ca:36:38:1c:e4:cb:c5:55:10:e0:
                    12:22:b0:38:47:ad:94:f2:9e:30:fa:e4:b9:46:4f:
                    d6:9c:30:30:19:b4:c2:93:37:f0:19:75:07:59:30:
                    a5:a5:cb:eb:49:11:df:d8:8c:b0:7a:1d:42:60:f4:
                    55:99:53:c5:65:14:34:94:3d:d8:06:ce:15:78:b0:
                    bc:00:d9:65:c9:1e:07:e1:7a:b1:30:1a:79:53:3c:
                    bf:bc:35:7d:d1:e8:16:22:f5:2e:66:0c:56:69:17:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:3F:C5:36:54:9B:A8:74:31:B9:2B:B6:3E:79:35:5F:50:D0:FA
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d3:92:56:c5:f9:ae:e4:3e:58:fd:1f:d0:45:93:8b:a9:3d:
         11:27:f3:20:7f:a1:44:24:1a:00:c0:ff:4d:8b:23:58:62:9f:
         f5:98:19:db:76:9d:bf:f9:37:49:d9:58:7c:90:7f:b1:0a:ac:
         ff:28:69:d6:7e:af:4f:57:42:ed:8f:c9:70:5b:db:4e:02:e7:
         bb:05:50:f2:13:d5:3f:97:f6:a2:20:c6:f3:fe:a6:a6:3f:f2:
         e1:41:81:57:22:84:56:82:94:f2:a9:13:34:f5:a9:f7:63:a0:
         7d:79:1a:96:fd:60:76:e5:c2:86:65:c9:f1:9c:1d:07:55:db:
         7a:b7:85:e1:82:fb:69:ce:a3:7d:bf:8f:0b:e5:59:3f:7e:e7:
         3d:8f:de:3f:b2:b2:7d:41:a9:28:09:54:34:80:03:72:02:f8:
         75:e8:27:c6:98:35:5b:f8:79:55:79:df:c5:52:9e:cb:84:2c:
         7e:22:ab:e8:2f:e6:9b:37:89:66:d2:15:c0:d1:36:a4:da:f4:
         90:6b:ce:0c:70:fc:0a:33:de:0b:39:b0:0d:f2:3d:6e:44:40:
         eb:21:eb:ab:3d:3f:a7:e1:12:ba:ce:64:f2:b3:85:c9:94:ef:
         01:be:7c:bb:ff:b1:12:c4:52:8d:5d:b9:52:80:42:2c:d8:f7:
         44:f4:45:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC61FXHEMpbYqx43qYwNahpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjYwOTE5MTgwMTEyWhcNMjYwOTIwMTgwMTEyWjAzMTEwLwYDVQQD
EyhhOWEwM2ZjNTM2NTQ5YmE4NzQzMWI5MmJiNjNlNzkzNTVmNTBkMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pTu3tDs/rDY3i/cmvBuNJRMB/y8
8+5axMdYuhaVPhQ4ZeaQbPdGFmfKrVsOAAIrL8ekVqmkCwjIrXf2boH3JEIWWh6Y
jsuXVE4HUKnBqfISK4Y1WaJrfuFJ1ZtG/p6zhAxRC/cLSFW2VA0oAJ5rWayCeSwF
qfk7dUQgyolMP70iRrYQDJIxkvewZu/9Sq2TEcXkmfyIbK0rnso2OBzky8VVEOAS
IrA4R62U8p4w+uS5Rk/WnDAwGbTCkzfwGXUHWTClpcvrSRHf2Iyweh1CYPRVmVPF
ZRQ0lD3YBs4VeLC8ANllyR4H4XqxMBp5Uzy/vDV90egWIvUuZgxWaRfpIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmgP8U2VJuodDG5K7Y+eTVfUND6MB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdOSVsX5
ruQ+WP0f0EWTi6k9ESfzIH+hRCQaAMD/TYsjWGKf9ZgZ23adv/k3SdlYfJB/sQqs
/yhp1n6vT1dC7Y/JcFvbTgLnuwVQ8hPVP5f2oiDG8/6mpj/y4UGBVyKEVoKU8qkT
NPWp92OgfXkalv1gduXChmXJ8ZwdB1XbereF4YL7ac6jfb+PC+VZP37nPY/eP7Ky
fUGpKAlUNIADcgL4degnxpg1W/h5VXnfxVKey4QsfiKr6C/mmzeJZtIVwNE2pNr0
kGvODHD8CjPeCzmwDfI9bkRA6yHrqz0/p+ESus5k8rOFyZTvAb58u/+xEsRSjV25
UoBCLNj3RPRFoA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 21:01:28 2026 by rpki-client