Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
File:                     pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json)
Hash identifier:          RYmFZ0S9Fdt9LIG461wBo8zh8IAGO99B4/FNSH3ESTs=
Subject key identifier:   AB:E7:BE:C0:67:01:5F:84:45:FA:84:18:33:89:7A:53:82:27:30:89
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Certificate issuer:       /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial:       01A1298CB91CCBEEF8AB92BA7A3812AE5963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
Manifest number:          0114
Signing time:             Sun 11 Oct 2026 06:00:50 +0000
Manifest this update:     Sun 11 Oct 2026 06:00:50 +0000
Manifest next update:     Mon 12 Oct 2026 06:00:50 +0000
Files and hashes:         1: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=)
                          2: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=)
                          3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=)
                          4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=)
                          5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=)
                          6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=)
                          7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=)
                          8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=)
                          9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=)
                          10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=)
                          11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=)
                          12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=)
                          13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=)
                          14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=)
                          15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=)
                          16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=)
                          17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=)
                          18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=)
                          19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=)
                          20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=)
                          21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=)
                          22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=)
                          23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: QCmcS7h34mwbfFrLlpd+jtO4u+TV3yFNPeGRP+6JICw=)
                          24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:8c:b9:1c:cb:ee:f8:ab:92:ba:7a:38:12:ae:59:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
        Validity
            Not Before: Oct 11 06:00:50 2026 GMT
            Not After : Oct 12 06:00:50 2026 GMT
        Subject: CN=abe7bec067015f8445fa841833897a5382273089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:e8:b0:ac:2c:7e:a4:e5:60:30:99:9d:41:
                    33:b3:2d:c4:4b:54:c5:8b:d5:e7:ce:a8:49:d5:80:
                    fe:15:df:ca:72:be:79:6e:af:cc:99:df:d7:68:7e:
                    12:dd:eb:91:f3:fd:e8:36:cf:d7:91:1f:42:bd:d8:
                    c8:6c:87:37:90:71:1d:63:6c:a9:3a:f9:8c:02:11:
                    b1:57:e5:99:c8:40:66:39:05:ac:00:73:41:6f:ac:
                    e2:d0:be:a9:45:c9:27:a5:96:4d:3c:9e:a5:b7:3f:
                    1b:e0:2f:41:a3:d0:fc:05:78:6f:87:51:97:18:5b:
                    58:6d:b9:13:ed:d6:a6:b8:66:58:c9:78:58:7d:96:
                    28:87:55:6c:d4:56:9f:cb:2e:da:d1:0b:a1:fa:f6:
                    52:18:6c:40:88:d4:04:94:11:69:e8:ca:be:3e:ae:
                    4e:91:b1:fe:a5:99:72:2c:4a:01:28:98:5a:79:85:
                    43:de:93:27:8d:00:02:01:71:de:68:b8:82:3f:c4:
                    7a:d4:88:2c:9b:38:c9:3c:de:4d:16:0c:74:80:0d:
                    8b:05:c6:73:49:5f:88:07:4b:89:80:95:c1:de:70:
                    5b:62:a6:f5:c1:2b:0e:8f:55:2a:b2:7b:de:df:33:
                    a4:0f:1f:f1:b7:a9:00:6a:8c:ba:4d:e2:5c:1b:e1:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E7:BE:C0:67:01:5F:84:45:FA:84:18:33:89:7A:53:82:27:30:89
            X509v3 Authority Key Identifier:
                keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:17:29:45:6b:f8:39:f9:a5:43:3f:60:ef:c9:06:36:7e:
         58:ac:54:c0:6e:ab:83:c0:dd:4d:76:d8:01:a6:98:73:10:01:
         e8:78:97:b4:6f:b3:77:06:7a:33:c1:fd:41:d2:bc:27:95:0a:
         75:6a:ff:29:3f:9e:23:cb:af:fc:f1:ff:51:f9:3a:0a:35:c3:
         83:d9:20:1c:cc:c2:73:bb:ff:4c:d4:35:5f:f9:ae:f1:49:ba:
         4d:9b:98:da:6e:9b:73:56:1c:b6:49:f7:48:6f:0f:70:99:02:
         30:78:0d:f4:c0:6e:8b:89:38:38:f0:b6:bb:bb:3f:2b:97:1b:
         a3:ef:30:1b:1d:7b:e9:84:c4:80:68:e2:0d:2e:35:8a:70:ca:
         4c:58:71:7a:78:a7:96:10:aa:49:4b:8b:20:3b:aa:7b:53:c8:
         d1:73:97:b3:2a:bf:cf:47:bb:48:96:a1:ba:e9:69:41:c2:88:
         04:96:bb:e7:03:17:38:00:63:83:4f:6a:c8:5b:a3:93:92:77:
         78:65:07:82:89:85:fe:9b:61:8b:0b:34:a5:ab:87:5d:67:77:
         3c:48:8c:36:0c:7e:3b:ac:ca:a0:0f:2b:f9:72:de:b7:63:82:
         07:6a:7e:03:54:f6:e9:ba:56:49:0a:40:25:10:f6:1d:d6:30:
         ea:fd:2c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpjLkcy+74q5K6ejgSrlljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYxMDExMDYwMDUwWhcNMjYxMDEyMDYwMDUwWjAzMTEwLwYDVQQD
EyhhYmU3YmVjMDY3MDE1Zjg0NDVmYTg0MTgzMzg5N2E1MzgyMjczMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxozosKwsfqTlYDCZnUEzsy3ES1TF
i9XnzqhJ1YD+Fd/Kcr55bq/Mmd/XaH4S3euR8/3oNs/XkR9CvdjIbIc3kHEdY2yp
OvmMAhGxV+WZyEBmOQWsAHNBb6zi0L6pRcknpZZNPJ6ltz8b4C9Bo9D8BXhvh1GX
GFtYbbkT7damuGZYyXhYfZYoh1Vs1Fafyy7a0Quh+vZSGGxAiNQElBFp6Mq+Pq5O
kbH+pZlyLEoBKJhaeYVD3pMnjQACAXHeaLiCP8R61IgsmzjJPN5NFgx0gA2LBcZz
SV+IB0uJgJXB3nBbYqb1wSsOj1Uqsnve3zOkDx/xt6kAaoy6TeJcG+H6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvnvsBnAV+ERfqEGDOJelOCJzCJMB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6AXKUVr
+Dn5pUM/YO/JBjZ+WKxUwG6rg8DdTXbYAaaYcxAB6HiXtG+zdwZ6M8H9QdK8J5UK
dWr/KT+eI8uv/PH/Ufk6CjXDg9kgHMzCc7v/TNQ1X/mu8Um6TZuY2m6bc1Yctkn3
SG8PcJkCMHgN9MBui4k4OPC2u7s/K5cbo+8wGx176YTEgGjiDS41inDKTFhxenin
lhCqSUuLIDuqe1PI0XOXsyq/z0e7SJahuulpQcKIBJa75wMXOABjg09qyFujk5J3
eGUHgomF/pthiws0pauHXWd3PEiMNgx+O6zKoA8r+XLet2OCB2p+A1T26bpWSQpA
JRD2HdYw6v0sgQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:15:27 2026 by rpki-client