Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          GDxYg8R4rpqfKjeZfNZTznZhM1ufbZhZh8dSIgIRQT8=
Subject key identifier:   E4:9D:34:EB:07:F4:20:87:08:58:5B:98:90:13:49:B9:79:5A:06:BC
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       01A0B42D19332A2AA1E7592EDC8BF5A64C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          09E8
Signing time:             Fri 18 Sep 2026 11:00:49 +0000
Manifest this update:     Fri 18 Sep 2026 11:00:49 +0000
Manifest next update:     Sat 19 Sep 2026 11:00:49 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: qC8Y37f16MLTLORilk8O7gCSIkWnTcD3NelVFvUUDi0=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (hash: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          10: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          11: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (hash: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=)
                          12: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          13: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          14: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (hash: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=)
                          15: SZtukkjRXiwa2MP-xz2orv9e2EQ.roa (hash: SI1p9E5oAtOUP1K3tQ3v2d/3208FkwLNQ2JaBJZUxeU=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (hash: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: r4xyNLWWmznvN8-2HQAUUtH8WD4.roa (hash: Yx0ueyL/bhm8eOCB3RdfcV15kiUt20hwbcXP4E9Y1js=)
                          22: vS7BVCvAnG0KF2NZJWhPCSw4Y9E.roa (hash: s2wURE5y1RzBDniFm1yyiSF2pZakk/teNC0g3kN9ZgA=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:2d:19:33:2a:2a:a1:e7:59:2e:dc:8b:f5:a6:4c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Sep 18 11:00:49 2026 GMT
            Not After : Sep 19 11:00:49 2026 GMT
        Subject: CN=e49d34eb07f4208708585b98901349b9795a06bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:fb:c0:9d:1a:df:9a:93:c1:3c:8e:fa:03:
                    c0:cc:cc:a9:c1:a9:78:f9:50:b3:9c:01:bf:55:3f:
                    15:6c:c3:ef:cc:06:35:67:30:ff:b4:ad:48:aa:0d:
                    48:d7:45:29:82:f9:f3:72:88:10:e2:a6:19:98:74:
                    c8:75:b7:ee:e4:e8:a6:fc:f4:b6:9f:0c:9e:51:19:
                    7b:e9:4b:a2:54:76:dc:d0:94:e0:11:fb:0a:85:52:
                    a2:8e:4a:4f:0d:4c:75:dd:2d:2a:70:7a:01:01:a5:
                    05:27:71:29:55:63:4a:42:69:67:7e:d5:1d:99:07:
                    f0:e1:b8:d2:cd:6a:11:47:3e:19:68:70:1e:fa:ff:
                    4b:7d:c0:e2:66:0e:f4:df:fa:0f:1f:e1:7a:ce:da:
                    75:0c:5c:c9:2c:29:4b:e3:39:e4:b5:59:b9:cd:34:
                    8e:2f:b8:8c:b6:64:ad:a1:7b:3a:cc:e9:0f:b3:17:
                    1c:1f:a6:c5:05:64:f9:56:b9:fa:fa:02:08:cc:ce:
                    8b:9d:85:63:ce:f9:18:08:ef:e8:35:93:50:89:35:
                    8f:77:e6:10:91:73:02:e6:44:82:40:54:fc:0b:23:
                    56:6a:b3:73:18:6c:82:05:0e:e3:37:44:14:15:a0:
                    7e:5b:63:a0:1f:8f:63:9c:9a:27:2b:fe:8c:8d:bd:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:34:EB:07:F4:20:87:08:58:5B:98:90:13:49:B9:79:5A:06:BC
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:8c:6b:a0:f8:44:5c:8f:55:c1:19:b0:fd:05:d6:0d:f4:
         8b:33:9b:d8:22:b7:cf:00:2d:e9:ea:d8:f2:0f:0e:1f:88:f4:
         c3:c3:d8:08:68:c2:f9:99:53:ad:ba:04:95:d5:53:bf:14:7a:
         3a:da:85:f3:08:c3:ac:81:fc:34:e7:f1:36:e4:1d:cc:aa:ab:
         d2:35:cc:17:a6:97:ae:60:9f:ea:76:38:20:12:39:09:d6:04:
         fc:f6:98:ef:7b:d0:12:e2:81:1d:1b:90:29:e2:0e:d7:e4:9b:
         0d:25:00:a6:8e:0c:68:3c:f4:9e:5f:c7:f8:e9:27:8f:72:3e:
         e1:de:f8:46:c7:bf:98:56:d9:06:40:ad:90:ef:3b:fb:21:12:
         b2:ae:1d:a5:d2:aa:a3:ba:3e:77:c4:a8:0e:d7:ca:bd:e5:73:
         c4:f8:65:e3:a3:e3:25:99:45:28:d1:a8:69:1a:2f:91:f4:39:
         42:8e:f9:3f:3c:b6:a7:52:ab:92:cb:ce:e8:57:29:c7:a0:21:
         b9:e9:22:f6:72:17:73:27:54:0a:24:f3:26:c2:ff:00:06:d5:
         73:de:87:6c:64:ce:ce:e8:15:fd:8f:bb:10:08:fd:35:ee:7e:
         b1:12:7d:ea:b4:a3:95:84:e3:ea:f5:03:31:98:c2:25:42:a9:
         9b:e1:d0:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC0LRkzKiqh51ku3Iv1pkw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjYwOTE4MTEwMDQ5WhcNMjYwOTE5MTEwMDQ5WjAzMTEwLwYDVQQD
EyhlNDlkMzRlYjA3ZjQyMDg3MDg1ODViOTg5MDEzNDliOTc5NWEwNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHD7wJ0a35qTwTyO+gPAzMypwal4
+VCznAG/VT8VbMPvzAY1ZzD/tK1Iqg1I10UpgvnzcogQ4qYZmHTIdbfu5Oim/PS2
nwyeURl76UuiVHbc0JTgEfsKhVKijkpPDUx13S0qcHoBAaUFJ3EpVWNKQmlnftUd
mQfw4bjSzWoRRz4ZaHAe+v9LfcDiZg703/oPH+F6ztp1DFzJLClL4znktVm5zTSO
L7iMtmStoXs6zOkPsxccH6bFBWT5Vrn6+gIIzM6LnYVjzvkYCO/oNZNQiTWPd+YQ
kXMC5kSCQFT8CyNWarNzGGyCBQ7jN0QUFaB+W2OgH49jnJonK/6Mjb0ciQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSdNOsH9CCHCFhbmJATSbl5Wga8MB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJyMa6D4
RFyPVcEZsP0F1g30izOb2CK3zwAt6erY8g8OH4j0w8PYCGjC+ZlTrboEldVTvxR6
OtqF8wjDrIH8NOfxNuQdzKqr0jXMF6aXrmCf6nY4IBI5CdYE/PaY73vQEuKBHRuQ
KeIO1+SbDSUApo4MaDz0nl/H+Oknj3I+4d74Rse/mFbZBkCtkO87+yESsq4dpdKq
o7o+d8SoDtfKveVzxPhl46PjJZlFKNGoaRovkfQ5Qo75Pzy2p1KrksvO6Fcpx6Ah
ueki9nIXcydUCiTzJsL/AAbVc96HbGTOzugV/Y+7EAj9Ne5+sRJ96rSjlYTj6vUD
MZjCJUKpm+HQfg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:48:22 2026 by rpki-client