Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
File:                     dWEnxs1ONdmPCkujYs4nMWSXGUI.mft (raw, json)
Hash identifier:          VzH8zUMfFQ3RxF4e+2ZCkGY+ETwGLidpXB8HUTX3Hi0=
Subject key identifier:   6E:88:68:75:65:BB:7A:6F:93:57:04:B1:D9:29:52:34:56:30:94:61
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Certificate issuer:       /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial:       01A173CAB38250575EF6BE29BE50E4667F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
Manifest number:          013A
Signing time:             Sun 25 Oct 2026 16:00:26 +0000
Manifest this update:     Sun 25 Oct 2026 16:00:26 +0000
Manifest next update:     Mon 26 Oct 2026 16:00:26 +0000
Files and hashes:         1: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (hash: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=)
                          2: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (hash: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=)
                          3: EIkyoQiaHQwFX0yl3QCnz70zobQ.roa (hash: TreOi4k2EXby9E21239vBZMbdO6JXQp6FeGHzvuMLWY=)
                          4: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (hash: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=)
                          5: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (hash: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=)
                          6: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (hash: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=)
                          7: JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa (hash: 60TmXCWov36c+x54dXI2m7Kjji7w3A2ev0Z1f/72VRg=)
                          8: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (hash: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=)
                          9: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (hash: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=)
                          10: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (hash: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=)
                          11: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (hash: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=)
                          12: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (hash: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=)
                          13: dWEnxs1ONdmPCkujYs4nMWSXGUI.crl (hash: ce+jNCwe65IoKlMfDJU0c8XoMP5sPhh7aThhWxHkze4=)
                          14: f3cr88yivxk7Bgm731ewrTZYRmE.roa (hash: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=)
                          15: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (hash: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=)
                          16: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (hash: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=)
                          17: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (hash: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=)
                          18: itsbDKOcLvYTL1wL-BLv0v4776c.roa (hash: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=)
                          19: ktAcfwaispPfbZlu2PcWbivGiDc.roa (hash: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=)
                          20: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (hash: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=)
                          21: nwLLLJnWeUevVC1axaBKhwaHn44.roa (hash: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=)
                          22: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (hash: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=)
                          23: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (hash: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=)
                          24: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (hash: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=)
                          25: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (hash: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=)
                          26: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (hash: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=)
                          27: wgx1sqQMaS-I2L2y6gRiBobGYlg.roa (hash: 7eLb6fN+zf4qJF/TPfiQ9qgt4nim0I4itE886o8X68g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:ca:b3:82:50:57:5e:f6:be:29:be:50:e4:66:7f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
        Validity
            Not Before: Oct 25 16:00:26 2026 GMT
            Not After : Oct 26 16:00:26 2026 GMT
        Subject: CN=6e88687565bb7a6f935704b1d929523456309461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:2b:35:d9:a8:10:05:c0:ae:0f:65:10:e1:
                    f1:00:90:7c:e5:a9:41:64:ae:04:87:a8:4a:2a:65:
                    e8:22:ca:8f:e6:74:3c:df:ab:8c:93:a6:46:68:9a:
                    bb:b8:c5:d2:f9:ee:a6:83:6b:cc:80:f4:c7:ba:91:
                    27:eb:e8:4d:ba:7b:e9:6e:60:76:57:19:c3:b5:c5:
                    e5:7c:01:fc:cb:42:60:4d:66:0c:64:fa:f2:ba:b6:
                    07:7a:c1:0f:08:d2:40:6c:4a:be:f2:a2:62:05:80:
                    18:43:21:57:a6:06:3c:89:0b:96:d8:bf:3b:b7:f3:
                    04:aa:8b:59:68:37:d6:ad:d0:75:71:74:d5:8f:89:
                    b7:fd:8a:a1:79:f8:37:5b:56:50:cd:e8:b4:7c:69:
                    80:7f:61:84:80:b8:79:9b:7c:33:dd:4b:5a:bc:cd:
                    cb:1e:05:32:d1:79:5d:a3:5f:73:27:82:ae:ed:2e:
                    d5:40:90:b9:4b:90:41:41:3c:e5:93:f9:41:ea:b8:
                    0a:c8:7b:a9:20:49:67:ea:23:37:e2:f4:b1:bb:ae:
                    ec:d6:f4:76:fb:f9:39:89:72:21:b7:58:b1:14:ce:
                    72:4d:ce:29:96:26:e0:b5:41:9e:ba:68:01:30:16:
                    84:d8:75:34:4a:69:2b:5d:62:fb:47:0e:ed:2f:5a:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:88:68:75:65:BB:7A:6F:93:57:04:B1:D9:29:52:34:56:30:94:61
            X509v3 Authority Key Identifier:
                keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:61:d2:f2:59:5a:00:5f:22:8b:af:b3:9e:35:33:9e:f5:79:
         aa:77:50:67:a0:2a:f3:be:92:51:b1:c6:92:13:68:38:a4:da:
         5b:73:e8:85:e8:a6:f6:94:96:7a:26:93:a6:87:a8:85:c1:6b:
         42:3c:c0:4c:74:4e:ef:24:91:73:5a:a8:d4:54:dc:78:a7:24:
         fd:0b:09:ad:d4:72:11:5d:bf:e5:74:81:40:77:4e:7f:52:56:
         33:de:fe:c4:22:cf:2c:27:c8:6f:65:c6:91:c7:85:fb:19:1f:
         6c:76:e3:27:3b:90:04:76:7b:34:db:de:d8:3a:d4:6e:65:b6:
         0e:d8:c3:0f:29:81:09:5c:23:02:02:bd:98:51:c8:57:7b:c4:
         e8:ff:dc:01:bc:b7:ea:79:da:97:c1:26:d5:d9:62:58:7c:e7:
         b4:b8:bd:04:d8:82:97:b7:1e:57:a6:f9:d9:b5:51:60:0e:68:
         a3:07:bb:33:6d:a8:ab:ee:64:0b:4c:dd:39:a5:6d:03:f0:0c:
         00:3c:b6:81:fb:a9:eb:28:f8:8f:66:5d:02:d9:33:ca:3b:7b:
         78:6e:53:03:be:a7:79:72:0a:c0:59:b6:15:70:50:20:40:3a:
         8d:49:7a:a6:7e:b0:78:48:a9:78:5b:f1:84:44:c8:f9:74:5a:
         75:3c:9d:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzyrOCUFde9r4pvlDkZn9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYxMDI1MTYwMDI2WhcNMjYxMDI2MTYwMDI2WjAzMTEwLwYDVQQD
Eyg2ZTg4Njg3NTY1YmI3YTZmOTM1NzA0YjFkOTI5NTIzNDU2MzA5NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYcrNdmoEAXArg9lEOHxAJB85alB
ZK4Eh6hKKmXoIsqP5nQ836uMk6ZGaJq7uMXS+e6mg2vMgPTHupEn6+hNunvpbmB2
VxnDtcXlfAH8y0JgTWYMZPryurYHesEPCNJAbEq+8qJiBYAYQyFXpgY8iQuW2L87
t/MEqotZaDfWrdB1cXTVj4m3/Yqhefg3W1ZQzei0fGmAf2GEgLh5m3wz3UtavM3L
HgUy0Xldo19zJ4Ku7S7VQJC5S5BBQTzlk/lB6rgKyHupIEln6iM34vSxu67s1vR2
+/k5iXIht1ixFM5yTc4plibgtUGeumgBMBaE2HU0SmkrXWL7Rw7tL1p6pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6IaHVlu3pvk1cEsdkpUjRWMJRhMB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWHS8lla
AF8ii6+znjUznvV5qndQZ6Aq876SUbHGkhNoOKTaW3Poheim9pSWeiaTpoeohcFr
QjzATHRO7ySRc1qo1FTceKck/QsJrdRyEV2/5XSBQHdOf1JWM97+xCLPLCfIb2XG
kceF+xkfbHbjJzuQBHZ7NNve2DrUbmW2DtjDDymBCVwjAgK9mFHIV3vE6P/cAby3
6nnal8Em1dliWHzntLi9BNiCl7ceV6b52bVRYA5oowe7M22oq+5kC0zdOaVtA/AM
ADy2gfup6yj4j2ZdAtkzyjt7eG5TA76neXIKwFm2FXBQIEA6jUl6pn6weEipeFvx
hETI+XRadTyd2g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:02:43 2026 by rpki-client