Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          bHxZiaSUSIyB7OC19LufpGH9R8uo8/7IgTlKf3no/Bc=
Subject key identifier:   A9:AC:86:6F:C8:B2:D8:02:C5:4F:29:77:C0:87:2A:25:42:39:60:B1
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       01A0841C331E8CFC508A30986E915DE5B430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1ABC
Signing time:             Wed 09 Sep 2026 03:00:35 +0000
Manifest this update:     Wed 09 Sep 2026 03:00:35 +0000
Manifest next update:     Thu 10 Sep 2026 03:00:35 +0000
Files and hashes:         1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
                          2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
                          3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
                          4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
                          5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
                          6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
                          7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
                          8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
                          9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
                          10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
                          11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
                          12: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (hash: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=)
                          13: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
                          14: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
                          15: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
                          16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
                          17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
                          18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
                          19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
                          20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
                          21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
                          22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
                          23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
                          24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
                          25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
                          26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
                          27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
                          28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
                          29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
                          30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
                          31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
                          32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
                          33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
                          34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
                          35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: qc+ZbSDVfhb0APeu4RdmTzD8MSGvu6kM7YbAcBXk8YM=)
                          36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
                          37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
                          38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
                          39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
                          40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
                          41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
                          42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:84:1c:33:1e:8c:fc:50:8a:30:98:6e:91:5d:e5:b4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Sep  9 03:00:35 2026 GMT
            Not After : Sep 10 03:00:35 2026 GMT
        Subject: CN=a9ac866fc8b2d802c54f2977c0872a25423960b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:e0:70:f3:ec:33:73:c7:b4:a4:5e:5e:d4:
                    a2:4f:69:41:7e:2f:a3:97:5d:ac:d2:56:48:af:72:
                    90:3c:3f:e9:a5:f8:ee:28:c7:be:b1:e2:53:2c:f7:
                    ef:02:8b:ac:a3:5d:82:60:9e:76:c9:95:53:94:00:
                    57:7e:ab:11:8c:ec:c7:b3:e6:09:21:9d:fe:e8:41:
                    be:17:b1:7a:ad:9d:02:f6:c4:a5:eb:96:3e:83:45:
                    cd:e1:3a:83:14:87:47:75:e8:82:5b:27:78:0e:aa:
                    04:fe:fb:f0:18:b9:e0:3b:7a:d9:46:e3:12:68:10:
                    e0:aa:0d:59:76:0b:c4:fc:a8:8d:ce:ac:7e:0a:70:
                    14:d1:33:db:f1:c5:6d:3a:c5:d4:40:f2:13:c6:5a:
                    64:39:48:cb:8c:82:39:d8:4d:69:8c:8a:4a:ae:7d:
                    5a:89:7e:57:af:50:1d:0e:2d:ee:8a:06:ce:ed:3d:
                    e0:a9:b7:c6:fe:6e:6a:8e:0f:dd:18:65:bb:f2:22:
                    33:c2:12:1a:cf:bf:34:66:5d:87:08:3f:0b:0c:9b:
                    b5:f9:01:42:f4:13:71:c1:45:c4:05:67:f4:dd:b7:
                    c0:4e:df:01:f0:c3:9d:bf:ff:4f:fd:de:23:79:6d:
                    81:65:ab:82:90:bb:5d:6d:a1:8d:9e:fc:f1:1e:ce:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AC:86:6F:C8:B2:D8:02:C5:4F:29:77:C0:87:2A:25:42:39:60:B1
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:de:35:41:cd:32:a6:90:12:59:5e:c9:be:fa:9e:63:7d:3c:
         3f:0a:b4:4a:46:ad:8c:62:54:37:4f:cb:6d:be:f6:32:30:61:
         f6:1a:e2:76:c2:14:60:78:d7:5e:1d:f5:b9:5b:70:02:d4:09:
         c9:b9:b5:f7:6a:7a:56:3b:77:f1:c4:7c:15:9a:b2:5b:da:10:
         b0:6d:04:22:a3:42:8f:a3:95:29:59:4b:69:df:22:ac:b6:b3:
         2b:3f:f3:4c:d8:05:4a:68:92:9f:ef:35:71:2d:8e:38:0c:87:
         62:a2:56:c3:2c:4e:25:b5:15:79:9f:8d:2d:d7:2b:7c:d3:d3:
         ae:fd:28:8a:e0:d5:b3:04:c0:39:da:77:08:94:39:e1:80:39:
         61:e1:8f:de:a0:ea:39:43:02:0b:51:4f:f1:2a:98:c5:6a:f9:
         e9:75:55:25:ab:c3:9b:47:44:c3:92:01:c4:1c:3d:12:17:3f:
         9e:26:f1:ae:25:d9:01:3f:0f:9f:67:7e:36:e6:b4:9f:76:5f:
         25:64:7a:81:29:80:4c:f6:d2:25:68:9a:78:47:f3:b1:47:c4:
         b0:42:a1:f7:78:cb:c3:f1:f7:53:d9:99:85:87:1f:71:5c:48:
         a0:ba:d7:41:02:4e:cb:ae:3e:ff:fd:ae:aa:c1:e2:8d:6c:20:
         c9:d5:d3:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCEHDMejPxQijCYbpFd5bQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjYwOTA5MDMwMDM1WhcNMjYwOTEwMDMwMDM1WjAzMTEwLwYDVQQD
EyhhOWFjODY2ZmM4YjJkODAyYzU0ZjI5NzdjMDg3MmEyNTQyMzk2MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jrgcPPsM3PHtKReXtSiT2lBfi+j
l12s0lZIr3KQPD/ppfjuKMe+seJTLPfvAouso12CYJ52yZVTlABXfqsRjOzHs+YJ
IZ3+6EG+F7F6rZ0C9sSl65Y+g0XN4TqDFIdHdeiCWyd4DqoE/vvwGLngO3rZRuMS
aBDgqg1ZdgvE/KiNzqx+CnAU0TPb8cVtOsXUQPITxlpkOUjLjII52E1pjIpKrn1a
iX5Xr1AdDi3uigbO7T3gqbfG/m5qjg/dGGW78iIzwhIaz780Zl2HCD8LDJu1+QFC
9BNxwUXEBWf03bfATt8B8MOdv/9P/d4jeW2BZauCkLtdbaGNnvzxHs5YmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmshm/IstgCxU8pd8CHKiVCOWCxMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN41Qc0y
ppASWV7JvvqeY308Pwq0SkatjGJUN0/Lbb72MjBh9hridsIUYHjXXh31uVtwAtQJ
ybm192p6Vjt38cR8FZqyW9oQsG0EIqNCj6OVKVlLad8irLazKz/zTNgFSmiSn+81
cS2OOAyHYqJWwyxOJbUVeZ+NLdcrfNPTrv0oiuDVswTAOdp3CJQ54YA5YeGP3qDq
OUMCC1FP8SqYxWr56XVVJavDm0dEw5IBxBw9Ehc/nibxriXZAT8Pn2d+Nua0n3Zf
JWR6gSmATPbSJWiaeEfzsUfEsEKh93jLw/H3U9mZhYcfcVxIoLrXQQJOy64+//2u
qsHijWwgydXTaQ==
-----END CERTIFICATE-----