Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          MhSoRacjmjDlpjAHvEes/nE2vO5Unx3xhyHFm/3YR64=
Subject key identifier:   63:64:4A:B3:B5:2F:64:15:74:85:2F:D8:A0:0B:9B:40:7B:1A:71:C4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       01A171A5B5264DB9909FDE6440F816D8A36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1B37
Signing time:             Sun 25 Oct 2026 06:00:47 +0000
Manifest this update:     Sun 25 Oct 2026 06:00:47 +0000
Manifest next update:     Mon 26 Oct 2026 06:00:47 +0000
Files and hashes:         1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
                          2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
                          3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
                          4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
                          5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
                          6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
                          7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
                          8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
                          9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
                          10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
                          11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
                          12: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (hash: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=)
                          13: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
                          14: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
                          15: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
                          16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
                          17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
                          18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
                          19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
                          20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
                          21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
                          22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
                          23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
                          24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
                          25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
                          26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
                          27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
                          28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
                          29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
                          30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
                          31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
                          32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
                          33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
                          34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
                          35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: pljGm4qhMWSTIY8BI6dtjaSikOG7Nx0Wt0k12jug890=)
                          36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
                          37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
                          38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
                          39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
                          40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
                          41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
                          42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:71:a5:b5:26:4d:b9:90:9f:de:64:40:f8:16:d8:a3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Oct 25 06:00:47 2026 GMT
            Not After : Oct 26 06:00:47 2026 GMT
        Subject: CN=63644ab3b52f641574852fd8a00b9b407b1a71c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:d6:73:74:35:24:25:44:79:4f:bc:c7:4b:
                    7c:79:af:92:68:23:d6:25:36:8e:65:e7:3b:5e:26:
                    07:61:3e:2e:32:73:69:36:c5:71:17:ee:8c:41:cb:
                    07:50:d4:55:14:9b:55:c7:1a:78:c6:2c:2f:59:76:
                    11:3f:f1:3a:ef:ba:f4:29:06:ef:fc:0c:9b:49:ab:
                    8b:d1:bd:58:19:60:34:62:7c:9f:3b:58:dc:1e:56:
                    d2:3d:ed:48:90:53:28:4b:09:7f:41:3c:15:94:fd:
                    72:e6:95:10:87:a3:3a:df:8b:55:01:cb:5e:18:1d:
                    f5:42:bd:cd:4f:b7:9a:7e:da:0c:9c:0b:58:5d:f0:
                    e8:8b:c5:89:ba:cc:07:bd:99:50:0c:8e:26:13:4d:
                    d9:d4:49:c3:f0:4f:2f:32:b8:a3:e9:a7:37:cf:7b:
                    25:71:28:e3:b5:9d:fc:08:16:30:4d:fd:82:01:a0:
                    6d:63:46:de:8c:7e:bf:23:2e:8a:99:fc:a3:2b:3f:
                    9e:33:43:20:25:96:44:9d:5d:4b:8f:e0:2b:a5:37:
                    96:4d:9a:83:2e:51:aa:61:26:6e:20:2d:13:ba:06:
                    55:39:02:8c:1b:6e:cd:b7:32:48:51:b9:bf:26:57:
                    31:bb:0b:50:3a:76:34:0c:43:2c:07:b5:53:81:b8:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:64:4A:B3:B5:2F:64:15:74:85:2F:D8:A0:0B:9B:40:7B:1A:71:C4
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:cf:83:96:36:f8:bf:6f:4c:a0:9e:5f:0b:11:4c:52:e5:
         13:a8:83:fb:2a:08:b6:4f:7a:79:1c:42:d9:06:c0:57:71:03:
         4e:46:77:c4:ba:f2:f5:f0:fb:6a:c6:a8:8f:ec:6d:78:32:e5:
         14:b0:ff:64:17:b4:b2:2e:e4:07:93:80:d4:13:b4:3c:98:8d:
         5a:93:b7:65:92:d0:ac:7a:47:65:af:e7:32:08:7b:9e:69:59:
         a9:cd:a5:65:3d:dd:74:5a:53:98:9f:66:3f:00:81:c3:84:61:
         0c:fc:59:95:2d:7e:ae:0f:f3:f6:09:9b:2d:65:54:81:32:0c:
         fd:a7:56:75:39:76:c1:2e:cb:fd:c7:d7:42:97:2d:6e:3e:18:
         74:22:96:fe:0d:ce:86:8d:20:45:aa:b5:0f:5a:34:74:86:d9:
         d1:4b:10:a2:b2:e8:60:a5:1e:d6:8b:17:1c:fb:d3:2a:fd:ed:
         38:84:59:73:bc:bb:33:ea:e4:b6:60:4c:7b:8a:76:34:35:f3:
         06:58:3f:ba:bd:ff:ca:03:b8:c2:b4:b5:8c:ae:1f:49:00:b2:
         cf:0e:d8:07:0a:38:d7:a2:f7:50:5d:30:8b:0b:45:4d:8c:13:
         7c:c4:0c:22:40:0b:97:cd:92:43:f6:af:eb:13:a5:05:bc:9b:
         e3:18:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:42:52 2026 by rpki-client