Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          oxZIy4tiun0qLzo9LWxLHJ/RglQqJ7rju/1he4jXqeA=
Subject key identifier:   9C:D7:50:86:79:71:E0:3F:6D:E7:5F:39:5C:7F:4D:E6:FF:96:1D:9B
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       01A0822E003C56F613E9CE9A1156B377C3C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1ABB
Signing time:             Tue 08 Sep 2026 18:00:47 +0000
Manifest this update:     Tue 08 Sep 2026 18:00:47 +0000
Manifest next update:     Wed 09 Sep 2026 18:00:47 +0000
Files and hashes:         1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
                          2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
                          3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
                          4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
                          5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
                          6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
                          7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
                          8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
                          9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
                          10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
                          11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
                          12: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (hash: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=)
                          13: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
                          14: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
                          15: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
                          16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
                          17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
                          18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
                          19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
                          20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
                          21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
                          22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
                          23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
                          24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
                          25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
                          26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
                          27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
                          28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
                          29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
                          30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
                          31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
                          32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
                          33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
                          34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
                          35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: l9SXgDyzRMb3mlzB4oWZy3gqm8nuCsHPtu/hXYvXSuo=)
                          36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
                          37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
                          38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
                          39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
                          40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
                          41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
                          42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:82:2e:00:3c:56:f6:13:e9:ce:9a:11:56:b3:77:c3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Sep  8 18:00:47 2026 GMT
            Not After : Sep  9 18:00:47 2026 GMT
        Subject: CN=9cd750867971e03f6de75f395c7f4de6ff961d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:e4:35:09:ce:fc:2c:7d:4f:b1:e2:f0:fe:
                    65:50:65:ce:c8:0a:57:e4:3d:5c:e9:16:2a:58:34:
                    11:2e:b4:11:7b:42:af:4d:a1:0f:e4:36:92:3f:46:
                    db:53:e4:89:a8:7d:8e:55:47:bd:e0:ec:55:8f:68:
                    83:6b:c2:95:27:95:4d:3c:68:99:1c:dd:59:70:3a:
                    32:44:58:8f:b4:7f:97:e8:e3:37:12:b4:93:26:dd:
                    51:2b:2c:bf:d3:91:fb:f4:e9:96:0f:1b:bd:37:80:
                    5a:d5:d4:f5:c7:60:3e:e7:e2:88:f9:bb:a3:28:6d:
                    06:72:4e:74:6a:f2:39:b3:6c:5e:66:c2:90:be:25:
                    9d:f7:58:fd:46:06:7a:74:35:bb:46:85:ec:5d:f2:
                    00:2c:ff:e9:7c:b0:84:45:20:85:06:6e:cf:c8:96:
                    7c:47:51:22:f6:b4:86:9e:3a:45:fc:44:56:30:81:
                    87:e0:65:c4:54:c4:73:b1:ee:41:f2:fc:01:90:68:
                    31:a5:7b:48:ff:d9:80:cb:48:66:80:c0:6e:3c:69:
                    92:1b:fb:e5:74:1d:b3:6f:33:da:f7:3e:89:48:e4:
                    51:3a:dc:43:d0:6b:f7:2a:a3:bc:72:da:92:7f:e4:
                    a9:1a:cf:fc:bb:17:02:1e:dc:71:a5:60:f9:f1:01:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:50:86:79:71:E0:3F:6D:E7:5F:39:5C:7F:4D:E6:FF:96:1D:9B
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c3:9c:cd:26:ef:ee:ad:99:0c:49:1b:54:52:d5:52:d6:3d:
         04:55:a0:eb:b9:f4:28:8d:31:b1:eb:86:cb:a6:99:bd:e0:4a:
         42:ec:35:78:8e:16:32:67:a2:56:6b:59:1d:66:65:6e:b6:c3:
         89:81:bd:d0:74:77:25:d4:be:0b:b2:7b:39:dc:e9:86:b9:1a:
         93:cd:87:e2:b6:13:07:be:8b:c5:8b:d1:10:34:a4:68:01:a6:
         c9:98:09:2e:80:08:42:36:61:16:13:d2:62:d3:46:f0:5d:88:
         2b:f9:42:b9:ca:dd:2b:5e:c6:3a:99:43:ca:46:6c:75:56:24:
         ca:e7:2d:66:4d:3d:02:5b:f0:44:50:01:26:84:a8:ab:b8:30:
         d9:9d:0b:22:fc:88:62:cc:de:25:80:33:9f:59:0c:11:1b:5c:
         ad:e3:7f:f8:d6:4a:51:e7:1e:00:73:86:87:55:ce:ad:63:be:
         04:06:1b:35:88:0f:a8:6b:be:2a:a0:2f:02:37:75:ab:00:fc:
         94:4e:bb:00:f6:6a:41:c2:ae:bc:aa:b7:d1:6c:ce:76:74:77:
         bd:71:63:e7:49:4d:9c:79:bc:f1:e3:f3:94:eb:9b:5e:33:bf:
         74:5d:0b:b4:a7:3e:61:79:6e:83:c8:83:6a:8d:2c:ca:1c:cf:
         5b:07:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:45:16 2026 by rpki-client