Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
File:                     QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json)
Hash identifier:          rGN8opaEjRZU8l/Qbx3/vIJ9aS9IJOjtrVVY7uA69Sc=
Subject key identifier:   41:6C:5B:16:73:98:BD:5B:1E:A4:B9:0D:F1:45:17:16:07:55:36:B9
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Certificate issuer:       /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial:       01A175B94536412EC65AD48B42F918366B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
Manifest number:          01CD
Signing time:             Mon 26 Oct 2026 01:00:38 +0000
Manifest this update:     Mon 26 Oct 2026 01:00:38 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:38 +0000
Files and hashes:         1: 1-B55FjQOvL8zo7V6UlPHVfvybr4.roa (hash: TVcKjlLkk7fp4KUduHKT//GpRgEZkUFY0EE7s7Cy4jQ=)
                          2: 3AHQL_pTKa728-rkkxHITCoJMSM.roa (hash: M/PwxbFJ/3HX3TNsjjopcSlttvR8MumiEMNeI+p91jo=)
                          3: 3F59lvQhRhC7OslYNoZZRT8P80s.roa (hash: HGWAJoWGaUwGoSgUB6fjS2UEyHqI2sqF2GVj3StJwK0=)
                          4: 4EEj2r6-0zg77-9LmRLFaGfhLMY.roa (hash: 5E2E41KFCJgyXV96c5tUCWpJksDB+SLI1u4sOWUbURU=)
                          5: 4xaUPT5u4Oq6Vftwqzw1p48kbyA.roa (hash: f8/ImQO/5Dme+rN3wmBnhHH8eyvTIg6FiL4Mn9NBCFA=)
                          6: 6TUfKf58-fN3KW6nFQaWxOIahkk.roa (hash: Injv2UTFg7753D1JJEsNCvzvfoWnxa9Oum31XMc7Pxg=)
                          7: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=)
                          8: 6g5rTwxdjOxdQg10ljLDWgGmtCs.roa (hash: wyRTs9gdZoVPosSR+/knefOvfAW3btuipE/yqb6jwUA=)
                          9: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=)
                          10: 6vZTTegX6YLDz_pLGe7ULsGR34I.roa (hash: beGBRVfWKZ1sBOmbXdGHIGRaRygIGv0zdwQaasV8Y9I=)
                          11: Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa (hash: nzXxYj43d9I7O16caiUA6up/fb49HJG+wWUtle/NK7s=)
                          12: CNE-8IAAgWwPMwLS-CNNAO81hGQ.roa (hash: VeC/PpYj5puHDU/4QWRO3djaifCWLoC3cPJ+dyDt748=)
                          13: D43_xqLhb1EboLCPrtSgnprQPeI.roa (hash: T/NHgaiw/ue1x+uaaeetFUJUaSZtYO4czdQpvyIpmBc=)
                          14: GJFcsmALdQKB9vC3JT1DxuAOQmU.roa (hash: zS/mj5Wp5KNcMGHabHetSnVhYKeKWeuRer9JOOSFjZI=)
                          15: O03AzAgn3SyjEXyAM9_h30THE1A.roa (hash: O1VaWBRYjHEO+x+6ZOSSBIo8uwlZXncJTwaiunrCxe0=)
                          16: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=)
                          17: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: nIcsyzmjbZdlrSZJUszTxb81yDfmqR/D0VbK0BvT3s8=)
                          18: SFmMWiPKyVrk7wDrGQeHBSzSmn8.roa (hash: lmRL2asJRlbY+ZFlr4N0H80+1oPQD8GnG9gTXtfaMv0=)
                          19: SS4txg_2StDwK48AVogbe_LiWKM.roa (hash: w8gGVsrCzxxSwFzeMeWOpEYm1Ij+vG9eYwgs/zG1XYE=)
                          20: SxUr87-6qreBHbSmSHvcsRh6Qe8.roa (hash: PaNA4lL6qatnGjMgyP3uKnj/Wbta4zMHxMks89dqqLo=)
                          21: WKSF-a6xiS8N77nhhbqGUuLTvYY.roa (hash: wmOhZVA69YBPlPjgJDe03iyFEimIzegXs6jwGEQ01RA=)
                          22: XPJ8M6LGq48OTmV9cU3bs9WvMpE.roa (hash: P9U4NbPjrTWCDlLyYW1rCv/+UAPZSwzVRyzxAdGUpPg=)
                          23: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=)
                          24: ZokRLAVIZ8gWuG46Nx8ADvD8Xvw.roa (hash: 2qfJJJvlEqlQrgnW0smV1KDHs6FwUNklbT4voZTqzrE=)
                          25: a0whrPhXkonzAh3_DtUE3ZEJ5bk.roa (hash: wxOfNUyLMktuWPhWqzazsCmyzkOFs3FacWeme4LGbpU=)
                          26: aSJWg-ST9UbPPrb5b9vxQEg4f14.roa (hash: t6CqIivI9aWAxRrG4obyLA56AFTqcrV9T1aH7FVKdtg=)
                          27: eZZ0l7D4omH03M4g5G_BNS9pD6Y.roa (hash: 8pTl3SZV9QsJJqkB1lJ+Gbe/ieltVk4M0QLx7Dj22V8=)
                          28: g_6tBe5UBBPm29z-5RqNtjnMIN8.roa (hash: p/w8uApV6MwmBcLKylYrIizvBUbAJWW0yAHYzSe/xGs=)
                          29: h57dulCctxnfLGBA2Rtu-JChbAI.roa (hash: ku3KooDRG/Uaqfq9PL0aR3UzOPGdSaNTirHN83cEaWM=)
                          30: iBXMYCC_Ji9k91omX7Kf05LTquM.roa (hash: WsS8+KYQ7lEr0gz91k5kTOUAL8rkR/wrgSF0++gazAc=)
                          31: iOhcul0Pq3-3KM0DuDh6tYCUz8s.roa (hash: FQvGpFhaa5E8omqPG6e1jTHMTZnzZvsDLP+LKnf4V5Y=)
                          32: kMDyqVoApzP9NA2SPSZEwWcxYG4.roa (hash: KFlqDisO9g05lN0wGW8J4rUEH2V1ZVWiPYYhtpN7sFI=)
                          33: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=)
                          34: nfEgflgRFjk1frdU0DWH-m7ZHDY.roa (hash: m8FdhhNoZTve0rqbQg7m52Rp3F8V99mDiW1MipX2iMk=)
                          35: oo_E7sQLI4PkSl03ojkux04Mem0.roa (hash: gWqODxTdqbdoy/I6WG0DSbd8N/ueBC5ppcq6Y3bsyow=)
                          36: pjUS_mOdAQkT8Mwp33PthGs91rk.roa (hash: 6c7v04wHaxp7RBDGOaNgM78OexORbvTnr1auoKcKJB8=)
                          37: rePJlMEYhmjzK6PACosk0jG4VUA.roa (hash: jjo82d0Sjy7yo7Xv1gp3alfvsr5nKnJjbB4MF/Utek4=)
                          38: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=)
                          39: sCEAxknZqHojuPgI-hamnESni0Q.roa (hash: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=)
                          40: sRieXWXUnmpw3cn_Y3GaLU_4g0s.roa (hash: slJE1f0uUSFtnX/JKVpX4v1mUQMwyhaEmSh+/njVReA=)
                          41: xDlSPTFShxNr81DuDjCMKY9l3Ao.roa (hash: 1jLK5BI3lIYRzAeSBH8RC8GC1xnpqFxEklwCR2h+c9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:45:36:41:2e:c6:5a:d4:8b:42:f9:18:36:6b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
        Validity
            Not Before: Oct 26 01:00:38 2026 GMT
            Not After : Oct 27 01:00:38 2026 GMT
        Subject: CN=416c5b167398bd5b1ea4b90df1451716075536b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:54:75:a5:0d:dc:71:0b:f8:94:0d:dd:1d:
                    b3:4f:43:96:1b:eb:c0:44:d0:eb:d5:66:17:ce:00:
                    12:84:9a:c7:56:83:26:a1:fc:fe:04:08:9f:9a:be:
                    99:e6:f9:12:ed:2b:aa:f9:68:19:10:f5:96:a1:a4:
                    37:13:c3:91:84:c6:40:4d:99:e1:39:ac:dc:f1:f7:
                    66:55:68:fb:3e:c4:bd:ab:fb:e4:d6:9d:d1:1b:2c:
                    e0:26:83:62:e9:ca:09:09:7c:c9:b5:30:cf:e1:7e:
                    0e:30:94:1d:50:e5:0f:f3:24:08:fd:04:4f:7a:7b:
                    13:33:b5:6b:95:33:29:89:8c:c5:ff:16:8f:eb:7c:
                    61:39:32:54:8d:9d:78:23:9a:c3:34:c2:e6:f3:eb:
                    2b:21:5a:8b:60:4a:1f:de:50:43:2d:70:4a:f3:f0:
                    f0:f9:47:0e:b4:86:e8:b7:d7:4a:4b:66:c4:01:66:
                    f7:15:be:e0:aa:c0:e9:6d:46:06:54:59:c5:cf:82:
                    dd:7a:72:ed:0a:1c:57:4e:71:0c:ed:90:1d:11:30:
                    bf:aa:2f:fd:97:5e:d9:62:62:73:f3:0c:3f:02:65:
                    f3:5e:f3:f2:97:ec:44:a8:2f:17:47:4b:0f:3d:b9:
                    7e:7d:57:29:8a:7d:94:02:15:b8:f0:73:12:c3:f2:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:5B:16:73:98:BD:5B:1E:A4:B9:0D:F1:45:17:16:07:55:36:B9
            X509v3 Authority Key Identifier:
                keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:43:26:df:c0:95:a5:69:06:ff:51:a5:7f:90:47:5a:c7:b6:
         14:18:5f:d1:87:fb:ba:5f:66:d3:58:a3:e4:2b:b9:2a:7e:93:
         ce:13:e3:e4:b7:42:28:53:84:9e:2d:0f:60:50:10:37:60:ca:
         8a:e2:bd:1a:31:87:ae:76:0f:a0:66:ce:20:91:b0:d6:b2:de:
         f6:3b:6e:fa:99:01:62:71:d8:e3:3e:db:b8:5d:0f:56:f2:58:
         0b:7b:12:f1:7d:c0:75:39:e6:aa:e1:8a:38:84:70:65:a5:3f:
         57:01:19:c4:50:58:e4:b2:80:7a:30:13:2e:17:5a:30:af:06:
         a5:dc:da:68:04:25:7b:7d:04:c9:72:08:fd:36:25:0f:b9:0b:
         f8:7d:03:67:30:a9:0b:55:36:35:28:23:69:f1:2f:a1:4d:8a:
         aa:4a:2e:f0:24:8b:dd:46:42:a8:ec:be:35:cd:19:23:cd:ba:
         17:64:9d:ab:60:ba:84:73:06:44:bc:52:77:73:8b:01:1a:03:
         a0:9c:80:b8:da:20:b8:2f:30:cf:ef:e3:a2:c1:95:a8:ae:b7:
         d5:75:52:98:3b:f7:ca:55:19:b4:9d:d6:2c:84:a4:8f:9e:ce:
         5c:da:87:e3:72:94:70:a6:4f:a2:13:81:2d:fe:22:64:a8:23:
         89:37:dd:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1uUU2QS7GWtSLQvkYNmt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMDI2MDEwMDM4WhcNMjYxMDI3MDEwMDM4WjAzMTEwLwYDVQQD
Eyg0MTZjNWIxNjczOThiZDViMWVhNGI5MGRmMTQ1MTcxNjA3NTUzNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty1UdaUN3HEL+JQN3R2zT0OWG+vA
RNDr1WYXzgAShJrHVoMmofz+BAifmr6Z5vkS7Suq+WgZEPWWoaQ3E8ORhMZATZnh
Oazc8fdmVWj7PsS9q/vk1p3RGyzgJoNi6coJCXzJtTDP4X4OMJQdUOUP8yQI/QRP
ensTM7VrlTMpiYzF/xaP63xhOTJUjZ14I5rDNMLm8+srIVqLYEof3lBDLXBK8/Dw
+UcOtIbot9dKS2bEAWb3Fb7gqsDpbUYGVFnFz4LdenLtChxXTnEM7ZAdETC/qi/9
l17ZYmJz8ww/AmXzXvPyl+xEqC8XR0sPPbl+fVcpin2UAhW48HMSw/JjFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFsWxZzmL1bHqS5DfFFFxYHVTa5MB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEMm38CV
pWkG/1Glf5BHWse2FBhf0Yf7ul9m01ij5Cu5Kn6TzhPj5LdCKFOEni0PYFAQN2DK
iuK9GjGHrnYPoGbOIJGw1rLe9jtu+pkBYnHY4z7buF0PVvJYC3sS8X3AdTnmquGK
OIRwZaU/VwEZxFBY5LKAejATLhdaMK8GpdzaaAQle30EyXII/TYlD7kL+H0DZzCp
C1U2NSgjafEvoU2Kqkou8CSL3UZCqOy+Nc0ZI826F2Sdq2C6hHMGRLxSd3OLARoD
oJyAuNoguC8wz+/josGVqK631XVSmDv3ylUZtJ3WLISkj57OXNqH43KUcKZPohOB
Lf4iZKgjiTfd5g==
-----END CERTIFICATE-----