Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
File:                     QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json)
Hash identifier:          AO9kOxYU2P2SodvyNTedXRSdPXgR5BuW7cje4wZh2ck=
Subject key identifier:   B8:7A:D9:3C:C7:D9:DE:B5:71:67:4F:1A:74:70:B2:DC:44:D9:20:23
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Certificate issuer:       /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial:       01A173CAE7E3CCA7E2BC84EE6F1532B7B118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
Manifest number:          01CC
Signing time:             Sun 25 Oct 2026 16:00:39 +0000
Manifest this update:     Sun 25 Oct 2026 16:00:39 +0000
Manifest next update:     Mon 26 Oct 2026 16:00:39 +0000
Files and hashes:         1: 1-B55FjQOvL8zo7V6UlPHVfvybr4.roa (hash: TVcKjlLkk7fp4KUduHKT//GpRgEZkUFY0EE7s7Cy4jQ=)
                          2: 3AHQL_pTKa728-rkkxHITCoJMSM.roa (hash: M/PwxbFJ/3HX3TNsjjopcSlttvR8MumiEMNeI+p91jo=)
                          3: 3F59lvQhRhC7OslYNoZZRT8P80s.roa (hash: HGWAJoWGaUwGoSgUB6fjS2UEyHqI2sqF2GVj3StJwK0=)
                          4: 4EEj2r6-0zg77-9LmRLFaGfhLMY.roa (hash: 5E2E41KFCJgyXV96c5tUCWpJksDB+SLI1u4sOWUbURU=)
                          5: 4xaUPT5u4Oq6Vftwqzw1p48kbyA.roa (hash: f8/ImQO/5Dme+rN3wmBnhHH8eyvTIg6FiL4Mn9NBCFA=)
                          6: 6TUfKf58-fN3KW6nFQaWxOIahkk.roa (hash: Injv2UTFg7753D1JJEsNCvzvfoWnxa9Oum31XMc7Pxg=)
                          7: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=)
                          8: 6g5rTwxdjOxdQg10ljLDWgGmtCs.roa (hash: wyRTs9gdZoVPosSR+/knefOvfAW3btuipE/yqb6jwUA=)
                          9: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=)
                          10: 6vZTTegX6YLDz_pLGe7ULsGR34I.roa (hash: beGBRVfWKZ1sBOmbXdGHIGRaRygIGv0zdwQaasV8Y9I=)
                          11: Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa (hash: nzXxYj43d9I7O16caiUA6up/fb49HJG+wWUtle/NK7s=)
                          12: CNE-8IAAgWwPMwLS-CNNAO81hGQ.roa (hash: VeC/PpYj5puHDU/4QWRO3djaifCWLoC3cPJ+dyDt748=)
                          13: D43_xqLhb1EboLCPrtSgnprQPeI.roa (hash: T/NHgaiw/ue1x+uaaeetFUJUaSZtYO4czdQpvyIpmBc=)
                          14: GJFcsmALdQKB9vC3JT1DxuAOQmU.roa (hash: zS/mj5Wp5KNcMGHabHetSnVhYKeKWeuRer9JOOSFjZI=)
                          15: O03AzAgn3SyjEXyAM9_h30THE1A.roa (hash: O1VaWBRYjHEO+x+6ZOSSBIo8uwlZXncJTwaiunrCxe0=)
                          16: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=)
                          17: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: 7W8W46yUGN0/3ibNTgRjph48BVqkVMWQpYFUIhOKnPM=)
                          18: SFmMWiPKyVrk7wDrGQeHBSzSmn8.roa (hash: lmRL2asJRlbY+ZFlr4N0H80+1oPQD8GnG9gTXtfaMv0=)
                          19: SS4txg_2StDwK48AVogbe_LiWKM.roa (hash: w8gGVsrCzxxSwFzeMeWOpEYm1Ij+vG9eYwgs/zG1XYE=)
                          20: SxUr87-6qreBHbSmSHvcsRh6Qe8.roa (hash: PaNA4lL6qatnGjMgyP3uKnj/Wbta4zMHxMks89dqqLo=)
                          21: WKSF-a6xiS8N77nhhbqGUuLTvYY.roa (hash: wmOhZVA69YBPlPjgJDe03iyFEimIzegXs6jwGEQ01RA=)
                          22: XPJ8M6LGq48OTmV9cU3bs9WvMpE.roa (hash: P9U4NbPjrTWCDlLyYW1rCv/+UAPZSwzVRyzxAdGUpPg=)
                          23: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=)
                          24: ZokRLAVIZ8gWuG46Nx8ADvD8Xvw.roa (hash: 2qfJJJvlEqlQrgnW0smV1KDHs6FwUNklbT4voZTqzrE=)
                          25: a0whrPhXkonzAh3_DtUE3ZEJ5bk.roa (hash: wxOfNUyLMktuWPhWqzazsCmyzkOFs3FacWeme4LGbpU=)
                          26: aSJWg-ST9UbPPrb5b9vxQEg4f14.roa (hash: t6CqIivI9aWAxRrG4obyLA56AFTqcrV9T1aH7FVKdtg=)
                          27: eZZ0l7D4omH03M4g5G_BNS9pD6Y.roa (hash: 8pTl3SZV9QsJJqkB1lJ+Gbe/ieltVk4M0QLx7Dj22V8=)
                          28: g_6tBe5UBBPm29z-5RqNtjnMIN8.roa (hash: p/w8uApV6MwmBcLKylYrIizvBUbAJWW0yAHYzSe/xGs=)
                          29: h57dulCctxnfLGBA2Rtu-JChbAI.roa (hash: ku3KooDRG/Uaqfq9PL0aR3UzOPGdSaNTirHN83cEaWM=)
                          30: iBXMYCC_Ji9k91omX7Kf05LTquM.roa (hash: WsS8+KYQ7lEr0gz91k5kTOUAL8rkR/wrgSF0++gazAc=)
                          31: iOhcul0Pq3-3KM0DuDh6tYCUz8s.roa (hash: FQvGpFhaa5E8omqPG6e1jTHMTZnzZvsDLP+LKnf4V5Y=)
                          32: kMDyqVoApzP9NA2SPSZEwWcxYG4.roa (hash: KFlqDisO9g05lN0wGW8J4rUEH2V1ZVWiPYYhtpN7sFI=)
                          33: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=)
                          34: nfEgflgRFjk1frdU0DWH-m7ZHDY.roa (hash: m8FdhhNoZTve0rqbQg7m52Rp3F8V99mDiW1MipX2iMk=)
                          35: oo_E7sQLI4PkSl03ojkux04Mem0.roa (hash: gWqODxTdqbdoy/I6WG0DSbd8N/ueBC5ppcq6Y3bsyow=)
                          36: pjUS_mOdAQkT8Mwp33PthGs91rk.roa (hash: 6c7v04wHaxp7RBDGOaNgM78OexORbvTnr1auoKcKJB8=)
                          37: rePJlMEYhmjzK6PACosk0jG4VUA.roa (hash: jjo82d0Sjy7yo7Xv1gp3alfvsr5nKnJjbB4MF/Utek4=)
                          38: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=)
                          39: sCEAxknZqHojuPgI-hamnESni0Q.roa (hash: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=)
                          40: sRieXWXUnmpw3cn_Y3GaLU_4g0s.roa (hash: slJE1f0uUSFtnX/JKVpX4v1mUQMwyhaEmSh+/njVReA=)
                          41: xDlSPTFShxNr81DuDjCMKY9l3Ao.roa (hash: 1jLK5BI3lIYRzAeSBH8RC8GC1xnpqFxEklwCR2h+c9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:ca:e7:e3:cc:a7:e2:bc:84:ee:6f:15:32:b7:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
        Validity
            Not Before: Oct 25 16:00:39 2026 GMT
            Not After : Oct 26 16:00:39 2026 GMT
        Subject: CN=b87ad93cc7d9deb571674f1a7470b2dc44d92023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:ce:cc:46:f9:f1:b7:02:3d:41:15:47:aa:
                    82:ab:41:ba:4b:4e:99:4f:f0:e2:2c:91:52:3a:bb:
                    e2:ec:07:ee:af:0e:0e:a4:78:f5:6c:15:6b:90:e2:
                    5a:69:d2:73:97:e7:ef:9b:c0:08:21:5d:72:42:7c:
                    3d:ba:e4:dd:54:fc:99:25:c9:e9:5c:58:0a:ab:b2:
                    ee:23:08:34:2c:4b:ec:c5:77:b9:85:78:da:f6:0a:
                    94:c3:ae:e4:5b:ef:5b:9f:e8:53:78:64:b0:24:8a:
                    60:37:7f:e7:a0:87:74:70:10:1b:14:a2:45:2b:ce:
                    cd:a1:c3:63:9b:9f:2e:42:b2:f4:93:84:c1:30:30:
                    7f:68:21:a7:2e:e6:c5:fb:c9:9c:6a:f1:83:d1:5a:
                    87:03:2f:e5:c2:b5:e5:f5:63:9e:75:2c:fa:74:ca:
                    c4:75:e0:75:78:2c:eb:88:4c:e4:16:b8:0c:20:fb:
                    fa:7e:73:ea:0a:30:95:d1:6c:54:68:b6:c7:fb:cd:
                    52:f7:eb:e0:aa:fe:21:a1:52:a2:6f:63:4e:58:6d:
                    13:97:85:c1:99:c4:d2:b9:13:1c:c1:a4:03:31:6f:
                    af:4e:d3:05:c0:6f:c4:66:60:6b:d4:2a:22:0c:93:
                    53:c7:9b:97:eb:2a:dc:fa:fe:21:9f:90:2c:d0:48:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7A:D9:3C:C7:D9:DE:B5:71:67:4F:1A:74:70:B2:DC:44:D9:20:23
            X509v3 Authority Key Identifier:
                keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5d:0e:d5:59:be:f1:0b:d8:dc:49:b7:5d:ed:00:ff:d1:23:
         d2:2b:e1:b0:72:aa:e0:3f:b6:95:b4:6f:73:44:32:ab:da:09:
         8c:e8:a9:61:ee:c5:f1:14:27:d5:2b:7a:6a:46:52:8d:91:1a:
         5f:17:37:ad:c4:b3:92:09:ab:c6:6d:24:eb:2a:ec:53:b7:fd:
         14:c7:f5:43:33:d7:0d:b9:1a:77:6c:da:94:ef:4d:61:b2:0e:
         1b:66:6e:e2:e0:45:ad:89:68:40:8b:0d:79:f7:1a:0a:c4:73:
         98:20:2a:7e:17:c5:be:b1:e5:9f:d2:fd:b1:08:1a:b9:c3:56:
         b8:3c:a4:14:e2:79:ed:69:d4:e6:d8:9f:02:86:82:bf:c1:7b:
         9b:e9:a8:2d:f1:c0:9e:23:c7:37:d9:f3:c4:68:70:87:69:7e:
         1d:88:5a:f2:d7:7f:b3:3d:5a:46:e3:05:0d:21:3d:c6:a9:ab:
         3f:9b:3f:10:ce:f7:08:bd:6a:2b:2d:50:45:cb:6c:21:4c:ac:
         93:e5:aa:a7:b3:35:f4:72:e7:7a:34:29:2b:a6:f1:03:07:97:
         c3:b7:02:23:5c:a5:49:5f:41:bf:87:47:f4:6f:8b:2b:76:53:
         d7:3a:61:61:62:bc:cf:dd:24:e1:a9:7a:09:28:ec:47:56:1f:
         1f:66:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----