Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
File:                     E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft (raw, json)
Hash identifier:          GTTVqyIWptgWPwbx302J4NVrhmVEcNvPOGgn4iL18QE=
Subject key identifier:   14:D5:DB:CA:C9:C7:7A:EC:00:F9:B9:13:90:9A:04:05:89:B9:EB:B1
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Certificate issuer:       /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial:       01A17E4F46D57333659E16581C4F467181D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
Manifest number:          02AF
Signing time:             Tue 27 Oct 2026 17:01:26 +0000
Manifest this update:     Tue 27 Oct 2026 17:01:26 +0000
Manifest next update:     Wed 28 Oct 2026 17:01:26 +0000
Files and hashes:         1: 0XUqvETq-dxEYw9N9Y9b51_wFII.roa (hash: 4PHtMJAyZ19WPBfTjcj5l5RcMfaUsbJPOXNWJybRpz0=)
                          2: 0fJ1xUR4G6ounQ_ozgSABdxI1YM.roa (hash: 5oftUvbidtqugRLDTZVEnXvVc7oIo/8ETaFQu2guNtM=)
                          3: 5166Agqn2jhH_IbcMtLAwG-YdBU.roa (hash: 1lBqQs6eapcEUxVFfk56SbDLb/u+RmQXXUBZz3g1JEw=)
                          4: 9ZYIs_SGpDj7xEbDzyW_JghOQTw.roa (hash: 7Lzx+Hq6m9JlVc7MK5/YoQEfJ0j7aRZa7AWfxLFqHFw=)
                          5: AAi-jgO5ugItvhq3_F8gwTIxi0M.roa (hash: d0LEKUsjn77dZL93kvCurLse68YKK43eyw7reOHi1YU=)
                          6: B8DXsuSLx94y4My6JnYh5VRTgrs.roa (hash: SkxV8uzrj5b4YEP22Ioh+53nCFAbJ5W6IqHlzQdtsUM=)
                          7: DuR8R9YJWEDaCvnw-8235RrAPAI.roa (hash: nwr1wP+HSbTaiN0zlgVNEhTYrOWHjDVW/mSXRxlqdg0=)
                          8: E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl (hash: jtNYKya+N+MmH+kySqWBM65+1nGFxgK5sO8D27Zio6w=)
                          9: F4jwUbxWCTuByzo6gMMte3AQE_g.roa (hash: AgnRnIOgg0noLjz62BlFFuhFufht8Se5DoYlR89V3Iw=)
                          10: HVtjpFrYsNMiZMANtbtwZb7tXTA.roa (hash: RT0/NHuxEn3/LChxeNjl7pnDqmmNjeuWdurgtBY/1ac=)
                          11: JjobvDHzB_RdGlQHuakDY7g6qUc.roa (hash: lMc17XsqpF3q+RuSqmQMroyA9fOiD+xrXB77wQY0+oY=)
                          12: K65FtJG9WPws15aCxLNx8kcSq4o.roa (hash: sWdNupu5JRN43l9Mn2CYyxa89Mi5FMM2ipbcVk7cMgk=)
                          13: KoAxChCFkAeIK98qjbf3bksCgHg.roa (hash: GFujlbeBcjaBQBdj6uHIkxK5RA2RyoYqfL9mlDRfy0E=)
                          14: MMfImLwXkpf8klG1MzI8QyIWYNs.roa (hash: /dOuqPOohIph5KLhxjBT71a56JFrTzDMnHJBEa+DRrM=)
                          15: Myki_ulcjWmpQmHgjyoBf5hdCxo.asa (hash: vz7FdRapOVRGMp/nDx49C5OYL6JnACLP1Ka5N1shAkI=)
                          16: TMGy79dW2pXkye7BEHy8CMyor_w.roa (hash: 1GLCODVONP48lg8Ky3uS0bIOpPD9LaSttQUDyZyBj78=)
                          17: TzsKtY4yH3hMHXGVr2mEO5e2XX0.roa (hash: QQL+sebNXE8j2Sq08pOlk1vwab5QNpo78/csMt17vj8=)
                          18: X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa (hash: OOv3o2LHWlvIdA+Zgu9PaIEfBk4ChhYVmLlz2Cwp33o=)
                          19: XHv-9KHlAwt591_k7h05dIqrWa8.roa (hash: El8dQBufg2+dgHfJ+JPniQdlChjXmnt/RNOUKqRvNjI=)
                          20: XMtCIZ_eMVlacdNRc20Zknmaf9U.roa (hash: sBaiQ2KBzd8/KSOpdVi6syd+anCDH6uFiSXn5XY0yv4=)
                          21: YF0JCEms2KXmPHlGc2bhdslCoMY.roa (hash: TLn2rL1tOH0jWzXZMjUtfq0aySOIcv2w9yQfsVR5G1g=)
                          22: ZcRoMbdW4ZCP9_Xiv4lmN1rxgo4.roa (hash: SDmXIoG9CvGKSUM9rhjvQoJBN0hoAk/XFOvwM5HrP/U=)
                          23: afwPx0FIBqz2zxMx1OzNulPNuQs.roa (hash: mBtbLYbB8/wqtcKjYg6ImsR3gQi32SHh8lzdvBMp1vs=)
                          24: fyjECpmTz5g5P4Yj1m0Y2Lob-gw.roa (hash: xZyjhiYZaxDC5kAx5JqsPWy8+XXcqLWvikpL+2kNOLo=)
                          25: mvsrCDC-NqbWrnDx8KIZT31_F9w.roa (hash: 6La2GkWDdDzTNk/r06zzIsY5pdXU8koA2+wcTUWWsEc=)
                          26: pTMFjEmitrKJMvkFajOQUUYgL8M.roa (hash: XneeE71IIyV6WPB9kLDPT9IPELgo63GtKtVt2WX/krQ=)
                          27: q9gzmrXlePMlciZvpWWGZ4VAXJ8.roa (hash: +qqAYu+OXwah/VdIOZh/+D6sTDdWRFnAkpAzYg8M8r0=)
                          28: s4jOY2hxOjA9XR8C3F6jyFaSTaw.roa (hash: Jl2IpLUmHItdBYENBSNPcqwH5PybEaLvfvR+JxTITEo=)
                          29: sP9A4cnylfqxWlDpkBAm0CIqBFU.roa (hash: pWmUgGcf93vr+1FE5Mpw2z4+mxojC+Zrtg39SIpckEs=)
                          30: u24qDBWEu9RBKIlNcnVjTPEWriA.roa (hash: dXa0B1vtzAvU3OpTSRkC30g9i7RuE0UaT2flClYSH2M=)
                          31: v0ktEALprjuYyYztKF7oiuux4Yc.roa (hash: uoK2ToELcvQ/V62kgkj3wD/DyJ0aXYt2dIxjN0uwM8E=)
                          32: y0JL5th_famt13MqdwXpQQi-c4Q.roa (hash: 0h/IAOS8gxMB1NgAu/pEJouuMsfFoZ2H2n14ej3wMJc=)
                          33: yNImWxuyQjHzmmv-3_EoOXHf-CU.roa (hash: +omRj5AvhzVWWvcblTxHnl95I2HJgpEVlK0ldmd1MWY=)
                          34: yY8I4l0MBr9vnTlmQUYn6NoYBgM.roa (hash: o+wuVfWOWZsZTQMjwMDsqTstb94f+lmkvMjkI7KxcD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4f:46:d5:73:33:65:9e:16:58:1c:4f:46:71:81:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
        Validity
            Not Before: Oct 27 17:01:26 2026 GMT
            Not After : Oct 28 17:01:26 2026 GMT
        Subject: CN=14d5dbcac9c77aec00f9b913909a040589b9ebb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:44:e6:7f:15:85:bd:05:ed:3b:d5:a4:ad:
                    c6:e6:78:fc:28:58:43:86:4f:d0:ec:0b:da:a7:c9:
                    f3:4a:b5:ce:79:bc:d0:6b:8d:a5:f4:76:84:a2:9f:
                    6f:7d:4a:55:27:08:f0:df:66:92:c9:2e:c3:92:17:
                    ca:0f:61:71:cf:b3:4a:6f:21:c6:99:30:9f:16:cd:
                    85:59:99:b7:87:5d:66:a5:1c:f0:5f:7d:c0:d3:75:
                    c8:e3:1a:6c:aa:0e:1d:4b:f7:25:58:91:f4:10:db:
                    5f:85:f0:da:e0:31:0c:ea:3a:87:97:24:b7:d7:4f:
                    f5:26:18:69:0b:26:74:8d:36:2f:12:6a:70:a2:eb:
                    55:73:06:d7:64:59:9a:e5:4b:7d:b7:3b:0b:11:b1:
                    a0:b5:cb:64:77:b5:9c:85:c5:46:ab:9e:c6:0c:08:
                    1d:07:65:36:3a:d5:da:fa:3c:cb:2e:4f:e2:7e:0d:
                    ef:9f:5b:e4:fc:02:77:7c:1f:8e:9a:32:ee:14:bd:
                    3d:61:61:d8:5a:0d:af:c1:ec:4d:eb:c8:94:27:57:
                    7c:bd:72:67:d4:5c:95:07:2c:ad:71:28:7f:3f:f5:
                    79:02:6d:7d:86:34:91:59:05:4a:6c:7a:e5:0a:72:
                    18:68:6c:02:ea:7c:b3:83:92:54:66:da:8b:f1:11:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:DB:CA:C9:C7:7A:EC:00:F9:B9:13:90:9A:04:05:89:B9:EB:B1
            X509v3 Authority Key Identifier:
                keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b5:96:c8:03:4c:ee:77:38:08:76:26:73:6d:55:c9:f7:d2:
         b0:3f:ef:27:58:37:d4:c9:82:7c:1f:a4:a2:69:58:7e:9f:be:
         92:2e:83:f6:37:a1:0f:e1:c3:e6:4e:46:44:1e:99:50:1c:d7:
         67:17:0f:d3:22:44:a6:e8:a7:6e:30:d3:78:73:88:1c:1c:d5:
         ac:3b:07:a9:b1:b4:69:a1:23:76:75:42:44:76:47:63:2a:f8:
         99:dd:9e:6e:6c:0c:3d:33:c8:a8:35:a1:54:c7:dd:11:d3:0b:
         13:1f:07:ed:fa:18:ba:97:c8:70:23:f4:5c:c4:3a:6c:75:a5:
         bf:1d:4b:b5:a6:34:13:be:12:3d:df:53:ed:a2:5e:47:b6:33:
         d4:2a:1f:8a:f0:dc:e1:a2:d2:e4:ea:02:df:3f:69:31:6c:c8:
         52:8a:95:89:78:45:42:3b:d0:33:61:76:ec:b4:ee:eb:a8:77:
         c9:60:3d:88:c6:6a:4c:bb:e7:9e:63:60:98:ae:e4:44:f7:9d:
         3e:16:07:22:b2:11:a7:c7:9c:4b:b7:9e:35:be:25:bf:32:aa:
         cb:7c:98:00:5c:a5:4a:ed:a5:83:d7:b7:b6:71:7c:39:36:5f:
         c9:b9:2d:cb:3f:4a:b9:86:06:81:c7:24:df:6c:be:b3:65:7d:
         fa:49:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:38:18 2026 by rpki-client