Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          o9S4QXK01YZDZAug0vXkeYxatSIYrGpQH6k/pHqCZVU=
Subject key identifier:   3D:EB:E2:24:48:40:3E:6E:40:14:15:F4:10:57:F8:3F:DE:C5:89:77
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       01A1A2C95B3A28EF576E254DF3383A956C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1BCF
Signing time:             Tue 03 Nov 2026 19:01:07 +0000
Manifest this update:     Tue 03 Nov 2026 19:01:07 +0000
Manifest next update:     Wed 04 Nov 2026 19:01:07 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-2TSdF_W2fyVnLJlXbGLlPmpvpY.roa (hash: H0UUMRGZgRNZcrLjgj200uTGqq33jWhf6Fq3tI/BI4s=)
                          3: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          4: 1VLg1aY9v7jaSjHtofK36IMeBaE.roa (hash: HI2whi4CG4KcDsjD2jvuiBEFXV0jVOJ6ZL1iFW2q1Rc=)
                          5: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          6: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          7: AicKbn9V4_76pgwuedyA5GCzyLU.roa (hash: DOJ7MbETesSOMJObiYp+iD6VIbQrVHtez3kgGi0aHjk=)
                          8: BIWjRS8zCx6Ly9GztEn53lyLVuA.roa (hash: hj7SZXrhwEnqVdxbCJjZfYsJMWRsRO2+uJmorDiv/VY=)
                          9: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          10: Cd-EjljNtxmscKdjcZLE96w4ZWw.roa (hash: wPY6iUFF+iI91nSnCNtyxC/izA9try/2MZQcOoA/q54=)
                          11: F_YKIDk3-c3q7nLSxKia4y8l2UU.roa (hash: mzxplP5wbB6OgrEsYuV9ctgrKZByMRtoj3kAQWkgbps=)
                          12: Gug5FnCDjB47_b4b7SpuDZOyPmc.roa (hash: k9gAW6SKI0/aYjwjKLHuKj0KrVsMFyU3zgWsEogPtww=)
                          13: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          14: JxwtXgGoD_CFiDd6Tm589CrVbsQ.roa (hash: Rx8fWHkF2gGQDkE0A9hko81H/LNI95XicoVZhoeF28w=)
                          15: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          16: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          17: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          18: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          19: S0C6crrVKgRyJf3nSHdvRDUasow.roa (hash: ppGMxglo/WK3JU0mlehHdl0xtPuYXtPko+rmXZfr/i4=)
                          20: TSkmbBltTbG5oGpD_Y2-gqHiTBQ.roa (hash: mAgMntzkdDIt94yA57minmvIvDyj/f3wCfM5fqmRxjE=)
                          21: VttJMfNXffXg2N7RGJ2gl7znqVA.roa (hash: D2BylBdgHIs+38A2CtW5HUr9uwkgEAH7QSPUrMFWnwY=)
                          22: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          23: ZAkzvDuShqbgdA4si8lgDBLLYcM.roa (hash: gpLWb00jmi2CBQgo9H2EFZ0+OdBOrkyQzKyxnR7pVDU=)
                          24: aAk0W1JZdu-pSXtB24UQsKa894E.roa (hash: 4HKFjy30UlWM45M8o5ZyKGJnhEjFtDRcAFZMCQ5Qv9o=)
                          25: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          26: d_drZEi75KbJpWGAU1kWAxnMOt4.roa (hash: mIzjxMSAtp0q7cgMj5Il09j/jt2ws8ao19RUeSe5pn0=)
                          27: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          28: duH5i6Kj1hWUJ7lpkj5WRA3KMoc.roa (hash: 9eDuQ2k6LA/RA0m8rrspBTd/eZocOclB7P+1x5v2y2M=)
                          29: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          30: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          31: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          32: j-00qQwauyTh9RgfGqNnitnD7As.roa (hash: 8GRz2UtLNirTBYNw2vvahaSM779eUkDfuLUhI2aMD14=)
                          33: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: mNk2YtM6ezkOrGNjNTBXAbLWRibfzjKKutTlaxy+TC4=)
                          34: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          35: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          36: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          37: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          38: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          39: nP2t3ktCtxmXvJfQm70RczMv8go.roa (hash: X/RDZwcgP5StNkfUGKSyti4zr1ll+jsvxVTWJNRuwLk=)
                          40: oLiuEoOBIaZFRHkiJUFfiSKKHwk.roa (hash: HDxlhV6rveassmnQwwofOMmIF1p19Y9g4WnshEZXckE=)
                          41: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          42: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          43: tf7qsoBJv3De1Wk8Ek1C5caXYHI.roa (hash: 1AFVc5hvdCXIYWW7f4ZfIsCQuhue8YXSXmhg1aCkuDw=)
                          44: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          45: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          46: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a2:c9:5b:3a:28:ef:57:6e:25:4d:f3:38:3a:95:6c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Nov  3 19:01:07 2026 GMT
            Not After : Nov  4 19:01:07 2026 GMT
        Subject: CN=3debe22448403e6e401415f41057f83fdec58977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:90:1d:95:53:3c:01:8f:0b:d4:a2:e9:3d:
                    d9:c0:ab:bb:4b:71:9c:fd:e6:c3:ee:bb:c5:54:5b:
                    b0:8c:89:c3:f5:d7:e0:97:aa:cc:51:49:b6:73:7f:
                    92:8b:6d:43:6c:47:ca:55:d4:13:c5:cb:a2:f6:28:
                    9d:78:36:da:fa:ab:4d:ac:63:6d:3b:48:ad:0c:25:
                    80:99:80:aa:31:c3:e3:35:23:80:37:73:ad:d8:63:
                    63:04:0a:cb:d6:58:b5:e0:a1:e7:17:36:9d:23:fd:
                    67:f0:fe:f7:ae:5b:ab:ee:8b:24:7d:99:27:91:b6:
                    25:d4:17:4a:b0:b3:40:37:ef:b4:bd:30:b9:52:67:
                    59:5b:93:ac:88:02:93:b4:1a:ac:68:71:5f:10:a7:
                    a1:df:d6:e4:14:15:41:ed:f0:69:36:d5:5c:c8:56:
                    d1:4c:6d:e4:e4:45:8d:2c:35:31:5a:ef:46:f0:45:
                    17:87:18:8f:e6:f7:95:f0:4d:5d:f7:eb:58:1e:e7:
                    e8:ee:db:27:83:55:9d:33:c7:28:04:66:75:83:e9:
                    18:ab:45:85:9e:b6:33:e0:c6:08:76:e2:c5:fb:01:
                    97:2c:c3:c0:bb:1b:41:4e:1d:e3:0e:6c:6e:f7:02:
                    16:c9:cc:d6:9e:5e:fb:f5:a0:63:73:8c:fd:b1:0e:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EB:E2:24:48:40:3E:6E:40:14:15:F4:10:57:F8:3F:DE:C5:89:77
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:80:68:96:10:07:5f:8d:2e:6b:cf:6b:71:b7:68:02:d7:83:
         1a:3e:a8:7b:a3:54:04:5b:b7:97:75:64:ed:99:5a:84:f2:65:
         b0:5e:35:ca:46:33:80:fd:46:7f:7e:2b:46:b4:71:73:d7:86:
         d3:c2:b3:bb:22:80:bb:02:35:88:4d:be:9e:18:9d:13:e5:12:
         e2:27:ed:69:38:a0:77:fe:1c:de:d9:3f:2a:de:2a:18:c6:16:
         fe:a6:c0:32:69:66:98:90:d1:b1:72:a2:a5:1f:59:26:dc:ea:
         d6:ab:1f:88:a3:1d:25:96:10:54:8c:29:21:8b:6d:ce:5d:01:
         95:ac:f2:35:fc:73:4b:62:82:6c:09:89:24:be:2f:64:76:33:
         ff:6f:a2:9c:19:b5:bf:38:0b:46:e1:62:4e:ee:28:9d:8f:f7:
         a9:20:ef:14:6a:6f:eb:c0:e7:e5:e5:9e:59:1c:af:0f:66:c5:
         22:cb:03:a3:8f:db:36:1f:80:ff:5a:b0:4a:4d:7a:37:3b:c7:
         83:2c:32:0b:eb:1a:d6:20:b4:92:72:f4:83:cd:f9:5d:c6:68:
         69:71:e4:76:66:1f:ab:a6:dc:15:38:d9:45:f3:70:61:28:5a:
         b5:a2:c8:48:28:26:41:f3:37:a4:53:03:f4:f3:23:53:a4:a1:
         09:2b:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----