Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          ydcQNTN/lWH9iqVGnUfE4as8qutud6wdWQyMwtp6D9g=
Subject key identifier:   28:6F:DF:A3:48:7B:7C:8B:CA:83:78:9D:05:0F:2C:5F:93:60:B9:23
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01A1765E76CB32B2629373E274BE24B8CB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1BDE
Signing time:             Mon 26 Oct 2026 04:01:04 +0000
Manifest this update:     Mon 26 Oct 2026 04:01:04 +0000
Manifest next update:     Tue 27 Oct 2026 04:01:04 +0000
Files and hashes:         1: 07LiQQN2F7ZaB1EkKAY0IZrDpv8.roa (hash: o7WBtGCqPCRwW5D5K+H2FCuMu1BhAxfDbRLY4SIZmQQ=)
                          2: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          3: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          4: 1-_wSAB9euFQ6fT7w4DWJ5Xgo5Kk.roa (hash: BjqjTxy1Woefud4gcppujNascH6RjJHEx2c0AzjfX6o=)
                          5: 1ESWGwNWQSn1yfNid_NgnQYmkgo.roa (hash: CmYTU2GOL9fJJyk25d75QRGxEIeSsdZPsx0vkAXASwA=)
                          6: 1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa (hash: XxYQOLtcDO+kKRh93RlmwzW/qtvNS82kdLybB49Wy7E=)
                          7: 1hTbXiXqURMHfT_3cf_5_wditXc.roa (hash: QaVtq/BvGJQS3X3q0F0yQ9lZV47+S5VCwhODYAuVhIE=)
                          8: 3iuK2PePzlzkfIjA6PU7qCf7bWU.roa (hash: jmTVl7eRtiftjiuAnsGPt6gtZDbCLdVGFoxxlHgA3Rc=)
                          9: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          10: 6Aaz4JVLSjap6lFQeRNmxCI0WOY.roa (hash: Dklt8zs2CLMEIf1PimF6yolxIJBZMuW6QwekpSKdqvc=)
                          11: 8fhRtiu_Y-7BuakqbAP1YnjY4eg.roa (hash: 7RxX4BpwVFrs84OiwF2XdVBqm5xQUd4i65cOFdlTJJ0=)
                          12: C8ZLaFAbyVjIOedw3NULKGBNaHs.roa (hash: o7bLJ4x6imfQVFB8Ci4Xwe9P3Rv1x12r6bmWU8fyebo=)
                          13: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          14: GIKRF0nXi7INomLIm1n0MXoVX7g.roa (hash: kHr494+YoPwvcUNQ/4OPxtKZy199ghrNKf/OpsmU2nI=)
                          15: Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa (hash: cGNycfZbTmQsfCD7PYzBfa8+3CZ+9W0RQ36+xTRQr5g=)
                          16: KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa (hash: Y+VyjlDROYbrCdf29xH6G3H2D1QPefe6usrsIsZCitM=)
                          17: KrJ9atQ55Xcc_M6osKEmIQnWvAM.roa (hash: Mf0UmwU6IJTnSTC9y8ePh7ucpvgSo3TyDCf+fnNMBWk=)
                          18: LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa (hash: o6FBkRC3i3TODQqiIL4EQ6bdbi9ADeAh/bdI0nc31nk=)
                          19: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          20: QhR_79csT9O5oeIFdHW8gjPKFdQ.roa (hash: 23ArOcO4LB9jNTgcelJzPDcJ4dVoSawShlKbhyVD/Eo=)
                          21: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          22: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          23: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: 0fumLjNAzDA/MfltIOLIWMMKpOLt5DmfHEytYzZyCCU=)
                          24: SPTf9DRZiWlTG1KyilzLN8Holew.roa (hash: YQxgIr/RB29Wxn7k0d9F3Tbs4Jjh6C6Eo5PpiLRDHoA=)
                          25: Ss4fVycWbzrbsGfC-UotFuMZAfI.roa (hash: jWq8iYtN0x0FwpUA7Gu/Lr/cnfU6eTDqvTSInxcOStI=)
                          26: VByWEi075GG2ul0TtCiMiXrevMA.roa (hash: emrSQLDsEvO0Y3Bc2ftEniYaN4kzAyfvF/WPgpAC25E=)
                          27: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          28: Vkob5ykG1uTUoQxf-Y0lIElf748.roa (hash: rf3qd5Sq7pbldPkOkD+TRHnqHAa77Pp66pn/FP0ieM4=)
                          29: Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa (hash: ImBcIaHYckQlyUn7qD0gyo0OZpqemgaOxC20pRlncvA=)
                          30: ZGRufHjaEOQfZDX946W9j6Kmqp4.roa (hash: 9yXb0jdoscPhoz5VZ5tNsNxnKaSTWuDYouPvk/pE4eQ=)
                          31: ZRcZL61j2V2FKjZUpy53OS688i8.roa (hash: wAb1IEyizCTSaW/PxHmdJfNo47ObLQQXhF8nK6OE+P4=)
                          32: aBGTQZXLz5LSXhCwswQpSWlKO2E.roa (hash: AdgDESpgiTwehjQmwmRZCXG5NhZAmRdcDDfLbMQX4Qc=)
                          33: b685XmC5PyOehhHvGi3pgJ1TPwA.roa (hash: aUQnEGw28WbvY+AfRzp4aRdAzv/EcfdIi+bXmoFinLI=)
                          34: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          35: cFl5ywq_13udVfRgQTEhw9bpSjU.roa (hash: TsFLhPPc4CKImjOhB5y40oTij5TztHWmIPHSHN3U630=)
                          36: cckM6iYhbL_WSC0LwJWQZgqC5F0.roa (hash: wSV74rFizs80sXj9syWABc9HEo9X681NrjX53AaMI+w=)
                          37: d1FmpnCLtN9xWz258z_vo0evfQY.roa (hash: 99ktEN8EQTUBIhZ9BGIWGyL3Ti91GsDxlW00ORFmRCI=)
                          38: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          39: efLppXHlERCKKYaJTde-86Ghjlk.roa (hash: QKED85n+T67n9kk+tVSC2dGP5JLesJDmpO536eK8+nU=)
                          40: efumuNsaVpX6ApvpzuMq8peXOgk.roa (hash: PfINXqtF+WZzdodRg1VAlZtmEBou/8AsW8HjFKl26no=)
                          41: gID46NhD6hvl2nv_cf_eSX2tonc.roa (hash: YHrB9LZc1doQx8FMo5EWouRxMXkXccU8/QjTJjtf9to=)
                          42: jlG9y1XwIb8wc_C_We-qtbjo09Y.roa (hash: tx2ZQ5ic2oGjyxJfXoPm9eCoE4D1ij8/jlq+e5xg560=)
                          43: kR435wmWIR3POPSkhvuwY7LHnyU.roa (hash: P+t8d1X/83Jtvdac/hXKsX74pnVuVk0EELmCtBin0HM=)
                          44: mTzcSCxpm7gYApAoDUjX2gO7n9s.roa (hash: sVKa96WPI4bXLyvj1lNXogTGlDkJL+Tp5ovZB+WR0mc=)
                          45: o4Gyk7pBFZJeOUgE5L-inxNPa7A.roa (hash: CLR/u68LH0TrHvwIdbx1RowqkS1HxEprd7K3aqA/uKQ=)
                          46: p_-F_gZNwSja9HlusE4TYmgaUwY.roa (hash: 9uZH8FSVLCXJ4Mozz5c3Fj+lNnWQV44dFhzKdriybFs=)
                          47: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          48: qN39aaOMkomU1zCwSmoxpvIfwL0.roa (hash: TlUfTrDzoHbERx90NlgB8Jrz6q4viNSJkGRwaRwCIjs=)
                          49: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          50: sOpcD5l7JGKAl6DXgTbksfCxqn4.roa (hash: d8AaRb4f/O/R2QS1RDS0ye9po/yjjLffHJVuvfmDllk=)
                          51: sxCoOQjmxxgwH6aI9s_WrtXuu14.roa (hash: bTkGW/1MFHpv7MRl6T642YhhVQpoIaWD/+3bHqmoib0=)
                          52: u1LOjR3EgK565RLjZFRRNHL-Np0.roa (hash: alCXKITiCiwN2ST2B1hZQDz3KdcIWj1GfF0th4BrEY8=)
                          53: v--KWi9c_gTJTGx4ObZg6igF2lA.roa (hash: A5pOth6AiPSf+BfwZbD8LFkBhTRFY58pXDdLsve2Vm0=)
                          54: xi_f4FtYimJYlSpA8hIODwdqbJ8.roa (hash: DIBj3Ia0347ToIl7beOha+bXqasLfrPIo3dva7tG3LY=)
                          55: yrGe1giYiFqb8KNEn95n_cEAV4g.roa (hash: PqbsR8D4YGwmFWmv31QqoUBTUMq86kqCaK+pMgxowcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:5e:76:cb:32:b2:62:93:73:e2:74:be:24:b8:cb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Oct 26 04:01:04 2026 GMT
            Not After : Oct 27 04:01:04 2026 GMT
        Subject: CN=286fdfa3487b7c8bca83789d050f2c5f9360b923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:94:61:e5:d7:97:12:09:bd:f9:47:17:9d:72:
                    5b:d7:e3:fb:53:d6:7a:36:2b:ed:14:52:fb:d0:a2:
                    19:20:7d:d4:68:47:bc:8d:7c:06:09:12:f2:ec:eb:
                    76:0d:37:8c:28:c0:95:1c:96:0f:5a:9a:ee:25:55:
                    76:f3:bf:f9:8a:62:7a:fe:13:0e:54:b5:4a:da:90:
                    f2:db:27:16:c5:f9:95:61:34:9d:ab:cd:1c:e1:59:
                    4f:39:b0:4b:c9:ba:77:5b:9b:a1:ad:24:09:23:2c:
                    da:26:c2:ab:48:b4:1b:8d:fd:c7:38:39:95:b4:33:
                    91:7b:0c:12:0c:5b:ec:e4:9e:02:1b:eb:6c:3f:54:
                    99:cd:5b:2d:f0:b5:26:ae:d9:bc:9d:41:24:58:eb:
                    65:88:10:e4:93:34:45:a9:e3:72:74:20:98:55:d7:
                    e1:a3:9d:e8:a0:47:56:0e:42:64:1b:ea:02:cf:48:
                    f8:7b:5a:de:a8:05:09:57:21:b1:9f:d6:75:af:a0:
                    c0:35:97:fb:d3:0e:b5:c8:93:df:a5:b2:6f:67:2a:
                    9a:51:e8:c3:84:31:4e:37:6d:98:57:d9:88:d2:d2:
                    47:a4:c7:af:47:be:af:d5:03:6c:a7:45:52:28:ae:
                    9b:0a:a0:24:61:4e:2e:6c:88:02:8e:6b:02:a2:0c:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6F:DF:A3:48:7B:7C:8B:CA:83:78:9D:05:0F:2C:5F:93:60:B9:23
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:c0:e6:47:23:e4:d9:65:6b:ca:f9:6f:15:89:0f:e5:24:
         2e:e1:55:9e:07:bf:40:63:26:84:48:74:2f:76:cb:4d:8b:04:
         6a:01:75:f0:a3:14:5d:92:8c:c0:30:ca:6c:85:4c:5e:60:45:
         f7:a2:89:77:2a:51:aa:91:33:52:0b:ca:4f:d8:40:41:fe:7b:
         0d:b3:e3:22:49:18:15:f7:cb:00:18:ae:f0:4b:00:05:0e:a2:
         ae:76:95:53:ea:e4:f5:ce:f9:38:c2:86:1e:32:1f:17:84:79:
         83:24:c5:03:7f:37:92:39:4f:1d:fa:63:3f:b8:79:c1:b6:ed:
         b6:e6:54:2c:82:1a:48:74:b9:ad:7c:2f:98:b8:cf:64:8b:a7:
         46:e8:e8:55:82:89:d8:10:f1:d0:cd:3c:66:82:62:37:a9:78:
         06:d2:93:77:ef:bc:6f:c4:47:b8:a6:c2:dc:a1:cd:c0:f3:fa:
         bc:50:26:bf:a9:15:b4:4e:b5:d6:e8:49:59:bb:df:4b:b5:fb:
         1f:9f:2f:b1:9d:e1:71:44:94:7a:2e:a7:b6:1b:53:8b:65:ce:
         65:fc:ed:8e:c2:b2:b6:20:89:bc:fa:87:b0:b7:31:44:37:4a:
         7c:cf:f4:c0:4d:58:79:fe:99:13:d1:65:75:98:a5:de:f3:9b:
         7c:60:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:23:01 2026 by rpki-client