Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          uYoySjOBRMhAXlEMNQ0vjXCg7EcSKUh1NPCKdsQ3/j8=
Subject key identifier:   BD:3D:AC:8B:4C:CB:08:62:6F:77:E7:71:C0:C6:25:34:30:58:44:07
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01A089E7B0F9B418B995946724639417615A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1B5D
Signing time:             Thu 10 Sep 2026 06:00:57 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:57 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:57 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1-_wSAB9euFQ6fT7w4DWJ5Xgo5Kk.roa (hash: BjqjTxy1Woefud4gcppujNascH6RjJHEx2c0AzjfX6o=)
                          4: 1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa (hash: XxYQOLtcDO+kKRh93RlmwzW/qtvNS82kdLybB49Wy7E=)
                          5: 3iuK2PePzlzkfIjA6PU7qCf7bWU.roa (hash: jmTVl7eRtiftjiuAnsGPt6gtZDbCLdVGFoxxlHgA3Rc=)
                          6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          7: 8fhRtiu_Y-7BuakqbAP1YnjY4eg.roa (hash: 7RxX4BpwVFrs84OiwF2XdVBqm5xQUd4i65cOFdlTJJ0=)
                          8: 9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa (hash: QpTn0BF+0f7mgbKz+dsPiNhRke1XKcJNUsuUcG4FoJo=)
                          9: C8ZLaFAbyVjIOedw3NULKGBNaHs.roa (hash: o7bLJ4x6imfQVFB8Ci4Xwe9P3Rv1x12r6bmWU8fyebo=)
                          10: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          11: F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa (hash: w95uLEhSRW0HEpsxo2sLSthAa84cXprY24xXtceKquw=)
                          12: GIKRF0nXi7INomLIm1n0MXoVX7g.roa (hash: kHr494+YoPwvcUNQ/4OPxtKZy199ghrNKf/OpsmU2nI=)
                          13: Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa (hash: cGNycfZbTmQsfCD7PYzBfa8+3CZ+9W0RQ36+xTRQr5g=)
                          14: KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa (hash: Y+VyjlDROYbrCdf29xH6G3H2D1QPefe6usrsIsZCitM=)
                          15: L0enPaj_4hnZXqV7ZMEztaTZBC8.roa (hash: uzNqXLX0MMTGTUP5cxjMKgQ19ZYg9VfOrFLtYCvWoxk=)
                          16: LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa (hash: o6FBkRC3i3TODQqiIL4EQ6bdbi9ADeAh/bdI0nc31nk=)
                          17: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          18: QhR_79csT9O5oeIFdHW8gjPKFdQ.roa (hash: 23ArOcO4LB9jNTgcelJzPDcJ4dVoSawShlKbhyVD/Eo=)
                          19: Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa (hash: BOLwzKWftfPH8kNDI+1UZ4UUN8tIZ6CvXDApVSqljyQ=)
                          20: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          21: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          22: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: n2kb2OGOoEC+ELwHzh53Qt8jFlA4w5iYxHxyo5dDFXs=)
                          23: Ss4fVycWbzrbsGfC-UotFuMZAfI.roa (hash: jWq8iYtN0x0FwpUA7Gu/Lr/cnfU6eTDqvTSInxcOStI=)
                          24: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          25: Vkob5ykG1uTUoQxf-Y0lIElf748.roa (hash: rf3qd5Sq7pbldPkOkD+TRHnqHAa77Pp66pn/FP0ieM4=)
                          26: Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa (hash: ImBcIaHYckQlyUn7qD0gyo0OZpqemgaOxC20pRlncvA=)
                          27: ZGRufHjaEOQfZDX946W9j6Kmqp4.roa (hash: 9yXb0jdoscPhoz5VZ5tNsNxnKaSTWuDYouPvk/pE4eQ=)
                          28: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          29: cFl5ywq_13udVfRgQTEhw9bpSjU.roa (hash: TsFLhPPc4CKImjOhB5y40oTij5TztHWmIPHSHN3U630=)
                          30: d1FmpnCLtN9xWz258z_vo0evfQY.roa (hash: 99ktEN8EQTUBIhZ9BGIWGyL3Ti91GsDxlW00ORFmRCI=)
                          31: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          32: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          33: efLppXHlERCKKYaJTde-86Ghjlk.roa (hash: QKED85n+T67n9kk+tVSC2dGP5JLesJDmpO536eK8+nU=)
                          34: gID46NhD6hvl2nv_cf_eSX2tonc.roa (hash: YHrB9LZc1doQx8FMo5EWouRxMXkXccU8/QjTJjtf9to=)
                          35: jlG9y1XwIb8wc_C_We-qtbjo09Y.roa (hash: tx2ZQ5ic2oGjyxJfXoPm9eCoE4D1ij8/jlq+e5xg560=)
                          36: kR435wmWIR3POPSkhvuwY7LHnyU.roa (hash: P+t8d1X/83Jtvdac/hXKsX74pnVuVk0EELmCtBin0HM=)
                          37: mTzcSCxpm7gYApAoDUjX2gO7n9s.roa (hash: sVKa96WPI4bXLyvj1lNXogTGlDkJL+Tp5ovZB+WR0mc=)
                          38: p_-F_gZNwSja9HlusE4TYmgaUwY.roa (hash: 9uZH8FSVLCXJ4Mozz5c3Fj+lNnWQV44dFhzKdriybFs=)
                          39: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          40: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          41: sxCoOQjmxxgwH6aI9s_WrtXuu14.roa (hash: bTkGW/1MFHpv7MRl6T642YhhVQpoIaWD/+3bHqmoib0=)
                          42: u1LOjR3EgK565RLjZFRRNHL-Np0.roa (hash: alCXKITiCiwN2ST2B1hZQDz3KdcIWj1GfF0th4BrEY8=)
                          43: yrGe1giYiFqb8KNEn95n_cEAV4g.roa (hash: PqbsR8D4YGwmFWmv31QqoUBTUMq86kqCaK+pMgxowcs=)
                          44: z6JfI-sh2bNRE1whfbGOorsLuCw.roa (hash: 2ZqxwsXOn5MxMkpYtNE4aWeK6vzR7/Jj0bboBJ14PZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:b0:f9:b4:18:b9:95:94:67:24:63:94:17:61:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Sep 10 06:00:57 2026 GMT
            Not After : Sep 11 06:00:57 2026 GMT
        Subject: CN=bd3dac8b4ccb08626f77e771c0c6253430584407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:d7:6a:14:ec:d0:2f:5b:04:ec:a4:9d:94:
                    a5:25:78:61:23:68:b0:bf:0d:f1:18:10:d8:81:79:
                    2d:a5:ef:be:f3:7b:f0:53:2b:35:3e:c9:f4:0b:30:
                    fa:66:74:83:fa:a7:2f:32:0c:7b:54:ca:c0:5a:86:
                    df:1f:4c:c7:ae:46:a9:f0:d0:f6:0e:35:21:a6:32:
                    1b:ac:4a:b7:44:b4:be:90:b5:68:12:54:b7:37:7d:
                    a0:23:7b:d4:e0:03:6d:37:d2:9f:aa:d7:fe:c8:bf:
                    b0:62:94:c4:c8:0f:0a:7a:9f:3b:e3:ca:1c:64:22:
                    9a:8b:15:e7:92:d3:ad:14:40:a5:74:79:90:48:f1:
                    20:7b:3f:10:ff:04:71:e4:59:28:6a:f6:36:27:9b:
                    b9:80:67:15:4d:8a:7c:30:d8:d3:70:ae:42:bd:2a:
                    3c:51:5c:e8:29:14:e9:cb:98:90:a1:b3:48:d5:6d:
                    0e:4f:90:3b:55:b8:1e:4e:dd:78:7b:71:65:bc:37:
                    21:fc:4a:aa:11:20:37:0c:e6:30:78:57:70:ba:49:
                    94:05:8b:85:3a:6c:73:25:cf:d9:f1:43:db:b0:79:
                    76:2a:db:b6:25:95:00:1e:d3:a3:28:a4:e1:46:db:
                    37:7d:78:58:25:f6:0b:cc:5f:36:81:f6:2b:f0:38:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3D:AC:8B:4C:CB:08:62:6F:77:E7:71:C0:C6:25:34:30:58:44:07
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8a:1f:30:cc:41:c5:0e:b1:85:59:a2:02:3b:42:33:8b:8c:
         cd:fb:bb:45:3b:60:22:c6:14:03:11:66:9c:bf:bd:88:b4:78:
         5b:fd:a6:85:d4:df:a3:68:9d:32:b4:24:85:f1:64:7f:b3:88:
         7f:af:30:61:53:97:57:3c:eb:8d:70:48:16:64:1e:0f:d2:17:
         7b:f9:0a:fb:95:2f:12:41:fa:78:b8:f5:d2:d4:42:b3:cd:19:
         f1:3e:81:f3:d1:7f:13:63:85:db:27:73:3b:a2:0d:39:22:2c:
         63:23:fe:a0:f6:3d:23:02:2a:11:3e:f4:77:76:6d:8e:76:0d:
         d9:1d:fe:96:b8:d5:53:e0:d9:9c:ce:6a:6d:60:9a:4c:13:5d:
         5e:05:f0:d5:67:a1:c9:07:61:c7:3d:23:7b:5e:84:ad:11:3f:
         e6:ed:65:66:66:11:04:65:26:2f:70:df:65:23:38:93:81:24:
         ad:26:6a:8d:7b:e6:6a:40:05:d3:7e:37:2e:95:63:94:2e:22:
         ef:38:f8:a5:12:e6:2e:60:a9:32:23:3e:73:ea:f0:34:18:f4:
         19:9d:6f:d1:92:ec:68:e1:ba:27:45:c7:a9:27:6c:27:cd:07:
         44:1d:87:d0:53:68:8e:6d:26:08:b6:24:ff:e3:88:1c:9f:f2:
         cd:81:83:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ57D5tBi5lZRnJGOUF2FaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwOTEwMDYwMDU3WhcNMjYwOTExMDYwMDU3WjAzMTEwLwYDVQQD
EyhiZDNkYWM4YjRjY2IwODYyNmY3N2U3NzFjMGM2MjUzNDMwNTg0NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDXahTs0C9bBOyknZSlJXhhI2iw
vw3xGBDYgXktpe++83vwUys1Psn0CzD6ZnSD+qcvMgx7VMrAWobfH0zHrkap8ND2
DjUhpjIbrEq3RLS+kLVoElS3N32gI3vU4ANtN9Kfqtf+yL+wYpTEyA8Kep8748oc
ZCKaixXnktOtFECldHmQSPEgez8Q/wRx5FkoavY2J5u5gGcVTYp8MNjTcK5CvSo8
UVzoKRTpy5iQobNI1W0OT5A7VbgeTt14e3FlvDch/EqqESA3DOYweFdwukmUBYuF
OmxzJc/Z8UPbsHl2Ktu2JZUAHtOjKKThRts3fXhYJfYLzF82gfYr8DiRZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL09rItMywhib3fnccDGJTQwWEQHMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4ofMMxB
xQ6xhVmiAjtCM4uMzfu7RTtgIsYUAxFmnL+9iLR4W/2mhdTfo2idMrQkhfFkf7OI
f68wYVOXVzzrjXBIFmQeD9IXe/kK+5UvEkH6eLj10tRCs80Z8T6B89F/E2OF2ydz
O6INOSIsYyP+oPY9IwIqET70d3ZtjnYN2R3+lrjVU+DZnM5qbWCaTBNdXgXw1Weh
yQdhxz0je16ErRE/5u1lZmYRBGUmL3DfZSM4k4EkrSZqjXvmakAF0343LpVjlC4i
7zj4pRLmLmCpMiM+c+rwNBj0GZ1v0ZLsaOG6J0XHqSdsJ80HRB2H0FNojm0mCLYk
/+OIHJ/yzYGDOQ==
-----END CERTIFICATE-----