Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
File:                     7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft (raw, json)
Hash identifier:          Xk6NTNgQRP1qfHch91oLLdWBtvp3dZulqbKYyUQjRmY=
Subject key identifier:   D7:38:19:76:B6:37:59:AE:65:D6:E5:DC:94:9A:6D:7C:37:95:01:34
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Certificate issuer:       /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial:       01A1DBA667B744F91238D3A2B150B7896AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
Manifest number:          A8
Signing time:             Sat 14 Nov 2026 20:01:18 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:18 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:18 +0000
Files and hashes:         1: 0GU6HRl6uDQzZNkILtqUb2kfu2U.roa (hash: KLCli2poPJQ3DchFf5DZZV757vL0eXcKSaecpDhu9j8=)
                          2: 18FiEiCxgYRp7mh77aYt3dnx5vE.roa (hash: wyB2pZLF8WVSc86WSg9prhicP902AAZNpbfyBaGfM2Y=)
                          3: 7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl (hash: R0Lm+TrxoJF5c7juHeAwG3qYYuPzqeMt7vo5nogMPkA=)
                          4: Jdvr0pOlTbqtvdte8z_DkDkyczY.roa (hash: amg0+pr/DB8XzXgrSXF6K+o2fm6qdJrZPiGxNalnS4g=)
                          5: LI9_2TlZ4QuxRkL22QvP8SOKKEk.roa (hash: yZPGI5ixH94elKMLKB+a0mwkSyNRngSslFaHqUJEz/g=)
                          6: MdpjDIm-2qJ2wc2ewfuULmFo-2A.roa (hash: ecX66/p8Q/4h+j2cwF0f4uOvGUmWXMDsNm+pWjXjrqo=)
                          7: NxsJzkhsWz_RyXSPZyBpukFfitM.roa (hash: Rfv8fCcF2Us5IBM1aVUuN//vRZSaCBPlao/y/Bt5KrI=)
                          8: SVumR0eZs32hPqbBjUR4HDm8fAo.roa (hash: DeiP7EKKHH59wJlo6Dh3tVePScpcWUXWWtOb3hiHuns=)
                          9: WhA6F6wBu3d8eKSWxWRHv9cuHJA.roa (hash: k6+/vKAPaJ0sFipUMk81Re8Qm/yMiMqYphPb+MhZOZY=)
                          10: ZX6lsgmqWqfBbvdIZVAv-LkHXjw.roa (hash: paG7reljn12FATwxcI7xrDVRAlmHueXZGfRZ/kgqoKU=)
                          11: hbykg__8f6GXjFLIzKyMaJMyn7c.roa (hash: 1KqYWBw9/FhnOFQv5caFDqVWOd1aKgqEH62TWf3ifEc=)
                          12: jb8Tvu-x7ca2UcmH3_LPMilszLc.roa (hash: OlkXDSnelXREdmtqy5ujR0YEOkVjksdthFMCcz2iNqk=)
                          13: jfQb6zfIsTuVcK24GSMN5KDVNso.roa (hash: fIPebUO2/Yv2uUljqvW7HoPvahk+P47Az+PpFrqv34E=)
                          14: jtNMbctmoeTy6sd9LST64n6P_dk.roa (hash: YY03jOdZendFXpCgqi0pAEkPVn3PnU+/LyoTLk3wiFA=)
                          15: kqoLM3jR_K8o0bze2VbTPUJCwvo.roa (hash: Zvd7nehvUQlRTFTu/+DmYYdD6k/Y7Dtvol//OQ+w+fU=)
                          16: rKGPDDgAmm0jy0GhkccjKLiXojs.roa (hash: /ngy0l+rqctd6Mbdou0y+Yjl9wuMb3tI7k2GAfzkDvE=)
                          17: t-UGZFzwAaCjLNyuz1bGpvLd_6Y.roa (hash: e8yJ8vA9csLBL9fXV0svbNdPk2NABIuW0KFnXDTtmZw=)
                          18: t4hla4KBZW_u3S9aDX40D5FoIpE.roa (hash: cdVBPBpDY5vSc5dSCcL32dwfLqjDbvXZ/0HnEK04MV0=)
                          19: uDY65mPa3CA0ATuNW_UofUlOVHo.roa (hash: MOx97DXQM1veFBD3X3uPh9KTsc2aCNs+DfWLpHvfvyc=)
                          20: yK1xGhHjYq20srsKk-V1Fp0UCfM.roa (hash: e/mHS+VHuogPTbpQsUdbxbwiDJ0d02zHVkGZtZUlfh4=)
                          21: zA4FobWZmNIMqiu8CPh_wr1WP94.roa (hash: +95GZYZ2/hK0vl8jQ38dHcm0uFB9GBRLOhYYtIWjRiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:67:b7:44:f9:12:38:d3:a2:b1:50:b7:89:6a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
        Validity
            Not Before: Nov 14 20:01:18 2026 GMT
            Not After : Nov 15 20:01:18 2026 GMT
        Subject: CN=d7381976b63759ae65d6e5dc949a6d7c37950134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:f9:d3:8e:4c:ae:be:a2:82:7e:3b:c4:b6:
                    23:3a:e2:33:a3:92:af:a2:f3:ea:b2:e1:38:0e:65:
                    3f:31:ae:00:de:26:49:a2:49:c5:70:83:e9:b6:f2:
                    ea:f6:59:32:f9:5e:91:71:50:01:60:83:ba:cf:4e:
                    39:c6:a4:2a:fd:06:95:c4:ba:cd:c4:63:bd:d4:50:
                    59:45:9f:c1:a7:85:b7:aa:e5:b1:81:68:20:bd:eb:
                    f3:43:50:43:b4:c4:a2:3e:3e:9f:18:24:b7:a0:ed:
                    3b:2c:b5:78:12:f4:8e:14:01:36:01:e3:08:6f:57:
                    c3:4d:f0:df:cd:2d:42:21:4a:26:ad:54:b8:a7:c7:
                    0e:31:13:18:e1:13:d6:ed:a7:c7:47:c1:45:24:15:
                    af:2b:bc:c4:8e:8a:c0:6d:bd:f2:04:cb:a1:05:40:
                    ed:20:57:a3:37:25:00:32:b9:61:53:e0:fd:e5:ca:
                    ce:65:58:78:fe:a7:a7:fc:f6:bc:d2:7b:35:44:17:
                    9b:eb:73:bf:d0:be:3b:ec:ef:6a:42:ff:26:55:4d:
                    64:9a:ac:53:69:1c:79:cc:34:5c:ca:80:21:d9:ba:
                    15:4f:2f:9d:b6:8a:93:56:aa:0d:44:c9:92:7c:fd:
                    7d:54:9a:c1:6a:0d:7a:4a:63:50:da:a6:8f:a9:1a:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:19:76:B6:37:59:AE:65:D6:E5:DC:94:9A:6D:7C:37:95:01:34
            X509v3 Authority Key Identifier:
                keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:c9:38:66:72:fc:37:cf:46:10:af:8d:e0:5f:d5:85:e4:
         33:67:5c:13:1f:7a:d4:0e:6c:9c:be:d8:5d:78:d1:ce:b2:30:
         57:e3:18:5f:ad:32:4a:d1:09:e1:5d:e7:e0:6b:62:8f:07:e2:
         77:00:af:3e:f5:36:e6:95:3a:b9:2b:8a:eb:3f:71:41:3c:ab:
         9a:5a:60:2e:ef:c6:a7:49:56:f9:b3:b1:db:ad:79:a1:77:88:
         e6:bc:8f:f5:98:97:5b:d8:65:d0:99:e8:f1:22:ca:5d:00:71:
         b0:24:7a:87:d4:4b:46:aa:db:c3:9d:0a:72:23:3b:ea:0c:c3:
         e3:1a:6d:9a:a4:c5:b3:28:9d:12:29:76:e4:69:04:03:d1:be:
         0d:f2:eb:d1:1a:6b:c8:1a:51:1c:e9:40:05:76:de:4d:77:59:
         32:e8:34:4b:cf:6e:9d:77:80:39:a7:bd:66:e4:6a:88:46:b4:
         5c:4f:03:8e:bf:47:f5:32:73:10:b6:05:4b:9d:27:08:14:33:
         ec:87:5e:46:81:67:74:76:5e:18:64:16:5e:0a:ad:13:b4:4b:
         d8:de:42:5b:41:d4:35:df:db:64:c6:d6:f5:43:44:93:d5:68:
         45:52:9a:0e:9d:30:fd:d1:df:07:39:0d:69:8f:50:ab:d8:64:
         c4:96:61:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbpme3RPkSONOisVC3iWrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjM2YjI0MzU2MDM0NjA1M2JjNjBjZWQ0ZTk4YWE0OGVh
MWEwNjMwHhcNMjYxMTE0MjAwMTE4WhcNMjYxMTE1MjAwMTE4WjAzMTEwLwYDVQQD
EyhkNzM4MTk3NmI2Mzc1OWFlNjVkNmU1ZGM5NDlhNmQ3YzM3OTUwMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCD5045Mrr6ign47xLYjOuIzo5Kv
ovPqsuE4DmU/Ma4A3iZJoknFcIPptvLq9lky+V6RcVABYIO6z045xqQq/QaVxLrN
xGO91FBZRZ/Bp4W3quWxgWggvevzQ1BDtMSiPj6fGCS3oO07LLV4EvSOFAE2AeMI
b1fDTfDfzS1CIUomrVS4p8cOMRMY4RPW7afHR8FFJBWvK7zEjorAbb3yBMuhBUDt
IFejNyUAMrlhU+D95crOZVh4/qen/Pa80ns1RBeb63O/0L477O9qQv8mVU1kmqxT
aRx5zDRcyoAh2boVTy+dtoqTVqoNRMmSfP19VJrBag16SmNQ2qaPqRpl0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc4GXa2N1muZdbl3JSabXw3lQE0MB8GA1UdIwQY
MBaAFO3zayQ1YDRgU7xgztTpiqSOoaBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUt
N2NiMmZkMjMyY2NjLzEvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUtN2NiMmZkMjMyY2Nj
LzEvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwzJOGZy
/DfPRhCvjeBf1YXkM2dcEx961A5snL7YXXjRzrIwV+MYX60yStEJ4V3n4Gtijwfi
dwCvPvU25pU6uSuK6z9xQTyrmlpgLu/Gp0lW+bOx2615oXeI5ryP9ZiXW9hl0Jno
8SLKXQBxsCR6h9RLRqrbw50KciM76gzD4xptmqTFsyidEil25GkEA9G+DfLr0Rpr
yBpRHOlABXbeTXdZMug0S89unXeAOae9ZuRqiEa0XE8Djr9H9TJzELYFS50nCBQz
7IdeRoFndHZeGGQWXgqtE7RL2N5CW0HUNd/bZMbW9UNEk9VoRVKaDp0w/dHfBzkN
aY9Qq9hkxJZhZA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:25:51 2026 by rpki-client