Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          O+QCa2zAtmt4DZr3riICbnXUajC6qVPttNUhYEESI+s=
Subject key identifier:   26:23:0E:83:D5:A5:E0:73:EB:33:7A:C6:4B:FB:A3:46:3A:F1:A7:F2
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       01A02AA21FE27B9B021D1C33E867A43005F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1AB1
Signing time:             Sat 22 Aug 2026 18:01:03 +0000
Manifest this update:     Sat 22 Aug 2026 18:01:03 +0000
Manifest next update:     Sun 23 Aug 2026 18:01:03 +0000
Files and hashes:         1: 1jfZW_D7UOXSu39RlXiUyL_tLjk.roa (hash: Wm52sVxYb4B7EnFd3mHTcBpVOHveBj16ZYTfOT8EX/A=)
                          2: 1scAzSfF6-O4qi-AFUEj_37aURo.roa (hash: eTH807xo4Op+ZKawsAc+aiv/dB4TYhJguB/r2EFj3ME=)
                          3: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=)
                          4: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=)
                          5: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=)
                          6: 5OVY2N05yrlacTBsS5Papev7Ih8.roa (hash: x+/SlTukTABXqgeHj+AOrpAeYdoiHaqU4Vr0zHmOuUY=)
                          7: ADU9Ot52SGzefQKh2DGEXePNY-0.roa (hash: V0wapUiJ26KIs+WS34QY65fxOFjUrNBK87fDA6RrJ2c=)
                          8: Cr7MinNZgsKeYbgv62BPtYM3a3o.roa (hash: /4rM42gfBZ7uv4DqkkuBjhcLxWD2JWiaRwOSDEWpqEo=)
                          9: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=)
                          10: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=)
                          11: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=)
                          12: GzFILLIkAaT9aB9CvnWDZTFwbdY.roa (hash: Wm6rCP0d9sgkyPeTHrd7psMD7wjPvGW5jHpasqKACzk=)
                          13: JXVil9SK2gOZO2VUCdiJ4erJUfk.roa (hash: 5M+IegtU9C9Dv8GwPzTg7+JFcFe5YaxpMB8Bze8XLc0=)
                          14: MTFnhdn7CNPhLTQ6eVJvwpV0KbY.roa (hash: Pnvcx+DLpwPze8L9jSYJitChvHCuDl+YE9GqD7EE5zY=)
                          15: M_egcGv360TAH2mrNW0CHAZ-vPM.roa (hash: kx7DcmozyqehG6hYGXDacURCfX5dT5W8fn2SIvlEnKo=)
                          16: UlWbHAAt0Coao4bfiAhi-yGwmhU.roa (hash: bQ3IsR5/D5IYcYHweCs+lcmYy0kCNh7yjDdcFgbStv0=)
                          17: W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa (hash: r/0RiCOSE+WrdRBD5qqcgjI3IcYBeed6dA+B48z6B+E=)
                          18: cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa (hash: ay80hlOU/zsjK/Gj33Njc9A5kUM22amUQKa18P+z+G4=)
                          19: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=)
                          20: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=)
                          21: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=)
                          22: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=)
                          23: jX-4IWGmG4eMlD0i54uclcBT7Oo.roa (hash: fjR22bEWcrZfBSNMZjc/CuGiPhNuJQZ9SlzDLkoJWZM=)
                          24: jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa (hash: nMFW9BQneK7T1fgc0t6oA8jRIcD7rZtWnJMbSrXrhdQ=)
                          25: kE5ha7iXuXmh40z5puHQJl5pgHw.roa (hash: xA+NtCQBZe9jiSdnr5YRreCW0KlTR4JQj8P7BKbr2Aw=)
                          26: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=)
                          27: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (hash: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=)
                          28: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=)
                          29: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=)
                          30: vHpNG066C7qb6w3seYRGvSbcLTM.roa (hash: oOMKXuPYcJhhb1ks0FKSqMbqfUNTbYofrvqb7j5sseA=)
                          31: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=)
                          32: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: JKdrGGw5REySMc2Dw2afmfimPqtHzgsRC4cfKpqTi2U=)
                          33: zPpg6IVM4o-i4jinuCnEdex0dqQ.roa (hash: uIlAbF8c+38K/x3ETxFNnYAiumMWGn5GI23E2fbm2gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2a:a2:1f:e2:7b:9b:02:1d:1c:33:e8:67:a4:30:05:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Aug 22 18:01:03 2026 GMT
            Not After : Aug 23 18:01:03 2026 GMT
        Subject: CN=26230e83d5a5e073eb337ac64bfba3463af1a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:41:70:30:9d:1a:d1:d7:f6:a8:20:8f:42:
                    70:7b:71:41:0b:6b:a7:9f:e4:9d:dd:b1:83:dd:af:
                    21:3a:a8:e1:00:36:c6:46:dc:27:8a:0d:95:c6:c5:
                    54:de:30:4e:c0:ec:99:6d:de:05:81:aa:e1:7f:bc:
                    91:24:b0:eb:a5:c6:a3:30:4b:54:6a:20:90:b9:45:
                    54:d1:da:62:79:d1:f1:1b:07:10:7a:6e:05:fa:b5:
                    6d:94:0f:4b:49:dc:71:46:9b:b0:0d:cd:39:64:66:
                    a6:fd:ee:a3:59:e5:0e:00:39:dd:56:81:65:b9:59:
                    4b:fc:b8:f7:2d:0a:4b:57:c5:7c:d1:e4:97:0a:11:
                    7e:e7:26:ba:f8:d8:44:9d:1f:7e:23:37:2e:3b:b0:
                    ec:c3:48:5a:8d:03:a2:6d:b6:c8:9a:2c:43:bb:64:
                    60:dc:4f:fb:3d:ca:25:33:04:0f:f5:79:12:7d:1d:
                    71:8a:84:35:36:94:82:fa:62:83:56:88:36:ef:00:
                    7f:c0:f0:2e:e8:f5:b0:88:70:96:58:8b:b4:52:23:
                    50:86:3f:a4:10:fd:bd:58:6d:f6:ad:24:3d:de:96:
                    76:a0:98:1a:00:63:41:11:13:1e:31:16:c2:34:3a:
                    71:6c:d8:6f:06:32:a9:7b:b4:b2:85:17:62:60:47:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:0E:83:D5:A5:E0:73:EB:33:7A:C6:4B:FB:A3:46:3A:F1:A7:F2
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:d1:10:f4:7b:93:44:2b:48:c4:cc:6a:e9:a4:87:3a:31:
         aa:95:75:00:d6:df:1d:1a:1a:0d:dd:df:b8:b7:96:7a:3c:ee:
         32:7b:76:4d:69:a7:18:fb:ce:f8:c4:a2:07:c2:61:8e:dc:59:
         b6:be:e7:29:31:ad:3b:d8:e8:6e:cf:a4:66:53:96:f3:bd:c2:
         9a:ca:2d:4b:a4:ed:66:29:57:60:c2:a5:a5:9d:67:55:62:81:
         73:34:de:82:0e:08:59:29:2e:1c:43:0f:a6:44:6c:5c:53:23:
         91:c0:ca:52:e8:f3:36:27:9a:1d:76:90:7c:f6:9b:52:75:94:
         60:1d:85:9a:5d:b0:44:58:43:9e:5f:8e:89:bd:17:88:ac:5f:
         6a:e1:03:80:e6:79:6e:15:51:b7:fe:27:15:86:eb:77:1b:de:
         b8:09:d0:f1:e6:96:54:f2:8d:7b:e5:41:4d:85:fe:53:6f:b0:
         db:ec:b0:07:39:d4:26:4e:69:ac:93:09:bf:95:05:7f:ad:c7:
         5a:17:bd:30:45:37:f8:cf:db:50:5f:54:ff:17:9a:5d:d3:51:
         28:3b:8e:49:77:7a:89:eb:23:d3:6b:b5:9b:2a:07:b8:ce:c0:
         c3:7d:04:73:92:fa:33:00:fe:e3:fe:f5:d7:cf:a2:1b:42:e3:
         9f:92:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:19:44 2026 by rpki-client