Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          FEAbsExrGhznqv4lsgRvH9VerIC56KFN4QG6seHbflQ=
Subject key identifier:   DE:83:6C:A2:19:67:27:2C:26:61:66:D6:F7:D7:B7:31:8A:21:F4:85
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       01A1212EBD03628082564E8AE9F62C48B7DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1B3D
Signing time:             Fri 09 Oct 2026 15:01:13 +0000
Manifest this update:     Fri 09 Oct 2026 15:01:13 +0000
Manifest next update:     Sat 10 Oct 2026 15:01:13 +0000
Files and hashes:         1: 1scAzSfF6-O4qi-AFUEj_37aURo.roa (hash: eTH807xo4Op+ZKawsAc+aiv/dB4TYhJguB/r2EFj3ME=)
                          2: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=)
                          3: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=)
                          4: 43_ZJ3k-TiSjVFeCdb58fosa2us.roa (hash: TUQa+PGydwMlwxuWRcsskqreleLLr+fkGX9oob/3iV8=)
                          5: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=)
                          6: 5dkqS1kOogdDjOVpwAfLimpJt5w.roa (hash: 4rpahEdjqfHI+J8PiOnxP0jGqurgzE3tQ8tvvK8E+LI=)
                          7: 847QYcUP5hjUb-CFADZoXL-2EAA.roa (hash: 7A5j1ayEySWaguXhxHGqbzXvWLgn70DxblNYwzAZz1k=)
                          8: ADU9Ot52SGzefQKh2DGEXePNY-0.roa (hash: V0wapUiJ26KIs+WS34QY65fxOFjUrNBK87fDA6RrJ2c=)
                          9: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=)
                          10: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=)
                          11: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=)
                          12: GzFILLIkAaT9aB9CvnWDZTFwbdY.roa (hash: Wm6rCP0d9sgkyPeTHrd7psMD7wjPvGW5jHpasqKACzk=)
                          13: MDrt79mC6kMu5R27ERe_p3PXA7g.roa (hash: Y6CbpK/IdrhzJrPxsU/2B/u64jcq8RAQZg4LE13g3AA=)
                          14: Usfze6DAgiW4aZ17c8EB3ewbVek.roa (hash: I8qGnxGlHPoZhKeP1eXsLTEpNFnKkEsZVS7uYH3u3VA=)
                          15: W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa (hash: r/0RiCOSE+WrdRBD5qqcgjI3IcYBeed6dA+B48z6B+E=)
                          16: ZUQyPtsQSG2-82dh1ccUQgyaC3U.roa (hash: F5s94k1GhD0QSyMs8GhlHlBwNgpTYkiuTjgDbM5XTDc=)
                          17: cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa (hash: ay80hlOU/zsjK/Gj33Njc9A5kUM22amUQKa18P+z+G4=)
                          18: dGXWYRF6cbb2REOzdNYY1MAp4dw.roa (hash: JZ8n7AwgrR1TnNLWkOpomj/B9o6sWmLA0i5q7ytbGDU=)
                          19: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=)
                          20: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=)
                          21: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=)
                          22: jX-4IWGmG4eMlD0i54uclcBT7Oo.roa (hash: fjR22bEWcrZfBSNMZjc/CuGiPhNuJQZ9SlzDLkoJWZM=)
                          23: jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa (hash: nMFW9BQneK7T1fgc0t6oA8jRIcD7rZtWnJMbSrXrhdQ=)
                          24: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=)
                          25: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (hash: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=)
                          26: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=)
                          27: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=)
                          28: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=)
                          29: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: g8hzankRuJNNjEwxLy3OVRSazF+GftX1cqF55rr60L0=)
                          30: zAc0y9f47MhF7tmtrfVqaAD-nlg.roa (hash: iBJqOiR1P3Y+3+FsFM/Tj/uBiIpz68n/JO7l/j8Ihrk=)
                          31: zPpg6IVM4o-i4jinuCnEdex0dqQ.roa (hash: uIlAbF8c+38K/x3ETxFNnYAiumMWGn5GI23E2fbm2gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2e:bd:03:62:80:82:56:4e:8a:e9:f6:2c:48:b7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Oct  9 15:01:13 2026 GMT
            Not After : Oct 10 15:01:13 2026 GMT
        Subject: CN=de836ca21967272c266166d6f7d7b7318a21f485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:0d:2d:bd:46:74:8a:dd:2e:7e:64:bd:02:
                    87:ef:8e:1a:be:2a:78:62:4e:3c:d1:df:1a:8b:53:
                    c8:52:40:62:58:99:b1:7c:e1:d7:03:70:98:60:45:
                    61:10:fc:c8:b4:12:82:90:df:b9:86:73:9e:ed:ec:
                    f9:9a:b0:27:ff:96:af:0f:ab:a4:b9:62:60:c6:8b:
                    5e:e8:ee:15:df:f5:fc:2c:88:7c:dd:80:e1:7e:13:
                    97:d0:d9:9e:a6:61:d5:c0:47:1c:29:f8:56:c8:71:
                    6b:5b:ed:cd:fc:6c:e2:40:aa:d9:38:5d:f4:67:8f:
                    77:09:d8:39:4f:52:ad:08:a4:d3:3f:0f:4e:d0:d8:
                    a3:85:4b:dc:9c:2d:c5:6c:92:4b:d4:d4:5d:53:4d:
                    3d:1d:c6:f3:db:2f:b0:b7:54:f5:c0:52:0c:eb:7f:
                    ff:77:03:4a:32:92:37:9b:cc:1c:ba:3c:ff:1a:e1:
                    93:5d:bb:02:b2:ac:4c:9a:66:b4:c7:20:47:91:58:
                    ae:f9:cb:80:a0:cb:4f:fc:b6:14:69:a2:03:37:9c:
                    a2:9e:5c:02:ae:6a:02:d8:55:66:37:92:76:84:9f:
                    fe:e2:4d:c3:3e:f4:f3:c1:84:f6:93:4a:01:e7:05:
                    96:bc:e3:14:eb:06:8a:20:7d:bf:7a:24:c6:1f:dc:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:83:6C:A2:19:67:27:2C:26:61:66:D6:F7:D7:B7:31:8A:21:F4:85
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f7:e3:44:da:9f:c9:35:30:9a:2b:3a:ab:a2:e0:71:8f:8c:
         23:d4:1f:ff:d2:f6:9e:9a:f1:75:fe:a6:da:6f:f8:20:b2:a4:
         fd:4b:55:f5:aa:2c:85:87:fd:11:f8:ba:1d:ea:88:6d:8b:0e:
         80:7a:05:1f:eb:2d:fa:cd:fd:d3:d3:c4:4a:7c:31:03:bf:f8:
         25:a0:a4:dc:4d:94:b0:43:7b:21:28:39:67:6f:53:ae:75:d1:
         84:45:a3:9d:fb:21:6e:bc:4e:6e:76:ad:d3:0b:5a:99:dc:7f:
         db:49:f5:65:00:31:ca:8d:ff:8e:de:96:97:ec:e2:e9:bc:e8:
         bd:5d:2d:f9:2c:06:f7:26:62:c4:ef:d7:b2:c7:33:4e:b8:26:
         19:41:f8:2f:ee:7d:e4:4e:0c:1c:34:fd:66:5f:81:1e:4f:fe:
         fd:95:f0:5c:49:16:1a:ec:a2:c9:85:cd:07:8c:7f:e1:98:6f:
         1f:5f:f8:c8:8b:d5:97:2f:55:26:bf:79:08:91:ae:c5:3f:d8:
         86:78:5d:7f:6c:65:ab:43:34:e5:22:6d:8f:b9:b1:3b:a8:47:
         f5:4a:85:9f:6f:23:b1:a2:49:bd:bf:30:44:c5:7b:c4:85:8f:
         97:45:b4:73:cc:02:2c:54:2e:8e:42:8c:62:2e:2a:12:5c:d3:
         78:ab:04:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhLr0DYoCCVk6K6fYsSLffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYxMDA5MTUwMTEzWhcNMjYxMDEwMTUwMTEzWjAzMTEwLwYDVQQD
EyhkZTgzNmNhMjE5NjcyNzJjMjY2MTY2ZDZmN2Q3YjczMThhMjFmNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjANLb1GdIrdLn5kvQKH744avip4
Yk480d8ai1PIUkBiWJmxfOHXA3CYYEVhEPzItBKCkN+5hnOe7ez5mrAn/5avD6uk
uWJgxote6O4V3/X8LIh83YDhfhOX0NmepmHVwEccKfhWyHFrW+3N/GziQKrZOF30
Z493Cdg5T1KtCKTTPw9O0NijhUvcnC3FbJJL1NRdU009Hcbz2y+wt1T1wFIM63//
dwNKMpI3m8wcujz/GuGTXbsCsqxMmma0xyBHkViu+cuAoMtP/LYUaaIDN5yinlwC
rmoC2FVmN5J2hJ/+4k3DPvTzwYT2k0oB5wWWvOMU6waKIH2/eiTGH9yLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6DbKIZZycsJmFm1vfXtzGKIfSFMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvfjRNqf
yTUwmis6q6LgcY+MI9Qf/9L2nprxdf6m2m/4ILKk/UtV9aoshYf9Efi6HeqIbYsO
gHoFH+st+s3909PESnwxA7/4JaCk3E2UsEN7ISg5Z29TrnXRhEWjnfshbrxObnat
0wtamdx/20n1ZQAxyo3/jt6Wl+zi6bzovV0t+SwG9yZixO/XssczTrgmGUH4L+59
5E4MHDT9Zl+BHk/+/ZXwXEkWGuyiyYXNB4x/4ZhvH1/4yIvVly9VJr95CJGuxT/Y
hnhdf2xlq0M05SJtj7mxO6hH9UqFn28jsaJJvb8wRMV7xIWPl0W0c8wCLFQujkKM
Yi4qElzTeKsEAw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:13:38 2026 by rpki-client