Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
File:                     xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json)
Hash identifier:          olubo4WloNLBTwerbEkDUkcVWQ71bGADjeW/ya/EBaQ=
Subject key identifier:   65:91:BA:45:9C:3E:5B:5D:B8:0E:8A:E8:4B:1A:38:0A:BB:2B:47:D8
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       01A1DDCBB4134BAA73003C4F8157D8DC9F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
Manifest number:          04CF
Signing time:             Sun 15 Nov 2026 06:01:16 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:16 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:16 +0000
Files and hashes:         1: 1-DD4o6xbuV6samukDs3vaP8tu6k.roa (hash: 7AU6fV8RAb68tAatAXOQGyf+DldTsJty373d6zKIAZc=)
                          2: 1-eFVKmGWJEdXxYxER_6NTgHg9nM.roa (hash: UWlmQISqK1Q3Nfe8AMftm7uDs9PdmCWhPYuq7XWFlJc=)
                          3: 1OK4aI4lxfRP_eKM46SeYukSIsI.roa (hash: XhpM1Qnz1pgC+nFBf4Pdgsfp6+CcaI13FUqYP4l5UT8=)
                          4: 2-ObHOSAvUZejEI4LOSazZywuO0.roa (hash: y04O8UiwwV/C1kllIfIubo9ZZMlwVCF4kFfmhnKuMM4=)
                          5: 2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa (hash: 7g2yMNDEh/3UCmJMu0HEy/ij+vuN812wmv5+67aeiXQ=)
                          6: 5t6PTadZE43Euve3C6nmqOiwrAA.roa (hash: 93vF8Zus7evIMnuxiFHayEmayIrMaA5Qn+QRMO2w3NU=)
                          7: 7E96DTfT004BumK2TWn6X-KStr0.roa (hash: 4dVQ5tEe28gAbBR2YECy/CnG4r5KNVR2jJdh36ss1Ro=)
                          8: AUJBwqUEGRl5pOinQQhewx3XNN4.roa (hash: 00r5IYJwyUKYgINfARqOjf3C3sp+DUhl/0cWO2KBAGQ=)
                          9: FdFBOG_czA7j6v6Y4dm7gddEJ7Y.roa (hash: 9YtYGIO+vZ5T2hyxv7HeDob3cHulk/JcKTCyZ2ktJl0=)
                          10: GLzvmrFZwtHFe9Z1yEG5XD0OvBw.roa (hash: QOv5YSca4ZcldTa0HFwimRbho38o3TvS8gmdTUQXDWI=)
                          11: HxhyebpoISLkTNvAN26qyvo2lmU.roa (hash: r7EULTQPIgeF2nZVGpXyKwYLuTpNhfprlRs+/lVLlTk=)
                          12: MEpnn_UIBaXHk3JMf7tw8C-sp0A.roa (hash: +buMoz8blTj/Jno2gmUOhshJfC2X8Bq4gZI/d0LapjU=)
                          13: NxfGjnYv0X5TZiVtdmRazkTCJKU.roa (hash: 2F7nVhKM/Vy9+cZwRIilURDoC5MPqcm98uuB2mAsMEE=)
                          14: ONAhF68kzovl__TiZAEXKrn9kng.roa (hash: dNIX8mLNXeOy+G95aMHlNkXPy77pqitRpC6n3Ixg9Ug=)
                          15: Q6caSqrd8P2RoWwdK-Fli6nzx1E.roa (hash: n8DKy+MaJq5/+1WDyrmoZQNGAU9+RaPzqYYWTqwKXkI=)
                          16: Spi55eI2JrifMv5ym0HwLqyglo8.roa (hash: Js2piaBVieot3w/NY7INh7FCYo3taWHPYAVu8oowvZc=)
                          17: ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa (hash: mbBMJSTyfI2VzBuWzMkS287FyWqD5btpEmqCqBM0tFM=)
                          18: _VYOUpqv4o4joYaBxdO3F4bAoRg.roa (hash: tHDLHpXhmtOqKAjh5AEdbcavLeB1OGgUYiTAMnUaTDk=)
                          19: dQmrc2nZuuJy6Aymy-Tf7oYZxRk.roa (hash: LO9nmR28aOPkgvny3ve66xJHuFE8oY1t9GbJIa1BiJk=)
                          20: gEZlw9k_VPv8GbA7WWzqaTy-BMI.roa (hash: Lv/SG4mgPTraUQbE/pWdnazB2KTWa/TOwivQEs3O12Y=)
                          21: gwpdq_NkP7xGLzmZAueCQIGLNMM.roa (hash: Zzjd6w649CZmKiqH/d7WSYa+l7hvrSIPU7guX3LLEFs=)
                          22: hcYPZ59WZi-anbRfSvSr8-J35v4.roa (hash: Y4dWvIarXCDOVHtCIvzKVilrHcqHEyC2CFxqeWiN97Q=)
                          23: iR63CY1kK3TiPhYx6WEO-yojkgY.roa (hash: yNqWBZbEljIAfAFMt1cH42zOzS6vcf4m1YoQHlDtmc0=)
                          24: icij8tzbCB1q5s1zQochnbGKB_k.roa (hash: 5ILc/a0dy416laIUvkxzERmHvyyFM6HRRoVjgXd6PRU=)
                          25: jAlspVhsLbiGMlpNROg-gDmQVcU.roa (hash: lJl5x7/MJSFqX0QAPfTwxLsZfHEp37/BIM0tRwHSWCU=)
                          26: kkdrwvtIm67mYRzUq0YY24XrUnQ.roa (hash: RflwSuE6iPYXKTGfn+ZXNNVA1p+hYP+EDtyv0xx/9xg=)
                          27: lIu0H0yuC3-BywTkSb56YA1zcUs.roa (hash: 3DBYGsn6K7uF1Bw9p2Jse1TYdY1cQKyXCA9E5NJekWw=)
                          28: mDxqVz7IppCgvOdtR7DjC7b9ypI.roa (hash: ay9aW1CuP8m9lxlqxiHtvKKFTkPdf9+ts1KUQSE2mIg=)
                          29: mU7XyF7L0DmrF8731YYYro6-uEg.roa (hash: gcneQESt75PGToGMlKl2Chs6hxc818rF/uTrFSCFX+M=)
                          30: n98z2qle9j9RoGcLrh06bUNoVZY.roa (hash: CBtwp7UwHlaVOr8fW2fX58/bDbCTIdB1ZHIKVtTlbvY=)
                          31: nMRk07dWYA4PNPWdy4_OneiQcnI.roa (hash: gaGvhwXNlPpT5FkktcjaXwA95hRcq8jNbzWzYSh3XX8=)
                          32: p4WvNDQ3Z0bJaFCTZO5FxYPeDjA.roa (hash: kAMjQBMCevRJPQ3xQ3upCSjuH0vkRwCESyxAvVo8NDI=)
                          33: v9u6c1G3uDUBNBW72AIeQsbMSkU.roa (hash: cSw29uaRCfhlXcjTUk/oJ6tL7PSBGFC6VZcRPpBUoGo=)
                          34: vNvu3CipEQ22NPrTCm5toxcdUV4.roa (hash: js4t+SXfMQKXRL4QtWfYNg6zeuXvSb2Q6gaWblLMLx0=)
                          35: x-kTaEAESwYmH0KJW_2H7OzcjCk.roa (hash: Bowt6kjqLi/RQZI6rUBP3F86k03YT2NTbSXMID97UJY=)
                          36: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: lpWyNc/k2/DaZZS1BqdtF6nwaoBaHR/b1BXydLGKrdk=)
                          37: yC8o0t5UDnNXRm6QTNFQTnpxQD8.roa (hash: eCtoDPjAs6jJBhNNGbAO6VKk9WUzDPJ5D+MNjP1PPM4=)
                          38: yXSxy-Ud5hpYhDudle8jqsHgiLk.roa (hash: bQr1kj0qxfUykyK39RyOmaCXTRaX3QEOCZ9gmcczZvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:b4:13:4b:aa:73:00:3c:4f:81:57:d8:dc:9f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Nov 15 06:01:16 2026 GMT
            Not After : Nov 16 06:01:16 2026 GMT
        Subject: CN=6591ba459c3e5b5db80e8ae84b1a380abb2b47d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:2c:8f:03:99:e4:a3:df:b2:ae:33:03:ac:
                    7c:b7:f5:1a:9e:28:16:c5:17:5d:8f:8a:f7:dd:b9:
                    a9:c2:ba:87:a7:06:6e:1a:ca:13:37:2c:10:eb:ae:
                    d9:96:10:7a:93:6c:5a:e2:54:31:ed:b6:8e:9d:c5:
                    2c:e2:44:3f:09:b2:71:cf:83:24:da:a8:9f:dc:ba:
                    89:ad:5a:e1:31:bb:dd:4c:fa:cf:ae:1a:a3:cb:77:
                    02:91:3b:0f:ef:5c:7f:b0:fb:7e:c7:62:f4:dc:c3:
                    f3:7b:25:1c:2a:3c:3d:80:fd:8a:7b:4c:1f:dc:cf:
                    07:cf:40:81:b7:91:90:02:b9:b6:a5:7c:a5:12:43:
                    77:a8:eb:55:38:d6:f6:0d:45:dd:79:75:40:b1:6a:
                    b9:fd:10:e9:ec:ce:7e:49:61:5b:ec:14:fa:f2:ca:
                    89:81:48:3d:b9:d5:af:bb:ef:80:ff:0b:8b:6c:f6:
                    e8:32:9d:17:17:a5:ae:c4:d8:55:58:19:e0:92:74:
                    31:e6:f3:cc:48:53:2b:b2:7c:03:ad:55:c5:83:cc:
                    63:a0:52:07:ca:d6:20:70:3e:1a:f3:42:73:62:cb:
                    a9:20:2b:65:3f:2b:7c:00:ba:6e:34:7a:b5:5d:18:
                    65:06:1b:c1:aa:57:c2:ff:0a:24:55:c7:e3:14:e5:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:BA:45:9C:3E:5B:5D:B8:0E:8A:E8:4B:1A:38:0A:BB:2B:47:D8
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9d:78:1b:95:ba:d8:c4:31:e7:61:87:eb:ea:83:d4:ff:97:
         0d:14:b1:08:86:2f:a0:0f:6e:a5:19:03:42:ff:6a:25:44:13:
         e7:9f:44:61:e3:5b:63:46:06:ee:8e:64:88:03:f4:21:e0:a7:
         12:4b:eb:29:a1:f6:ff:f9:a0:3b:88:dc:41:14:0b:7a:34:82:
         4a:a1:00:a3:1f:b8:6d:03:0b:58:52:8b:bf:d2:b5:66:ff:98:
         ae:6f:0c:17:42:bf:c2:35:98:76:0c:3c:b1:b9:5f:95:ca:9d:
         5b:b6:20:e9:9b:00:59:e6:8a:6c:8d:b7:e3:5a:26:60:56:de:
         02:09:8b:6b:c7:ed:9a:43:48:3f:0c:a0:eb:78:e2:76:94:27:
         9e:1b:d7:54:30:72:ea:e0:33:37:45:17:45:f5:0b:d4:ec:36:
         ae:12:94:36:02:af:36:58:77:2b:d4:b5:b6:56:ab:2f:30:20:
         03:04:c9:ea:54:04:9c:cf:e2:f3:0f:52:7e:9b:a9:d5:98:f1:
         c7:d7:e5:39:25:1c:27:d2:7f:b5:14:87:63:66:b6:8d:ce:98:
         b0:80:8c:85:b9:c9:13:a2:8a:df:a1:26:cc:e1:be:be:c7:b1:
         e2:9d:e8:d2:31:b6:58:ba:64:9e:76:25:c0:86:70:81:74:2b:
         8a:1b:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:22 2026 by rpki-client