Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          p2shB29zzehIViK4RoEVVBSlmXvw6vBxdvqCvwKHifU=
Subject key identifier:   15:DB:D1:B2:B8:9E:BE:5A:F7:A1:50:44:C3:64:CD:F3:1A:EC:30:BE
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019CAB6B98E5BAA56B8204C2D0625F18511E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          19E9
Signing time:             Sun 01 Mar 2026 22:01:21 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:21 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:21 +0000
Files and hashes:         1: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (hash: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=)
                          2: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (hash: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY=)
                          3: 2F6KjJmnh4fG2o31oMeDLzlhe3M.roa (hash: U3NzVWajOAPyyw0TujhCrhB+YyvG3V+w8CS/ITzJ3lQ=)
                          4: 34KmZ8VrdL0919mvZ699Gx_xpwQ.roa (hash: Q5D7jFgCzQNL3luiUnYO7ELZV2sJxrboi490AwwO1mY=)
                          5: 7j2_NbelXGkPqeH8Kkeh1ym9_DA.roa (hash: JZe6w9UDx2mGbUG+2NzB+MVQw/jPj68z/y/0hvVfhLU=)
                          6: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (hash: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU=)
                          7: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (hash: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE=)
                          8: 9--7k8s2vBgfv9cOtklxxBdlhTg.roa (hash: JcI1d/J1LHsYTNe6jH8TPu1qVojYT6V7vlT9I10CzUc=)
                          9: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (hash: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU=)
                          10: AY3FW2IB9nexvx9xT55P4qXch9w.roa (hash: APNMELOEu+Yhf/JJ7/H7Cc0dJp9lEZ5EZz4w5dHfwFc=)
                          11: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (hash: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw=)
                          12: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (hash: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds=)
                          13: DsLRswrIL2bjarddWXxgMaYz0pk.roa (hash: cLYKT6oBtCkgrNFlRquRG12LDkvlkhXPXiMWFdBt32w=)
                          14: E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa (hash: bIj2Xc2XKCsJfzUcbvZ5kW4+OYzoOdbLVfr+TNdbU8c=)
                          15: EUp63jBa0leP1OvOcpdNWMC3CUU.roa (hash: uQ1Dw8PQCHKdGUd6o5BdHl0j+XMq3ml+07QGhhX1os4=)
                          16: F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (hash: WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=)
                          17: FYUqU8QWOLIjFef4sxjXi2SRgiE.roa (hash: YKJ2KcRNhHoxqeVVhOtsB2AOrHfzUODw+6sEzqJPF4k=)
                          18: Iv5goV36XyJf8h8Jg9f5HpjvVkY.roa (hash: /qW7a3x4Bqdh0z0vzoFyz5jEY3aTbOB6BSfGATNwGVI=)
                          19: J0gDIkrpboJuRwLiO8mRarT4dVM.roa (hash: KNGfnvH9hN8MLBIB5K0MLNABNs+jOG4jng+kKwDoCrM=)
                          20: K1et99aGlCbRN0atD8laA6wCpoM.roa (hash: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=)
                          21: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (hash: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE=)
                          22: LOHkKboHHj98Sud03cU5OIAfDEA.roa (hash: jTKW2wbQOoCIA97EofLg3elq1L7+ob1lcwso1uyxnO0=)
                          23: Lq1_kC7K6rSER7BBOksIzNMYSkk.roa (hash: PUuNNwZQh6bBg3pgTnG0BSz1bnW6aW1AJW36sfA609k=)
                          24: PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa (hash: mMckO0VWsJIoTMSpV0U2xVZQdIMSSosg9qAEuX4Cl34=)
                          25: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (hash: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic=)
                          26: Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (hash: cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=)
                          27: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (hash: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg=)
                          28: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (hash: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk=)
                          29: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (hash: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo=)
                          30: bsA14uz-YOXsaSFd_5h3VNt_UOk.roa (hash: IXOAQlZ/L2ESEYgfrmyIYrixLqYgar9WBc4G2uIdJEk=)
                          31: h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (hash: 9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=)
                          32: hGFaHcwrovzGAIYRLQIthoUbz9I.roa (hash: EW//8vzHeEI6MBxbWRLHvlhu2IW8hbQriarbUOI8bI4=)
                          33: jwLZoY1l9QraxwasgyAPNL-Lmi0.roa (hash: jB+O1Mki2gVeU0ChD+Q4PPmvQH8u/BH5X6sQaqc9dwI=)
                          34: kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa (hash: KdvanUmTfifS1E7RiGOchWirNpaIWYJ9mP4hoPbCkcI=)
                          35: kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (hash: uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=)
                          36: lHNKO7sNNTzQ5Qf7iXFu2MykVlY.roa (hash: gSBFoF7U8vP8sddt6bGyOP5IVVcu/X14ckwK7nmTGi4=)
                          37: mREkMg5h2CoIwruTXu13t8R24-k.roa (hash: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=)
                          38: mWE26VhH4aZItoNdm61WGalJaz0.roa (hash: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=)
                          39: nfPxS_G9gcj7ar4S7u_X74zr1JM.roa (hash: iHcyW/2KJt0+hDcs3hP5eiwUvwY+CugIYpFmJVOKT2Q=)
                          40: t_QY2lM7jBaSD55UnlYp2CJKlqw.roa (hash: KJk9RhNUyjLDjBZyhKz+Gi6pVQ35sT30ueaJl0wPtqY=)
                          41: tfAGjWfUNTI_2vsVZy9j5qZ-AuM.roa (hash: njzm6lCAV+EE4DxRZf3PtyDknOGT9/aOviQx8BhHPt4=)
                          42: tv--uDVRTnOlBD4wLkX6klTWyHk.roa (hash: qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=)
                          43: ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa (hash: S6htXVqvYivJ/J0tyQH0JXgWVjrdc9WIOkcpLunur6E=)
                          44: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: qzEeFTxKdEuMMlEBv61OIAJUaeT8LIkmB3SORXrBfnM=)
                          45: ye5JAz107-QVpFyi481T0DZx4h0.roa (hash: r2POUNpr2WCW9cC/BotLIDBkPCKZVoCCOPc5NI5c8Vk=)
                          46: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (hash: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:98:e5:ba:a5:6b:82:04:c2:d0:62:5f:18:51:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Mar  1 22:01:21 2026 GMT
            Not After : Mar  2 22:01:21 2026 GMT
        Subject: CN=15dbd1b2b89ebe5af7a15044c364cdf31aec30be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:8c:05:60:8b:f3:97:e7:1c:dd:52:f1:81:
                    4a:e5:50:f1:27:1a:12:4e:db:9b:38:85:3a:9d:f6:
                    53:0c:01:4f:d4:0d:d5:a2:25:7a:d1:11:70:25:91:
                    11:b0:1c:0f:f8:47:41:6d:84:a2:8a:c2:ae:dd:7c:
                    68:56:36:f2:91:0b:b7:7a:99:59:31:55:71:50:37:
                    72:5c:fa:a3:c9:4d:47:41:5c:6a:a5:7e:e2:bc:e4:
                    6e:e9:f6:c4:bf:90:ec:1e:1e:43:ad:15:93:74:9f:
                    99:4e:87:b7:60:3b:b7:5c:60:69:1d:90:65:2d:8e:
                    96:b4:04:a4:c3:49:f0:5c:64:fa:72:c1:5f:41:29:
                    66:0c:bf:f9:0e:05:c9:83:95:4d:e7:a6:4c:f3:4c:
                    b1:41:26:ce:91:69:fe:90:ef:74:dc:e1:68:c3:d6:
                    d6:3f:0b:7c:71:7a:16:d0:4f:94:16:38:d9:e7:f4:
                    c0:b3:cc:4c:fb:82:5c:75:d4:b6:79:36:9b:38:01:
                    0a:3d:06:3d:54:cd:e1:1c:45:09:7b:ae:d4:85:ce:
                    6a:00:bd:00:ce:80:a8:e5:a3:f9:1b:5b:6f:c4:58:
                    6b:4f:f7:93:01:9d:98:ab:15:9c:e1:d4:84:e6:7e:
                    1c:08:19:66:c2:59:14:ce:3a:f5:e2:0d:d9:6c:a2:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:D1:B2:B8:9E:BE:5A:F7:A1:50:44:C3:64:CD:F3:1A:EC:30:BE
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ee:cc:8a:31:77:75:c3:6b:1f:04:1f:31:24:ba:c2:79:13:
         e2:82:7e:4e:36:e6:ca:1f:cf:86:46:30:74:99:94:9e:54:b7:
         2f:9b:77:a1:05:fa:f3:3d:9e:d5:c5:2d:96:cb:3b:36:d8:0f:
         71:61:01:b6:9d:75:79:3b:f7:1a:75:ef:4a:b6:93:f9:97:2f:
         e1:1b:e7:49:f5:c2:14:6b:11:c6:ab:d6:ba:14:84:83:34:25:
         3d:25:f5:b7:c7:00:ef:46:d1:69:bb:07:1c:a8:93:7a:18:73:
         2e:90:2c:fe:55:03:5b:ff:f1:c6:64:23:c8:b2:69:2a:c7:91:
         d8:91:7c:d2:40:cf:d0:8e:2c:ad:30:52:ca:b7:bc:0f:ec:6e:
         20:69:40:f9:c1:05:4e:26:86:57:eb:45:e2:85:a9:16:ef:51:
         fa:0f:5a:c7:c8:c2:69:35:44:0a:2e:5a:f6:ba:b5:f3:37:37:
         21:31:4c:6a:34:1f:03:f0:79:d5:a7:ca:5c:f9:fa:31:ab:7c:
         b9:8c:f7:ed:09:00:ed:61:87:fa:2c:bd:dc:de:b3:1c:be:77:
         d5:5f:b4:7d:4c:ef:ed:6c:e9:f9:de:d6:dd:64:34:ba:c8:3f:
         8f:f1:72:d1:18:82:a3:1b:e5:38:91:ff:f0:59:cd:ce:28:b6:
         01:46:21:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra5jluqVrggTC0GJfGFEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwMzAxMjIwMTIxWhcNMjYwMzAyMjIwMTIxWjAzMTEwLwYDVQQD
EygxNWRiZDFiMmI4OWViZTVhZjdhMTUwNDRjMzY0Y2RmMzFhZWMzMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6yMBWCL85fnHN1S8YFK5VDxJxoS
TtubOIU6nfZTDAFP1A3VoiV60RFwJZERsBwP+EdBbYSiisKu3XxoVjbykQu3eplZ
MVVxUDdyXPqjyU1HQVxqpX7ivORu6fbEv5DsHh5DrRWTdJ+ZToe3YDu3XGBpHZBl
LY6WtASkw0nwXGT6csFfQSlmDL/5DgXJg5VN56ZM80yxQSbOkWn+kO903OFow9bW
Pwt8cXoW0E+UFjjZ5/TAs8xM+4JcddS2eTabOAEKPQY9VM3hHEUJe67Uhc5qAL0A
zoCo5aP5G1tvxFhrT/eTAZ2YqxWc4dSE5n4cCBlmwlkUzjr14g3ZbKIViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXb0bK4nr5a96FQRMNkzfMa7DC+MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANe7MijF3
dcNrHwQfMSS6wnkT4oJ+Tjbmyh/PhkYwdJmUnlS3L5t3oQX68z2e1cUtlss7NtgP
cWEBtp11eTv3GnXvSraT+Zcv4RvnSfXCFGsRxqvWuhSEgzQlPSX1t8cA70bRabsH
HKiTehhzLpAs/lUDW//xxmQjyLJpKseR2JF80kDP0I4srTBSyre8D+xuIGlA+cEF
TiaGV+tF4oWpFu9R+g9ax8jCaTVECi5a9rq18zc3ITFMajQfA/B51afKXPn6Mat8
uYz37QkA7WGH+iy93N6zHL531V+0fUzv7Wzp+d7W3WQ0usg/j/Fy0RiCoxvlOJH/
8FnNzii2AUYhGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:16 2026 by rpki-client