Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          ltPdfEmrtA/kdk1Rg934uKevz8SZP+5csSrZlNOusH4=
Subject key identifier:   48:25:9E:D8:C8:C2:46:BC:2B:6D:E0:9A:D7:2D:84:E9:22:15:76:D4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       01A0BF8CE82FE3E67786091C24A1ECBE4D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          1C1C
Signing time:             Sun 20 Sep 2026 16:01:17 +0000
Manifest this update:     Sun 20 Sep 2026 16:01:17 +0000
Manifest next update:     Mon 21 Sep 2026 16:01:17 +0000
Files and hashes:         1: 1--LUBzd0-4E6bhj_EJ_DJFIyfjE.roa (hash: rsYCDsWoGw08rdoTTeUioSThzgVkXlwsJw53AHhyg+Y=)
                          2: 1-EZPlhO1u_JV3r0vjPsF2SpVds0.roa (hash: BaklqMHNX3mQCpVPAa6GcrNMPyJZoCisYw/62Nbe8tY=)
                          3: 2v5KfbbqXypEdvnneh-IvevrJYk.roa (hash: yAxI+DeCo7N6vLDv1UWF5TQ29JSR4v2FexiT7L1EZvg=)
                          4: 34KmZ8VrdL0919mvZ699Gx_xpwQ.roa (hash: Q5D7jFgCzQNL3luiUnYO7ELZV2sJxrboi490AwwO1mY=)
                          5: 7A_Wg-GrnQXpFUXuOQAivYNJ_rQ.roa (hash: 2k5I60ryuJpSRHrRxZ/1aGdhd3wJv6KTjrP7UTeG+LM=)
                          6: 8Ib0pU8UTjRMczLCqmldiNs-zHs.roa (hash: YeSnfyctx+qiq7Ji4BgsCIDQMSELaBj9cF1Ydg+/nHU=)
                          7: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (hash: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE=)
                          8: 9--7k8s2vBgfv9cOtklxxBdlhTg.roa (hash: JcI1d/J1LHsYTNe6jH8TPu1qVojYT6V7vlT9I10CzUc=)
                          9: 9TEom2qJCbi-WYi6qmqT3hSFwhw.roa (hash: CH3B6IY6Y6wuvlMYVvPTvyxektEMQVmFRpYyNTrssk4=)
                          10: A4DPrioTJmOOuQC2yavwYY1DpBY.roa (hash: o5U++ZVezdAL+4R6PdeRDcGm3Tnn68pVHwb0cieGrEU=)
                          11: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (hash: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw=)
                          12: DJRSTcAP7CihbaiAnxY8hNby_aU.roa (hash: YU74KKCH0msp5e3D31IubggMA5tchQwNb9z3GV1ugds=)
                          13: DsLRswrIL2bjarddWXxgMaYz0pk.roa (hash: cLYKT6oBtCkgrNFlRquRG12LDkvlkhXPXiMWFdBt32w=)
                          14: E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa (hash: bIj2Xc2XKCsJfzUcbvZ5kW4+OYzoOdbLVfr+TNdbU8c=)
                          15: EzAvUa-DIA3eEDtJjO0Um9queOI.roa (hash: ECobVUBnXH2oYzCAfJ9XXnwI5lQiPG4kGFA/d4iPWJo=)
                          16: F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (hash: WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=)
                          17: GUfx0kxQaRuU4ZNreYw2APXI9pY.roa (hash: RF1Q4ReKdRsen02ofp/EoLwpUqLRnY2vebMTfBPWYSM=)
                          18: Iv5goV36XyJf8h8Jg9f5HpjvVkY.roa (hash: /qW7a3x4Bqdh0z0vzoFyz5jEY3aTbOB6BSfGATNwGVI=)
                          19: K1et99aGlCbRN0atD8laA6wCpoM.roa (hash: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=)
                          20: Kk5RA7UquuogIpz9LtDtPMQl4jg.roa (hash: 7cfudN1UEmIWNa3A3inUjDUXkjknQMQXi+h+uhAZMvE=)
                          21: LOHkKboHHj98Sud03cU5OIAfDEA.roa (hash: jTKW2wbQOoCIA97EofLg3elq1L7+ob1lcwso1uyxnO0=)
                          22: Lq1_kC7K6rSER7BBOksIzNMYSkk.roa (hash: PUuNNwZQh6bBg3pgTnG0BSz1bnW6aW1AJW36sfA609k=)
                          23: OUXpbUvVF0LfM_h99NKRVrTpQbA.roa (hash: 4+n7cJZdT1l/mo+WAz2dgVCBA4UOyFCPZjMK/L+QZts=)
                          24: P4YSKS8c6CQstzUK8NO_qKzuTQU.roa (hash: NX+f4HFf+ZhlPyEWL+di3zE7DxnY4ZI9ugs4SadT1rg=)
                          25: TKCZS17z2Z4-KPE6PS7PcFq_qc4.roa (hash: i3wV4BpIXbuGFetoFwKcV2sjHWkZ2lMyrffLHYfSnic=)
                          26: Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (hash: cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=)
                          27: Z8LmUM-GU0jq0b-exMtt-gLqFl8.roa (hash: BF9VNl1VSdTRVDJzeZcHMUu08FF1duVEeS4jSsf1yS8=)
                          28: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (hash: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg=)
                          29: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (hash: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk=)
                          30: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (hash: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo=)
                          31: h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (hash: 9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=)
                          32: hGFaHcwrovzGAIYRLQIthoUbz9I.roa (hash: EW//8vzHeEI6MBxbWRLHvlhu2IW8hbQriarbUOI8bI4=)
                          33: kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (hash: uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=)
                          34: kW-r8QIEYmaxCVGniGM_-GcqcR8.roa (hash: 1yJS120qcY92Wdy/2Q7V4YtAL73+3bhSuulyPTJkyZ8=)
                          35: lHNKO7sNNTzQ5Qf7iXFu2MykVlY.roa (hash: gSBFoF7U8vP8sddt6bGyOP5IVVcu/X14ckwK7nmTGi4=)
                          36: mREkMg5h2CoIwruTXu13t8R24-k.roa (hash: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=)
                          37: mWE26VhH4aZItoNdm61WGalJaz0.roa (hash: TIqDkdsbomTnFHP7AhlEL0WwaxFTYmjyQi7+pzms558=)
                          38: qMZAruuP9Gr2FFvtpEgI6qI05r0.roa (hash: 6zZjV59ARMq9jQ+jwaDkzg9JMhzsPAyhLlLAT5gFk7w=)
                          39: qnBlcf9JhW8TObXs73jvCcNhtKo.roa (hash: TxuaE98VMv+izUH1dBB+VT7KFcTz64Gs4C9a9Q6XFPc=)
                          40: rmbYhhizFW4e8aPwl_hv-9YaUiU.roa (hash: sui7cnrZW8UE7Gl/bNAaYZnnZ/dhGFrEXksCYskVvBs=)
                          41: tv--uDVRTnOlBD4wLkX6klTWyHk.roa (hash: qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=)
                          42: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: t4oBDkGDweagegLov5OdC0MzWRntKmxnCCimTB0FxUY=)
                          43: ye5JAz107-QVpFyi481T0DZx4h0.roa (hash: r2POUNpr2WCW9cC/BotLIDBkPCKZVoCCOPc5NI5c8Vk=)
                          44: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (hash: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:8c:e8:2f:e3:e6:77:86:09:1c:24:a1:ec:be:4d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Sep 20 16:01:17 2026 GMT
            Not After : Sep 21 16:01:17 2026 GMT
        Subject: CN=48259ed8c8c246bc2b6de09ad72d84e9221576d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2b:6a:56:65:70:3f:20:9c:b6:9b:14:79:7a:
                    59:da:43:79:d9:9f:74:a9:ee:3f:36:68:0b:39:68:
                    52:0b:d8:15:3f:28:5c:13:82:ea:92:13:ab:04:29:
                    93:97:0b:80:46:73:ea:e3:bc:65:e5:f7:2e:47:d3:
                    b9:1c:e7:fc:fb:c7:c0:09:69:94:94:8c:bc:dd:fb:
                    ce:56:ce:f8:d3:b4:4b:d6:82:52:80:8f:84:7a:8d:
                    55:80:58:cc:60:ab:9f:8b:ba:dd:d9:71:bc:67:ce:
                    ff:01:56:70:62:77:24:bd:0c:b4:44:89:aa:f1:c5:
                    fe:d7:cc:20:c2:ac:dd:d8:9e:84:9a:33:90:50:38:
                    28:81:b8:9a:2e:a4:7a:a7:fe:85:26:2d:ed:58:c9:
                    a8:36:3f:70:6d:e2:4f:05:5b:c5:be:ec:da:14:e5:
                    ee:53:da:7e:53:64:c9:9d:a3:c3:62:50:9c:69:e7:
                    ce:c6:9f:a1:e5:c3:1e:ef:c9:32:7e:d6:f1:ea:a7:
                    8c:dd:b5:cf:da:d1:4e:d8:9e:9a:16:12:a1:ba:a9:
                    54:be:f2:f3:25:89:e9:9a:c0:73:a1:27:80:f9:f4:
                    c4:c5:10:66:7f:5f:dc:5a:85:3e:ea:fd:e7:8a:1f:
                    16:1e:31:39:3c:92:12:ac:0f:12:76:9d:44:9e:84:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:25:9E:D8:C8:C2:46:BC:2B:6D:E0:9A:D7:2D:84:E9:22:15:76:D4
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:9d:b0:ca:e5:ff:fb:c1:da:1e:b4:0e:9a:9d:99:f1:5c:
         46:07:cb:72:ae:4f:7f:49:e6:a3:85:c9:2e:01:b8:7f:2a:7e:
         cf:b9:1f:59:ec:7f:b1:e5:b9:73:db:96:46:e7:85:a3:e0:69:
         4e:60:7f:b6:e5:bd:97:d4:94:e4:07:ed:e2:1d:5a:3a:bb:92:
         77:8f:86:3e:51:aa:7a:4b:70:7c:2b:a8:25:d8:8e:ae:c4:79:
         37:fa:b5:43:b4:c6:48:1b:7e:9e:97:03:9c:43:1b:c9:fe:80:
         73:e4:d3:d9:51:bf:f5:6b:fe:14:d3:06:2b:f3:8d:42:b4:85:
         db:45:c2:3d:0f:4f:aa:33:5d:b3:f8:25:4b:77:9b:f4:9c:c6:
         f8:d4:17:5b:7c:9a:9e:d8:1a:4d:80:b0:8f:4f:dd:d4:94:54:
         7d:77:6c:cb:ff:81:8a:c1:d7:70:3d:1d:ca:aa:d3:5b:80:9c:
         af:af:19:95:1d:53:74:45:3e:b1:09:63:3f:2e:70:3e:08:12:
         c6:57:25:2b:42:a7:af:0f:2e:b6:50:a2:14:06:e8:6f:88:4c:
         18:9d:9c:be:30:2e:bf:28:ef:36:44:aa:72:48:50:07:1a:61:
         b0:f8:53:ad:10:3e:9e:49:17:eb:98:0a:59:bb:fc:28:1d:51:
         51:88:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----