Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File:                     10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier:          EIMONxDEoEs5BGAQTtgtJipCHjwLd//dzS3jZh9wcGw=
Subject key identifier:   17:BF:24:18:8A:ED:8D:DD:EB:D2:A2:09:FC:C2:FD:0E:70:E4:73:E1
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       01A0C8D3214097ED2592088C5B2D2CA7972E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number:          1B23
Signing time:             Tue 22 Sep 2026 11:14:34 +0000
Manifest this update:     Tue 22 Sep 2026 11:14:34 +0000
Manifest next update:     Wed 23 Sep 2026 11:14:34 +0000
Files and hashes:         1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: aypUOJVPD7A5Rs7NqLo7sKAx8EaFA7OlFu5BR72Xc6w=)
                          2: 2NUk4-WXGTUF0GeRTyrSDLbq3VI.roa (hash: EXU9HQQMoERyAYQurjGAOh6YNj+Rb1FRWmfk9KwEk5I=)
                          3: 3FpaNUsc8mcx-Ib8oSSizkRATfQ.roa (hash: ObYD8tt+7rdZBauoMipJQYsm8/hKYkl44vas1c5JeLY=)
                          4: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=)
                          5: 7VTsSzgjCruuT9D_oo_GpCePRmA.roa (hash: 2bYUaq7TmrIdQwCJpi7WU1r54hlWSNb2+szJ26QwC/w=)
                          6: BIyVEriVirZL2G6IXmONC3j3lQM.roa (hash: 2KsgdSq3eO8pkxPOaGPnwvEW5mBPFvoUQw9KkpOW5GY=)
                          7: CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa (hash: nr0fY8ExMvANSEMYgY5geen0UP5hnXCKbuR1OPzJBig=)
                          8: Dew0eb_HAG7ZDSF4NKHJadP-gkc.roa (hash: yeQjaVa1qWsFYF/Nfl2QRVridzOhdfUMldU4qSs4j9I=)
                          9: DwcDJC-CJaGVWf9qHcY4vwfNCUA.roa (hash: kA9UN61i21C9VPza4E7NFLe7xs0KibzhsYhJ5co5Az4=)
                          10: Ec6pumLbFWm-2ggg4GTIyZ5WhHI.roa (hash: BAbSE9dO4T1GnCKBKv9HoFvZtw+ItuiuepY9geBARxM=)
                          11: GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa (hash: yKdLPkbxMhk4y0yXKwsRzEIoL/f56tRZaFXGiNAI0m4=)
                          12: T4lVyhCOiVnOTQ3Lg5EJjC_elNQ.roa (hash: uT4CMpYcd9PSs23MYUhP1OLu5a4ln+lpqzMRNI+3ytE=)
                          13: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=)
                          14: Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa (hash: 3ky9pLDHWdQLzf5p8PePoy070w7qJI1DOvNViZYREg0=)
                          15: a6Mf22KbcVSVo6zfFVmT3svRjsA.roa (hash: PAy1Jv2hRGR0Vi2DoaVy7uOqdlSIsq+J07zQQtyu5Gk=)
                          16: aBfCZ03S1Y0sPluo5LBFUZWFYMc.roa (hash: Feultne/Hmjwrd1YJFj/DkrcIFBiGq7nwTwN4dvrKfs=)
                          17: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=)
                          18: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=)
                          19: i1_J0js7GSnwnFT6BQjKxFjCKAo.roa (hash: zSpyHhpf50CixxMSNhKrSqsP9AZoPmaaRWKJ+roEr9w=)
                          20: iXaj_kYTlkm0fAGHBa2-E20g17Q.roa (hash: eFFfAbmshTsHNFLpZKWGQ2ZVnPIvFCyKX8Nbj611da0=)
                          21: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=)
                          22: jdDMzewtBKUbLISHlFvozSRpGzc.roa (hash: o28fuwgFVqCMV9PwGcRHvq4z5m6vHXUHTWkbO6d6lCI=)
                          23: kfnww81EV2LKC1epnSXYA5FE04Y.roa (hash: etPZojILMkhuJnTDpOv9QrkK35LWJTKxSMDedF+KD9E=)
                          24: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=)
                          25: ntLrxfVyT3EF_HfYFDgSLQIEq5Y.roa (hash: yq11gq+saeIJh+XRctBRBjtBTL9vZCS0Lnel9O9f6gc=)
                          26: p5QtUDUOXRCHEi75VPDwcQNdTZk.roa (hash: X0pIlV9euFff1IdP2cwi41n9OTYkfNV7NgihjfP7w30=)
                          27: pfQIQtiw0hOQzwiCesi0AjLHapA.roa (hash: ddrH7oWf6HnIwFuplBpVDYvI9f1Yddg87dSy0YKuWKY=)
                          28: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=)
                          29: ruttGwJwbYzo0AN2TP7_UYRcvt0.roa (hash: ux9A3sQEvBRGsHRw6v0ITVj2Q7MxjWLzu1hZ7TwrQkg=)
                          30: u3esaBXBz_RESktIeiAEj3TrmBk.roa (hash: DuycQcWpRKbKJrZyI5uvefnqxfPTZjiagmu1zINJPpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:d3:21:40:97:ed:25:92:08:8c:5b:2d:2c:a7:97:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Sep 22 11:14:34 2026 GMT
            Not After : Sep 23 11:14:34 2026 GMT
        Subject: CN=17bf24188aed8dddebd2a209fcc2fd0e70e473e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:d4:00:da:2a:7d:2b:b9:67:88:f4:e1:7e:
                    30:f1:34:7d:9a:47:e4:33:54:f2:a4:59:88:79:a7:
                    8c:28:fa:de:ee:dc:00:54:64:36:ce:31:64:e4:7a:
                    cd:12:ab:47:c7:c8:db:29:de:da:08:89:43:d1:b1:
                    68:33:6c:a3:b7:a4:7f:47:4e:70:1c:61:13:4a:c9:
                    ed:cb:87:34:e1:f9:b7:ce:b1:60:18:56:66:51:3f:
                    63:14:3f:6c:0e:3f:60:fd:3a:e0:7e:03:53:d6:76:
                    96:df:28:99:4a:5b:94:7c:70:38:f1:24:ac:ba:85:
                    07:47:cd:ec:7d:58:5f:3e:01:cf:48:89:db:27:ce:
                    53:72:cc:b2:5a:01:b1:b7:a9:51:fd:88:4e:17:77:
                    40:84:55:c3:4e:14:4e:68:d8:f8:2f:8a:2f:94:42:
                    c1:98:19:be:de:26:16:b9:a0:75:04:f5:8b:5c:19:
                    12:c6:c6:8f:d6:ba:b1:c8:19:ef:ac:e3:59:77:06:
                    79:3f:13:70:4d:12:db:3f:75:25:80:f3:83:aa:29:
                    8e:fa:1f:ae:14:8d:f2:a2:75:d1:67:bd:e2:69:b9:
                    19:db:27:11:d5:42:6c:06:b4:a4:4e:16:26:2d:81:
                    50:11:fb:ca:d3:44:78:6e:91:b9:b5:5b:4a:60:79:
                    dc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BF:24:18:8A:ED:8D:DD:EB:D2:A2:09:FC:C2:FD:0E:70:E4:73:E1
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:51:14:70:04:bc:5f:cb:8a:b8:b6:56:10:a8:d6:eb:de:23:
         45:8c:64:bc:fe:ca:9c:a5:e0:bd:4c:58:04:3a:dc:be:bc:c0:
         87:82:d9:3e:df:bf:33:78:22:24:f8:c3:4d:9d:59:8f:b8:2b:
         16:e2:ac:25:a9:a0:a9:6d:f8:24:24:45:96:84:89:0c:e8:a5:
         a9:83:2c:80:1f:aa:26:b7:19:ba:d4:77:c9:86:d8:d1:45:f7:
         c3:9c:a9:46:b2:8b:dd:1f:20:a2:c1:91:b3:96:49:77:d9:ff:
         19:a8:92:4d:d6:88:e9:9d:93:fc:b2:ea:13:13:f0:22:80:48:
         4c:1c:e3:44:a5:ba:1a:f6:29:85:e1:6e:d7:bf:f4:92:4d:94:
         e3:39:0f:d6:89:27:9f:1e:85:5a:c7:27:4f:23:14:32:dc:05:
         d9:c1:1b:53:30:66:31:75:b3:8f:bf:c8:ef:5b:6f:3a:68:41:
         f2:5f:6d:ed:2e:89:7e:82:45:23:95:9c:a3:61:4b:12:db:59:
         70:bb:73:13:47:2e:21:4a:c3:cf:12:35:30:a1:4a:7c:b2:0a:
         c4:7e:58:ff:fe:78:5c:65:16:34:ea:9e:ba:81:a0:b4:54:80:
         65:25:fd:88:82:1c:f6:a2:5a:5a:12:38:b7:f3:7b:d2:e8:23:
         ad:78:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:17:17 2026 by rpki-client