Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
File:                     fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft (raw, json)
Hash identifier:          WaJUT0D8RXmV5rWJ/Qjx1JkqBiXrmJUiUH6gkz3ny08=
Subject key identifier:   69:94:18:B2:B5:B6:FC:9D:9F:9D:B8:E2:CB:63:37:83:68:67:8F:04
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Certificate issuer:       /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial:       01A0BD9DBF1F58F9324824D4EE2028D9E7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
Manifest number:          DD
Signing time:             Sun 20 Sep 2026 07:00:26 +0000
Manifest this update:     Sun 20 Sep 2026 07:00:26 +0000
Manifest next update:     Mon 21 Sep 2026 07:00:26 +0000
Files and hashes:         1: 0CJ9u17zIPcruLsVJEts_CUZ3fw.roa (hash: Gg5SPXWp5505pInWA62OkVBNCjh/Ak+0D6VAOWzVDdM=)
                          2: 0xZa5yWUtoc-24jdugiflkmmIc4.roa (hash: qEcPxa3jNxSXYXEJgRMGQ6gYdmaxH+Dt3Hzpzwm1GXk=)
                          3: 1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa (hash: 0v6Z94OQ8OEYuVPUX/BBkgAoPKUlQ0dv8VbYzRMpkfw=)
                          4: 1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa (hash: DwYLVMYxwptlKH2Jo7VsqdJLNSIsspd6i0cEzgvakYU=)
                          5: 1gbHCEbgQwjeiouKm5GaF97BBGc.roa (hash: ybmEELamwbI3k/0S59jWHQ3NihRk/30dBtI2TdBBoS4=)
                          6: 2BycUX4OMpp_ONmpWqOOx8A7GP8.roa (hash: fBXfZQwwJARK7+JDrhcq1IBYyI1YOEEWIdgMx7lYI70=)
                          7: 2JFfv659oPFGOkGk_bNMMZy8rbs.roa (hash: 9gs7l3uhLE7j+4RGYjBCct/pVQeRefhiDRoUa8kkxMY=)
                          8: 31IuJXymzyCCz-nBx80UcTy2KJM.roa (hash: N3OXjTJ7vPVzKKs9xt/0Z8rYQDz7GcNmVIDCtknzJo4=)
                          9: 3OKNlLRJJnY0WTL3jmhbPyh3QVM.roa (hash: jE4i9KPU+4ZRPuD5yVgasSVEVq5ZbrevQvdkI1ApONA=)
                          10: 4w9eMhz25cgw3wBmUofTq4aW9uM.roa (hash: Yu6i3q4t0BYz44PAfY8hgxLUoKL6ChdFdr0U09RhdHg=)
                          11: 53nVjykINhU1E1uARYyClLYic88.roa (hash: zoRw839yzl1D6EZAFd7ggDldbFRrTlMpGkY1G7jePDM=)
                          12: 5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa (hash: NwWWrwv2iEIMkY7yf+unqyAydilFqabTc8rRRuphZ2s=)
                          13: 5pDS3kHKWiU32-QZaJs7OmwHgaU.roa (hash: 7a9hnytsdQqjYSTUgg430pVu5zqq3po37oF6uG0MC0Q=)
                          14: 7rCdRbLq6hIcfsQnA303r_W7D30.roa (hash: erc0IzcRLIFTs6Qge/GkDnIJ6SiitmFUuwWwrs3G+Xw=)
                          15: 8d1IalPXfs0mlmk2FgzdLLr1OuQ.roa (hash: twW4N52rkz8GHbPzPt85ACh973N+eEARK2hpJgcEEds=)
                          16: 9e4nhDBDV7BzN-doC3Rdukk4IwM.roa (hash: kDPiKKf9CtaPCGXBNFKViWoi33U2OU7GaDd0TDYj/II=)
                          17: 9xIOZBHwAAkNANpknXvG8dZrLL4.roa (hash: OabLyuPtexleKLH5wRVOVV9OaUguM+6/MQcUPjkveC8=)
                          18: AKdP_WnCYSC6ouwGRCd07y2VJDk.roa (hash: gnjZovsh4NDuHzxJtWk8Vj/NpReZ+7VV6PpuQ1xNrgk=)
                          19: BJy-8q5rdLqS1VrgzjydPMIrwPc.roa (hash: 2+PepOInvhAWOYeDFTDRuwPrzFlVe49zW1KY3Vp4ZYc=)
                          20: Dnv6uILkWUS1v_KPYuw5SnVEXb0.asa (hash: yPbKBIOVqPlMzEgCK07iafSaBNUrtik8ciRuhN3kEs0=)
                          21: Jb5fhsHpDrmyLdjGRz0uFhEem98.roa (hash: UCI+d59xT/eDs0DShUfWDjWNMDQWAEcZTjIhSv7QN2k=)
                          22: K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa (hash: g076Y7WvmqIjLiy3ZLB52YNXxeeqiR1jHUxs7vXARmE=)
                          23: MUHAo43ATksR-SLPdrPtyQpVw8I.roa (hash: 8g6eM7AQ3CGLVzNv2I7I6eXU5p8aStR5V5IVK5ftuSY=)
                          24: Np7zLmXKA3yA-ioGsFaWFV5ebns.roa (hash: ite+WatU4VDz5FpF5VICtwu7wBAE93/8nd6qjBjs2Jg=)
                          25: QsmDC0xumyz5MRI0VCdCEwmFohI.roa (hash: h8GNRtwjDCB9bY1Ozw+rHXsw0nChaonJyo4obxp9+nE=)
                          26: R7Vr98elCl8-XI40OwgjbRBy2ok.roa (hash: uXZhX4GIglHQod9UoZAg4FOS+PXKnbh8c2QJQLW5IfY=)
                          27: TXUKJJoKGveOWU1d4MKKpC7vG9g.roa (hash: +6CW9WY885Em14YZDApYOXXY83soIXGmk3RqofjJhjs=)
                          28: ZAaTnU6s_eFv366TC0JclDW0ZhE.roa (hash: YT//ILFoSXtbMg4NnvN2nPtXhEErfTq55aBeha2nE1E=)
                          29: Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa (hash: 4PwFjqVYHtrMdoqJtqZUtQgbid0TJjs+0mXNy+Un5T8=)
                          30: _nI_PNVjm1tzW7fbPHRQ_UNXGio.roa (hash: 7b8iKmGmZaMSXOaqiUPziUPJsSVF6OMYA76iGGmqXEs=)
                          31: baE-uTGXhUmXS65TJe0eoTaAdTA.roa (hash: AjzX6VNfFo0NJGvUKk2w+nDwgkPWIsuzZYkfZRHLP3E=)
                          32: bybU-ALtdFOAYGWPJIdrXnlJpsE.roa (hash: IhoD5+ZK284yvX7U34qLp2ObNOIWs6rJkCYkyy0P2oI=)
                          33: cAZ9pFFoJ2zhoSD5UHgH9xQkSKA.roa (hash: Upfym8cWm9hUGkNLSusIrU8RFQubfsySUw7WwyXAjHs=)
                          34: dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa (hash: 7YBcg3eoh/u0arCV5cilBpldW9SOARulU+iJYPbWCbY=)
                          35: ext-QDDWINcKwa2Mw4rXO7S9uXs.roa (hash: fWesDUJo13M+KG37vYxdJdEn2ynVJZfDjSl1lpbRFz0=)
                          36: f2zJwbsJQDjbgUwAMqBn3yhf67g.roa (hash: HoFw8uwofu/rWBg89N7bjQ91Fy2ImP28Tf0BytyeuJg=)
                          37: fB8XWNLLHNgHnYx78o3T2kcAKPs.roa (hash: jj9t1chBJ2t0t3tOHNeIqeQLqq+L6Q2JAiPF62ls9ac=)
                          38: fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa (hash: 9Pj2j1VDZ2oEcMkOoN8txqGGDjWHMZWAwK3n7bTvCg0=)
                          39: fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl (hash: bdjvddlqFM7PxTDOPUO/C+ZbueDqWoKqaTDWnbK9jm8=)
                          40: gcB9OLOx-KqwqMp-e_TB7COz-xw.roa (hash: zOEacADZrsOUIT8na1aHga1C9RSgmdETsExbU8pE4Dc=)
                          41: jg6hfYCoXuAuPPoa7YinNKFlL28.roa (hash: rY+k9rbHpeWLCQT7qtOX5aiLx5RJnRuBw9S8uvo5yHI=)
                          42: jlFc5NpGt74_oDqgxwbh_oUqWRw.roa (hash: DciZoXOI6etcmmM8obtBaoffqMMBlF7e1baiFAPLUpA=)
                          43: oBfZRDR6FjLvr_-XU2lAaHQi0-Y.roa (hash: UyvbGxYl+EH4oQJaaT8IlVRUYz3dVoAAV1AeA249Oqo=)
                          44: oN6JJatzLo336CTblNZNKlHW7do.roa (hash: q5KHKCdbs6gJ4OP0+u1pdK9DEZupbyyK5LLY66y6Wi8=)
                          45: rKMXOu1LAkitTnIIuffCkZ36o8I.roa (hash: WkIoax7Ob7CGue2VjVswuJpb+FMRnB0LCAFbENC607M=)
                          46: rkXmkXfMN96unGF951D4RUAZm7s.roa (hash: DOvHWXPvMRR6+Gmo9Hh9n91hxEM9f/WGszHqiHPudYU=)
                          47: t1H1WeUKIekI-A1M_0yvxre-Cbw.roa (hash: pVeGrAx4QubBe5v7/7IYgcs8DtMQFCIpeWaaPUnESSA=)
                          48: uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa (hash: OuyxmyR7qFi2pZrcmF4ecIE7EgJUQ6+HiBKeZV/ae5E=)
                          49: w2Zllddsp3ETUfwlekfQFAQqlxo.roa (hash: Om10yXY3nPE/Bz/T/FmfqE3jNsjHIMUKT6SBgFk16bM=)
                          50: wAZtAE_3By_Xf-nupeBBOmp5mhY.roa (hash: hc/J/aEXc6fO3eZxYzWtgyBj0rsf+xPtP36ty39IdFA=)
                          51: x5guuAosMFmq5eJvD3KWfyibJEo.roa (hash: 0TT2fn2DQ/oQeYAJOgp14i1XmJQ6hYMiNIM3lUNvqpE=)
                          52: x6odgv4GBx7koYM0lfehBGyNvyM.roa (hash: hiMJKGkjwzFZrEmaNtZ57Yu5ODoeuShCdiRgVeJUTjM=)
                          53: xJmKkBU_6pGBGJ0NkbFR4R-7L7k.roa (hash: vjNNKW6FfN0Njf5+Jh/bQgnhiyKq9w9GA3uAf37wjig=)
                          54: xlfcRKaFcsMxbU98Nn3IsjnvEWo.roa (hash: v8hp66YtzHnMWY7lZCrnZ5MeLMLXbo1tlMs+Ycfpccw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9d:bf:1f:58:f9:32:48:24:d4:ee:20:28:d9:e7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
        Validity
            Not Before: Sep 20 07:00:26 2026 GMT
            Not After : Sep 21 07:00:26 2026 GMT
        Subject: CN=699418b2b5b6fc9d9f9db8e2cb63378368678f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:04:eb:0f:f4:5f:10:55:91:70:3d:8b:a9:
                    6d:80:e7:d5:ad:63:18:77:14:3b:ca:2e:22:73:db:
                    f0:76:fe:a4:f0:42:d1:3c:62:cf:a8:7e:a8:73:5b:
                    dc:e0:e0:6b:98:65:6a:f1:78:0e:e1:50:f0:3b:7d:
                    6c:56:a6:c2:c4:35:0f:d7:26:de:b7:5c:33:43:bc:
                    de:6b:17:90:0c:39:08:a4:e0:2d:1a:40:be:02:3b:
                    9a:c1:a2:ba:1a:4a:f8:e5:8d:9a:ae:4a:1b:ca:c9:
                    fc:ec:7d:b3:7f:29:25:f3:99:43:95:62:99:ec:a6:
                    5b:a8:dd:10:44:e9:d0:29:eb:fe:36:91:74:23:6f:
                    48:f5:37:a2:70:a5:b9:86:80:83:45:af:d5:e7:81:
                    08:43:52:c8:54:a1:4f:24:eb:02:a2:93:18:af:0a:
                    8b:e9:78:e4:28:2d:fb:a9:8b:70:be:7f:bd:d3:70:
                    68:3c:bd:81:c0:5f:33:8c:da:d6:13:7c:7e:54:0f:
                    6f:51:30:4e:51:37:5c:3e:be:1f:34:77:f7:79:80:
                    2a:f2:45:0c:4a:a7:61:c2:60:6f:0d:52:f6:d8:e0:
                    94:23:2b:26:25:69:7d:40:a5:31:2c:a9:ba:76:60:
                    72:4f:50:66:f5:55:9f:17:95:4d:24:3f:f4:60:4d:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:18:B2:B5:B6:FC:9D:9F:9D:B8:E2:CB:63:37:83:68:67:8F:04
            X509v3 Authority Key Identifier:
                keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:2f:d7:17:03:1f:ed:81:25:56:29:fc:2d:dd:6f:4b:11:
         bf:44:3b:e4:6b:e4:cd:02:09:ce:87:8b:a8:08:fc:8f:3f:34:
         04:c1:b3:59:55:64:d9:d9:84:29:13:8b:ed:51:75:4f:bc:72:
         67:05:5c:26:6f:04:a5:1c:09:7b:82:a6:53:bb:c9:92:2c:0c:
         c2:48:7f:d9:70:35:db:68:55:af:f2:fd:9a:b5:4d:0c:e4:86:
         0f:71:70:6a:95:95:48:4d:11:11:6d:45:bb:a6:52:b1:5e:dd:
         d2:55:61:4e:a4:26:1a:1a:e1:37:21:91:dc:65:61:5e:bf:6d:
         8e:1d:ea:3c:1e:a8:e5:40:36:21:3d:41:4a:1a:76:e1:cf:0b:
         4f:a3:b0:43:f8:08:80:f4:4b:6c:4e:fc:f8:fb:97:ad:08:0f:
         36:98:a7:3f:71:6c:ea:34:5c:a2:7c:3c:62:e5:dc:04:0e:08:
         ef:2a:cc:63:84:5d:c3:6a:a8:b6:b1:e4:0e:ee:ef:6b:5f:35:
         0e:ff:17:6c:a6:7b:6b:9e:20:59:ec:c8:90:35:79:82:e9:3e:
         17:d2:ed:8c:bd:96:bf:c1:9a:c3:8e:cd:4e:aa:62:3d:fc:cd:
         47:16:b8:f6:61:3f:4e:25:14:29:2a:3d:e1:18:1e:f2:cc:f3:
         15:12:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:04:26 2026 by rpki-client