Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File:                     v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier:          QiiBuLI0Pbub5U4I6iksES0KvWq/bunPZN7LnBD63mk=
Subject key identifier:   11:13:5B:F0:C5:95:CF:45:30:B1:1E:CB:14:20:9B:31:CB:43:82:62
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       01A0C5C5ABF54A49D24AC2841DFF32F1A776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number:          1798
Signing time:             Mon 21 Sep 2026 21:01:01 +0000
Manifest this update:     Mon 21 Sep 2026 21:01:01 +0000
Manifest next update:     Tue 22 Sep 2026 21:01:01 +0000
Files and hashes:         1: 0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa (hash: cTnCK/Fe0k+kOxPdh3z5AeFWC42FsqaaV1sppIVkCH8=)
                          2: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=)
                          3: 0xTXzw65S6SAKbF2ypbnQR8flBY.roa (hash: KPGmo03a7ngvQ5hpXQozCZzOmDre3xu+doPSkJFQPEI=)
                          4: 1-RC6YgYD8oj34wphiCNjB6BuRdQ.roa (hash: X6yfxp9jc/tguch3lbT/vHW1SQ/dHRRKqtT7Nkfefhg=)
                          5: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=)
                          6: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=)
                          7: 3mywo-BsWL3cSnNqUpzTpDB96u4.roa (hash: 8788yIquwoWfPqlPA5QQJ5InLXnqdZHh8y7u1B6tzRA=)
                          8: 4sHcg46CKKDvMyDChpwWDh0Egl4.roa (hash: w75qFMjuUV9F/cJXn+EoOEYDQsrts8ozrq3p5+rPA14=)
                          9: 7kHLECUqrXn4aB91R-Hg428ln2E.roa (hash: 1LiZ6M2U3EB8HhCU+11reP2nGrGrGe1YF958uCdgvAE=)
                          10: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=)
                          11: DNKVTDfCdlLHW9MrVOz_V6C3F8g.roa (hash: uasjkvXg+88xW1j9weGfc4+Lwe8xp4HgPIRySLA8dcs=)
                          12: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=)
                          13: IQgQh0oAWz7NWCQNE72hJGi8Ce4.roa (hash: Iy6WQLvcZBlbUm+xUMal+Ky5A16lmB/IVyKJ/uVkAVk=)
                          14: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=)
                          15: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=)
                          16: LjY-t72m1MNYhSVFqsDzcUpS9Ew.roa (hash: pKCAkeMdNiokjlFkpdSzkKqDy6aQ7krxBpOM7Co8c1I=)
                          17: MAzm6RNKt95HUjzZodbddhW1wQg.roa (hash: xjFjmydwLTdUCXAAyipWTke8mO8XCtF0GMsZOoi8zCY=)
                          18: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=)
                          19: PDpAKmFhFkpLhDfZCxfWN6aTNhs.roa (hash: sPgaOKYqzSGz2viP5vnAb69Siz35lxadjS7ISq15PMA=)
                          20: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=)
                          21: R4_xJiCMQz4GcaZ7eXYf66rTF-A.roa (hash: nDQKRQdPMHAsOtlBZtEfruBrgqn9h8zzA3/Q0nnjMfs=)
                          22: S5QCT4EkTH8FvuSIes_VEIhiZkA.roa (hash: JR2b0Kga387kvAzMZAmQKgN9eQOulCmTTwiual5i2m4=)
                          23: SPffAYS64U7u27GBmdl07WWErQg.roa (hash: vr6LcPLMe9RSzc82PbDWlTuc7hI9MZj2/NAkezEnd3I=)
                          24: W93Qg2z4J1x2DrVFEWZw8M0ockg.roa (hash: oRSeJlnw5X0wT6kC5tEbf9t+YWFMI2uf//42xQksH7M=)
                          25: Wgz-LAxIGGbPc-vcNnscTunH_x8.roa (hash: ILeWtcSkW1eO8qLTRqXYJLDt7tPWExa52z2i2Y8WW2k=)
                          26: bRXiC2U9rJZ0R844exWw5xnpCNw.roa (hash: xzdo2MnLSJhXwmF8ybf9XYwi7ZHCLzUD16ROzxD4Q5c=)
                          27: c4BSuwIuGEphNQ8ew_DXoOH0_Es.roa (hash: b9CwMrVo+dQDOYFiKFxw60+DZS+sdX8bY84HYqhlcQI=)
                          28: dLIeazVHUcmP4BLaYqLL1c5TzZg.roa (hash: Ei+AsctIw1vhhDd/FhIn2DoYuIToloUwsL/E+n9e4a8=)
                          29: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (hash: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=)
                          30: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=)
                          31: fmqkcdW-EzeIYZtLw1e7f1STStY.roa (hash: XPRjLw0k35zUejQ36ur0eoqTH6yHKUoToM6usUs2TK4=)
                          32: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=)
                          33: h8D1gq051tBYJNb_Y4nlpSpaChc.roa (hash: 1sY2UtAw3qppMv1YMtACKA33nss4PyBDyZbo40TbUgc=)
                          34: hMD0eUqqMrN5VAwN2B-Lp6AilCo.roa (hash: phdFsjUyvjCBV5iar2Uh1D7ph4cNZ1ZECxpJr+7oXM0=)
                          35: hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa (hash: 026nSWMHgQU56Hi3MyG9cbKQuQzStIRUijp25hynlD4=)
                          36: mQACZ-AZ1CoZnbws9zlxZzTbyQ0.roa (hash: tjKXad4TgDUZum3w5aTDbXtDNdWAtBcH4jHfj8aFxnE=)
                          37: n9hfxlzMrKjl_ez1Jru0AUxKJqo.roa (hash: wMMEhDIFHLMDz45INJ2mEHVBm4ljHgWChRaMaS+Z7dk=)
                          38: pP2Eqoq22dtdkWjab3oZAROYYF4.roa (hash: da24Wj5a2cpI62MpsJZPfy8BAzcyJwxfNfWbY87N+KQ=)
                          39: q80MrohlTz-_EFsHIB42TIaXbbs.roa (hash: eSFy9HwVS8CTPJsCtHt8vpw6sIAdlvZJFT/VoYmVgJ4=)
                          40: qzMo16nmO71L2QshypR-MMDDoCo.roa (hash: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=)
                          41: tzjOgbZH3N3SUFmrOvuJg_R3cWE.roa (hash: BylWL8+SKa85X8oT5hG2guV60mf/3A/saj8SBn58cHk=)
                          42: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: hYdP2jx2VFpjD96Ze8H5j+qZlB2Tv4bIAkXVnzH4tHo=)
                          43: xNvqMbqZTN-rWB9-yKf3tgUR2vk.roa (hash: ArMnQt2ke5qfE/+Ex3Acn5H6+ZTyiDLGDgbUwdBZDuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:ab:f5:4a:49:d2:4a:c2:84:1d:ff:32:f1:a7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Sep 21 21:01:01 2026 GMT
            Not After : Sep 22 21:01:01 2026 GMT
        Subject: CN=11135bf0c595cf4530b11ecb14209b31cb438262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:83:c8:fb:f2:85:df:be:e1:bb:76:12:ab:
                    8a:6d:48:fc:a0:c1:38:f8:93:7c:dd:b4:46:a0:41:
                    ba:53:d4:dd:f5:c7:69:30:90:17:cd:2d:99:3c:e7:
                    5c:94:59:c8:b2:25:6c:f9:97:a3:c0:fc:24:f4:cf:
                    69:81:4a:a5:ad:12:10:fd:b8:45:86:c5:bb:e7:84:
                    ea:1c:05:4a:7d:17:8f:2b:ec:db:01:cd:21:9f:9c:
                    1e:ca:61:52:fc:bd:65:a9:a6:6c:d7:3f:b7:78:fb:
                    fa:5c:88:7e:b2:9f:32:aa:1d:9c:d4:f7:1b:32:1c:
                    b1:ca:6f:88:07:25:11:7a:03:fd:22:44:dd:5b:f5:
                    10:3e:c1:f7:4d:2b:96:41:b6:6a:4c:40:a3:55:21:
                    d0:24:65:5a:43:7f:da:8b:bc:29:67:20:af:ee:43:
                    0d:57:fc:96:05:40:e0:d7:d8:90:6c:b7:17:2c:2d:
                    d0:d5:0a:0a:01:e7:a8:a0:89:41:59:b8:d6:3f:77:
                    31:16:c7:ee:c7:6e:17:9d:e1:54:c1:98:2b:fb:82:
                    b0:bd:28:91:f5:ae:f3:25:a2:63:5d:05:9f:1c:e3:
                    c6:52:20:e7:84:cb:0c:40:6a:89:1d:a0:3b:87:a7:
                    90:3f:62:17:40:b3:89:a7:e8:10:c0:98:fb:7d:96:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:13:5B:F0:C5:95:CF:45:30:B1:1E:CB:14:20:9B:31:CB:43:82:62
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:fc:8f:3a:fa:46:f1:93:2f:68:18:b4:6b:95:21:5d:de:ce:
         75:b4:b0:8d:c7:2d:a8:6e:c3:4e:a7:05:58:f8:72:eb:b9:97:
         cb:75:83:9e:47:8f:0b:bf:7e:9f:4a:79:91:1a:8e:a4:cd:5d:
         73:f0:b3:47:14:f1:80:7c:16:47:6e:4b:20:af:c3:24:c0:12:
         89:4a:cc:de:8d:c5:c4:16:78:89:7c:be:69:69:38:66:cb:46:
         09:83:19:e3:18:90:00:fc:41:a9:a2:9c:23:3e:cf:9a:df:7c:
         32:d9:4d:74:b6:7d:a8:2b:fd:24:9c:9f:0a:9e:34:fa:78:29:
         f7:76:44:3b:86:6d:bc:cf:37:ed:7b:b1:be:a5:73:c5:7f:8c:
         01:62:56:f7:99:9b:15:d9:39:89:f5:92:34:41:e3:2e:f7:f6:
         86:0c:22:2d:9d:21:bd:3c:1d:a3:6f:5a:f0:72:9d:60:89:14:
         b6:f3:f6:0f:54:ea:b5:ac:57:a1:60:32:b0:b8:5c:8e:bb:e6:
         87:cd:ff:72:7d:c2:09:03:e7:45:b2:a8:44:37:66:a5:fb:9b:
         fa:82:7b:78:a3:22:fb:b0:b8:0f:5c:45:ce:30:8b:f1:09:1d:
         aa:ca:c1:52:c6:69:15:2f:f4:b4:27:bc:d7:e6:3b:fe:57:de:
         96:1b:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----