Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File:                     ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier:          PpPhY6qlzOZ9VXd5DUOQ4ET4fWHtEtOcUbe9y5o/8Sk=
Subject key identifier:   BD:D1:0B:28:18:34:19:55:16:48:E3:A6:17:BB:17:CE:1B:02:90:90
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       01A0BE434E8626FCF9E8DBBDE329592F8079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number:          1BA9
Signing time:             Sun 20 Sep 2026 10:01:17 +0000
Manifest this update:     Sun 20 Sep 2026 10:01:17 +0000
Manifest next update:     Mon 21 Sep 2026 10:01:17 +0000
Files and hashes:         1: 1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa (hash: u5eV4Uv1MiiJKh19sA1D3lrEkUoskPq0E06VtKGTPQ0=)
                          2: 2VzxNAD5xu9qC7p4x02lMD0GwhQ.roa (hash: CAlmRrgnozD3WhBbxiuTcmh3DcHksqgcq9qNexpG6IE=)
                          3: 8ytmRdbaYIK-p0argiKofaoScHY.roa (hash: NzZjhETEPOV9qOe2iCOKukIBBkV+9EAmc6ndeYhO0Yg=)
                          4: 9ooz9b_e6pHWMlAuH55rcu6Y1vI.roa (hash: z9n0EkwTD8zfbj6iuYYJ7TWAU4nOskFjruLg1WEgFJU=)
                          5: BN3uTsvLVfLQEFEGegnn9TgGMCc.roa (hash: odMOUTahv8T8UIit5Zs817beNixUhfCh509OUC0pTXM=)
                          6: DR3Bz7Oan3i6vgko-GvHhPb-Px0.roa (hash: fLmSqodUAGL/yoED3chUFJFBL41B6P99W79IRZINO/g=)
                          7: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: AOuwcSoAMfwzP4cnDnw01imlVyG1ID2X0Cc5xPEFTYA=)
                          8: G54XLkaMlrOl_RIl-BBLFf32j_4.roa (hash: 1HmrmYZ1lX0kzUUafKsHyk1mrTGQ2bqrAlLdgPA1QtM=)
                          9: Ga2QoPplZN3qKWPe3jkeI2wCvbY.roa (hash: pyCcsaIPtu6Vo+y1Dhxv1YatwFjCk/g8B0UeKITfXUI=)
                          10: LC8JdHb7mQK2U35xl1WDG4Ecgco.roa (hash: ZOsWFR7wNV8Rqt3zChMJWe1z+CmXOSdrTussL35X9v4=)
                          11: Mq91aHgILLYinYVbGX30JTicK2Y.roa (hash: awH0fZT5nCVQDV/n2dA6uOcYfxt3myd+QXH8nt5Ehzs=)
                          12: NAvPU3PvWk2BT8zglyKAPm42uoo.roa (hash: 1bUbDIdnIXubMQt2eslQ/ZroPi0FRkjK8z9itzf2nhI=)
                          13: Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa (hash: wx8arTEOltxp00f50ADtRMGBaOT600gG2onw7S76NlY=)
                          14: QwqY3xCcCgwIwIboEYJaKH-kb2U.roa (hash: o7oLfHZu1x8Ar12k66Qvb38ZRBeIiBIVHglZulHBXqk=)
                          15: RG7rOxM8Ma6H0vB0Nnbvb7QSb7o.roa (hash: 9oIF71M4azDz9Rp+FJePfIdA+qSKXEhe8fe/V/zE+yU=)
                          16: RZ6uFxZ2wYiFqpML90e3oMn4Nmw.roa (hash: rbN6eVizh26w+omU1nsGiqVhr1M2qWZqIe+UTFZ39T0=)
                          17: RtdT3axTfmWPymViBZqZaqZKpVY.roa (hash: xtwwjn7DzhN5b7BbjlImOVuCLYyjwLWW/osFbNbKEZQ=)
                          18: SudU71UvkOpYbLyB5oHg2RyZNWM.roa (hash: xefx53ev5gZHT0Koi4CdtQgqvR9rIS+NoeeLgTHek6k=)
                          19: XrDTmDzs64c5qX1gh7L5krKuVkE.roa (hash: 1JVzR17fJnA+go53ILZNeVknKR2J/wMTrwUVn89IGUg=)
                          20: YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa (hash: 3JFwMa2Ti1yTw1Xq6RCOz5frDtvKldeHr5rO5JZfbrM=)
                          21: YJS-MeNYCL_epOUC5Dr8RF8zFZ0.roa (hash: m2DE/6ZTamnRJyCEcFcrnUs7f1LULWgHmaf4oy24rvw=)
                          22: _gqR0WwGA3glTlyF8yiHIFlb8dE.roa (hash: mFyXN2DxlKKJyDR5JPAfUo4hQrC8BxOn6sp6aAgxtac=)
                          23: kUSxd1B8AxZq-RVoBSLSqa7QXIk.roa (hash: t+qukMxzE/OHfBy8j/pvykT6K/D5uPcDEid5KQapwrk=)
                          24: lTPOzMZpg6OdVupew9ZjU2_lpvE.roa (hash: ZPbvR2hjypfPkQpNeYSZpOXKwwYAVSdHPl7WM1QQ/xU=)
                          25: lm0JDakseN4M9k5prGS2OV01r6E.roa (hash: tfEpnDtBaRvT6Y+MzPXehc/2PbbXY6lqNNMqfIJXsn0=)
                          26: nFQ-4d9mVifHam7-is3uppf5zEE.roa (hash: Z0H1orr4k7Fxq1oyTd7PjbF2cno+QKF/rfOWpuxdOPQ=)
                          27: pF6WBbamDqigpwnYyY54RICcftY.roa (hash: ygHT0Xa9Cg9CYX3EOU9uQc00YLGDZAbjxPnyMu8NUAE=)
                          28: rfm_-0reLf7PYtJuEP1buHiDkqo.roa (hash: Sj5Ujw/g8ofIjh7PyZ0sM4i+kvY8IKqDptv6WN3btA8=)
                          29: sGL0IpkAAnhvKoGAh5UWQwRpfVM.roa (hash: mpibMWOyOdzjLVDF60aD5dDfWs60rSKxiTiv1sDZLv8=)
                          30: uSSKGqOBXnTR7MVUEQlQOSZ9RT0.roa (hash: NX7M1wXUZXHf/C4RkIE/pAqdDJdNXJnIC49rcaGZIgQ=)
                          31: v2VfTa7zgDDUSueW5M0x4B_McRo.roa (hash: S+YGBrBrvZW9pavreBXFebt4/41gIio3hTT0WdcvbWU=)
                          32: x8G1Yoeg0YCKEaI62w0nGtjOEuM.roa (hash: N+Vr1Wpn9wUw6j07nAIbueMPkuP8xWs0XtxciVf3414=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:43:4e:86:26:fc:f9:e8:db:bd:e3:29:59:2f:80:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Sep 20 10:01:17 2026 GMT
            Not After : Sep 21 10:01:17 2026 GMT
        Subject: CN=bdd10b28183419551648e3a617bb17ce1b029090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:90:b6:4b:66:1b:2e:52:58:6e:65:76:fd:
                    e8:de:7c:dd:f6:f4:91:c3:c4:3f:9c:6f:10:f2:45:
                    5c:05:ee:a4:82:fb:5a:91:f8:bc:e9:db:dc:35:20:
                    8b:c2:9d:f4:e5:c4:42:5b:50:c0:ae:9e:bd:de:46:
                    23:5f:1a:a0:d8:3a:bc:43:49:a6:3e:76:5a:77:6e:
                    b7:8e:41:da:b7:d5:99:fe:0b:c1:c5:c1:8a:57:4e:
                    be:af:7a:d2:38:8e:0d:fd:f3:2e:7b:09:bb:a7:a9:
                    4c:31:c3:f7:a5:d9:c9:42:b2:55:98:42:a6:82:9f:
                    44:a9:3f:81:48:99:2d:59:dc:ac:b1:80:f6:42:db:
                    55:42:6a:da:63:65:2f:64:6b:a6:e4:00:1b:48:a2:
                    b7:76:f3:82:da:47:4b:7e:98:7d:ab:51:ae:3a:0e:
                    76:a1:fe:45:c0:dc:eb:27:cd:7f:d3:7c:dd:12:dd:
                    2a:d5:65:55:c8:2c:99:24:ab:dc:9b:28:63:c0:60:
                    81:df:87:62:c3:dd:55:fe:21:b9:a2:66:32:93:6c:
                    12:ab:03:1f:16:11:55:12:fd:bf:30:cf:d1:f7:a2:
                    f2:5a:ee:f8:99:8c:ca:6c:d4:4b:fa:fa:f8:9a:3c:
                    3b:43:84:87:72:15:46:de:2a:24:6b:ec:bb:2d:00:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:0B:28:18:34:19:55:16:48:E3:A6:17:BB:17:CE:1B:02:90:90
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:af:43:27:2e:fe:75:10:b9:e5:aa:f9:96:3e:dc:db:6f:95:
         9e:87:d0:1b:4d:3e:29:5c:ab:87:d7:ff:ee:f3:cd:39:b9:b8:
         56:96:3b:72:2b:32:e1:ca:e4:8f:fb:19:87:7d:69:40:c3:9f:
         10:4d:2b:9a:40:42:be:31:a7:29:ab:d9:f3:b3:5d:6d:a0:cb:
         f1:25:9c:9d:f4:b7:41:ee:b3:1c:ef:c3:01:45:81:8b:02:b6:
         a6:b6:7d:76:89:89:95:cb:f7:4b:9e:1c:0d:62:f7:c2:01:f8:
         51:e2:33:f3:4e:7b:7b:b1:59:a1:44:70:74:18:dc:72:69:61:
         7f:51:b4:3c:72:d8:b3:44:47:85:4e:4b:2f:ff:e6:53:2d:63:
         cb:8d:b9:9a:b6:4f:25:68:7d:58:69:e8:00:0a:84:bf:97:74:
         5a:38:23:9e:0c:9c:8d:12:db:c3:e7:52:2b:56:03:21:6c:ce:
         e8:cf:2b:56:2d:fb:9c:97:6e:0d:f2:bb:00:ec:fd:08:6d:ce:
         4f:b6:46:8a:56:03:6b:94:3b:c8:b1:1a:e0:2e:01:e8:0d:46:
         5e:1f:fb:1b:11:07:dd:39:90:49:6e:65:23:0a:e0:c5:00:fd:
         e3:c7:45:99:82:6c:e4:7d:a3:0e:06:30:9c:43:87:5b:f0:c0:
         8d:97:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:21:54 2026 by rpki-client