Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          DvoOnIXcOCvB+mJMabm/Q+G5Zwi+HzlVuxrWehSqOEQ=
Subject key identifier:   A0:A8:4C:16:D1:A6:7F:FC:82:9A:E7:BB:7A:C2:E3:FD:4B:77:EC:7E
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       01A0C1E87D85443EA4294C8C0CDD8EAE4A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          1AC0
Signing time:             Mon 21 Sep 2026 03:00:34 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:34 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:34 +0000
Files and hashes:         1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=)
                          2: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=)
                          3: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=)
                          4: 4-OxTRvKsE-KfsPGgyR1V3t99X4.roa (hash: L2A7Kx7pcANTVtohacYGiY2IpmYiWV3MjmG+5heBuCc=)
                          5: 6vVxzg1To3jRLZRe5eAGfm3AXO8.roa (hash: J5x0w+XQYRKdT8cjk+sBpm9ywaXeHXB36cqOs9BFfgw=)
                          6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=)
                          7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=)
                          8: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=)
                          9: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=)
                          10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=)
                          11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=)
                          12: Jl-3rddU5JjTlh4l0alUwA66Db0.roa (hash: ZChl26Oem6nIwZHG1a7h5kQon71v0ACHznlQkh4KKGU=)
                          13: KV59OO7KJClf-nV-SktyqxjeQD0.roa (hash: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=)
                          14: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=)
                          15: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=)
                          16: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=)
                          17: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=)
                          18: Msm0CfNKc2NQbDNlopaTwAKNTxE.roa (hash: 07dSY8XgqSRoFl5jsJCKlKLDItme7Y+Kfp8MrCvTuD8=)
                          19: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=)
                          20: OrFKuXk1tNGW3qAfJhiWIvgABlI.roa (hash: GCcWM3qYGz+jKi3Y/YpCZkCF1WqTLbWom0Q9aQw1vbc=)
                          21: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=)
                          22: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=)
                          23: RNLAho-QCCsGT4LlSBmDznPzISI.roa (hash: k9qrK3CB3pZBI/+ijf1H63IQuNeWEj/N3CKMuUtiwh0=)
                          24: RRKsQC6M9AkjMNnb6Dbgy31a89c.roa (hash: RgVs/FEdPi9iuMl4X4UjocrvDXfBoeU0x5T2+6iJk9Y=)
                          25: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=)
                          26: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=)
                          27: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=)
                          28: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=)
                          29: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=)
                          30: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=)
                          31: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=)
                          32: f6vxDfNcKmbcRMocWBWqx0klFfU.roa (hash: yF/U9wmEqkEVL+v6ftdK6mnwfqDPE8fyPj5MQZHAAd8=)
                          33: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: L93Dpun0dfImLkr4qxG+lHBAKjuS54d7Z21Qa7ejOH8=)
                          34: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=)
                          35: oqbInV5y5jVijngnsT6Z4KkwCJs.roa (hash: Jofbkqy8kOPIsDBzvJum0QcsSO9pDkw/9K4nko6x7wQ=)
                          36: pvqnTAmZTCtaDIGRIJLpV3RVRq8.roa (hash: ELaRN/1CLckouMuTm/tPdmNa5GWM0lES+K7y8P8juTs=)
                          37: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=)
                          38: ukeeQgc1qQ-vF29y9LoNJsvaP4s.roa (hash: K5QO1YvJwo4eZmewT8GbQ87g0G9iR3nxd59JfY8KzwI=)
                          39: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:7d:85:44:3e:a4:29:4c:8c:0c:dd:8e:ae:4a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Sep 21 03:00:34 2026 GMT
            Not After : Sep 22 03:00:34 2026 GMT
        Subject: CN=a0a84c16d1a67ffc829ae7bb7ac2e3fd4b77ec7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:c1:51:5e:3e:77:6e:a7:cd:f3:e4:2c:36:
                    5e:fd:dd:9c:b7:16:42:9d:4a:29:2a:50:cb:21:83:
                    78:52:81:bc:f4:4b:ed:24:83:d0:ec:d2:d3:2f:df:
                    8a:56:1f:04:ce:cc:45:bd:c0:57:48:30:1e:17:97:
                    9c:37:6b:04:4e:8b:5b:19:46:27:0f:11:2b:1e:0f:
                    1c:cc:78:97:4b:ca:67:f5:3b:11:8c:f7:4e:c8:3e:
                    cd:88:70:48:c9:28:56:24:a6:34:f0:da:92:5e:c0:
                    7e:c0:df:33:04:f5:24:f3:45:15:f1:61:2b:9d:71:
                    a4:06:d3:0f:d6:a1:d2:37:f0:e8:5d:f3:19:58:5e:
                    9d:2b:8a:ff:47:24:10:56:ea:12:e8:11:41:a6:28:
                    f0:64:4c:4f:9b:0b:c5:95:a2:f8:b9:33:44:db:cc:
                    29:f5:aa:76:c6:e3:f6:a8:84:88:d4:2b:11:8c:0b:
                    b1:4a:d9:f9:cf:04:4f:1b:c2:d2:89:e4:da:f5:23:
                    6d:80:9f:b3:cc:2d:0a:30:e3:1b:d0:79:bb:ee:11:
                    58:c2:40:44:f1:7f:99:16:3b:80:fa:a9:81:ab:7b:
                    a5:0b:47:06:f8:60:ed:ff:dd:95:d1:79:81:99:1b:
                    69:41:e0:9a:43:ee:8c:40:a7:86:95:6a:e5:cc:a3:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:4C:16:D1:A6:7F:FC:82:9A:E7:BB:7A:C2:E3:FD:4B:77:EC:7E
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:75:59:69:5c:f9:6b:36:44:a1:04:7d:6e:a2:0c:7e:6e:
         32:ec:a8:3a:b4:80:c4:ee:86:4a:82:e3:b0:76:2e:8b:e4:6b:
         67:7a:5f:10:92:1b:86:bf:83:96:53:2c:f7:e1:6d:1e:83:e4:
         bf:be:6a:3f:da:28:01:09:66:47:55:37:04:a0:6b:32:3a:a9:
         7d:c5:5a:3b:6f:d2:d9:7e:87:4f:af:cb:71:c2:f2:e3:46:af:
         d9:0d:52:9e:7b:bb:c3:eb:68:db:fd:46:b3:95:67:0c:19:b3:
         5b:ac:3e:46:da:f8:b8:f0:f3:aa:9c:1e:99:f9:0b:1c:a6:72:
         b4:04:58:af:62:e1:91:51:4b:ae:a0:37:64:af:08:0e:c4:fc:
         24:37:3e:e5:d6:18:64:0e:fb:ad:06:9e:5f:45:66:84:3e:7f:
         6a:c9:fc:e5:91:84:01:5d:4b:3d:85:94:ce:c1:c9:43:e0:25:
         6c:c6:0a:b6:f6:fc:94:3f:2d:79:eb:6b:9b:a5:f3:25:d5:e2:
         54:06:7b:e8:f6:19:79:d7:93:45:e2:92:1d:15:fe:83:06:ca:
         36:af:33:af:99:f3:6c:e5:ce:51:b5:30:b2:36:41:cf:cb:77:
         10:91:05:f3:7d:ed:5e:2c:76:b5:74:7b:fd:35:92:72:fd:52:
         66:3b:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----