Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File:                     up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier:          dOlLHSaLToZZjCbIWyj4vwmLfUM/PNGPogvsmpYqN+8=
Subject key identifier:   9E:1E:02:5B:84:0E:33:89:BA:22:5A:7B:AA:C2:C3:71:0A:50:F1:EB
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       01A0D3832A03F81C54851A7D01FE48EA3F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number:          1A7F
Signing time:             Thu 24 Sep 2026 13:03:03 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:03 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:03 +0000
Files and hashes:         1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
                          2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
                          3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
                          4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
                          5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
                          6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
                          7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
                          8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
                          9: MR0r-YpSmpXMsH4aFzpiE02h6bo.roa (hash: f4/OYvolIQCytH134KDQmcd51o3N0KRG0eWhuISvPcg=)
                          10: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
                          11: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
                          12: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
                          13: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
                          14: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
                          15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
                          16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
                          17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
                          18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
                          19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
                          20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
                          21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
                          22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
                          23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
                          24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
                          25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
                          26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: O58CAstImKzRT0fj8G9ldRGrK4B30AerN2D+XkIgW0Q=)
                          27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
                          28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:2a:03:f8:1c:54:85:1a:7d:01:fe:48:ea:3f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Sep 24 13:03:03 2026 GMT
            Not After : Sep 25 13:03:03 2026 GMT
        Subject: CN=9e1e025b840e3389ba225a7baac2c3710a50f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:26:0f:55:1c:c5:a8:44:88:80:cc:5f:23:
                    89:b5:c3:de:d6:66:81:5f:f4:86:49:de:cd:b7:07:
                    44:af:7a:1b:3e:37:f5:90:c7:e2:03:b5:2d:af:f1:
                    08:40:fd:4e:da:91:27:22:ef:23:0d:48:90:d4:4f:
                    a2:75:46:d8:3c:f4:ff:2d:22:6c:8c:d8:2b:1d:1a:
                    90:b6:d0:9f:43:96:d4:88:28:ff:42:7d:be:88:d4:
                    97:b4:82:f1:ac:40:a5:c4:3b:bc:e6:7b:03:3e:f3:
                    08:44:7c:f4:a1:82:af:8b:98:ee:52:5a:f9:d6:94:
                    f8:91:0a:4b:5c:e6:51:38:76:84:5d:40:55:66:60:
                    53:3f:b2:2d:ca:84:8a:3b:b2:77:f8:b6:3d:08:85:
                    88:db:e3:4b:04:b3:d5:40:44:6d:df:f3:12:fb:ab:
                    12:9d:1f:f2:91:0a:3b:ff:1d:0c:e9:90:d9:69:bc:
                    da:5c:95:f7:dd:46:4b:38:ca:f9:24:6a:96:e1:56:
                    d5:35:bd:f2:7b:fc:bb:11:8e:f5:ee:72:fd:ae:9e:
                    96:79:bb:99:43:a5:8e:36:01:ab:f4:ba:02:02:4e:
                    d5:c6:39:e2:65:9d:a0:35:c5:5a:a4:14:fc:53:43:
                    60:74:ef:e2:5b:d7:d5:08:ad:3f:30:3f:d5:ab:fe:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1E:02:5B:84:0E:33:89:BA:22:5A:7B:AA:C2:C3:71:0A:50:F1:EB
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ac:6e:3a:14:19:a9:f1:98:cb:b3:2d:01:95:bf:fb:76:22:
         d6:de:1d:2d:1e:6a:37:9f:70:ab:8e:5c:54:5a:b9:44:19:88:
         c6:d0:55:6b:47:02:25:81:56:30:9f:02:f6:e9:f5:32:4d:4e:
         d1:3d:0a:29:98:32:3e:ff:94:d7:a0:43:af:d6:23:23:ed:27:
         33:a4:a4:f9:6b:ae:5c:bd:3b:06:6c:48:e7:d8:b8:56:d8:79:
         ff:bf:6b:2c:98:61:26:8a:16:88:b7:c7:e0:a5:da:af:50:24:
         d1:a0:c9:f5:04:eb:11:73:b9:9c:28:dd:72:df:64:55:4d:b2:
         37:59:08:2b:2c:ee:ad:1f:52:76:12:1f:f5:20:8b:a4:f8:c0:
         cb:25:64:1c:97:5a:f1:8f:5d:58:66:6b:08:6c:fe:27:1d:9b:
         c5:1c:78:31:5c:a4:23:5f:20:f0:47:04:74:e4:05:af:a7:99:
         86:72:83:99:f8:6e:4f:a6:75:5f:a9:5a:d1:7e:e4:8a:f9:87:
         01:96:61:f1:d2:32:da:93:4e:fa:41:f9:df:40:76:a1:01:74:
         e1:f9:fa:c0:e0:be:b6:71:2b:6e:ee:f4:9c:c0:a3:e5:a4:97:
         42:fe:31:44:72:f1:00:bb:f2:c3:18:b4:ea:6b:3d:a2:0e:ef:
         2d:15:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:42:55 2026 by rpki-client