Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          WzDMkRlRK90/WT79YuqXppS/eyMHmKdxo7A7EzLBK2o=
Subject key identifier:   60:0D:23:3C:22:A9:74:8E:BB:E5:92:50:3E:67:2C:3D:F3:B7:B6:3E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       01A0BE79C3FFA611B2483EB194789C4D67E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          12C0
Signing time:             Sun 20 Sep 2026 11:00:46 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:46 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:46 +0000
Files and hashes:         1: 1-in6fcWIaPM9o0JaQgI896hF-zw.roa (hash: +9m5BgtCfpchHYPV7/EjyZt6YHGzYJDxbgj6oT6HF5k=)
                          2: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (hash: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0=)
                          3: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (hash: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o=)
                          4: 3icWZ0l13CoXwoj1OeRHgYert90.roa (hash: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk=)
                          5: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: Zh68RQx1/n7PNFRG1q7pD5kLNwiy+Qe5l7b3O/dG4fI=)
                          6: 992fq_vGVR9DhcbPe8CUBvscAjo.roa (hash: ZIybI4m8ghsWbqdFNo303oecu4P0wgHVi4nE/lbnR9s=)
                          7: C0gLDzEON7GbUuqeqStfjnIBp_k.roa (hash: kW2ilQ40sXgngeB19vuaQAEZ0a+UVe7vAL02vYsHhxI=)
                          8: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (hash: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw=)
                          9: EED5PEY1a1IMhSE0BwQBTJLp1mc.roa (hash: elqOAc4bpv6jCN5g6K4Rk1qf2TmccJP7YVS2HbgSYS8=)
                          10: ElgFDiuFJ69k81EViaoKdimWii0.roa (hash: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=)
                          11: Fw-_GsT_dsoHsGPbOHLFB4rVcB0.roa (hash: Wk4G6DHlreumBWIikwTS5biXQLWjgyiSa8087fK+7So=)
                          12: G7LeYd0fXrMm-2duJDxHCF2Mid0.roa (hash: 7ZmxQO/JbegguZNq5XpK/SxY6WA8hbHx/FN0cGaqvAc=)
                          13: HbjKNiw4d3SEg0dTumigj0PGsTM.roa (hash: nW4tvMSwJMcIQf6OvnWLF1rZzRY1A2YzlXfxp1Y/+GE=)
                          14: KO3mbecsHziWft5oSlk1_j2d34M.roa (hash: f8pLS1dd6igj0miudYVCW/atCJnG106OYVdNd0IpsmE=)
                          15: LtoQvzCaMW0D-GhISv0hO8NnPOs.roa (hash: NcaX+GMamiFW/3NMIXtO3ttNk67Gbq5SGUiAVxBO82M=)
                          16: Mt4AQ66nGpX52iVTjG_QPgMc6j0.roa (hash: Nn/pGbRWzSFMrKeCQn+bGQau+a99ydSdqv5kVOvZ67Y=)
                          17: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (hash: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI=)
                          18: OKXdbYt6uiI_E7K2Y5NQ0q7B-Hg.roa (hash: QufMF5nQ301kb3Q/QUdR+FEuJBPVpRiSz6zQPzVWvIk=)
                          19: ON9YWiWt2G9hjCjDsqVcvbX_4s0.roa (hash: svhW29f3+cdPIBY4o1lLV7CzbwX1eK6CWnZYwYfOyNs=)
                          20: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (hash: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc=)
                          21: Qerk2VIQWhlnZtUFOR1amkJ29g0.roa (hash: y117lHapRieYxp1hZihDZzze+hWwVr4/qKnm8Hy7HDc=)
                          22: QihhibEPB5qBqDDL6gcnigScDv4.roa (hash: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA=)
                          23: UETzsQ14kEiR9ZLBzc1Rs6TQ7y4.roa (hash: mJed5UC6Bhm9fWUs4Xbxi43CN/6iMd2evk2vhZxj36Q=)
                          24: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (hash: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ=)
                          25: VTvixWkQMb81xqq15q9rkLGzQns.roa (hash: ryhXeNesoIfEURs7jvSEodrx0dn3DmlePOw6kt2lyr8=)
                          26: XnT8EkhkZ4ckaqupDpvRmKmadIU.roa (hash: LOQvwDLJiJLfGtgfx8v+cSvzCjMCe4xzGPCXgXKQfOA=)
                          27: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (hash: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg=)
                          28: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (hash: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo=)
                          29: c219QE8Kcog9UvMKST6A1X7Uzw4.roa (hash: a1rqIUue8AkZGET3xy9zr5OLEkOjTEfxL6rRJ8ZMXeY=)
                          30: cFFROZN_Y7sbAl1I74jtZggCTG8.roa (hash: InYvnCiiHJwyYctWNboHd6rtW9mlE8oy1wdX6DMdMjI=)
                          31: cIdwaFMnaN_nODeJi4PVUhETURc.roa (hash: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE=)
                          32: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (hash: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=)
                          33: iAuw5JQ3mAXjxY6QWG9RY3yTA-Q.roa (hash: UOg7kVgDqAJH5jfqy325Mwl+Vg9DYyHjwnI/jC5MC+Y=)
                          34: ikDfAfW-xsNgatn_b62wDmF7okY.roa (hash: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0=)
                          35: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (hash: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I=)
                          36: n7USEOktH5zuMAuITWQF7AXRczQ.roa (hash: ikLG4Fs9JJDgwb3XKOBoWhu8ubnMCzT/Buk9vuX9UaM=)
                          37: o-hXWK4pXGwy5inV-8aCVcH2pGg.roa (hash: hrroknuz7ekKj0nTTUoccrmwtDEAl2lggxPNrOeczwY=)
                          38: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (hash: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc=)
                          39: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (hash: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s=)
                          40: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (hash: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg=)
                          41: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (hash: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4=)
                          42: xIdot6FAjw7dfRg6u_ByXcj3lDM.roa (hash: 8+XjLrCilLhi21bpw8d0FOgL/oy8JtzB6AjiHlyT9fw=)
                          43: xXH0TOzedy66ElcG97fd78bjZKs.roa (hash: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:c3:ff:a6:11:b2:48:3e:b1:94:78:9c:4d:67:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Sep 20 11:00:46 2026 GMT
            Not After : Sep 21 11:00:46 2026 GMT
        Subject: CN=600d233c22a9748ebbe592503e672c3df3b7b63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:9a:52:6a:e8:05:88:bd:21:cc:13:a3:da:
                    b1:ad:5c:a9:95:fc:a1:8f:9f:57:16:87:c6:0b:02:
                    04:cc:1b:4e:7b:9a:83:9e:82:01:fb:9a:a7:50:33:
                    46:22:26:ea:f0:2e:6b:42:c9:2c:1f:bf:c0:31:03:
                    e1:d1:56:81:70:6a:8a:4a:a8:b2:01:d4:9e:3e:bb:
                    e1:e9:31:a4:6a:7e:3e:77:b8:53:57:c1:12:77:8b:
                    88:17:ee:9c:c1:35:eb:a1:81:ae:c0:00:83:c5:3a:
                    d8:72:6c:21:00:ff:a4:8f:99:c8:ee:6b:ac:f9:ff:
                    c3:33:f8:54:1f:77:39:5f:03:a5:4a:6e:57:e2:ce:
                    50:8d:73:1c:b3:03:39:61:63:a5:c8:c3:35:48:03:
                    7b:56:cd:54:9e:da:10:b3:a8:ad:77:5a:8c:42:6e:
                    cb:90:ba:ff:01:19:62:ae:25:61:0b:4c:6c:89:7d:
                    1a:16:bb:8c:73:69:67:cd:bc:08:de:4c:0a:1c:c5:
                    ce:0f:12:19:2c:aa:59:7a:bc:d4:b7:f0:3d:8e:27:
                    9a:ce:d5:b6:ac:37:0c:52:87:66:a8:ec:a1:3e:2b:
                    38:c9:82:29:5a:3c:81:2d:78:e4:ee:45:de:86:5e:
                    8c:91:91:15:f2:39:b1:86:f7:6a:76:eb:15:e9:0a:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:23:3C:22:A9:74:8E:BB:E5:92:50:3E:67:2C:3D:F3:B7:B6:3E
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:f3:86:e7:d6:ba:33:19:0c:a2:bc:91:da:f1:f7:b9:8a:
         e2:22:c3:a4:ca:59:3f:9b:12:0a:f6:d3:2d:bc:66:5e:82:47:
         cc:78:35:c0:02:38:7e:4a:19:08:2f:a2:8c:90:4c:f0:f7:c6:
         81:25:76:68:94:0c:9c:f5:48:d4:d4:f8:13:1b:bf:53:ef:dd:
         c4:68:65:ee:67:a9:5d:7f:36:16:a0:c4:2a:f2:c1:22:51:29:
         bf:91:4c:86:29:74:0a:9e:be:51:4f:0f:f1:79:71:52:ed:83:
         45:f7:db:8e:66:c2:2e:54:c0:fb:56:15:84:a5:31:f9:0c:d3:
         3f:7a:81:76:ad:eb:5d:d7:83:3b:8b:ca:c8:e0:17:d2:85:40:
         9f:94:4f:c2:28:7d:bd:76:4a:cb:d0:f5:9a:b7:be:51:4e:31:
         c9:6f:b4:8a:f1:f5:f3:4b:f7:b2:f8:ad:b4:1c:18:ac:c3:fb:
         1e:01:a6:11:1f:b8:83:e0:51:97:a3:eb:9c:24:03:82:64:9a:
         2e:7e:24:52:35:03:7d:a9:2f:98:17:15:49:6f:75:74:42:aa:
         73:58:8e:b6:6e:d9:aa:07:70:f7:33:e2:f4:c2:46:dd:23:d3:
         41:ef:9e:b5:65:5e:7f:41:8e:61:a9:c5:7c:94:75:9b:82:73:
         a4:bb:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:58:37 2026 by rpki-client