Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          UB/2OwrDKXDjfyG8L0QP40mX4/I1z4dTSipwT5d4c54=
Subject key identifier:   09:12:EB:CF:8F:EA:C6:EC:F2:82:CC:9D:92:58:72:A2:18:4A:DC:3A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01A0C77CB74DBAD82940E99D2F2C82194740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1BE4
Signing time:             Tue 22 Sep 2026 05:00:34 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:34 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:34 +0000
Files and hashes:         1: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (hash: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=)
                          2: 1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa (hash: b1isReMzje2eOqP7q5KK1YgmNcLYTYhlgMv1rOjAxw8=)
                          3: 2ndwCQa5uK9SGXTw7amvh8YViz0.roa (hash: MNshJXo3vLTUpr4S/CLHnaCG5DDaH89yW7YggkO0OtA=)
                          4: 5DO2gDG0jIsxWfIdsn6VtS8YzVU.roa (hash: vc1lWKgaQKcWvIEiovIUH6ry7EbnnG5est8nMrCuGtk=)
                          5: 5pX8kJiJCPVmM1lxRsl_efKZJ6E.roa (hash: VjN+Ml3RUlvEn8Cd/Fyc6zoAe8Gd9xzPezlsNJZIkRQ=)
                          6: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (hash: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk=)
                          7: 9OxDWufNnv1B2C-qPmgpikF7iaw.roa (hash: dL8qSlWuBeannbfUKKeK7j1b+LVimlrkYaTHvjJkkuY=)
                          8: 9ycxm4HV4M6oBtkQ0FxIq397L0I.roa (hash: XqZtCHd2v7KOJd8ycJJagKyRkmCuxO52upsQm7ENKi4=)
                          9: AsR8PMxYeWP89FOuspLxoZEjj1U.roa (hash: ARY4kS+u5n58uyYcSBSAEiIPAoo4CIZkyZRdQCxQau0=)
                          10: GFODE-DZ21eHroatRJKIqVrZsaA.roa (hash: oAdEbCipvHFNYnI86ODFnZBMhLMWx82ptyOpEbw1Egk=)
                          11: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (hash: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=)
                          12: Ip1p585eSEewb0IONkaOYazW_0Q.roa (hash: h1M4blMde36vPMnlEH2IroJd96qzWruE2brZEpd0Sp0=)
                          13: JYBgPKpA16-8lG6M4O7EPuTiVw4.roa (hash: mBzvoCHcL+VOx9e/kdW43sQh2RmNJVbq5CtoJwcYdSg=)
                          14: KOMNv4kJexHVBDbJyLydKJGmXFw.roa (hash: iBS6Sa7XbHDsrGQFZFApnpR/MYWwx807cxFvhzlfc8w=)
                          15: NsHDsBlsQAGgspNiM-HwDV4swTc.roa (hash: eQMEYl3+MQxyvaK6givVIiWlfkYaPSu2MObxqH2imYo=)
                          16: OJDcnZKMbzW_ndCn_Y8xeVCn05o.roa (hash: soAxA3YCjbh3KJriK0iGluXyH4QMgs1fmaVz0A3jO4Q=)
                          17: QggJ5eY0gByoaEixKiNuOhk0OXo.roa (hash: U4DMkB/3xVwMN4uiXFr55EFR8T9dhwrtfKBrzg59+7U=)
                          18: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (hash: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=)
                          19: TrTwjbYZVQnpx21mwUQojkF1K7w.roa (hash: /tObYYDcG5it76EMRHtb0fqj7ca14pgmJwbFzVuz53c=)
                          20: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (hash: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=)
                          21: VOBUZ_eDw91r7CGXPGeqAuZ6FYw.roa (hash: sL4uf5VZIGX+X8GiAZ3uoUdq9D9GHGgGHk2PnjhPhkw=)
                          22: X18nP2YXusglmmwBliQYUGVmd64.roa (hash: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=)
                          23: Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa (hash: mVqlUqfy1ZfqJEiJXBtF73ndtl7OOjyi9baetp4Du6A=)
                          24: Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa (hash: fpg/MNxjzlnzTQca/iybfFH8+ZamTAvUzD57YoORWzg=)
                          25: _0WEtVeYmyN6fbjUnvVr6TBrM_U.roa (hash: bBT+7EVpBue35D72uWgKV3lxs36VXuRkVcTO+JKO2S0=)
                          26: e6CoFHLnuAzFa9YTuuhaCMU26lc.roa (hash: asWWpfy+pF699oYpW4nAgJPS4b74gHKC/MJIvU4mjNE=)
                          27: e_8LCfE_pngkPg3O5n81H_tyTro.roa (hash: z2GpZJjZPHBgpOqNxe6EdKGnVRgsgNAoxLNBM3PnZwY=)
                          28: fXi-3J0I08pHCGpMDBfoClmPjMc.roa (hash: 021lBJ+9jhBzDrRbngydXsCj6/uNgbtu04bJTaEzJbY=)
                          29: fzT6m7yfTXCj-_AX_jr_FdABgeo.roa (hash: V87OGI8yShhu6uYBdg9rce79OVzvm1oTgwekYxO+Afg=)
                          30: gYtsibPnBXBPb2nY_SAs-atiQiI.roa (hash: wZHUmXk6L4SjfoRfOx34od7ZFq/bTnT1ojNinmzWm5o=)
                          31: ku-pFyguE5cHtF69_qC9IQyhWD4.roa (hash: SRmdiGErBs4riF+x6opmEUXvpJ+dRiQ3pdAIUM1No24=)
                          32: n4AMurCrww_nURM0yKJCQWoqFho.roa (hash: Pu6TaTGLhHGntg0HayCe7LPYpIinuWkfBvOuAdu6bq8=)
                          33: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (hash: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=)
                          34: prX2QmznROhgf8aQH5IecY-zslo.roa (hash: LbHo1sJqOtv82DGX7yrtWCmYrA3H8Z4oiQyDZv+bXDk=)
                          35: qdTxmC1M-cLgpOCU4X2vmsVLSxA.roa (hash: A9F9hgF4690mdOxK/7gd71yvYHQZzaHopzHxADwnEzA=)
                          36: ql1haZnROI_A4gtMJ1WOjV3AQNw.roa (hash: etq9X6mBNiExqhsqPZrAcoPMp4nhVPKjSDDkz+uku0Y=)
                          37: rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa (hash: 2K+J256SefSCQUxPHkRrXtSFRiGIJpB2gFkBQ7pPKWE=)
                          38: uvo9qLrP-xQ9FWfoQOzD-ND2gZs.roa (hash: bNQzpEIOSnPK9ZwpcBxEVwm8tiEls+8YjeG+tA3PxQ8=)
                          39: v0JIrMBFpH7tvCvQvSx7puVBU10.roa (hash: YA+s/oHGP7hhJte8WNkK/Co7ljEbNpMQnYFsZLOgegU=)
                          40: wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa (hash: TDDcS+/ukQqSqdHjq0a0vf8SB/v2/c/ZPb4Efbz0S7w=)
                          41: wlZTNZPVMxiXs641En6t5-EeJUw.roa (hash: gKSFJeU2J/eZ0luL9bAhjMHupWPFMTGpHQJ2vR/V7JY=)
                          42: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: YZ0Ii54pL1ZU1mYVhb7PIUUdYb1azHxGbYRnsD1sMl4=)
                          43: zYFfWUlh-P5ldgkEaLd32AaEmqc.roa (hash: d8sg18toB2rZYXSV8ZWT01bPiWhaZN7thdAndhNnLhI=)
                          44: zw5ASt6FbS9gaQdMoTSUrxoQDzs.roa (hash: 05L2f6C89A3oLrnF075R9QF91YUYXPd9ek2Su2pjObk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:b7:4d:ba:d8:29:40:e9:9d:2f:2c:82:19:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Sep 22 05:00:34 2026 GMT
            Not After : Sep 23 05:00:34 2026 GMT
        Subject: CN=0912ebcf8feac6ecf282cc9d925872a2184adc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:ba:1a:54:66:d0:a9:51:63:8c:d8:31:98:
                    7c:93:7c:0e:44:d9:29:a5:b5:23:a8:d7:15:72:ea:
                    16:70:fa:03:3f:60:a9:0d:dd:36:1b:56:a2:82:22:
                    97:4a:22:30:62:fa:14:32:03:68:2a:ec:7d:55:3d:
                    1b:76:74:3f:11:0f:88:ef:96:10:e2:9b:e9:7a:99:
                    c0:53:0f:ad:68:86:9f:b3:5b:31:bd:21:04:37:81:
                    d0:08:0e:39:0e:a1:87:c6:a9:19:de:e1:57:00:24:
                    48:06:fe:a2:59:62:4d:d1:48:f4:51:a7:b2:13:5c:
                    da:3b:b0:b8:58:fb:86:11:88:52:44:55:3f:f5:f3:
                    23:3c:6b:37:64:75:5d:af:34:60:06:f1:31:b6:f4:
                    d5:53:3e:58:a3:2f:32:7a:0e:87:ce:02:0a:a5:51:
                    a3:70:56:19:df:bf:3f:c8:a8:5c:bd:ba:ca:5d:98:
                    dc:8b:38:ae:38:70:d1:bd:0b:a7:bd:99:fc:29:56:
                    fb:e1:43:51:bd:c3:3c:61:06:22:d7:93:25:d4:af:
                    22:2a:86:e7:e0:55:1d:ff:2c:20:77:fc:02:60:be:
                    7b:15:ab:28:7a:29:c4:df:79:cb:34:f5:fe:31:67:
                    36:0f:2c:56:78:0f:a9:10:cc:29:85:00:c7:18:4f:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:EB:CF:8F:EA:C6:EC:F2:82:CC:9D:92:58:72:A2:18:4A:DC:3A
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:34:fe:db:75:69:3e:36:89:af:ac:5f:a3:da:46:56:b7:
         21:4a:5b:24:25:55:c8:fa:c8:d2:4c:c2:2c:cb:05:c4:2f:e7:
         84:7b:69:c6:01:ef:95:9d:31:13:43:a4:77:e2:79:28:a3:08:
         0b:9b:2f:75:92:9e:62:d5:ed:2e:88:cd:87:b5:97:80:74:1e:
         80:01:69:aa:7f:c4:7d:33:b0:8d:11:3b:dd:04:1d:60:a0:41:
         10:5c:e7:67:1c:ef:1c:2f:80:1f:69:81:7d:b7:af:46:78:89:
         74:68:0f:2a:f7:e6:59:01:ba:25:10:f5:5e:98:7f:89:35:f4:
         db:cf:e5:2c:50:7f:62:e8:c3:2b:81:78:4b:89:10:d9:60:06:
         19:d2:18:8f:2b:c0:d3:69:7c:fb:98:9d:c7:b4:b5:da:40:8f:
         10:af:4b:f9:05:aa:e2:a4:98:be:75:17:a0:c0:67:0f:1a:3b:
         5c:e6:3c:5a:f3:75:bc:40:51:84:fc:e5:02:08:c4:a6:4b:31:
         f3:2d:2e:f4:82:f1:c1:3b:80:b7:e8:02:64:5e:b9:66:0a:ec:
         68:62:94:af:d6:b4:2c:58:05:dd:75:5d:53:09:1e:55:24:4d:
         d9:39:ff:33:5f:c4:ac:d9:a1:9a:5d:fc:ec:60:84:6e:23:9f:
         99:98:8f:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfLdNutgpQOmdLyyCGUdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwOTIyMDUwMDM0WhcNMjYwOTIzMDUwMDM0WjAzMTEwLwYDVQQD
EygwOTEyZWJjZjhmZWFjNmVjZjI4MmNjOWQ5MjU4NzJhMjE4NGFkYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk26GlRm0KlRY4zYMZh8k3wORNkp
pbUjqNcVcuoWcPoDP2CpDd02G1aigiKXSiIwYvoUMgNoKux9VT0bdnQ/EQ+I75YQ
4pvpepnAUw+taIafs1sxvSEEN4HQCA45DqGHxqkZ3uFXACRIBv6iWWJN0Uj0Uaey
E1zaO7C4WPuGEYhSRFU/9fMjPGs3ZHVdrzRgBvExtvTVUz5Yoy8yeg6HzgIKpVGj
cFYZ378/yKhcvbrKXZjciziuOHDRvQunvZn8KVb74UNRvcM8YQYi15Ml1K8iKobn
4FUd/ywgd/wCYL57FasoeinE33nLNPX+MWc2DyxWeA+pEMwphQDHGE9NYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkS68+P6sbs8oLMnZJYcqIYStw6MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXs0/tt1
aT42ia+sX6PaRla3IUpbJCVVyPrI0kzCLMsFxC/nhHtpxgHvlZ0xE0Okd+J5KKMI
C5svdZKeYtXtLojNh7WXgHQegAFpqn/EfTOwjRE73QQdYKBBEFznZxzvHC+AH2mB
fbevRniJdGgPKvfmWQG6JRD1Xph/iTX028/lLFB/YujDK4F4S4kQ2WAGGdIYjyvA
02l8+5idx7S12kCPEK9L+QWq4qSYvnUXoMBnDxo7XOY8WvN1vEBRhPzlAgjEpksx
8y0u9ILxwTuAt+gCZF65ZgrsaGKUr9a0LFgF3XVdUwkeVSRN2Tn/M1/ErNmhml38
7GCEbiOfmZiPfg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:32:02 2026 by rpki-client