Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          ZVEwukM2s32JmBl0Ma7i7A2jBQCv4/LWadmErrvXbU4=
Subject key identifier:   DA:A3:6E:1A:1A:EF:7D:AB:B9:D2:BD:85:91:E5:24:79:41:76:43:7B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01A0BDD4BA51148049E3062B0306240A0323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          1BDF
Signing time:             Sun 20 Sep 2026 08:00:30 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:30 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:30 +0000
Files and hashes:         1: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (hash: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=)
                          2: 1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa (hash: b1isReMzje2eOqP7q5KK1YgmNcLYTYhlgMv1rOjAxw8=)
                          3: 2ndwCQa5uK9SGXTw7amvh8YViz0.roa (hash: MNshJXo3vLTUpr4S/CLHnaCG5DDaH89yW7YggkO0OtA=)
                          4: 5DO2gDG0jIsxWfIdsn6VtS8YzVU.roa (hash: vc1lWKgaQKcWvIEiovIUH6ry7EbnnG5est8nMrCuGtk=)
                          5: 5pX8kJiJCPVmM1lxRsl_efKZJ6E.roa (hash: VjN+Ml3RUlvEn8Cd/Fyc6zoAe8Gd9xzPezlsNJZIkRQ=)
                          6: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (hash: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk=)
                          7: 9OxDWufNnv1B2C-qPmgpikF7iaw.roa (hash: dL8qSlWuBeannbfUKKeK7j1b+LVimlrkYaTHvjJkkuY=)
                          8: 9ycxm4HV4M6oBtkQ0FxIq397L0I.roa (hash: XqZtCHd2v7KOJd8ycJJagKyRkmCuxO52upsQm7ENKi4=)
                          9: AsR8PMxYeWP89FOuspLxoZEjj1U.roa (hash: ARY4kS+u5n58uyYcSBSAEiIPAoo4CIZkyZRdQCxQau0=)
                          10: GFODE-DZ21eHroatRJKIqVrZsaA.roa (hash: oAdEbCipvHFNYnI86ODFnZBMhLMWx82ptyOpEbw1Egk=)
                          11: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (hash: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=)
                          12: Ip1p585eSEewb0IONkaOYazW_0Q.roa (hash: h1M4blMde36vPMnlEH2IroJd96qzWruE2brZEpd0Sp0=)
                          13: JYBgPKpA16-8lG6M4O7EPuTiVw4.roa (hash: mBzvoCHcL+VOx9e/kdW43sQh2RmNJVbq5CtoJwcYdSg=)
                          14: KOMNv4kJexHVBDbJyLydKJGmXFw.roa (hash: iBS6Sa7XbHDsrGQFZFApnpR/MYWwx807cxFvhzlfc8w=)
                          15: NsHDsBlsQAGgspNiM-HwDV4swTc.roa (hash: eQMEYl3+MQxyvaK6givVIiWlfkYaPSu2MObxqH2imYo=)
                          16: OJDcnZKMbzW_ndCn_Y8xeVCn05o.roa (hash: soAxA3YCjbh3KJriK0iGluXyH4QMgs1fmaVz0A3jO4Q=)
                          17: QggJ5eY0gByoaEixKiNuOhk0OXo.roa (hash: U4DMkB/3xVwMN4uiXFr55EFR8T9dhwrtfKBrzg59+7U=)
                          18: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (hash: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=)
                          19: TrTwjbYZVQnpx21mwUQojkF1K7w.roa (hash: /tObYYDcG5it76EMRHtb0fqj7ca14pgmJwbFzVuz53c=)
                          20: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (hash: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=)
                          21: VOBUZ_eDw91r7CGXPGeqAuZ6FYw.roa (hash: sL4uf5VZIGX+X8GiAZ3uoUdq9D9GHGgGHk2PnjhPhkw=)
                          22: X18nP2YXusglmmwBliQYUGVmd64.roa (hash: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=)
                          23: Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa (hash: mVqlUqfy1ZfqJEiJXBtF73ndtl7OOjyi9baetp4Du6A=)
                          24: Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa (hash: fpg/MNxjzlnzTQca/iybfFH8+ZamTAvUzD57YoORWzg=)
                          25: _0WEtVeYmyN6fbjUnvVr6TBrM_U.roa (hash: bBT+7EVpBue35D72uWgKV3lxs36VXuRkVcTO+JKO2S0=)
                          26: e6CoFHLnuAzFa9YTuuhaCMU26lc.roa (hash: asWWpfy+pF699oYpW4nAgJPS4b74gHKC/MJIvU4mjNE=)
                          27: e_8LCfE_pngkPg3O5n81H_tyTro.roa (hash: z2GpZJjZPHBgpOqNxe6EdKGnVRgsgNAoxLNBM3PnZwY=)
                          28: fXi-3J0I08pHCGpMDBfoClmPjMc.roa (hash: 021lBJ+9jhBzDrRbngydXsCj6/uNgbtu04bJTaEzJbY=)
                          29: fzT6m7yfTXCj-_AX_jr_FdABgeo.roa (hash: V87OGI8yShhu6uYBdg9rce79OVzvm1oTgwekYxO+Afg=)
                          30: gYtsibPnBXBPb2nY_SAs-atiQiI.roa (hash: wZHUmXk6L4SjfoRfOx34od7ZFq/bTnT1ojNinmzWm5o=)
                          31: ku-pFyguE5cHtF69_qC9IQyhWD4.roa (hash: SRmdiGErBs4riF+x6opmEUXvpJ+dRiQ3pdAIUM1No24=)
                          32: n4AMurCrww_nURM0yKJCQWoqFho.roa (hash: Pu6TaTGLhHGntg0HayCe7LPYpIinuWkfBvOuAdu6bq8=)
                          33: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (hash: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=)
                          34: prX2QmznROhgf8aQH5IecY-zslo.roa (hash: LbHo1sJqOtv82DGX7yrtWCmYrA3H8Z4oiQyDZv+bXDk=)
                          35: qdTxmC1M-cLgpOCU4X2vmsVLSxA.roa (hash: A9F9hgF4690mdOxK/7gd71yvYHQZzaHopzHxADwnEzA=)
                          36: ql1haZnROI_A4gtMJ1WOjV3AQNw.roa (hash: etq9X6mBNiExqhsqPZrAcoPMp4nhVPKjSDDkz+uku0Y=)
                          37: rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa (hash: 2K+J256SefSCQUxPHkRrXtSFRiGIJpB2gFkBQ7pPKWE=)
                          38: uvo9qLrP-xQ9FWfoQOzD-ND2gZs.roa (hash: bNQzpEIOSnPK9ZwpcBxEVwm8tiEls+8YjeG+tA3PxQ8=)
                          39: v0JIrMBFpH7tvCvQvSx7puVBU10.roa (hash: YA+s/oHGP7hhJte8WNkK/Co7ljEbNpMQnYFsZLOgegU=)
                          40: wBYA1Z8LYtnKqSwnKA8hwrolIJc.roa (hash: TDDcS+/ukQqSqdHjq0a0vf8SB/v2/c/ZPb4Efbz0S7w=)
                          41: wlZTNZPVMxiXs641En6t5-EeJUw.roa (hash: gKSFJeU2J/eZ0luL9bAhjMHupWPFMTGpHQJ2vR/V7JY=)
                          42: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: JlNlUQ+/vxqceDV2s5TIcg9/pPTE0aD2obMoYArxXuU=)
                          43: zYFfWUlh-P5ldgkEaLd32AaEmqc.roa (hash: d8sg18toB2rZYXSV8ZWT01bPiWhaZN7thdAndhNnLhI=)
                          44: zw5ASt6FbS9gaQdMoTSUrxoQDzs.roa (hash: 05L2f6C89A3oLrnF075R9QF91YUYXPd9ek2Su2pjObk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:ba:51:14:80:49:e3:06:2b:03:06:24:0a:03:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Sep 20 08:00:30 2026 GMT
            Not After : Sep 21 08:00:30 2026 GMT
        Subject: CN=daa36e1a1aef7dabb9d2bd8591e524794176437b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:05:20:74:5e:81:5c:be:fe:dc:6f:85:82:8a:
                    23:e2:a5:a2:42:e6:1a:dc:ed:03:ee:16:fd:55:c1:
                    fc:c4:66:5d:90:f0:5e:9f:2c:4e:99:a4:a0:d9:81:
                    5b:c9:a7:99:6e:d2:71:5a:b0:cc:9d:8a:3a:8d:91:
                    f9:69:9a:bb:53:bd:64:c7:77:bf:e8:4c:67:ea:8f:
                    3f:16:8f:3f:de:08:33:83:69:af:5c:e8:a0:99:11:
                    84:7d:ae:0e:63:f6:c1:23:ea:c3:46:08:45:e0:9a:
                    03:a3:e6:8c:f6:42:84:04:9d:ac:83:11:84:b6:f1:
                    6c:af:77:e3:4c:d6:f9:e9:52:19:cf:76:75:6d:df:
                    b6:3a:38:58:bf:44:1e:ec:71:bb:80:7a:45:e8:05:
                    d6:ff:a1:3d:71:ec:1b:da:30:9e:21:17:dd:58:c8:
                    ab:c4:7c:13:7e:70:86:89:38:51:f8:43:18:df:d8:
                    e4:2a:9f:f3:10:5e:5a:9c:33:bb:74:f6:3e:9a:47:
                    f7:ff:5e:54:09:dd:48:76:cc:2a:d6:b0:70:bb:ee:
                    65:01:07:96:d2:10:bb:ba:85:67:e7:76:72:61:3a:
                    f4:f5:7f:e6:2f:94:e0:f5:9d:f1:5d:4e:69:c7:77:
                    05:a6:1a:0d:88:68:37:23:ec:58:00:13:74:5f:04:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A3:6E:1A:1A:EF:7D:AB:B9:D2:BD:85:91:E5:24:79:41:76:43:7B
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9d:96:3e:c2:84:c3:24:8e:c0:3a:90:5f:e3:ac:8d:01:e3:
         2a:d7:a6:18:3f:44:4e:af:d4:60:c7:7d:c5:fb:aa:b5:1a:80:
         14:98:8e:7e:1d:80:bd:f3:48:2e:a2:00:e3:29:61:3e:18:cb:
         78:47:3c:d3:15:b4:64:89:e9:61:9c:72:59:2d:76:66:ad:87:
         bc:b5:9f:60:b6:fb:75:fd:f4:b2:dc:b8:02:55:2f:4c:f1:01:
         75:f9:09:73:15:e1:63:1b:ab:28:c9:9f:8d:dd:8b:d0:d0:29:
         63:11:df:c9:1d:ac:86:b6:2a:31:29:5f:14:08:aa:10:3c:3d:
         eb:b0:a0:69:7a:93:b3:4c:4c:31:84:73:89:be:b9:34:e2:d2:
         e9:a3:2e:8d:64:3f:f6:7d:54:bb:d5:9a:99:79:34:5d:ae:2a:
         d4:96:b2:69:c8:0a:27:d2:35:1e:ac:de:e9:2a:93:61:0d:83:
         30:9d:f5:e5:d3:22:11:6c:b3:0f:47:c8:d5:4f:4f:99:83:b7:
         b4:b9:91:9f:0d:5b:09:e7:f5:35:62:3d:54:03:48:76:15:82:
         14:58:11:17:c3:4b:35:d0:d7:68:1f:9a:e5:eb:51:7d:bf:37:
         74:e6:be:02:f6:68:b6:7a:da:90:09:5a:c0:33:d4:ae:8e:3b:
         96:09:10:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91LpRFIBJ4wYrAwYkCgMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwOTIwMDgwMDMwWhcNMjYwOTIxMDgwMDMwWjAzMTEwLwYDVQQD
EyhkYWEzNmUxYTFhZWY3ZGFiYjlkMmJkODU5MWU1MjQ3OTQxNzY0MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QUgdF6BXL7+3G+Fgooj4qWiQuYa
3O0D7hb9VcH8xGZdkPBenyxOmaSg2YFbyaeZbtJxWrDMnYo6jZH5aZq7U71kx3e/
6Exn6o8/Fo8/3ggzg2mvXOigmRGEfa4OY/bBI+rDRghF4JoDo+aM9kKEBJ2sgxGE
tvFsr3fjTNb56VIZz3Z1bd+2OjhYv0Qe7HG7gHpF6AXW/6E9cewb2jCeIRfdWMir
xHwTfnCGiThR+EMY39jkKp/zEF5anDO7dPY+mkf3/15UCd1Idswq1rBwu+5lAQeW
0hC7uoVn53ZyYTr09X/mL5Tg9Z3xXU5px3cFphoNiGg3I+xYABN0XwRvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqjbhoa732rudK9hZHlJHlBdkN7MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ2WPsKE
wySOwDqQX+OsjQHjKtemGD9ETq/UYMd9xfuqtRqAFJiOfh2AvfNILqIA4ylhPhjL
eEc80xW0ZInpYZxyWS12Zq2HvLWfYLb7df30sty4AlUvTPEBdfkJcxXhYxurKMmf
jd2L0NApYxHfyR2shrYqMSlfFAiqEDw967CgaXqTs0xMMYRzib65NOLS6aMujWQ/
9n1Uu9WamXk0Xa4q1JayacgKJ9I1Hqze6SqTYQ2DMJ315dMiEWyzD0fI1U9PmYO3
tLmRnw1bCef1NWI9VANIdhWCFFgRF8NLNdDXaB+a5etRfb83dOa+AvZotnrakAla
wDPUro47lgkQhQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:25 2026 by rpki-client