Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          272OdWYNdWnyz7GXSpSAwAxSeTWQzlsAW0YvMVcoviU=
Subject key identifier:   3A:64:7C:86:DA:CF:09:B0:DF:BA:C4:0C:10:4A:2A:F8:A5:61:8E:55
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       01A1A82711C1BCB779791566CB546FA09EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          1086
Signing time:             Wed 04 Nov 2026 20:01:35 +0000
Manifest this update:     Wed 04 Nov 2026 20:01:35 +0000
Manifest next update:     Thu 05 Nov 2026 20:01:35 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: 3GHhVMraDxdiiAskPewL35crdjo.roa (hash: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=)
                          3: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (hash: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=)
                          4: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
                          5: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          6: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          7: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          8: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          10: NZeiCNkAFPPe6mRmV3vIotIey6I.roa (hash: 1okB9NoMuO2fNW/qbueY6s54GpzzWp1KSEo2FrjzOoM=)
                          11: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
                          12: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          14: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
                          15: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          16: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: c6Do7Be9xVGT4lh95PMqCYHQcgVzGK7VL5t0XjHKb+I=)
                          18: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          19: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          20: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          21: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
                          22: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          23: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 20:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a8:27:11:c1:bc:b7:79:79:15:66:cb:54:6f:a0:9e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Nov  4 20:01:35 2026 GMT
            Not After : Nov  5 20:01:35 2026 GMT
        Subject: CN=3a647c86dacf09b0dfbac40c104a2af8a5618e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:cc:dc:12:55:ca:56:9c:4a:73:79:b1:52:
                    1c:28:80:40:ea:f6:b2:6f:bb:8b:41:c8:76:18:e2:
                    e1:fe:1f:24:87:81:d4:c3:56:f1:8a:f1:fe:d4:ec:
                    7c:72:96:49:65:4c:62:2c:9c:6e:06:e8:f8:3c:70:
                    9e:ff:95:66:ed:36:fe:4f:2d:0e:69:35:59:2a:a5:
                    34:92:f8:44:75:68:c0:f8:9f:0b:36:76:9f:ff:be:
                    2b:6c:2b:1e:01:9d:9b:6f:23:46:05:cc:e1:9d:0a:
                    83:46:a8:ea:c7:51:ea:85:c9:46:3b:81:b7:9f:25:
                    7f:07:29:a7:7f:5e:ef:52:a0:a9:a4:46:d3:96:0b:
                    16:ec:d7:a6:dc:a1:d7:c5:cf:68:e0:52:4d:ed:de:
                    22:4b:1f:1c:76:f1:01:90:67:34:36:80:f5:ec:f9:
                    e3:c9:e7:ed:e2:6f:9c:2b:03:a2:a6:0a:f5:d2:59:
                    ec:7d:72:bf:60:45:80:02:46:29:56:74:f1:e8:b5:
                    9a:50:27:a6:46:d8:5d:4a:59:99:6c:76:a8:c3:0e:
                    bb:fc:73:ae:97:6c:c1:1b:16:2f:a9:50:47:ca:3b:
                    53:a5:a2:18:03:1b:aa:bb:56:2d:87:71:32:a9:0e:
                    0b:95:b9:53:0a:d8:93:90:7a:05:5d:66:a0:46:27:
                    4e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:64:7C:86:DA:CF:09:B0:DF:BA:C4:0C:10:4A:2A:F8:A5:61:8E:55
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:7a:5e:50:25:9c:91:94:cd:04:a8:63:b2:59:e9:a4:7c:
         db:38:87:e5:99:cd:8c:43:e4:f6:9c:ca:51:ae:9e:f4:59:69:
         c6:84:2e:a3:ad:2e:2c:40:37:49:fb:21:7c:8f:7d:a2:c5:ef:
         4f:e0:d2:8d:78:9c:d8:6b:82:ef:2a:c8:6d:c5:c8:2f:e2:7d:
         e9:a8:0a:52:07:7e:07:69:36:0a:ce:3d:44:55:70:70:1c:fc:
         fa:36:5d:df:a7:e4:b8:9a:7d:92:a2:e2:83:fa:1a:6b:3e:54:
         ea:d6:a8:2a:9e:a0:90:ef:8a:99:1e:3d:bb:58:17:b8:15:88:
         7e:53:d9:6f:1d:9b:b0:b7:1e:d0:12:ae:f5:14:80:37:74:8c:
         69:c5:6d:b4:c2:6c:47:62:96:65:73:3a:23:25:66:3a:d7:e1:
         bc:27:00:03:0e:69:10:a2:00:38:f0:c9:5d:c3:3c:67:e5:c0:
         15:a3:8c:bc:f1:07:5f:a9:a1:03:cd:b2:9a:0f:d6:2c:d0:4f:
         23:f2:5a:1e:88:f4:e4:95:17:b8:08:67:d3:d1:73:16:b8:aa:
         ed:eb:16:07:76:0b:b6:c0:c4:77:17:25:73:d3:9d:41:ed:f6:
         29:b5:23:3d:ca:74:8a:cb:7f:ed:4b:cf:26:3c:fc:4a:30:4a:
         27:5e:37:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoJxHBvLd5eRVmy1RvoJ7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjYxMTA0MjAwMTM1WhcNMjYxMTA1MjAwMTM1WjAzMTEwLwYDVQQD
EygzYTY0N2M4NmRhY2YwOWIwZGZiYWM0MGMxMDRhMmFmOGE1NjE4ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PDM3BJVylacSnN5sVIcKIBA6vay
b7uLQch2GOLh/h8kh4HUw1bxivH+1Ox8cpZJZUxiLJxuBuj4PHCe/5Vm7Tb+Ty0O
aTVZKqU0kvhEdWjA+J8LNnaf/74rbCseAZ2bbyNGBczhnQqDRqjqx1HqhclGO4G3
nyV/Bymnf17vUqCppEbTlgsW7Nem3KHXxc9o4FJN7d4iSx8cdvEBkGc0NoD17Pnj
yeft4m+cKwOipgr10lnsfXK/YEWAAkYpVnTx6LWaUCemRthdSlmZbHaoww67/HOu
l2zBGxYvqVBHyjtTpaIYAxuqu1Yth3EyqQ4LlblTCtiTkHoFXWagRidOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpkfIbazwmw37rEDBBKKvilYY5VMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT96XlAl
nJGUzQSoY7JZ6aR82ziH5ZnNjEPk9pzKUa6e9FlpxoQuo60uLEA3SfshfI99osXv
T+DSjXic2GuC7yrIbcXIL+J96agKUgd+B2k2Cs49RFVwcBz8+jZd36fkuJp9kqLi
g/oaaz5U6taoKp6gkO+KmR49u1gXuBWIflPZbx2bsLce0BKu9RSAN3SMacVttMJs
R2KWZXM6IyVmOtfhvCcAAw5pEKIAOPDJXcM8Z+XAFaOMvPEHX6mhA82ymg/WLNBP
I/JaHoj05JUXuAhn09FzFriq7esWB3YLtsDEdxclc9OdQe32KbUjPcp0ist/7UvP
Jjz8SjBKJ143Zw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:08:14 2026 by rpki-client