Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          NjvbOZ8mpPMVgZmVbrmAruA7D08NdpIQb9v3/H4kH1c=
Subject key identifier:   67:4D:3A:55:FE:EE:BC:7A:98:3F:0C:95:6D:24:E6:C5:E3:41:7B:53
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01A0C7EA45E3F661B09F4BDC1939747489AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          16B2
Signing time:             Tue 22 Sep 2026 07:00:14 +0000
Manifest this update:     Tue 22 Sep 2026 07:00:14 +0000
Manifest next update:     Wed 23 Sep 2026 07:00:14 +0000
Files and hashes:         1: 1-CTT0_CxhciLaRkCJ4DgzsS2sQI.roa (hash: Mn9NJhG5uVMvcY80UVOWe2L3SwusTTL/IyfqCD6b0DM=)
                          2: 1xo9uRwazGPExjT15gHLTmOfVnY.roa (hash: alhQ3MkblKkYV6C77axeZ7FdHmqDD77jedDHF6Ew1Xo=)
                          3: 2Mg2AzsXoeYsfaLwlaFlwLqoeyg.roa (hash: /+Kdmi4z3S0vYlB4XVCOSf4BcQg3jjVkAmy+Jt18ho0=)
                          4: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
                          5: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
                          6: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
                          7: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
                          8: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
                          9: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
                          10: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
                          11: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
                          12: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
                          13: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: SX70rVaiBeFHQ0QnCkz04LZZ2+2S4kqHzm1R8VkFMKQ=)
                          14: GeIOKXkutG8FXC6S0uhqDuR2Oyc.roa (hash: L2U7GDQy2AVnBc0bV7pGyVkcsqpiDhD1aFrAWYtZCHA=)
                          15: GxIHXjt6YycYTUa0XRCVghpAj-k.roa (hash: HhhKZCdKN9/SlwUoWfOdsnSeB0lEPNK2Xjfhma7psx4=)
                          16: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
                          17: HgnXGXwVbfTI1BTlPNxAAI8kisw.roa (hash: dFymMsmg5Ti+zYG4ZBRRJH+gPEzJ65GsCvbf6LCEjZE=)
                          18: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
                          19: MYkvB2GG4KyUbb9t8wtKuudjcUc.roa (hash: StyOsvY6f49b11bzmUAfdI8EpecZB7kX511O4LoHQ4g=)
                          20: MZ97w73npIcNECx3xDjjos0_7m0.roa (hash: YZTyLgEvSwRovxtafIUavw8i2rxVY2K9vaeTguqjS08=)
                          21: Nj8rxyt_f_accK_eeAGjSMOlvxw.roa (hash: wyd8iqzy9iMZZIARf5xU0sgU6at+XN4nnL5cjjHjJ0c=)
                          22: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
                          23: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
                          24: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
                          25: _nvRHKvvb_mvanqFMM5V8lm8g8w.roa (hash: RruZ8RVSFy2mwh8xxZXhGWare/JM1CRcpYspOp1Cygk=)
                          26: fe6u7JDG48jgBf_DPc3asIDwrHA.roa (hash: CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=)
                          27: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
                          28: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
                          29: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
                          30: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
                          31: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
                          32: m9zjHR2IwuP6M_EqtRtBLVSg0D4.roa (hash: yMwu/UQ3rPUyOJCc3eCtP2GKyWlV3Y6SloIA/fcgLfc=)
                          33: mYQPII2ilkK1oy0MlW-v6JAxGxk.roa (hash: tyuBwPs2VAbnEW0fWN1peF41+ky+lDL1B9PXSQMox8A=)
                          34: mkxeVdqvGa8_RK94mH2It6R-t6s.roa (hash: OIAAUN4UKKUEr59vtk7Qhtvzzo1T5ZyKrv8vWf1M9TY=)
                          35: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
                          36: nKmPYXidGAhXn3442nxPoF3fEHE.roa (hash: xoh2A/CBXVSiJOQmDfAjAO4FcrbJNp0zdoL5VThVjIQ=)
                          37: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
                          38: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
                          39: pexkcyVPSICPLZN0RiIg0ALWvjk.roa (hash: 0Kygrrr/4SdNr2ZBGUFGg1GzDhK7GU5H16nbpbesFjA=)
                          40: s5BBxW0FDAnW7VbpSvFNRkftADQ.roa (hash: CI4Op8cPDXDRmWOv4OnxJAe5Fa8ebNgcFN1z/ZOD1F0=)
                          41: u7iEmRQisSf83RBqjjO6HMVH_uM.roa (hash: hiSgmMMSf/VUxaoPszyD77C2EBYHq8JpPtq0tK9fiAI=)
                          42: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
                          43: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
                          44: ySc4DnCxLI5JdvxrV9JDuZIj7eA.roa (hash: XLHqAnDkuXHaPgmxAfCQCJFWfzPqs9OndrjVRU9ghIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:ea:45:e3:f6:61:b0:9f:4b:dc:19:39:74:74:89:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Sep 22 07:00:14 2026 GMT
            Not After : Sep 23 07:00:14 2026 GMT
        Subject: CN=674d3a55feeebc7a983f0c956d24e6c5e3417b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:31:da:cf:f7:55:0b:a3:88:ee:d5:bc:83:
                    a4:1d:3d:15:33:94:8c:ca:91:df:cc:7a:f2:82:b5:
                    aa:d2:a4:a4:0a:fb:fc:68:6a:26:45:5f:e1:6d:c9:
                    4a:ae:f3:71:4b:50:26:26:d3:b4:45:02:f1:9c:b2:
                    e4:1b:c2:97:8c:5f:c7:7e:73:b3:c4:08:95:48:04:
                    fa:96:93:c4:e4:5e:30:5a:b8:6e:10:3c:6c:68:67:
                    ec:74:75:b3:53:11:9e:6d:aa:f3:7f:a6:7c:b9:c1:
                    96:9f:e0:6a:3f:81:64:26:d5:d6:f4:4a:de:eb:64:
                    74:70:73:7b:74:78:e2:19:fb:cb:f9:0e:41:d9:57:
                    81:bc:94:be:db:1c:12:b5:92:94:19:e4:80:ce:60:
                    c9:c1:c4:03:dd:0b:be:58:d9:82:84:7f:5d:57:6b:
                    5e:37:03:f4:24:12:38:ed:24:bf:66:9d:0d:0a:17:
                    c9:e0:a5:0e:ae:8f:cd:63:cb:58:ff:0e:e0:4c:87:
                    db:67:9f:aa:2b:17:fa:8d:30:d6:1c:17:a9:ff:4a:
                    5c:63:bc:5e:fa:41:d5:d1:a5:51:88:12:61:89:ff:
                    b5:2e:38:0a:db:41:83:d6:89:08:35:dd:9e:57:02:
                    e2:ef:a5:9e:d9:da:04:ee:92:ca:b6:2c:b8:12:13:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4D:3A:55:FE:EE:BC:7A:98:3F:0C:95:6D:24:E6:C5:E3:41:7B:53
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:8d:c0:2b:d8:94:51:87:98:eb:c5:df:e1:3e:82:54:57:
         74:b2:b0:64:10:74:47:b5:c0:2d:69:d5:4f:0b:6a:de:4f:b7:
         3e:74:bf:a7:85:07:9a:92:5d:78:e6:a8:f7:02:ba:a0:f6:37:
         58:5f:67:1d:94:f4:f1:fa:9b:4f:86:27:3d:9b:e0:50:34:d4:
         69:0c:08:5b:8e:d7:46:fb:4f:26:99:c5:8d:bc:26:fc:07:19:
         9f:69:53:84:bf:f4:d4:87:1c:42:5d:17:47:9e:c4:6d:e9:f2:
         ff:20:bd:8a:d6:95:9a:c0:e0:aa:b6:70:e7:8f:a3:ff:f3:16:
         da:6a:e8:fd:16:54:50:f9:89:d5:54:97:0b:55:27:72:fd:43:
         8d:fc:0b:09:c3:41:f4:db:c6:bd:f4:90:d1:2f:06:03:37:a1:
         54:f1:d5:50:96:98:be:ac:4e:d1:ea:39:21:56:fa:75:18:5b:
         95:0f:27:fc:6f:4d:d3:2f:36:8c:b8:0e:8a:95:61:ce:44:4b:
         d6:1d:79:a5:76:19:65:db:fd:05:5b:8d:3c:9c:9e:92:e5:86:
         74:ed:e5:ba:83:a1:63:0d:bc:e9:09:1b:07:25:ef:29:f8:35:
         ae:96:07:f3:40:62:b5:11:2d:ea:29:3b:4c:e1:8f:10:8f:80:
         3f:6b:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----