Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          mDrx1uDxJeTh5T1ycWaiJ0UKeo2vsPR63CuyGxaofzk=
Subject key identifier:   84:C6:3A:E9:94:60:4B:50:4C:6A:71:B1:00:63:C0:D3:76:65:6C:68
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01A0C1E8DA36E6FD4A905AA3E88869D5726A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          071D
Signing time:             Mon 21 Sep 2026 03:00:57 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:57 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:57 +0000
Files and hashes:         1: 0YWrZMHXzL_fpQu6UEXfvsOhaUo.roa (hash: D5E1izzcKMP3zRohFMUe7WsnHDjW1oHiWCyMD22hKXE=)
                          2: 6YdauMxwtaJ2XapsEhB4s_XIetk.roa (hash: OrJfyq6brZkbyt8ajKBE0Bg6XcJ1it9g0va1TyaaubM=)
                          3: 6nsjDhn-NUS0eS2znotmTLFb8K4.roa (hash: brgSOLqNkmWevGXCCydMHGGRZ6gS0cHDgCsdzaFEdLo=)
                          4: 6yfl5wriHlRWRW3gXIPTed6SZBw.roa (hash: qw+/ZNQKL/+QGpUMyzcUV5EsmEJeLyy2giX16sQEEV4=)
                          5: 7PfHmGf-ptLWTY-0uujQDxN_ctU.roa (hash: EYVd45QCLI1r9t+cnOTNwN8m8g9VMZQQuSIZh8MozB4=)
                          6: 7Wovjg0WK0CO0eA95rPBJeMNlzA.roa (hash: L5VcjSfuJbBmd44K80gnuYivqpKsaPKZEEuWkNqqRyw=)
                          7: 847zFWn5eVS9knYe8BRZHVv_s2c.roa (hash: BaG3yolbgvhFed4tgUbetMOu3GbXza6kCLC1VVMYbGY=)
                          8: 9PqxwQLy21-4bHijZ43UTh9ei4s.roa (hash: 023sRck7i4ErfynWxL+Abie1/pQDh31WsxstU1jtkXw=)
                          9: A__uftTJfUQScTKvf0ZCZUS0aAc.roa (hash: InE5+Cavsi4Z8kpY1c5G+Ux8kKsvzWwxBaCxmbKO2Io=)
                          10: AkTKpD9hNqiV_5_c6-DMcTgYskc.roa (hash: G2QKxBnm98oc52v99fqhnVJF48h7SOnkbCMrYYDKSd8=)
                          11: CHH3xJ1lzUgyXtbZUmGWR88D-U8.roa (hash: 2I73e56GrDAgMRYeThyxeJT4zvfxFJwpu15CsggS6j8=)
                          12: E1xN2EQHnjV7l4Ud58ayk067t9Y.roa (hash: AvCocU8zRlKp8U4hPAeITkW9sAUVW8+tmg/G+VJUsM4=)
                          13: FUd3_uiRDwfAHqvhswYvKQHbfb4.roa (hash: JisBSYC59fG7+pF5YDGsAkRI8Xm3kc5i0eweb5iAKgk=)
                          14: Fa_E9m89fUIJZtCefkFZ2jvyFO8.roa (hash: ZAwAoX5HJyrrbaR8aOzdSIPtrO8DX2Vvq7HjudQe7SU=)
                          15: Fllda1GGof6P303TUTHwPCCAtQQ.roa (hash: u5lb6y8q8DLuHPCyQSXlgICKuvOtLLt+dBcu770N0Q4=)
                          16: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (hash: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M=)
                          17: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (hash: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ=)
                          18: J84D708JiRdF1Cj0OhAXFyT-dDw.roa (hash: h5yfNRw8lKCbHsVms6lwRL8YMmiaidYr9RU7tr43vl0=)
                          19: LZQRNy_ENT-8O34qcLxuaQWSeHM.roa (hash: OON3viUqIKHDsT02HiaCa59c3M67rxH/jkpVWHuyTwU=)
                          20: Nd9KOFXDH4nonVF3CLoZj0Hyts8.roa (hash: cGMmKZgE701PzM2RG0kAHzIsPSvLqz8JKOXln6VOjQk=)
                          21: Ql9OHsZY3se1g1vvUH1wbW5S1qA.roa (hash: BX5RRsqmh87FsNyQRiTV5w4eJ1PzrfrvFTFXvcfPqPo=)
                          22: QrDdhtF5Cq-OozyeRKyxwHlZpsA.roa (hash: xbQrT4SCRDGICNyiKtX8aOdkuj5ohxB0sU4mS/MuyaM=)
                          23: TQY7akU130oo67n82d-ykDHfoSg.roa (hash: AXvCT8Iivy/TjEJ4NtkykOKLnXNWkYcMrnOcONDKwno=)
                          24: TRKH1TE6Wx2-q_jxnnKVpda3BjI.roa (hash: 3Msf9lFY/c7Nxyrt7cbHQgNLt+yHKm9nl4QWIZv+9Os=)
                          25: UctFLwqM_4WOq9unapxPDQOIFss.roa (hash: jsWvt8vWSgSLT5hexwAAInmmfxYwbW5bGxe4i8DxWyo=)
                          26: Un_3OMScs2A-n1B7QSdez87iw_E.roa (hash: Lq4xQb+JOCTaHhv89CfMN+jQ5wmo6XsfP2BFflK5jos=)
                          27: UovVuidSJ6VyOXzaImlvnvDzNZo.roa (hash: FrrmtyyFqx6LliZFwik7dAsD8K6N5OUt4H0X2CLgP74=)
                          28: VaQO35MjmxIvk25kxSxS8V8IT-A.roa (hash: GQYXzidHPzzz2ER38qUc2ZQSsKzCNUQKQ+UjOoI//as=)
                          29: X5uUQdt18p324LUKAUAju_EtV5M.roa (hash: Uh+nx1ykCeq4V/7jtccqXb+9XUejz93sBrc5WkWEX+Q=)
                          30: X8sdbycHT12fl8v3f4JjpsnZTG0.roa (hash: 35gVkSTJeST2VThCOqua4110t4pi9FQFLTgTaz5Gffk=)
                          31: XsK7c9pZjUlGBuHMxAwSEg4_dLc.roa (hash: 5KFbFF9jJpeEzZqgnXb4J0jAscVydeWpilyaP+Yf3mo=)
                          32: aHikDoY7PTlE63g8681nazruKQI.roa (hash: ze8lLrQN/ERMv9fQP68OAX0YeYGfw8cezJvf2Z6IrAU=)
                          33: algNXeBnWxlc8W_yfgEXDKVh734.roa (hash: +8v/ZEG/pBK5GYXIEpGkYZzjhYA72COaS0gR5SOoPO0=)
                          34: cuZj8eYZctJvbxdMgAXJDVanMaQ.roa (hash: RPSnYZMixt6Uuo3FTDTuvO1zf/RtU59/JgKhacEXRt4=)
                          35: f9qu7-XroBlUleKDIHIPa7f_kn0.roa (hash: 0aWF9oheRQqFqcEdbQwzwfDbaBp2PnTquGLHZC+Ljjs=)
                          36: fMSedJSqv9C6sYPgIeTBDq0FJhE.roa (hash: zAkJp90Xulr6wHS8heu3SwA9t6lCNg9Bdvap7WsW6UQ=)
                          37: hrzUT60RppU12sijbO5nUnIsLDE.roa (hash: +JirVR+wIPZ5lVwuA3SZmdQkTSTYsXEklEIVJFUFJXU=)
                          38: iIt06y_hUdGc8HNkpEJC_WYDW5w.roa (hash: G0N9HxEnblWUsnq9try/TNSpWeFRaa0FkNLO3f6+MRE=)
                          39: iurf5I7OwjJvxaeg-v3lapvW0ng.roa (hash: nvYBXAiP6Ei+Kjhf/1Hl6QUpDaIRspIu82KYWDIJ5D0=)
                          40: jJWl15wqYo7fAX2mieRMcRNKpwc.roa (hash: 6k0SbOKQgeP3398DXBEapDI32YYnnGFAuSFvT82tyQ4=)
                          41: kJ4OAD2Svd5bJYqmvYEji53-_z4.roa (hash: t8SioCeXtK9DLdCYfNYnzqNqAYLRXhIt2Q9QBJ+7cUw=)
                          42: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: LgKxIbz0QOsCWeWUkZyaQkhChNvuWq3BkAZlvrIl3AU=)
                          43: moI9DeBg2QtdD9wbIRCAeujYiCY.roa (hash: xrfXx1gOpxEvA3MW11AUhiF0Qid/L5JA+RuF8pfxLv0=)
                          44: n8R8_YX468DSIuduC6xTqMBQXGs.roa (hash: XkUUH+o4YqvomPSscXttz3rMyHXiogy/8geOkaXdoo8=)
                          45: nTN-DgO5VpUeaPeUymFNpHLdFLQ.roa (hash: M2JpoqgSEwe8aT8p0RazfqJDidhqU12O5Avd9SXsRGE=)
                          46: usONDL8T4fgTBytzqulEpYviayY.roa (hash: Azu+8j0Xu9e6mdLb/nqd9cTH4O1l40KtbUavU6T1tq8=)
                          47: wLR8jW1mcZUvoZV3c0mZMReuKfk.roa (hash: Wo6japZLDr5ZqcodvcMsjsWlXak2QkIZTZ5ptwie8U8=)
                          48: y82g7JzHf3nPY8Heep_XW0P0lPo.roa (hash: 915sGd5DFWPNaKnLsIWJyntUtOaj02nTQpkjEjgoQlc=)
                          49: yLRXDXQYTegT2fvY_9U1e6QFEBU.roa (hash: wd5oKV1ZxNoQJUmhO1JfEjb0Ksgu3a+qs915waW9pSo=)
                          50: yR_bh3rW7Mn6osSNa3vvQx3HDAE.roa (hash: 7zlFeBPjOHrJlX9F1ZZ+5OEyym7/ChhtkPpU0H9up6Q=)
                          51: zCwAAoz5xoPjepAyOAHXKl3uKvY.roa (hash: HNUMDTcYRwuepAWngdJO3EHzEx35g02c0Bdz/koyqp8=)
                          52: zoh-NmzuB-8joUrG-CrXbn87KUc.roa (hash: /HYLytf7EZaD8R3KHEOrIdU84tOnHzF9dFbeKjpHpLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:da:36:e6:fd:4a:90:5a:a3:e8:88:69:d5:72:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Sep 21 03:00:57 2026 GMT
            Not After : Sep 22 03:00:57 2026 GMT
        Subject: CN=84c63ae994604b504c6a71b10063c0d376656c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:39:ef:50:a0:c4:c2:43:f9:bf:5b:1a:d3:b6:
                    e2:91:81:4f:3e:16:b4:da:14:38:78:5a:10:b9:05:
                    76:25:c1:e4:5b:8a:e5:05:8d:6c:ad:e4:34:94:d1:
                    c4:12:41:05:fd:3a:98:2f:0b:ab:68:d6:89:2e:c1:
                    47:30:ca:e5:1c:1e:9d:90:df:e1:6a:80:a6:ab:63:
                    00:d8:89:74:d0:8d:03:3e:6c:bc:42:f9:e0:e0:fd:
                    56:c5:c5:dd:db:f5:58:05:b1:73:13:c4:9c:b0:79:
                    47:a8:bc:ed:1b:9d:33:a9:d4:48:24:65:39:b6:8b:
                    46:17:ed:31:5b:55:ea:7d:54:57:7d:a0:42:da:59:
                    94:e9:2b:b6:9b:55:d2:d7:69:be:d5:d6:7c:84:ee:
                    98:df:67:14:2b:bd:d3:98:22:1e:5e:2a:81:33:11:
                    fa:b8:27:80:55:44:d5:34:b2:f9:9e:9e:a9:3f:6a:
                    41:98:4b:ba:ba:da:73:f3:67:ef:53:58:16:da:78:
                    89:c4:a5:d6:71:6e:0c:f2:61:da:61:bc:b4:06:29:
                    d3:55:56:22:8d:00:8d:62:c4:11:39:9d:0d:de:64:
                    57:8f:e9:0f:e1:07:72:7b:5c:93:a5:43:5f:52:37:
                    93:8d:ba:f8:34:9c:a9:4b:a2:d0:79:fa:d6:af:30:
                    7d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C6:3A:E9:94:60:4B:50:4C:6A:71:B1:00:63:C0:D3:76:65:6C:68
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:89:da:7a:e6:63:38:da:6a:fb:11:ca:36:99:94:99:d1:7d:
         74:e6:72:a0:ff:d6:3e:77:0a:88:f0:55:b0:ad:6e:1e:09:49:
         85:a8:7c:06:b6:2c:a2:6b:56:70:0c:92:4f:e6:99:d1:6e:30:
         fe:d6:75:35:02:45:a1:83:4e:bc:da:b5:f3:87:c0:56:f7:8b:
         19:1f:0d:b2:d2:08:10:ef:37:5e:4d:e3:7e:7c:c9:c9:8c:13:
         43:a6:9a:36:3b:46:6b:29:86:2f:4b:04:b6:db:7a:7b:ca:0f:
         d3:e5:b2:47:c5:3e:77:37:a0:4f:74:f1:59:0f:ea:46:fa:a8:
         80:52:3d:0e:a6:9d:97:1b:00:b9:32:af:a4:0d:f0:fd:fc:04:
         d4:dd:46:c4:44:7e:6a:52:cf:78:1e:f6:a7:e2:db:b0:b1:7a:
         41:8d:5a:03:8e:97:d0:ec:93:46:7e:dc:e8:a0:cd:10:cf:54:
         2b:4e:7b:1b:7e:15:4c:0d:e1:6b:ae:56:14:6d:9c:b8:80:51:
         79:48:99:a4:ee:5d:26:1f:2f:1b:b3:94:0d:8b:87:ef:ea:32:
         9b:55:e9:c9:1a:8d:3d:5f:1d:c5:76:9f:3d:86:b9:13:41:56:
         f4:dc:b0:a4:3e:bf:f3:d4:8f:93:cd:9f:99:4e:42:14:3c:fb:
         1a:90:18:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:29:00 2026 by rpki-client