Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
File:                     Gspj3ySLet893QfowtPu3QLO-TM.mft (raw, json)
Hash identifier:          W9isek08johmnA63UdtmbYXOAbXDshdk3MEr97atMQQ=
Subject key identifier:   90:6E:6A:62:87:7C:B6:01:7E:80:D2:E7:2F:A0:D2:01:94:6B:51:79
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       01A0C70EB9FBE09FC938B681DCAA4DA09575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
Manifest number:          1A75
Signing time:             Tue 22 Sep 2026 03:00:25 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:25 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:25 +0000
Files and hashes:         1: 0Hs6xXZQUGxSsH4dzIqj6tSXXQQ.roa (hash: umayU6ghzrIw9gzcxshCYwefqVjQhRaUnYXDxZxTVZY=)
                          2: 0N--KoxInsnsXzGcwfmNBlxfs78.roa (hash: 7AEcbAbb6sKMf8LE9K99/qvnVr+OpcWbi+hxS/gOhss=)
                          3: 0sGzuUbpwHk-gTWE19LdNSa8hCA.roa (hash: Uc9SjpHv9neMuUpGJ/PzOOSFL0wei8qez1EKlcWoBL4=)
                          4: 1-kUUMwb8kgGIPx1rcb-0zSN8KzA.roa (hash: 0op+31WFr/z/J1Osq9KZJ+GqF3Ia0/sNPRRDCJ99Rso=)
                          5: 1p24e4_xnCRiG8MIistc15VowrI.roa (hash: VnVP9pYukjZRX2qF6kkl0NQ/5BX9gnfFczG7434pxE4=)
                          6: 2Gr9nf875xWi7fctytC9cFGwMlw.roa (hash: +86dA0zm6T8zPgqQDLCfGSSKKmAaxpAHQ1PUmhacNes=)
                          7: 5azhurYs2HtaD0E6ugl_bxZHIqM.roa (hash: d5ir/UeW/eIZ5SafaVTlv4vz6rGk04lLUzIPwKHNYBs=)
                          8: 5yMdib-0sOswI0lZXAuoUHXXHVA.roa (hash: 5aP/kmB4CNB8EVL6XcgZn/Qsj+a9mFR0w4XcjiN0sUQ=)
                          9: 6yVWhhQWfzj2sbvx8_GIlONHBiY.roa (hash: gy7S4MewOgzjZJmXLphYMThB+PJuj/0KSl7GoYmvutQ=)
                          10: 8Nzbql_0L1Sqe6QwC_4FVwreWNg.roa (hash: 4gCR519ZeBzC3kk6VwY+ThTPU0hs0GWYjUpi1seUwSM=)
                          11: 8YEFvbEwVLH9qWllGkk7g4NlnI0.roa (hash: II2QPPzjTL1kCxQBuVajcyo2dWvGe95JioEGL2xzIuI=)
                          12: 9YOLRf7UgvHm6WSS32OxNs7-BB8.roa (hash: +uQTUHAyt2piiMZ3fQyBEk2qIxPYqqYIm7wQHSwnXVw=)
                          13: A8FQMW7_pJShj3pKjFQFZpYYroc.roa (hash: OPhgIyUnvcK9G6uaVUcWSc5r7urFF1UNgOW7ZVhgohY=)
                          14: AHDIp8270zSqh_FTyxhRg8w5gN8.roa (hash: FOrKrk+AlkMU+F2AuO8VhR8dhWWnyB1iwg8bXCReV/A=)
                          15: Eb2QZpAtEmdDYzcM38VUBuHTsRU.roa (hash: Sod1B79aMwwZVivyAqO+s7l8S7cXwaQDAAMG0+CxZNU=)
                          16: F9ptmhFRKM_6FVfNisudgBAGWS4.roa (hash: d7zM61XXfq12gKotkFKa6Eui7hLn3eJKdpx9VEf7iSo=)
                          17: FBXfctEgUEE-S-dd_yWnTE1RG6E.roa (hash: rE0ZErAPOBAQk49VT2i9Zl+euws9XDKoSIpvW9WnBUc=)
                          18: FJHnrMa1dYYOqNs96iJ0reJRrPA.roa (hash: P7ZEMcXCOturCWpxMhG2fWwEb2tWeTFlPPEgjheX0us=)
                          19: Gspj3ySLet893QfowtPu3QLO-TM.crl (hash: K+0ctMwR7R/LcrKgLaZ7u9beRLrQcIWNdPTLNkqcSAc=)
                          20: H7HNq0uVvHEc2pdTq24Uay9oG4g.roa (hash: YT/HdAwhRTIgKLX4kHKvlxM1QPuScdICfXWYIcHvb3M=)
                          21: IWKw_ZEu1EZRORuZiGmI2s0AHTI.roa (hash: tNIkQWe0p3ZEhypZifxp8CXBvaq3p1TZN8n90ivbpfs=)
                          22: KViFsa9YRaLKA4GWafGn1yNMV_U.roa (hash: B0mTA1OlEJ3ztWIPorFTiSWLF6mCqTxIFSfVTWL1JmE=)
                          23: KvL7yxkGls1fjcwm5IXbdVf-RGs.roa (hash: VuJaI3L/iNCvZlLQqiE8dBetnHe7flMiDf6yX91ASL8=)
                          24: MNKEeRezng_8QTmq4YL4taxomtw.roa (hash: 5bNxkSV5NuMCGAxHqkk6a1uStmjIi3vs4rOLnNPZWw8=)
                          25: MXg1tPcwD8vd6hGP-DmQwVHABDE.roa (hash: Mz7oxjlr/sXGTRHHjBwrCGFNPHjZFHzWbzfjTgLpT0o=)
                          26: OSjRZ1PSSlJuUv_feSDSX8D5qss.roa (hash: 9j2P3ndf7PqtASAbOJiA9us6tk9fCukKTlRIi2ivlN0=)
                          27: QDyWUj617nvzS_e0H1UiLEZ53bo.roa (hash: vwc+n9oPZjgCNNTq8fQPzWHHGfEYwO1q71t3KXyXP4M=)
                          28: QEW7nL_XFY7-pqU9RE8stFDsft4.roa (hash: 7pAJQsO5s42ZP6VLMYiZZGH7bu2YJMD5N8HmIIw2Wi8=)
                          29: QkKnlkQLz4dPGUFFiK8lN22X6dg.roa (hash: dvWueaMUeQqIss2AZGQBpfEX4bUWEPbUAAHBb4DyPrI=)
                          30: SDDpCfEvPP3Fzd7OmIbOls11ROY.roa (hash: ZKfz6rEjEgr4JLEIhQ4IpeeIKddetOb6XRdvez+f4cg=)
                          31: T9eEaGkDUEd1uoMcLdi7rlGJ5OM.roa (hash: cNuIxWplIagqnFYWoprdCxty/m7H7kGPbcgqUU9fyfQ=)
                          32: TQrtuJqVJ0yT9DG7MEeC7YVamP0.roa (hash: F3JOsifgipj8NSl+bt/0MEJ3mxQ+tdxtpprOlwYgUAw=)
                          33: TV34wvad5IaMfPoWisvwqDtCaA0.roa (hash: GqkdisDL97UF2sXcw6/14uHKglsSF+BfgwwUNizcOOs=)
                          34: Wh_WGuWdedhCdqZqjThQGaM1w4o.roa (hash: TDzn9Zqz5rle6yhiWfswdL6rCeqSKjFPMelBLgNL/WY=)
                          35: YffuXjhVQjavHnYAkO1SBFOknv0.roa (hash: r0Yqg3OZ8ifF1zMpVGTo+94M47rPgX/zR8wnUc9/nTM=)
                          36: ZDEDd_YeOToI9AaWJsRc80GXXYs.roa (hash: Lpl7sYdvpM/141Giex7RwhFqbe2pOY8JAQElcXsooE8=)
                          37: ZEDfVTNeg4Y0ef7ALZ2obXiMEOU.roa (hash: 9LBmxkEFLS3B5qGhxSIOAUgF8/Bgd781ng14JgpxwnU=)
                          38: bzKAo4zECLyu2L68XcJoXTVMySI.roa (hash: kP2zT2S/KNqpadzxZxu4vmptHfecZRfN1dTF3IoZRnE=)
                          39: eegmillnUrrJX368FbgMsZEqXL4.roa (hash: lIi0pRsutKGBHDePIXuG+nLC+yHQscKpxT17lvHe/ZA=)
                          40: fmk12XAjixK4ydvA-uHC3Nd-HXA.roa (hash: V8WR3uqu+EJZvisPVRoiAC+MR0oSKaCJPL8TILpliqM=)
                          41: ibXi0-8aUsVXGB09qV0j95JgrIY.roa (hash: TLsVKyeWQpt6Te+i4gVhEctps4GC1gxgoIzygpugufY=)
                          42: j6U8UeQBWA_aLfPt7pNFJYn4QrQ.roa (hash: 1EQgGCqazRRAiTlQ7Ite/fQRLC5x0EAah5dgfCndlK4=)
                          43: kaVISpwOiZKA5ta06OCxyBxR49A.roa (hash: VNZtrnciQ6Gc5y4H0ppJqHERZaAXg4qGMfFH99dOFts=)
                          44: lF-gIvCkM8tz1TF_ELmeC8qsyJI.roa (hash: kqf9SUhWQk8Xudy6smsadsinO1weOTkBy/JpJTjE9Wo=)
                          45: l_JTrDcsGivAKV47IA0MU-LY3-s.roa (hash: fJFedkJWiTy36a6wHwmDpftvwiJNe4RqkgEep1LXVB4=)
                          46: mI1HuOhEOlv2NEwmoDVlsD32_LE.roa (hash: QQYFVZtioyeC38QfOVBXY9H09adCRxKF9pUyi9nJ2dg=)
                          47: n5-40dHB96Mo9oDqm-GTLr6Okwk.roa (hash: lm7wMW2ZxjDGB62whvPGpRFJFIr6hVtb6E5bunii3pE=)
                          48: upR_lK-5XXoDUtPSSxCn92_SAOI.roa (hash: t2z7Rhn7V36DttkdEurpdQgeLWm8rmO0F3dEVSCXcg4=)
                          49: wtSW0mdpPXDvDrTPRt1ZsBOC7C8.roa (hash: oQqGpeKyZXjl5Dm+Xl8ln8xs8GXfn3cG1TVN/vo2Um8=)
                          50: xNOIKjGSTePbf9yIDHP0r14ahbk.roa (hash: mKTeNI4JyDtyq3nQb5OAL/Aez0IKHOXg8GqBdkPRFCs=)
                          51: ypfoqyQ6MVOm9gf4IkYc0sZzQIg.roa (hash: FT/m6DC8TKrUtX5et2py7Wv8QLWxnA/o9r7a55GLtYU=)
                          52: zHnDEFfooX5eWswmYMgnmUr239Q.roa (hash: 6sSrtzj+rZgcnikGhRhQB2rZMRHaUhRbv8S7ikZnZx0=)
                          53: zXIsfH_Pa5jSNX6yQyXZtUc8scs.roa (hash: i/P4c06e2ra2sLZfA/FbWL5pY4bEtjGz0gTkGbKY8bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:b9:fb:e0:9f:c9:38:b6:81:dc:aa:4d:a0:95:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: Sep 22 03:00:25 2026 GMT
            Not After : Sep 23 03:00:25 2026 GMT
        Subject: CN=906e6a62877cb6017e80d2e72fa0d201946b5179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:f1:7a:c6:e3:ea:de:39:35:95:39:d9:ca:
                    cc:93:73:28:98:45:b4:d4:ca:6d:5c:e5:86:fb:52:
                    97:b7:b0:ea:bd:67:09:71:1a:09:ca:15:d7:41:db:
                    03:c8:8c:1f:13:2b:9b:a9:28:4c:83:ed:e2:05:0c:
                    61:75:5e:26:3b:8b:d7:36:ba:cc:a0:07:c6:a0:82:
                    4b:3f:62:96:97:64:bc:03:64:1a:f3:56:a1:bb:14:
                    97:ab:f3:61:e0:09:41:88:b8:5f:da:d5:fa:ff:88:
                    d9:83:4e:9f:aa:b3:a5:91:a0:cf:ca:1b:1d:a6:2a:
                    47:7a:89:5e:73:43:29:8e:c6:7d:c2:73:8b:54:79:
                    41:9f:91:7e:18:33:b5:ce:c0:34:78:89:f9:e3:c6:
                    8f:a0:b0:9f:1c:47:cd:a6:4e:59:41:ba:15:b6:c9:
                    43:2a:c3:71:56:16:6c:1c:e1:58:b9:81:d6:4b:aa:
                    87:33:6c:e3:4e:ba:d2:02:ef:30:f6:2a:9e:13:fb:
                    4c:57:5f:bd:01:ce:bd:37:cc:76:ba:f5:2d:2f:d6:
                    8c:95:b7:b8:f1:41:b3:9b:43:f8:c2:76:2d:30:28:
                    42:d7:36:60:16:86:49:24:30:27:18:a7:06:e2:69:
                    8e:cb:56:f0:d3:56:41:44:ac:75:a0:4a:d3:f2:2e:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:6A:62:87:7C:B6:01:7E:80:D2:E7:2F:A0:D2:01:94:6B:51:79
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:50:d4:12:2c:a9:77:72:79:35:c5:10:96:47:cb:72:12:15:
         d6:64:09:7e:f9:95:17:54:77:cc:ce:85:2b:87:c7:a7:2e:05:
         48:c8:41:6b:09:ad:29:09:ba:87:e1:bf:4c:df:f4:10:a4:2f:
         b9:ca:8b:27:3a:bf:4b:1a:28:b7:f1:b2:87:f2:dd:24:b1:f2:
         d6:44:bb:8e:74:77:3f:eb:51:cd:b6:9a:ab:94:eb:d8:14:bc:
         d8:6b:48:e5:d9:d1:3d:34:76:92:84:75:83:6b:d8:ca:24:92:
         dd:f3:d7:45:b1:4c:17:a7:9f:fb:7a:3a:ef:fe:84:a6:1f:0c:
         ed:6b:ef:1e:6c:28:df:e5:b1:26:cf:31:9c:43:7c:3f:6c:ac:
         a0:b4:89:d3:5a:b6:3e:7b:64:e9:28:7b:c8:9c:d3:f4:fa:c3:
         ed:43:a3:1a:b8:ac:41:6f:bf:f8:d2:06:30:39:7a:62:68:aa:
         88:4d:5e:a8:31:dd:1a:70:6c:f6:bd:82:5d:c4:f6:45:00:de:
         2e:c1:e1:7d:f8:34:0f:46:cc:b5:b0:6f:53:20:cc:a7:cd:11:
         2b:53:fb:49:08:d7:73:54:1c:f7:bf:44:9a:a6:73:56:ae:26:
         cf:d4:4c:9a:f9:9c:63:95:2f:9d:77:4f:83:f1:8a:4f:aa:04:
         25:57:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:27:40 2026 by rpki-client