Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          WOmm3kWICo7f8V7CD5MQt54zVuxPNiLs/q5JLyYEuvQ=
Subject key identifier:   EB:5B:47:09:1C:20:47:0C:6C:63:C1:39:1E:D8:20:DF:62:95:AF:4D
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       01A135C7D826F4C4A4974B3FA2D2366C7B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1B18
Signing time:             Tue 13 Oct 2026 15:00:51 +0000
Manifest this update:     Tue 13 Oct 2026 15:00:51 +0000
Manifest next update:     Wed 14 Oct 2026 15:00:51 +0000
Files and hashes:         1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
                          2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
                          3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
                          4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
                          5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
                          6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
                          7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
                          8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
                          9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
                          10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
                          11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
                          12: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (hash: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=)
                          13: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
                          14: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
                          15: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
                          16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
                          17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
                          18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
                          19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
                          20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
                          21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
                          22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
                          23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
                          24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
                          25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
                          26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
                          27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
                          28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
                          29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
                          30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
                          31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
                          32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
                          33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
                          34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
                          35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: YF1sn0Gl7yyKItukM/uAryag4UZIIs0NoKyKQeHjETE=)
                          36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
                          37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
                          38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
                          39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
                          40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
                          41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
                          42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c7:d8:26:f4:c4:a4:97:4b:3f:a2:d2:36:6c:7b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Oct 13 15:00:51 2026 GMT
            Not After : Oct 14 15:00:51 2026 GMT
        Subject: CN=eb5b47091c20470c6c63c1391ed820df6295af4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:37:de:8c:c5:72:d4:bb:6a:b0:ab:c4:e0:
                    44:bb:73:ca:58:05:ee:e8:a1:38:8e:3e:51:a0:d7:
                    14:6e:02:f4:24:82:da:72:12:ec:34:84:ac:cc:2e:
                    db:eb:ef:d9:40:cf:81:e9:69:2b:f3:30:11:9d:d8:
                    87:3e:44:6b:79:42:c3:e8:d5:96:30:f8:52:00:53:
                    02:f4:33:d0:46:0c:b2:e2:cb:b4:5c:8a:d3:8f:ed:
                    33:96:6d:5e:6c:96:d8:61:c4:e0:48:94:a7:08:66:
                    46:be:6a:9b:ff:15:f1:6f:a9:c8:fd:a3:34:55:59:
                    b5:df:85:42:59:b1:61:52:07:95:d6:dc:c9:f2:83:
                    75:c4:68:cb:a1:9a:84:5d:72:7d:4e:dc:bf:e6:45:
                    6a:44:11:4e:ea:08:c0:e3:05:52:d8:3e:fc:b3:c9:
                    2e:a3:e1:77:86:cc:4d:42:8a:65:c4:45:88:49:91:
                    49:48:c0:cb:6d:bd:c3:26:53:b6:ea:4f:9a:98:bd:
                    5d:2d:9c:85:57:b4:42:9a:a2:8d:00:e3:46:83:cb:
                    78:75:94:60:9c:86:51:43:a6:77:82:67:27:34:25:
                    23:61:ca:b1:ec:de:61:2b:b4:66:f8:18:51:1a:3a:
                    3c:fe:e4:3f:3c:d7:d1:3f:c0:81:b0:74:00:43:f8:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5B:47:09:1C:20:47:0C:6C:63:C1:39:1E:D8:20:DF:62:95:AF:4D
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:43:12:57:5f:48:4b:7f:64:e4:79:89:40:59:51:43:f2:41:
         f6:68:15:21:83:c8:5d:16:e8:1c:98:14:13:cc:05:cc:28:7e:
         47:39:6c:72:50:39:4c:30:c5:71:e6:63:2a:53:e5:2d:ae:e4:
         cc:24:ac:2d:73:38:7d:42:c9:41:8a:4e:bd:c2:76:dc:10:97:
         2d:8a:2e:77:20:58:e9:16:f1:1a:01:14:56:dd:c4:cb:1a:71:
         56:df:a7:78:62:04:a8:26:80:d0:6e:6c:03:34:0b:60:c2:b8:
         c5:ee:ad:ab:a9:e0:95:2a:f5:f7:9a:0d:27:6f:66:57:79:0c:
         17:2f:1e:64:88:f6:93:be:24:32:18:a4:22:08:bc:58:56:52:
         8c:d6:96:23:d5:6c:28:27:bb:9d:2c:81:32:78:73:17:ff:87:
         03:6a:3c:82:8d:29:1f:a7:a0:62:ff:1b:1b:bd:ff:85:1d:ab:
         02:7f:b7:a5:f3:7d:5f:de:96:b5:b6:d7:d5:8c:f8:5e:1a:d8:
         84:2f:ff:72:97:66:18:98:77:3e:af:74:7d:dc:f6:97:10:ae:
         28:e9:38:7e:2a:f4:ea:cb:16:4a:c6:cd:71:c7:52:2d:b3:f8:
         da:0c:e7:3a:eb:0f:97:d0:19:fe:ff:c5:ce:b4:03:f1:29:a4:
         b9:de:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:15:51 2026 by rpki-client