Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File:                     sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier:          VQEmliSAUMph5OYhbVdtOycsarYwW3zzDOalJrpf11I=
Subject key identifier:   57:54:90:A9:02:38:91:42:3B:1E:6B:4B:7F:59:29:1E:96:C5:54:80
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       01A12A3206BC7EA717367B7DDE6E0684BA15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number:          1B12
Signing time:             Sun 11 Oct 2026 09:01:23 +0000
Manifest this update:     Sun 11 Oct 2026 09:01:23 +0000
Manifest next update:     Mon 12 Oct 2026 09:01:23 +0000
Files and hashes:         1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
                          2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
                          3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
                          4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
                          5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
                          6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
                          7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
                          8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
                          9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
                          10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
                          11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
                          12: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (hash: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=)
                          13: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
                          14: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
                          15: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
                          16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
                          17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
                          18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
                          19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
                          20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
                          21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
                          22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
                          23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
                          24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
                          25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
                          26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
                          27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
                          28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
                          29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
                          30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
                          31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
                          32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
                          33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
                          34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
                          35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: UfQg0L3ik00ky7CTR9PwUgOSc9CKEVHVUrSHoHH63Q8=)
                          36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
                          37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
                          38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
                          39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
                          40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
                          41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
                          42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:32:06:bc:7e:a7:17:36:7b:7d:de:6e:06:84:ba:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Oct 11 09:01:23 2026 GMT
            Not After : Oct 12 09:01:23 2026 GMT
        Subject: CN=575490a9023891423b1e6b4b7f59291e96c55480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:db:47:3a:e5:c3:e4:b6:db:58:c3:d5:4c:
                    38:fc:3d:84:9d:e1:20:ff:45:96:b8:51:52:58:fa:
                    eb:aa:b6:48:b6:fe:f6:d5:1f:6a:17:66:6f:7a:16:
                    ea:69:04:2c:bc:de:ed:d6:84:23:1d:b2:61:4c:17:
                    19:39:ad:75:f1:ff:32:9c:c0:8a:11:44:8b:4f:62:
                    e6:0f:b4:88:c8:32:fb:59:7f:a4:54:95:cb:dd:28:
                    e3:1e:41:04:2e:76:ae:eb:cc:c9:a8:4a:77:de:fa:
                    be:2c:2c:c5:2c:d4:f7:73:8f:8b:64:16:9d:d8:e5:
                    a6:67:38:f9:a2:45:64:08:c1:c8:cb:13:2e:5f:f5:
                    ef:8d:e7:d3:12:13:98:13:2c:b8:df:8e:ea:ae:74:
                    85:7c:34:29:36:93:d7:4d:da:2b:9b:24:65:66:f0:
                    64:fd:e1:3c:52:37:50:58:08:d5:2a:a8:40:c8:78:
                    6e:33:a3:39:aa:d3:be:26:c6:c0:38:cc:1a:7e:31:
                    18:eb:f4:0d:c6:11:d8:df:c5:b0:8a:20:f0:1c:1c:
                    5d:d3:f5:55:ba:33:1f:f6:9b:6d:c9:cd:d6:96:23:
                    fb:e2:33:70:7a:fa:9e:44:b8:4a:5d:b1:c3:f7:27:
                    4e:29:46:9f:bd:2d:37:be:87:21:9e:a8:49:e4:87:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:54:90:A9:02:38:91:42:3B:1E:6B:4B:7F:59:29:1E:96:C5:54:80
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:bf:41:42:15:75:4c:e8:e8:77:6a:af:0a:05:f4:4c:32:f8:
         56:26:79:cd:5f:f3:50:05:ad:c5:e5:af:b8:d7:23:92:59:d2:
         6f:1e:c6:3c:41:29:86:d6:57:5e:2c:6d:fa:6f:eb:2d:c7:34:
         09:3b:5f:2a:c1:ba:2c:90:96:fa:be:46:58:70:ee:78:98:a3:
         91:04:11:26:65:e0:d0:2d:fa:a5:4d:d2:38:16:bd:b9:b2:ba:
         6b:be:b8:06:cc:db:a1:31:29:37:5a:95:07:5a:ac:e5:38:2e:
         ae:14:6b:b7:ec:70:56:5e:b9:af:9c:32:54:a9:e5:c8:82:55:
         cf:fd:f4:5a:e7:d5:9e:bb:5b:b5:d1:41:f8:bc:35:e1:67:3a:
         23:c4:a5:2c:df:7f:a0:96:48:84:ed:ad:62:e0:54:c3:e9:12:
         92:ae:e5:cc:bb:1c:0d:79:c3:89:4f:c0:ef:38:4a:98:8d:df:
         73:97:e4:28:16:2d:f7:cc:38:a8:76:6a:77:ea:ae:6d:67:23:
         c8:68:ac:24:e3:9b:9e:77:49:25:88:d9:76:0a:04:e6:4d:80:
         f1:c6:6c:42:c1:4a:c7:29:0c:d6:f5:06:b5:6f:a9:4f:14:e7:
         cb:9d:31:bc:7a:2a:39:c1:d2:cf:dc:ba:58:66:ab:94:0b:83:
         66:50:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----