Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
File:                     E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft (raw, json)
Hash identifier:          kaUeuY8kE2RCoRCJ6VZMgMqRfaun96msjMzW9aEdu2g=
Subject key identifier:   3B:20:95:21:58:3B:5E:4F:C0:FD:CF:8F:63:DC:C1:72:75:65:95:7A
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Certificate issuer:       /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial:       01A0BE0BCA80EA7F98E443320763B4247AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
Manifest number:          0242
Signing time:             Sun 20 Sep 2026 09:00:38 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:38 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:38 +0000
Files and hashes:         1: 5166Agqn2jhH_IbcMtLAwG-YdBU.roa (hash: 1lBqQs6eapcEUxVFfk56SbDLb/u+RmQXXUBZz3g1JEw=)
                          2: 9ZYIs_SGpDj7xEbDzyW_JghOQTw.roa (hash: 7Lzx+Hq6m9JlVc7MK5/YoQEfJ0j7aRZa7AWfxLFqHFw=)
                          3: B8DXsuSLx94y4My6JnYh5VRTgrs.roa (hash: SkxV8uzrj5b4YEP22Ioh+53nCFAbJ5W6IqHlzQdtsUM=)
                          4: D6eWMu_kq_uU7otQpEL1VHV7f_w.roa (hash: Evlysc6WwS7RU6oLj6x2pSD96o6kHpyIcIsfiVYufzg=)
                          5: DXKMNNa0Hs5_15oyh49q-Vn6PxM.roa (hash: VBa7xt+v+8bs4B8yDFTakTjnLlzPlUnnwe59tL4QPoA=)
                          6: DuR8R9YJWEDaCvnw-8235RrAPAI.roa (hash: nwr1wP+HSbTaiN0zlgVNEhTYrOWHjDVW/mSXRxlqdg0=)
                          7: E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl (hash: PCpUCa5LZxqPMLesTKdWV8OWR6n790OGSScazhjeSqs=)
                          8: HVtjpFrYsNMiZMANtbtwZb7tXTA.roa (hash: RT0/NHuxEn3/LChxeNjl7pnDqmmNjeuWdurgtBY/1ac=)
                          9: JjobvDHzB_RdGlQHuakDY7g6qUc.roa (hash: lMc17XsqpF3q+RuSqmQMroyA9fOiD+xrXB77wQY0+oY=)
                          10: K65FtJG9WPws15aCxLNx8kcSq4o.roa (hash: sWdNupu5JRN43l9Mn2CYyxa89Mi5FMM2ipbcVk7cMgk=)
                          11: KoAxChCFkAeIK98qjbf3bksCgHg.roa (hash: GFujlbeBcjaBQBdj6uHIkxK5RA2RyoYqfL9mlDRfy0E=)
                          12: MMfImLwXkpf8klG1MzI8QyIWYNs.roa (hash: /dOuqPOohIph5KLhxjBT71a56JFrTzDMnHJBEa+DRrM=)
                          13: Myki_ulcjWmpQmHgjyoBf5hdCxo.asa (hash: vz7FdRapOVRGMp/nDx49C5OYL6JnACLP1Ka5N1shAkI=)
                          14: TMGy79dW2pXkye7BEHy8CMyor_w.roa (hash: 1GLCODVONP48lg8Ky3uS0bIOpPD9LaSttQUDyZyBj78=)
                          15: TzsKtY4yH3hMHXGVr2mEO5e2XX0.roa (hash: QQL+sebNXE8j2Sq08pOlk1vwab5QNpo78/csMt17vj8=)
                          16: UnSYaDgDlq6mma-qSvxlxf3f7cY.roa (hash: Vq/fmGi7ZxgEu6+2GPpPORkHD4V173NnGLUxV5LVIwU=)
                          17: X9uVty-Z6ODzhaNGS5l1xq5pPVw.roa (hash: OOv3o2LHWlvIdA+Zgu9PaIEfBk4ChhYVmLlz2Cwp33o=)
                          18: XMtCIZ_eMVlacdNRc20Zknmaf9U.roa (hash: sBaiQ2KBzd8/KSOpdVi6syd+anCDH6uFiSXn5XY0yv4=)
                          19: YF0JCEms2KXmPHlGc2bhdslCoMY.roa (hash: TLn2rL1tOH0jWzXZMjUtfq0aySOIcv2w9yQfsVR5G1g=)
                          20: Ygo8GvKAdgCcGJ5m1Oi-vDy96ms.roa (hash: a5DTe+hdEJtLKv/jwd1CLDK4f47JAtNG57OnzbDpH0c=)
                          21: afwPx0FIBqz2zxMx1OzNulPNuQs.roa (hash: mBtbLYbB8/wqtcKjYg6ImsR3gQi32SHh8lzdvBMp1vs=)
                          22: g1LeNLesQnnHrxEF-PtEFUnDUQM.roa (hash: XLl6dtmsvyb3f12OkZANWLQCsjp8hGD5UB6rX/gHGkE=)
                          23: kev6swYL_1sSCrLvGGpcnPKL-Wo.roa (hash: 2bziuGP46h0VJFLNp+CwpaKxwiZAv+HrTOuv5kinatc=)
                          24: mvsrCDC-NqbWrnDx8KIZT31_F9w.roa (hash: 6La2GkWDdDzTNk/r06zzIsY5pdXU8koA2+wcTUWWsEc=)
                          25: pTMFjEmitrKJMvkFajOQUUYgL8M.roa (hash: XneeE71IIyV6WPB9kLDPT9IPELgo63GtKtVt2WX/krQ=)
                          26: q9gzmrXlePMlciZvpWWGZ4VAXJ8.roa (hash: +qqAYu+OXwah/VdIOZh/+D6sTDdWRFnAkpAzYg8M8r0=)
                          27: sP9A4cnylfqxWlDpkBAm0CIqBFU.roa (hash: pWmUgGcf93vr+1FE5Mpw2z4+mxojC+Zrtg39SIpckEs=)
                          28: v0ktEALprjuYyYztKF7oiuux4Yc.roa (hash: uoK2ToELcvQ/V62kgkj3wD/DyJ0aXYt2dIxjN0uwM8E=)
                          29: y0JL5th_famt13MqdwXpQQi-c4Q.roa (hash: 0h/IAOS8gxMB1NgAu/pEJouuMsfFoZ2H2n14ej3wMJc=)
                          30: yNImWxuyQjHzmmv-3_EoOXHf-CU.roa (hash: +omRj5AvhzVWWvcblTxHnl95I2HJgpEVlK0ldmd1MWY=)
                          31: yY8I4l0MBr9vnTlmQUYn6NoYBgM.roa (hash: o+wuVfWOWZsZTQMjwMDsqTstb94f+lmkvMjkI7KxcD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:ca:80:ea:7f:98:e4:43:32:07:63:b4:24:7a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
        Validity
            Not Before: Sep 20 09:00:38 2026 GMT
            Not After : Sep 21 09:00:38 2026 GMT
        Subject: CN=3b209521583b5e4fc0fdcf8f63dcc1727565957a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:20:e3:2c:eb:df:fc:f2:dd:b3:ff:5b:a2:
                    41:12:62:70:17:1c:4f:c8:b5:88:6d:64:0c:43:f3:
                    9f:89:ea:ac:b2:11:36:e7:fd:a4:46:cf:c5:bc:fa:
                    df:41:e9:ec:85:47:49:14:dd:c0:40:b3:c0:f3:44:
                    8d:31:3b:72:74:b3:7c:d0:43:6e:6e:20:9b:36:dd:
                    42:fc:b0:a9:6b:4f:3e:57:23:9f:f7:38:8f:73:f8:
                    d4:f9:b9:85:84:57:00:45:82:fe:c0:d0:07:b4:7f:
                    c3:41:82:f9:fa:e0:48:21:ba:13:8b:48:18:3e:07:
                    8b:9d:8d:16:b5:f5:9d:b3:b2:41:6f:ee:9e:5f:21:
                    71:e2:fc:6f:1c:c6:87:fd:56:5e:7a:ca:cf:5b:f8:
                    2f:c1:56:98:05:3c:2a:e2:b3:de:a5:3a:38:fd:39:
                    5f:84:99:5a:0e:a5:65:54:cf:c2:22:5e:d2:8b:80:
                    1e:98:d8:e3:01:ea:0a:94:c6:9c:60:98:0c:d8:9b:
                    72:1e:54:45:c1:99:9e:99:0a:64:46:96:2f:aa:f4:
                    92:7d:df:54:e3:0c:44:d0:70:e5:97:41:86:cf:e0:
                    08:69:2b:72:a6:12:b5:8e:b6:85:c7:bb:b9:59:57:
                    b0:71:6c:1a:1c:cf:a2:ac:e9:9d:28:66:ed:c5:95:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:20:95:21:58:3B:5E:4F:C0:FD:CF:8F:63:DC:C1:72:75:65:95:7A
            X509v3 Authority Key Identifier:
                keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:f2:c2:2f:f4:0d:cc:39:89:24:74:f2:53:a1:d6:f4:ae:
         6c:b5:44:de:18:8d:d4:93:05:3c:52:50:b3:af:7f:f8:92:dc:
         34:9d:a2:0e:a8:d2:c4:eb:6d:a6:60:82:6f:2f:9e:a4:d3:26:
         ac:01:d3:cb:3f:c7:f1:06:44:08:21:98:f0:8a:61:9a:b7:d3:
         3a:65:da:3e:99:97:36:35:e6:1e:5f:94:1d:3f:20:92:1d:09:
         7d:c1:31:aa:eb:9f:a0:15:01:28:ab:8b:5a:ae:21:ab:b1:99:
         15:33:18:1d:40:de:b1:96:45:45:d4:85:65:43:84:a2:93:20:
         d6:f5:9c:6f:e5:0c:8e:12:11:b6:e4:51:00:4d:79:ea:fe:bc:
         a1:05:49:41:91:82:d0:2a:82:cb:d6:a6:6e:8b:ab:1b:de:4d:
         63:9e:74:ee:ac:b4:e0:46:f6:90:00:d5:fd:51:5b:8a:fc:20:
         51:ee:47:d4:9a:70:37:24:c6:be:26:ee:e3:2d:5d:06:04:e3:
         67:1b:f6:aa:ef:f5:ea:4d:c4:43:5c:1a:8c:f2:6c:4d:22:ba:
         ee:fb:80:15:e4:44:8b:66:1a:9b:ac:0e:4b:23:a3:74:b3:60:
         95:15:a0:46:d1:61:76:20:6a:a5:25:57:5a:33:87:0b:e6:5e:
         cb:0f:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:55:51 2026 by rpki-client