Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          ftkzSbr/9swRXi66W4N/sKZId+QIrbn+JmDiA+BM1GM=
Subject key identifier:   56:37:CA:B0:91:F4:4B:F6:D3:AC:1B:B8:30:97:AD:F8:9B:30:90:F0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01A0C7B3976781468EC3DC90CF947052FDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1B7D
Signing time:             Tue 22 Sep 2026 06:00:30 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:30 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:30 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1-_wSAB9euFQ6fT7w4DWJ5Xgo5Kk.roa (hash: BjqjTxy1Woefud4gcppujNascH6RjJHEx2c0AzjfX6o=)
                          4: 1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa (hash: XxYQOLtcDO+kKRh93RlmwzW/qtvNS82kdLybB49Wy7E=)
                          5: 3iuK2PePzlzkfIjA6PU7qCf7bWU.roa (hash: jmTVl7eRtiftjiuAnsGPt6gtZDbCLdVGFoxxlHgA3Rc=)
                          6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          7: 8fhRtiu_Y-7BuakqbAP1YnjY4eg.roa (hash: 7RxX4BpwVFrs84OiwF2XdVBqm5xQUd4i65cOFdlTJJ0=)
                          8: 9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa (hash: QpTn0BF+0f7mgbKz+dsPiNhRke1XKcJNUsuUcG4FoJo=)
                          9: C8ZLaFAbyVjIOedw3NULKGBNaHs.roa (hash: o7bLJ4x6imfQVFB8Ci4Xwe9P3Rv1x12r6bmWU8fyebo=)
                          10: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          11: F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa (hash: w95uLEhSRW0HEpsxo2sLSthAa84cXprY24xXtceKquw=)
                          12: GIKRF0nXi7INomLIm1n0MXoVX7g.roa (hash: kHr494+YoPwvcUNQ/4OPxtKZy199ghrNKf/OpsmU2nI=)
                          13: Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa (hash: cGNycfZbTmQsfCD7PYzBfa8+3CZ+9W0RQ36+xTRQr5g=)
                          14: KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa (hash: Y+VyjlDROYbrCdf29xH6G3H2D1QPefe6usrsIsZCitM=)
                          15: L0enPaj_4hnZXqV7ZMEztaTZBC8.roa (hash: uzNqXLX0MMTGTUP5cxjMKgQ19ZYg9VfOrFLtYCvWoxk=)
                          16: LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa (hash: o6FBkRC3i3TODQqiIL4EQ6bdbi9ADeAh/bdI0nc31nk=)
                          17: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          18: QhR_79csT9O5oeIFdHW8gjPKFdQ.roa (hash: 23ArOcO4LB9jNTgcelJzPDcJ4dVoSawShlKbhyVD/Eo=)
                          19: Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa (hash: BOLwzKWftfPH8kNDI+1UZ4UUN8tIZ6CvXDApVSqljyQ=)
                          20: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          21: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          22: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: Ps2S3ywSUdnUrlNOXu6OXiGZOthSkqqhiNKD3DTizQQ=)
                          23: Ss4fVycWbzrbsGfC-UotFuMZAfI.roa (hash: jWq8iYtN0x0FwpUA7Gu/Lr/cnfU6eTDqvTSInxcOStI=)
                          24: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          25: Vkob5ykG1uTUoQxf-Y0lIElf748.roa (hash: rf3qd5Sq7pbldPkOkD+TRHnqHAa77Pp66pn/FP0ieM4=)
                          26: Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa (hash: ImBcIaHYckQlyUn7qD0gyo0OZpqemgaOxC20pRlncvA=)
                          27: ZGRufHjaEOQfZDX946W9j6Kmqp4.roa (hash: 9yXb0jdoscPhoz5VZ5tNsNxnKaSTWuDYouPvk/pE4eQ=)
                          28: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          29: cFl5ywq_13udVfRgQTEhw9bpSjU.roa (hash: TsFLhPPc4CKImjOhB5y40oTij5TztHWmIPHSHN3U630=)
                          30: d1FmpnCLtN9xWz258z_vo0evfQY.roa (hash: 99ktEN8EQTUBIhZ9BGIWGyL3Ti91GsDxlW00ORFmRCI=)
                          31: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          32: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          33: efLppXHlERCKKYaJTde-86Ghjlk.roa (hash: QKED85n+T67n9kk+tVSC2dGP5JLesJDmpO536eK8+nU=)
                          34: gID46NhD6hvl2nv_cf_eSX2tonc.roa (hash: YHrB9LZc1doQx8FMo5EWouRxMXkXccU8/QjTJjtf9to=)
                          35: jlG9y1XwIb8wc_C_We-qtbjo09Y.roa (hash: tx2ZQ5ic2oGjyxJfXoPm9eCoE4D1ij8/jlq+e5xg560=)
                          36: kR435wmWIR3POPSkhvuwY7LHnyU.roa (hash: P+t8d1X/83Jtvdac/hXKsX74pnVuVk0EELmCtBin0HM=)
                          37: mTzcSCxpm7gYApAoDUjX2gO7n9s.roa (hash: sVKa96WPI4bXLyvj1lNXogTGlDkJL+Tp5ovZB+WR0mc=)
                          38: p_-F_gZNwSja9HlusE4TYmgaUwY.roa (hash: 9uZH8FSVLCXJ4Mozz5c3Fj+lNnWQV44dFhzKdriybFs=)
                          39: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          40: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          41: sxCoOQjmxxgwH6aI9s_WrtXuu14.roa (hash: bTkGW/1MFHpv7MRl6T642YhhVQpoIaWD/+3bHqmoib0=)
                          42: u1LOjR3EgK565RLjZFRRNHL-Np0.roa (hash: alCXKITiCiwN2ST2B1hZQDz3KdcIWj1GfF0th4BrEY8=)
                          43: yrGe1giYiFqb8KNEn95n_cEAV4g.roa (hash: PqbsR8D4YGwmFWmv31QqoUBTUMq86kqCaK+pMgxowcs=)
                          44: z6JfI-sh2bNRE1whfbGOorsLuCw.roa (hash: 2ZqxwsXOn5MxMkpYtNE4aWeK6vzR7/Jj0bboBJ14PZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:97:67:81:46:8e:c3:dc:90:cf:94:70:52:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Sep 22 06:00:30 2026 GMT
            Not After : Sep 23 06:00:30 2026 GMT
        Subject: CN=5637cab091f44bf6d3ac1bb83097adf89b3090f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:19:fa:c9:3c:4d:6f:03:eb:66:a3:69:ca:
                    26:31:46:fd:d0:68:64:3f:2f:07:5d:cd:60:32:e5:
                    69:7d:6b:77:b5:2c:4e:97:37:c3:c3:b5:f9:43:39:
                    e8:b3:46:43:cf:ae:75:a7:b3:44:e8:ec:20:8f:b9:
                    f3:27:4f:ef:bb:3c:b9:dc:07:f9:4d:d6:55:ed:9a:
                    14:2d:c2:d4:3e:4a:85:71:c9:03:f6:53:d1:63:14:
                    26:23:b1:a9:9b:8b:f0:44:c4:fd:46:b6:38:00:76:
                    b7:c3:74:94:bb:00:4a:13:75:52:16:f3:b8:9e:40:
                    63:b4:de:84:2a:64:06:15:5d:30:49:ab:da:72:0a:
                    ac:ec:4b:b6:ff:6a:0a:b6:bb:43:15:0a:78:c5:f0:
                    f9:6e:a5:74:ed:34:ab:9b:33:14:69:fc:b4:7f:fb:
                    69:8f:85:54:1d:3f:fd:84:d4:f2:2a:92:5f:9c:d1:
                    a6:a1:7a:75:f5:e1:4c:6e:41:33:74:58:59:6e:d4:
                    fe:7b:ae:4c:db:d7:48:9d:f0:e8:c5:e5:52:88:35:
                    07:fa:b9:86:61:35:87:aa:ce:31:1e:ea:94:3e:fb:
                    49:e7:2d:da:85:e2:c0:8b:73:c7:b1:9a:dc:86:ff:
                    9a:dc:b3:76:ab:6e:bc:57:3d:be:4f:18:43:8c:0e:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:37:CA:B0:91:F4:4B:F6:D3:AC:1B:B8:30:97:AD:F8:9B:30:90:F0
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:22:9d:df:21:f1:96:08:48:cf:e1:1f:56:f5:8a:c9:54:5a:
         d0:3c:05:71:b6:fd:e6:0f:9b:f6:35:d6:09:cf:15:68:50:c0:
         82:70:99:4a:76:a7:ac:5f:9d:c4:d9:cf:23:ae:59:f3:12:9f:
         1f:16:2a:3e:04:bc:37:02:d7:d5:a1:8b:7a:31:2d:e8:5c:7e:
         50:1d:d9:aa:bd:02:28:d4:ac:28:57:47:1c:3e:74:ee:28:57:
         e1:5a:a8:26:e1:81:09:e4:53:ee:2f:b7:5f:bf:65:b1:32:18:
         c6:57:b1:4c:09:58:e9:28:ca:77:dd:67:e1:c6:55:b7:16:d2:
         ed:c6:ba:46:5e:f7:e9:34:da:17:60:df:dc:47:84:aa:99:0d:
         4e:f2:fa:2d:79:e9:32:2c:e2:bc:14:06:de:66:2a:fd:4a:19:
         7c:99:de:88:7d:3b:56:26:3c:ab:26:37:ac:4e:fc:22:86:a1:
         90:c2:a4:6e:50:c0:a5:81:ec:21:50:17:e4:d8:38:50:05:9e:
         1f:1e:54:f5:0c:24:e0:05:54:b9:bc:01:89:55:98:b4:58:d2:
         80:ac:ed:fa:6a:7e:4e:15:9d:a9:c4:3a:16:e0:bf:06:19:63:
         fe:d0:49:a5:75:8c:ad:11:40:2d:b1:11:c8:88:45:54:c8:7b:
         73:3b:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----