Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          5L1mPDSd1gzz7lh3Qxs18SpoB9h0INtHNtgxydLPuxQ=
Subject key identifier:   9F:37:81:06:F3:7E:4B:C0:96:73:20:F6:08:B7:77:0C:BE:78:C7:13
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01A0D34A8F44CBB8E81169993D056B3ADCF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1B83
Signing time:             Thu 24 Sep 2026 12:01:13 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:13 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:13 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1-_wSAB9euFQ6fT7w4DWJ5Xgo5Kk.roa (hash: BjqjTxy1Woefud4gcppujNascH6RjJHEx2c0AzjfX6o=)
                          4: 1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa (hash: XxYQOLtcDO+kKRh93RlmwzW/qtvNS82kdLybB49Wy7E=)
                          5: 3iuK2PePzlzkfIjA6PU7qCf7bWU.roa (hash: jmTVl7eRtiftjiuAnsGPt6gtZDbCLdVGFoxxlHgA3Rc=)
                          6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          7: 8fhRtiu_Y-7BuakqbAP1YnjY4eg.roa (hash: 7RxX4BpwVFrs84OiwF2XdVBqm5xQUd4i65cOFdlTJJ0=)
                          8: 9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa (hash: QpTn0BF+0f7mgbKz+dsPiNhRke1XKcJNUsuUcG4FoJo=)
                          9: C8ZLaFAbyVjIOedw3NULKGBNaHs.roa (hash: o7bLJ4x6imfQVFB8Ci4Xwe9P3Rv1x12r6bmWU8fyebo=)
                          10: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          11: F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa (hash: w95uLEhSRW0HEpsxo2sLSthAa84cXprY24xXtceKquw=)
                          12: GIKRF0nXi7INomLIm1n0MXoVX7g.roa (hash: kHr494+YoPwvcUNQ/4OPxtKZy199ghrNKf/OpsmU2nI=)
                          13: Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa (hash: cGNycfZbTmQsfCD7PYzBfa8+3CZ+9W0RQ36+xTRQr5g=)
                          14: KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa (hash: Y+VyjlDROYbrCdf29xH6G3H2D1QPefe6usrsIsZCitM=)
                          15: L0enPaj_4hnZXqV7ZMEztaTZBC8.roa (hash: uzNqXLX0MMTGTUP5cxjMKgQ19ZYg9VfOrFLtYCvWoxk=)
                          16: LBkSq5R6XWbPdh4vNBBg7IDj-D0.roa (hash: o6FBkRC3i3TODQqiIL4EQ6bdbi9ADeAh/bdI0nc31nk=)
                          17: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          18: QhR_79csT9O5oeIFdHW8gjPKFdQ.roa (hash: 23ArOcO4LB9jNTgcelJzPDcJ4dVoSawShlKbhyVD/Eo=)
                          19: Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa (hash: BOLwzKWftfPH8kNDI+1UZ4UUN8tIZ6CvXDApVSqljyQ=)
                          20: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          21: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          22: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: qCrGH7XhyTJzvs/16EOdxKPmA35qPS9Zcfd9Ixwm2ZQ=)
                          23: Ss4fVycWbzrbsGfC-UotFuMZAfI.roa (hash: jWq8iYtN0x0FwpUA7Gu/Lr/cnfU6eTDqvTSInxcOStI=)
                          24: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          25: Vkob5ykG1uTUoQxf-Y0lIElf748.roa (hash: rf3qd5Sq7pbldPkOkD+TRHnqHAa77Pp66pn/FP0ieM4=)
                          26: Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa (hash: ImBcIaHYckQlyUn7qD0gyo0OZpqemgaOxC20pRlncvA=)
                          27: ZGRufHjaEOQfZDX946W9j6Kmqp4.roa (hash: 9yXb0jdoscPhoz5VZ5tNsNxnKaSTWuDYouPvk/pE4eQ=)
                          28: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          29: cFl5ywq_13udVfRgQTEhw9bpSjU.roa (hash: TsFLhPPc4CKImjOhB5y40oTij5TztHWmIPHSHN3U630=)
                          30: d1FmpnCLtN9xWz258z_vo0evfQY.roa (hash: 99ktEN8EQTUBIhZ9BGIWGyL3Ti91GsDxlW00ORFmRCI=)
                          31: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          32: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          33: efLppXHlERCKKYaJTde-86Ghjlk.roa (hash: QKED85n+T67n9kk+tVSC2dGP5JLesJDmpO536eK8+nU=)
                          34: gID46NhD6hvl2nv_cf_eSX2tonc.roa (hash: YHrB9LZc1doQx8FMo5EWouRxMXkXccU8/QjTJjtf9to=)
                          35: jlG9y1XwIb8wc_C_We-qtbjo09Y.roa (hash: tx2ZQ5ic2oGjyxJfXoPm9eCoE4D1ij8/jlq+e5xg560=)
                          36: kR435wmWIR3POPSkhvuwY7LHnyU.roa (hash: P+t8d1X/83Jtvdac/hXKsX74pnVuVk0EELmCtBin0HM=)
                          37: mTzcSCxpm7gYApAoDUjX2gO7n9s.roa (hash: sVKa96WPI4bXLyvj1lNXogTGlDkJL+Tp5ovZB+WR0mc=)
                          38: p_-F_gZNwSja9HlusE4TYmgaUwY.roa (hash: 9uZH8FSVLCXJ4Mozz5c3Fj+lNnWQV44dFhzKdriybFs=)
                          39: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          40: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          41: sxCoOQjmxxgwH6aI9s_WrtXuu14.roa (hash: bTkGW/1MFHpv7MRl6T642YhhVQpoIaWD/+3bHqmoib0=)
                          42: u1LOjR3EgK565RLjZFRRNHL-Np0.roa (hash: alCXKITiCiwN2ST2B1hZQDz3KdcIWj1GfF0th4BrEY8=)
                          43: yrGe1giYiFqb8KNEn95n_cEAV4g.roa (hash: PqbsR8D4YGwmFWmv31QqoUBTUMq86kqCaK+pMgxowcs=)
                          44: z6JfI-sh2bNRE1whfbGOorsLuCw.roa (hash: 2ZqxwsXOn5MxMkpYtNE4aWeK6vzR7/Jj0bboBJ14PZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:8f:44:cb:b8:e8:11:69:99:3d:05:6b:3a:dc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Sep 24 12:01:13 2026 GMT
            Not After : Sep 25 12:01:13 2026 GMT
        Subject: CN=9f378106f37e4bc0967320f608b7770cbe78c713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:d3:fa:c8:fe:bd:21:e7:0f:22:b6:27:e8:
                    cc:f4:fc:11:67:c8:65:51:11:17:88:2b:4d:30:b9:
                    f6:ec:c3:5d:f3:bc:71:ff:d9:c5:59:a3:fa:80:94:
                    86:c2:e9:c7:c4:30:80:2f:8c:03:ac:f3:46:0b:9d:
                    e8:33:c7:75:46:a4:a0:58:48:3c:e9:4b:9f:39:c4:
                    c8:61:01:d3:bf:5b:9c:b0:79:1a:9f:67:c2:b5:09:
                    40:6c:bf:a7:b6:e0:a9:cc:21:e8:c5:b9:b9:32:26:
                    11:5f:70:0c:56:22:84:59:23:e9:c3:06:d9:82:00:
                    99:03:f5:dd:e1:96:fa:9d:d1:8b:1c:a5:cf:2c:05:
                    a9:61:4e:60:b8:e8:43:44:6f:ba:cc:fe:82:0c:2d:
                    22:e8:83:23:ae:26:77:ea:fe:ec:60:28:39:b9:c4:
                    64:48:5c:ae:ce:27:5c:f7:eb:8b:93:93:61:cf:67:
                    ae:0b:d1:5d:62:7a:29:62:ca:ca:da:13:a3:61:de:
                    b2:eb:c5:cf:1b:f6:33:9a:b2:14:ca:d9:93:1e:40:
                    b9:af:5e:07:41:6b:f1:8e:d5:36:bb:22:c1:22:8d:
                    c5:86:c6:2f:36:fb:34:f5:86:88:14:09:a6:9c:13:
                    5f:33:f6:2e:19:ee:2f:a9:e0:e1:76:d8:68:5f:1b:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:37:81:06:F3:7E:4B:C0:96:73:20:F6:08:B7:77:0C:BE:78:C7:13
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:4d:a2:ed:f4:86:6a:f5:5f:97:10:c2:e2:2b:00:ac:c4:
         58:c9:46:1c:ca:b2:1a:f9:e8:39:e1:2a:7d:68:e2:0b:9e:3f:
         eb:87:62:11:b8:e0:75:4b:9e:81:27:f0:f2:d5:98:d7:f1:a8:
         ff:04:cc:02:21:40:81:eb:bb:50:04:30:14:ec:65:ec:7a:e9:
         88:d7:04:d4:e2:2a:f1:3a:31:46:0c:5c:f8:00:f6:28:c2:51:
         6b:74:6c:17:6d:aa:0e:a2:fd:a8:37:d9:71:47:89:1a:2a:ae:
         ce:0c:b5:78:74:cb:36:f4:52:15:46:87:5e:ac:99:b7:5d:95:
         ab:be:31:82:b0:32:66:a2:6b:85:0b:d4:de:69:b7:f3:74:4b:
         2e:a9:c8:e8:f7:e0:f7:25:a8:ec:b5:ac:3b:71:3e:d8:d5:6e:
         13:5b:bd:9c:38:23:f8:da:10:c9:f8:bc:dd:1b:50:ab:e6:97:
         51:f3:0e:e7:6d:d3:c8:42:ff:1e:5e:0a:43:dc:d6:f4:b7:51:
         bf:69:57:2e:64:f0:ed:8d:47:f3:90:1d:ff:c1:6a:5a:67:aa:
         aa:cb:68:31:34:c1:1a:6c:6a:5c:24:03:29:75:42:63:3d:1e:
         7b:0d:63:5a:10:14:ec:7a:f5:04:ea:91:69:0d:e0:da:44:39:
         d9:d4:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----