Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          5HAs84XW/rqZncogwCLKPymWYRBY9vTCi2QIIDYtWdU=
Subject key identifier:   37:45:30:E4:19:F9:D0:8F:E9:D3:FC:66:72:84:53:70:35:00:DD:1C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019FA8A94AD6F74ADF9AE5262907549CCC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1AE3
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
Manifest this update:     Tue 28 Jul 2026 12:18:14 +0000
Manifest next update:     Wed 29 Jul 2026 12:18:14 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1-_wSAB9euFQ6fT7w4DWJ5Xgo5Kk.roa (hash: BjqjTxy1Woefud4gcppujNascH6RjJHEx2c0AzjfX6o=)
                          4: 1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa (hash: XxYQOLtcDO+kKRh93RlmwzW/qtvNS82kdLybB49Wy7E=)
                          5: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (hash: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k=)
                          6: 2GCcY-LZuzC_v8C19k7vBzj-BoQ.roa (hash: 5kP/sSrzDwtGmYYOQl+Ss+cSVF5GujZUvoZEG1n1rCM=)
                          7: 3iuK2PePzlzkfIjA6PU7qCf7bWU.roa (hash: jmTVl7eRtiftjiuAnsGPt6gtZDbCLdVGFoxxlHgA3Rc=)
                          8: 41CnWU7PjEAFuw792t5A517Sn7Y.roa (hash: zvVh+bIH1zp58GW8FaRNQSHYWUI+hp/KhdCSLTbP6t8=)
                          9: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          10: 8fhRtiu_Y-7BuakqbAP1YnjY4eg.roa (hash: 7RxX4BpwVFrs84OiwF2XdVBqm5xQUd4i65cOFdlTJJ0=)
                          11: C8ZLaFAbyVjIOedw3NULKGBNaHs.roa (hash: o7bLJ4x6imfQVFB8Ci4Xwe9P3Rv1x12r6bmWU8fyebo=)
                          12: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          13: F9-TtLeGp5Zi8Xx4OGNJZQREZQ8.roa (hash: w95uLEhSRW0HEpsxo2sLSthAa84cXprY24xXtceKquw=)
                          14: Guoxwahp0mrpH83oscuF3StmgL4.roa (hash: b9u9ODGvV7E1dMwdtXwMfxsCLt+neWPY0Xa0Njg/95g=)
                          15: L0enPaj_4hnZXqV7ZMEztaTZBC8.roa (hash: uzNqXLX0MMTGTUP5cxjMKgQ19ZYg9VfOrFLtYCvWoxk=)
                          16: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          17: QhR_79csT9O5oeIFdHW8gjPKFdQ.roa (hash: 23ArOcO4LB9jNTgcelJzPDcJ4dVoSawShlKbhyVD/Eo=)
                          18: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          19: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          20: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: SLZRBcZCND7gNEGO6USCnJ/YRRXn2zYu9Axc6HdOAzA=)
                          21: Ss4fVycWbzrbsGfC-UotFuMZAfI.roa (hash: jWq8iYtN0x0FwpUA7Gu/Lr/cnfU6eTDqvTSInxcOStI=)
                          22: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          23: X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa (hash: Te4JGy7suNJwGqJ4fGrVMOQc/VeF1iQInhbVnodspgc=)
                          24: Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa (hash: ImBcIaHYckQlyUn7qD0gyo0OZpqemgaOxC20pRlncvA=)
                          25: ZGRufHjaEOQfZDX946W9j6Kmqp4.roa (hash: 9yXb0jdoscPhoz5VZ5tNsNxnKaSTWuDYouPvk/pE4eQ=)
                          26: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          27: cFl5ywq_13udVfRgQTEhw9bpSjU.roa (hash: TsFLhPPc4CKImjOhB5y40oTij5TztHWmIPHSHN3U630=)
                          28: cmrzHq59aT2dBrIlVKpdtIcwUSk.roa (hash: 6wErNSr75ZSugnni43I7hG00tJ4As1loozXCe2oOo/0=)
                          29: d1FmpnCLtN9xWz258z_vo0evfQY.roa (hash: 99ktEN8EQTUBIhZ9BGIWGyL3Ti91GsDxlW00ORFmRCI=)
                          30: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          31: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          32: efLppXHlERCKKYaJTde-86Ghjlk.roa (hash: QKED85n+T67n9kk+tVSC2dGP5JLesJDmpO536eK8+nU=)
                          33: jlG9y1XwIb8wc_C_We-qtbjo09Y.roa (hash: tx2ZQ5ic2oGjyxJfXoPm9eCoE4D1ij8/jlq+e5xg560=)
                          34: kHu_rboNFT8ETY1yB9MYxArAReU.roa (hash: FX+vCx3sztak+YZZT+sc2ImUxAj0ywR2OO7lw6Me0qw=)
                          35: kR435wmWIR3POPSkhvuwY7LHnyU.roa (hash: P+t8d1X/83Jtvdac/hXKsX74pnVuVk0EELmCtBin0HM=)
                          36: kznzYxIUd-Lz7Z2ehp8xwdKSPxw.roa (hash: Xkti13dKYOAlspKe837C6yxpqErtzF6riAvbQ1IYguE=)
                          37: mTzcSCxpm7gYApAoDUjX2gO7n9s.roa (hash: sVKa96WPI4bXLyvj1lNXogTGlDkJL+Tp5ovZB+WR0mc=)
                          38: plKTDYCFlnGp6ZF4-sIKW-g3jMg.roa (hash: k91dj68ML+V1FvZlw2MYe2YrNxXDYHtowxRtLb1XJa8=)
                          39: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          40: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          41: yrGe1giYiFqb8KNEn95n_cEAV4g.roa (hash: PqbsR8D4YGwmFWmv31QqoUBTUMq86kqCaK+pMgxowcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:a9:4a:d6:f7:4a:df:9a:e5:26:29:07:54:9c:cc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jul 28 12:18:14 2026 GMT
            Not After : Jul 29 12:18:14 2026 GMT
        Subject: CN=374530e419f9d08fe9d3fc66728453703500dd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:2c:5d:b4:3a:9e:fd:06:95:de:ca:ea:fb:
                    85:7e:e5:9b:f7:b0:89:f2:12:a3:77:7b:fb:0a:05:
                    86:1b:90:af:bd:66:d0:e6:67:20:18:45:f7:96:5d:
                    0d:db:75:e8:d0:99:34:f7:e6:50:7c:14:d2:17:f6:
                    9b:4e:51:f5:04:b2:33:7b:58:d5:c1:50:35:c9:56:
                    d1:c2:09:be:a2:04:40:ff:a7:a4:c0:a8:97:9b:74:
                    25:78:5b:1b:6c:46:42:03:e6:7d:f4:d2:ee:12:0e:
                    cf:a5:3c:1d:ec:44:76:66:c3:b9:9c:38:3d:4b:1d:
                    3d:78:04:8f:54:5f:ec:94:73:e8:ed:3f:92:c7:5d:
                    42:3b:13:93:57:ea:21:fd:91:80:21:0e:78:b3:d3:
                    e9:7d:ea:00:dd:14:d8:58:15:ea:f5:63:e3:ac:db:
                    ab:51:12:63:c8:9d:07:bb:cf:32:2e:82:aa:09:8f:
                    a8:9b:9e:e5:55:35:c3:31:4d:c7:a0:4f:1c:19:7e:
                    69:ce:54:b3:db:7e:52:20:0a:f1:b9:50:dd:eb:d8:
                    1a:95:28:59:bd:27:84:77:e8:c5:71:d8:74:9b:39:
                    0e:fb:68:62:f0:16:31:09:c5:dc:72:79:9c:90:d3:
                    bb:43:87:ef:eb:55:60:64:b3:4e:c7:7a:c4:44:22:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:45:30:E4:19:F9:D0:8F:E9:D3:FC:66:72:84:53:70:35:00:DD:1C
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:50:5f:cd:c2:be:7d:c7:0f:41:54:10:89:e7:17:53:eb:df:
         31:80:fe:44:03:c0:50:dc:d1:b1:54:18:f9:1a:42:bd:99:6c:
         bf:07:68:bd:20:9e:d5:0b:f1:e8:66:36:b2:b9:25:4d:bc:10:
         b4:8f:f9:43:31:61:cb:db:c8:d2:c9:4c:7b:18:47:e4:9e:7b:
         78:31:72:3a:b1:ac:c0:a3:b8:de:63:1a:0f:5d:cc:82:fb:8c:
         b7:c0:84:54:3a:c0:1c:89:69:b9:a4:92:43:1d:38:e2:71:18:
         21:26:80:40:f4:56:94:ab:e2:e5:d7:24:93:76:cf:5a:c8:8d:
         88:38:71:a5:2f:46:b2:0d:ff:89:1b:23:78:51:db:12:8b:9e:
         dd:c0:54:1a:68:5f:27:8c:8d:36:4b:b6:dc:af:ed:fa:c1:5a:
         43:15:af:32:df:30:27:86:57:c3:4c:05:9e:48:ea:a4:43:22:
         d8:ff:82:9c:53:9c:b3:c3:02:1a:60:0e:7d:cc:8e:0d:ed:bd:
         53:4c:df:aa:be:1b:f7:fd:44:70:14:aa:66:d8:76:3b:85:3a:
         90:9d:5e:cc:41:4b:4a:7e:c6:e3:63:f4:e4:ea:f8:c1:2f:e9:
         f2:a2:7c:7f:86:60:cd:f8:ff:70:fa:b8:8f:38:c6:7d:cf:46:
         7a:da:68:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oqUrW90rfmuUmKQdUnMxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwNzI4MTIxODE0WhcNMjYwNzI5MTIxODE0WjAzMTEwLwYDVQQD
EygzNzQ1MzBlNDE5ZjlkMDhmZTlkM2ZjNjY3Mjg0NTM3MDM1MDBkZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyAsXbQ6nv0Gld7K6vuFfuWb97CJ
8hKjd3v7CgWGG5CvvWbQ5mcgGEX3ll0N23Xo0Jk09+ZQfBTSF/abTlH1BLIze1jV
wVA1yVbRwgm+ogRA/6ekwKiXm3QleFsbbEZCA+Z99NLuEg7PpTwd7ER2ZsO5nDg9
Sx09eASPVF/slHPo7T+Sx11COxOTV+oh/ZGAIQ54s9PpfeoA3RTYWBXq9WPjrNur
URJjyJ0Hu88yLoKqCY+om57lVTXDMU3HoE8cGX5pzlSz235SIArxuVDd69galShZ
vSeEd+jFcdh0mzkO+2hi8BYxCcXccnmckNO7Q4fv61VgZLNOx3rERCLz3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdFMOQZ+dCP6dP8ZnKEU3A1AN0cMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVBfzcK+
fccPQVQQiecXU+vfMYD+RAPAUNzRsVQY+RpCvZlsvwdovSCe1Qvx6GY2srklTbwQ
tI/5QzFhy9vI0slMexhH5J57eDFyOrGswKO43mMaD13MgvuMt8CEVDrAHIlpuaSS
Qx044nEYISaAQPRWlKvi5dckk3bPWsiNiDhxpS9Gsg3/iRsjeFHbEoue3cBUGmhf
J4yNNku23K/t+sFaQxWvMt8wJ4ZXw0wFnkjqpEMi2P+CnFOcs8MCGmAOfcyODe29
U0zfqr4b9/1EcBSqZth2O4U6kJ1ezEFLSn7G42P05Or4wS/p8qJ8f4Zgzfj/cPq4
jzjGfc9Getpong==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:13 2026 by rpki-client