Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
File:                     w3i8O9NQ7txPN3wiRVayUNpt3m8.mft (raw, json)
Hash identifier:          CJ8iX5zcmEVaF3Qgp+4vjZu4s9hHLOZZfMQhO1q8KyI=
Subject key identifier:   00:E9:8D:50:24:9D:A0:67:71:4A:B3:DE:8B:E3:BA:7A:4A:7F:FA:67
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       01A0DF4EB2D684F3E77AAD7D8A21F22AE318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
Manifest number:          0AF8
Signing time:             Sat 26 Sep 2026 20:01:11 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:11 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:11 +0000
Files and hashes:         1: 1-a5-vfrfTugaq2dPJBFnOFly9dw.roa (hash: e7clwKT7V4iFQZMWiuDOC7g3BMnCDyuqeXJiUTm63rA=)
                          2: 1_2juw-qDimXAKUKlW77G6-l8VU.roa (hash: U6J2P9E4X9+41K3VGKQYqBsbobF7Sfdc1rr2uj0ww1Y=)
                          3: 2P_mnvRGq7nbPzXbLxyW071t7w8.roa (hash: NFXjsYJt0BQFvOLAg0g/ZH0BMq5pM5WRtqueyCuv7tg=)
                          4: 4o_7RX6H4CFCmMZu7CBS6JUFWN8.roa (hash: sqDvjHKLgswQr8coGmDvl9Q8pth24/gBx7S5oh5lXbo=)
                          5: 6sFpb8WZ2FpEoOhfgAeHaWhNfBM.roa (hash: DCVUEWY0Ae55SxyN7GOlHbx53XiQ/Cd9CWL2YNHIEjc=)
                          6: 7QoLgilRXJK8u8tr2ztSeBW78BA.roa (hash: IlbEf6hBBCxrRJu7FgHg8JiriiaoInoU7Nzo2/n4j3Y=)
                          7: DLpC0MuiSwID1Av-gQffixfjpwk.roa (hash: ljGt7fkYheuM3WVgnOOXbSyeE1yVrCOz3O1Oj/tgEjo=)
                          8: F11fPTXfB_XXTQGSI_zj6l8aCQg.roa (hash: sxpj1ShIXvi7nRvNtxti9CHDHkfwqvgR/aXCrjIoRdg=)
                          9: Fb4vRJq1T1_0xXAoTq2CvVs9y_E.roa (hash: Vmu1pCF9ffVrz7PWfxFH3xY+/bapkWd0ngS7wWyn6c8=)
                          10: Gz3358GKQXXKBbmcMMKkzJGeIcQ.roa (hash: GrU7WRWIKPIkUk3P4pue4wP6ryeqzRX5Ke+fs3XwLGo=)
                          11: JGb2stShvCknmJb-1rStrrkJ6_o.roa (hash: Npa20YGAfZVydsPDhXcDHQpyIM5Ga8DFoLPQfZu0mz0=)
                          12: MQlwFJeHN1u-cAKLxDDZDtNDljo.roa (hash: /TVRNEY5UqkNYCAgcbCO3dq/LRsbsffNKIVMecfYnrw=)
                          13: NHjKgHA82d8FLt22AKJ8IGjyDgs.roa (hash: 8RHJMriR8MrjiMWSt1MEdwzSiUFFpL7A9jRbgtbNLMY=)
                          14: OTlRxRTeXOHkKtdakV9hVrtGRYg.roa (hash: BCoXfQjO9Xf/pZBal3UjOjOaA9/ocffh1LBzcabh728=)
                          15: TyIvWJWJsGn-cmWLMY8yJjh35bQ.roa (hash: rDe9QJo2TIV/FhL9Y1J8I6tZNLLojVuwKygmKDE9YC8=)
                          16: VAV1bbcX9bHpsZiFIrlXTN76C5M.roa (hash: +gfI8ul06vvQ/6Smie997z642s1/qpz8I8Iv181C/sQ=)
                          17: W2_Fzw1Kd6WhipAVYQDiRl5QANo.roa (hash: WalT8Zk90ypdkvVuejVIllr7KNMPTiXSreh1fRmtk3c=)
                          18: XT1DhK1n-LENtaNf69ybqi-40oE.roa (hash: iw8DvZCc5wJ/+RRQfpuCqcAs7ScbIsZyNViMpkPkLSw=)
                          19: ZHv89dlwP0PupRXn5TiD83kF1Jo.roa (hash: UKGL708lxiXaGdlE64lEB1AJj5e2RmNp70elG/gWU7w=)
                          20: akEqogxtHAqVR03zkYCOm-aG_GM.roa (hash: a88/5df+rGTUXCIfyDlTTxx5c8A4SWmUb88YUmpaNBQ=)
                          21: cvR0KFYZbunlt9mAluFg-0NprAE.roa (hash: vqXO2BnowG9HC7ndEFRsnPFK2kdAvmdQUm6N8AhZjT0=)
                          22: e7Fl4H2i3mxxVNDEooqw16LpBh8.roa (hash: Mc9nZVgH7CJHLOy42VICmVEXyck/8wjoayN/sss2Qm8=)
                          23: gHzhHcrZGmmnbaVONFbNEHEzY3Y.roa (hash: 9yXdrrCQUVAKu/hU4zxAwNeOHQnpgsh/v0hdVOVr53U=)
                          24: kZtpL4cIBGn_KpJB4nMiWVoW6cg.roa (hash: nDgSl9VEJ3ihdK5aLMHP6iSjzCqJfCfn1TUVCjxV13k=)
                          25: kuvm2P6tJF9o1AFrBjILYzqY_f4.roa (hash: clvqCPYP3GWwmIbbUCXE6of/slJaG/JyX/2aZgFmOCI=)
                          26: pVKX5e6Ye_-41gTkar_HDieL2lw.roa (hash: xHGJrTEXQp9T/t+w2z7pQK7Sd6S4CGXZHKNg/uBQT6c=)
                          27: q1obh1GvgV5InrVDxZseNCOaZAQ.roa (hash: C+k/s/0qrF9tycbA7ZFSjIl8vgKrVXSCbw1SiJhE0+o=)
                          28: qMOuGXXFNq70pNcNtow8FDCLMoU.roa (hash: wH+YSRt7CZbFibUBDTSCB7Tcuz3hqHMrTNqxDgdQEvw=)
                          29: vfBrVCvOjOOjTm3hg97tbYnhT5k.roa (hash: LvYwloOQk30G/nGe6G5gZw9LB5sqdDCE9E/0Nh0GcR8=)
                          30: w3i8O9NQ7txPN3wiRVayUNpt3m8.crl (hash: bBCrO3P+9IdSJ2Cni+JTgTk7LakcL2DPvsBawQemZ/Y=)
                          31: xwWOpZQmFcKozOAfviwF39yqX24.roa (hash: eslrEB6HCzo/dx5LwCpkX11aKl51HL92Pc+eMVakmzo=)
                          32: yYqT80TS7hUmqPAkI33wHvWfQw8.roa (hash: hsl4QQe8YWvGd+kwz5YbWHd6xUTEBjK95wxYmTZQgAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4e:b2:d6:84:f3:e7:7a:ad:7d:8a:21:f2:2a:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Sep 26 20:01:11 2026 GMT
            Not After : Sep 27 20:01:11 2026 GMT
        Subject: CN=00e98d50249da067714ab3de8be3ba7a4a7ffa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:6a:fa:53:63:6c:11:f8:1b:94:34:d3:3b:
                    22:4c:df:ca:31:44:9a:e1:ef:3a:64:f9:22:01:9d:
                    7a:5c:86:83:a5:69:8d:c6:99:f0:90:9e:c7:19:8e:
                    6a:2a:90:6c:c0:17:95:74:81:20:59:ee:7c:e1:92:
                    65:a7:99:73:70:fd:fe:32:f5:e6:ed:3c:9e:ce:f7:
                    ca:3c:97:55:56:cd:c8:db:2a:39:8c:bd:c1:23:b6:
                    db:02:b2:8c:23:ad:59:e7:0f:54:2d:99:f0:01:91:
                    c8:cc:5a:35:b4:ab:d2:d8:6f:71:ee:0c:c7:80:67:
                    60:8c:fb:7f:b0:7e:71:9b:28:a4:fb:af:5e:72:ac:
                    68:4e:dc:9a:f6:2c:68:01:48:d3:3a:c6:76:d4:32:
                    64:4f:39:41:2d:8d:9f:58:23:3a:ec:d7:c1:70:32:
                    e6:cc:0a:03:c2:1e:98:77:49:24:1e:36:0f:ac:9b:
                    64:d2:ca:64:43:a5:10:c7:1d:9c:78:42:fd:be:fd:
                    a3:b1:bc:4b:92:c1:7b:2d:da:e3:65:26:6e:cc:c1:
                    68:a7:22:1a:41:d5:f1:d0:18:56:b9:b6:9b:36:f0:
                    a1:7c:3e:b9:87:84:58:1e:4e:c8:e1:26:a8:16:e1:
                    c5:3a:4e:c7:0d:b8:4b:b8:41:a2:3e:70:da:dc:a2:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:8D:50:24:9D:A0:67:71:4A:B3:DE:8B:E3:BA:7A:4A:7F:FA:67
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:08:9e:45:28:a1:bb:da:eb:9d:28:7f:14:08:07:cb:46:9e:
         2e:cc:13:29:16:cb:5a:1d:4d:28:01:ac:3f:48:2c:ac:65:5e:
         7a:c3:04:8b:8c:aa:19:8b:f5:25:2f:0a:ca:5a:a2:f6:c8:67:
         2a:c7:b3:54:5c:52:6d:f0:ee:1e:97:e7:bf:89:fa:e6:f2:ac:
         29:08:3b:72:fe:0b:0c:b8:3a:13:f5:16:98:2f:af:10:17:e7:
         55:8b:02:1d:92:9c:11:62:74:a8:c4:82:20:e1:eb:c7:3f:9c:
         8f:35:6d:63:de:9b:a0:d4:d8:c0:27:e9:6d:7e:00:7c:2a:fa:
         a5:08:4c:ee:7b:eb:a1:78:50:d5:9f:ac:fb:eb:d6:a5:83:66:
         32:9a:1a:e2:60:5b:4d:ae:f7:5d:ec:4a:82:f6:22:cc:04:c1:
         fe:2e:72:15:37:11:b2:48:34:56:3f:b2:56:9f:ca:42:d2:c6:
         12:71:31:d4:7f:7b:32:be:b1:11:61:86:14:0a:3f:ed:c7:83:
         51:1d:8f:f9:8c:a3:96:f5:f5:40:77:a8:0f:57:f6:0d:31:93:
         48:19:c8:e0:62:b3:f7:b3:95:69:6d:ff:28:9a:3b:82:61:37:
         25:c0:ff:3f:4b:d2:9a:83:6d:d0:6c:9a:85:06:11:45:94:0c:
         70:3f:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:41:12 2026 by rpki-client