Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          4Naqmh7RG6YbE4XFETOiY7Oxeca0JiK0Q0/w4RdHIv8=
Subject key identifier:   4E:77:CF:4F:D2:5D:3B:80:A9:C3:FB:0F:04:B3:C0:14:11:E9:E5:D9
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019F7CD328A97C0AB8749EC30D9F71D69175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1A11
Signing time:             Mon 20 Jul 2026 00:00:41 +0000
Manifest this update:     Mon 20 Jul 2026 00:00:41 +0000
Manifest next update:     Tue 21 Jul 2026 00:00:41 +0000
Files and hashes:         1: 01kfrBCLXsb_MBRY0V39-NQ7rgQ.roa (hash: 0enDaZKwuYkATDRkwnd98W7Je5T9WDnrNDfkylmrhd0=)
                          2: 0GwtoUzvyeaOyVgiz5_5u_fQDK4.roa (hash: ZzkFfie4rwQqLWELgA2gskNhetqEHZ8eQDpZfZACQJA=)
                          3: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: F0X2shHd4uu5ds5U0k6v5dk82Ye/q7Cn6KojyZr4PDU=)
                          4: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          5: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          6: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          7: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
                          8: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          9: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (hash: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=)
                          10: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          11: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
                          12: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
                          13: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          14: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          15: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
                          16: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (hash: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=)
                          17: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          18: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
                          19: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          20: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          21: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
                          22: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          23: T50C-DbO69bkRbIaWhwMYd2FZgI.roa (hash: ApEBmHxOi4b9nbcBs1a7m2y81kSTfHQtMQXnRNaqMbQ=)
                          24: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          25: WL3yj9F5EC-LYoSwjsy29igBJEc.roa (hash: 0LJi+OF7BjH+1HVPut0hQmzHVdemfjE/ARNgLqPZKxI=)
                          26: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          27: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          28: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          29: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          30: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          31: f741Q7g4kseNO1ry24nPUdQstbs.roa (hash: /ArewhrEGu9bVv2osl1xlS+ZuEvT8uAPiOtXxX8FF0k=)
                          32: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          33: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
                          34: kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa (hash: ZLVUzims+TzWoAmZUdu5UaeXmFUGOW5FgDZQ1MpAcHo=)
                          35: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          36: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          37: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
                          38: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
                          39: vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa (hash: Zv1crVWU2SJCgoulPO5QlvRO9ESYG9SyXRdgkNWxWmM=)
                          40: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:7c:d3:28:a9:7c:0a:b8:74:9e:c3:0d:9f:71:d6:91:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Jul 20 00:00:41 2026 GMT
            Not After : Jul 21 00:00:41 2026 GMT
        Subject: CN=4e77cf4fd25d3b80a9c3fb0f04b3c01411e9e5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:55:ed:e3:f8:91:c7:3a:b8:a5:f6:29:45:
                    51:8b:9e:ce:9c:e4:97:82:db:9f:6e:39:28:13:87:
                    ef:c9:db:ee:2e:8b:5b:5c:26:18:f2:27:e6:94:b1:
                    cd:3a:c3:56:b8:8e:74:3e:d3:5d:19:f4:49:68:59:
                    c9:e2:00:10:44:19:d7:ae:bb:50:69:89:e8:61:9f:
                    5a:07:8c:f3:5b:1a:3d:15:43:ff:e1:4a:11:45:29:
                    0c:39:6f:2c:64:90:2b:7e:f9:a3:01:43:bd:42:d2:
                    8d:32:91:67:12:69:aa:6c:37:8d:bc:4b:88:a3:30:
                    4c:fe:76:e7:22:ba:4f:fb:72:37:e2:f6:af:16:b8:
                    73:a8:ad:65:5d:90:5f:d6:24:cf:dc:5f:3e:3b:20:
                    15:19:dd:db:8f:5f:5e:fa:ab:26:ba:5c:2c:08:27:
                    84:c6:4f:66:d3:09:77:30:7d:2e:16:df:db:76:e5:
                    83:ec:52:c9:3b:ba:95:47:cd:00:1d:0f:8f:3c:1a:
                    bc:c4:fa:60:df:0b:a6:4f:e9:2e:bd:01:dc:35:7e:
                    32:09:58:db:c2:19:1d:10:f5:ae:13:6f:54:93:4c:
                    ad:0a:9b:95:1d:76:87:78:7e:57:f6:f3:1c:f1:9c:
                    39:98:f5:fb:0f:86:3a:8d:18:1c:37:d9:e1:d9:30:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:CF:4F:D2:5D:3B:80:A9:C3:FB:0F:04:B3:C0:14:11:E9:E5:D9
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:91:34:f9:62:2f:9d:49:ac:a9:83:30:99:74:88:78:1d:
         7d:4d:63:cf:c7:4f:31:73:b3:f1:0b:8d:a2:f7:19:95:f1:4a:
         e8:e5:80:b2:07:01:bf:6d:f0:27:5e:53:87:94:7f:ce:8a:f3:
         a4:df:29:ce:ff:b2:13:49:6c:2c:83:d0:2d:92:4c:97:ab:68:
         f8:fe:26:db:52:ed:39:f9:b6:29:d8:99:1a:54:c6:29:de:23:
         7f:b8:a0:b1:e1:da:f0:71:72:6c:f4:da:34:e2:a4:a9:e0:db:
         eb:e7:38:f7:86:92:46:5a:fa:33:43:bf:54:c5:d6:8a:fc:ee:
         21:87:43:c4:38:af:20:9f:3c:99:9a:61:7f:1b:c3:7a:51:72:
         fe:86:a2:34:db:97:27:ab:3e:2f:19:92:ab:7b:ff:df:fe:d9:
         da:d0:0c:db:04:1a:58:c9:ed:f8:45:23:87:77:bf:39:9c:fe:
         3c:e4:0f:66:da:e3:6a:bc:f2:2a:b4:f6:bc:40:e8:12:ee:3e:
         f9:8c:94:77:b0:43:75:53:95:39:c2:03:86:e3:b9:11:0a:a1:
         be:a0:53:11:8d:81:54:80:04:8d:32:d0:43:f3:59:90:1a:92:
         e3:27:f8:75:ce:9a:31:6f:4a:23:0c:49:e6:5c:06:87:80:a7:
         92:1d:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----