Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          XWHoXmbtgE5+ZYyEDt1uV0PPMZYwhtjsQVgIA/0ttO4=
Subject key identifier:   A2:54:AC:9F:5D:F9:E9:F6:E9:C2:30:E2:DC:83:62:8D:AB:9E:E0:34
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019DA5669C4FA3B9E47F035F6CE11059BE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1919
Signing time:             Sun 19 Apr 2026 11:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 11:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 11:00:58 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: TGU45XdN5gDreoBKrRhCLOl7ZHCGvyid6ozex1jdFQc=)
                          2: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          3: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          4: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          5: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
                          6: 16nRyZBneqNvEfGo1-HpM9Ja0Qg.roa (hash: jc0qTiU5kUL9CDVuEIN96YPjHZwKeP34Xiz/uIOIYSs=)
                          7: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          8: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          9: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
                          10: BRRlr-O65m98wAyGeEux0ziZQTg.roa (hash: r4yxbGgOabU6dy/wqqnsPsdmZlo8myEwwZceeDTTub4=)
                          11: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
                          12: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          13: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          14: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
                          15: IUNZ7k6Be0InVz26bkrmn4bWfkw.roa (hash: DDlLvGK0psVjxhmGzrMeKyqnXmOhbxm+rWrp7gXndKE=)
                          16: J9v7IiuRP1pbAznPUNvJOlnWfvg.roa (hash: EYQYgTyVzWI0iNgScvYcbg1KIwbJ7qZmmAC63DQl9Q0=)
                          17: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          18: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
                          19: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          20: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          21: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
                          22: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          23: Ts5PqWGJj2W9EIosEAfizgq213Q.roa (hash: CTqIT1awwqBKy53JmlWWx69BitjHGxp4vFXWpWSK68A=)
                          24: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          25: WL3yj9F5EC-LYoSwjsy29igBJEc.roa (hash: 0LJi+OF7BjH+1HVPut0hQmzHVdemfjE/ARNgLqPZKxI=)
                          26: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          27: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          28: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          29: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          30: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          31: eZmXsP_8WtuzPmHHINoHGtkInLQ.roa (hash: xAlYoOeA/RbIFUWmiaNoetBhfJGEtjYTAa3ebpYj1+g=)
                          32: f741Q7g4kseNO1ry24nPUdQstbs.roa (hash: /ArewhrEGu9bVv2osl1xlS+ZuEvT8uAPiOtXxX8FF0k=)
                          33: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          34: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
                          35: jorfWq_1YnE5kHaeGqCZdPdeWNY.roa (hash: Y1UP/CLj7/bw212cAWqRM94fuvrK4D40u1bvJepra2k=)
                          36: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          37: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          38: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
                          39: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
                          40: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:66:9c:4f:a3:b9:e4:7f:03:5f:6c:e1:10:59:be:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Apr 19 11:00:58 2026 GMT
            Not After : Apr 20 11:00:58 2026 GMT
        Subject: CN=a254ac9f5df9e9f6e9c230e2dc83628dab9ee034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:d6:b0:be:a9:3d:45:aa:55:7d:fd:d3:64:
                    fc:fc:db:c1:cf:22:27:07:5f:4a:52:f2:83:74:1a:
                    70:d2:89:df:98:90:98:1b:58:06:95:e1:a9:d9:b6:
                    89:25:82:a7:cc:72:4c:2e:5e:d2:6e:f4:09:a3:ae:
                    09:2a:d9:61:ed:99:3e:34:e4:e3:8d:04:7f:5a:4d:
                    ed:c2:c7:e0:36:0e:da:a8:82:c9:65:a8:ea:d0:53:
                    9a:3c:38:36:11:9b:35:fd:16:79:ee:8e:4a:88:5b:
                    17:10:06:de:b5:2a:c6:68:a6:dd:7f:9d:51:02:06:
                    ef:e9:f4:7c:63:52:ba:2d:0d:7e:75:94:12:bf:86:
                    f6:75:4e:3d:8f:4e:18:4f:7b:ca:3f:bc:17:85:35:
                    d2:cb:bf:f8:69:5d:52:f6:39:b8:3c:46:fc:36:15:
                    44:f2:e5:c7:80:bb:fa:c3:53:7b:e5:de:68:b0:af:
                    f3:b6:59:d8:d9:44:02:c5:d6:c3:3f:84:41:85:fd:
                    1c:0a:59:6f:68:0f:86:02:28:4b:9c:c3:0d:7a:92:
                    aa:a9:65:ac:fe:84:e3:4a:60:9b:b8:16:bb:6a:55:
                    bc:1f:2c:55:01:6a:d4:51:20:4f:ea:27:ef:12:e5:
                    3a:21:a4:5e:53:1a:6f:85:48:06:f7:ab:9b:15:3d:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:54:AC:9F:5D:F9:E9:F6:E9:C2:30:E2:DC:83:62:8D:AB:9E:E0:34
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:43:4a:f5:6c:9e:67:c1:c9:1e:4b:01:2e:46:02:41:e4:
         43:e2:29:97:fc:aa:34:ad:12:0d:90:47:de:72:4e:6d:92:e1:
         8b:48:80:6c:4a:f6:db:65:14:0b:bc:fb:e1:e8:fe:12:9d:cf:
         a2:9a:1e:99:d1:c7:2f:ec:5e:84:ff:c4:54:b8:7f:e3:34:0e:
         ef:7c:3e:79:86:88:50:bf:21:94:d4:f2:5a:24:7b:e9:0f:84:
         df:5f:e9:64:72:16:78:3d:a9:ab:bb:ec:1b:3e:13:5f:4f:92:
         1d:af:cf:85:c4:39:4d:0a:fd:0d:55:26:29:70:62:47:e9:60:
         7a:73:aa:96:3a:de:90:41:9e:d9:29:89:d2:da:31:0a:7e:e0:
         a4:89:2a:40:0e:5d:74:02:54:63:60:58:26:11:92:8f:b7:47:
         5f:d2:d9:a5:14:c8:bb:b2:24:5f:a2:59:57:c1:30:bd:72:46:
         8b:79:14:35:f5:d1:c7:f3:2a:75:f3:fb:60:a2:0b:ed:8d:12:
         08:40:5d:24:5f:eb:2a:21:d6:ff:04:49:5f:26:51:88:61:ff:
         74:14:8c:6b:a3:84:5e:1f:15:2a:fb:31:58:f8:c4:8b:ae:8b:
         ac:60:ab:84:95:a2:a5:67:b1:87:20:2a:23:fa:1c:c5:d2:63:
         2d:b3:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 21:36:37 2026 by rpki-client