Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
File:                     L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft (raw, json)
Hash identifier:          OMWMsDzNBYHW6lVRq67VUDsnPfsnbwftddnwkbyT2JE=
Subject key identifier:   F5:EE:CC:B9:B1:25:45:E1:80:C6:FA:77:5F:5D:C8:42:DA:CF:0F:34
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       019DCC3CC111190316C47FD4585F1149AA85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
Manifest number:          15E3
Signing time:             Mon 27 Apr 2026 00:00:26 +0000
Manifest this update:     Mon 27 Apr 2026 00:00:26 +0000
Manifest next update:     Tue 28 Apr 2026 00:00:26 +0000
Files and hashes:         1: 0zs7NQUOgvbtWN2nKTUbSzyzilU.roa (hash: TSAdxSN2x/VYV3tNHxAeqz1bnqVCkQ9ZV2Px5cS15lY=)
                          2: 1-WcSkrUWmzqtMHc8oXVN98UqtsM.roa (hash: LP4qv0eDfrIv9CYrsfqunKgpR808ZW7FHRyc7UiBnTk=)
                          3: 1-isHNNsdA4uqRcKqfvZW4lGXhvU.roa (hash: dUbgcehjOBZtlP9XqWvkh/huKDNXzThJC32ZbtnvHFs=)
                          4: 29kno-GdVdFxJZe5qS_dwKu1FRg.roa (hash: 9qVzNajFo49jpwh5AhihOHcIhvnu7LZUQmtibMve5z8=)
                          5: 3heoB5H6nwVD5XDGalpHob00ZGg.roa (hash: 87D/niWiK3l9WEwu2pgKGsQoAKAMJw/GKgoLFV16q2c=)
                          6: 4LxO8eHmsdCGM2uwgkbYSBChkYQ.roa (hash: ijdgQcxZscidnqDM69GKhwKU2CnmRjFsweESsBcfHPc=)
                          7: 6YRa-IRnFDW3NkMnSguYFzNW73o.roa (hash: 50Og3Sas5X+EprFj4iVv37r74pEmziHTdBjxQVFS7mo=)
                          8: 9QS9Wf0ibZwRF7MgFL0I4QA0zdc.roa (hash: kxa72fKfgy3rZwIve6ZzmQMLYc+trduZk7iW6e2HJyA=)
                          9: 9ToN4TSDwehpRIDLoLnsKDu2_Cc.roa (hash: g1YoabNIfNNl6rOt8KrFu7RkfmymZmhNC05ulJ4h44E=)
                          10: 9YKzzPVf_-fAxwfUGeXxrVTU-dg.roa (hash: 138XNLPITHTEIRc0L+/cq45uulnrkecJO9wYq80J+rU=)
                          11: 9lvR3LL7tWsoFqx5QJaFxLfGfbg.roa (hash: emQQ+7PBqwuS3AWcF0M6/oOjSgoj1Pl35dV7JUuJF0Q=)
                          12: A4aZNyFUAIZJopfz-GIkyGjKN2M.roa (hash: ad3JTqwnxx8yfvZ/j/RxHuXrpvq+9MpZ3e3SLMkwsWk=)
                          13: DAPV9aegcDHOxTigYeODqiA4S0E.roa (hash: AOj7Czu0sLiMPin6vjLNydMqI/Yx3BjlovB/jRCNi5c=)
                          14: DHfgYwZYNDuaF8fGMRZDBR0sjwg.roa (hash: 9wENO+3W6HCI88QvgdGHt52ih4jBxI0lCK0+4fmUX70=)
                          15: FOQVCNHrTLRzi6PaGanwRyDK9aU.roa (hash: ZIegbqjjVfNvH+OxSSqp77N0tL9gOmirQFXseRvFLCk=)
                          16: GE-xQiOQAlfBZKjmA6TRTCGdoU0.roa (hash: WETZQLtwrrY+i4TnqaPMnaTxbwBcRqRUBRaRgzgm52w=)
                          17: GL5VyykXWPAGjE-8edI3reSrYmc.roa (hash: aCS0HciYzOgDqvC1sJ03DUJprF9z1lNFOR4waS3dPAk=)
                          18: IisfdDG7sfZhmu8DHh7vQu8JmIQ.roa (hash: h2ldr/DZK9YCbgFSd1rTSzk+u2lWfRDIlT5h1COgMKg=)
                          19: Jj4TYiWSK2zQv3ILIyjkhKIYQFE.roa (hash: xyR3f8qB7zTWr3bexPptWjNRbW48+ufv9gg59P+GlEU=)
                          20: KURPEp6jMQodajQ77Z6XAtz4O1E.roa (hash: Qva6JxwibtpEndPVzrtUr/6puuw1FiwcQJgZaNSx7kE=)
                          21: L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl (hash: Z9TA5SYMFwV7RfVRY9+Lx01cTJxiH+YQHcDl34mz05w=)
                          22: LqOsnOdaamiNEVSveB0DDpoeGtA.roa (hash: 1OsMgdSZi3oc8CaIPLodcRSXQPCf9apYWepMVJpFIG8=)
                          23: Ma8ETmVDXVY55RsSP0-WygtYyhU.roa (hash: yn9w1zI8XWvBjbPWkPiTKvYl9hC2KAjL+BOgbhLHov0=)
                          24: Q07uYNo6WZ5fsocR0rUERKQkp9Q.roa (hash: WuPVmH3EnlkoiK5Ixd9yIxPWo985u/qy+3SPakKuHJQ=)
                          25: RIybT-9Q7ykMcsmI8__tQNJ1Krw.roa (hash: ZTRWR+1VPyurjHfaEG5V25WSjaqnqZnDP7VMI14y5V0=)
                          26: RXnpZe86HRTs6-Hyr28ldQBv_fU.roa (hash: gjqULoDpUOFUva9eITmdGpGn/TQ4xqa4COnGLeH/v0Y=)
                          27: RaxHGNFafelZjSWay_O2t79u3zs.roa (hash: 5WJ+mAL7xP/fQrZ3ZPDzfx+rIt0AZyxV3JAYSqi4Tns=)
                          28: RoFMZsaWWJE4dVkuK5RtIIYwVT8.roa (hash: A1zGXQy1SN6LsbGm0yfGm3teVZPTXDknHUHEyiJcII4=)
                          29: SIZsSe8MD44jUp-d4glaLGe0MeA.roa (hash: BusHQ7NHSclBVbRWvHD7IDalKTfwWegpmnWvRUfVFbQ=)
                          30: Tyzo_2vNrMxQHJQWXTKLW-2umcA.roa (hash: 2+mp4pGqouT5AQ5gGYfkkRqSiV89UkJ5rYA2+HllnEg=)
                          31: W6WA_QiFboVDU8oApGkWqIyXDX4.roa (hash: QFSwkU3QeJUaOpnbNms5zXgNpMz8qYPwTgZOaNVFDwI=)
                          32: XsMxuHOfiEUiVVVJZ-9IVTfRkI8.roa (hash: MI5i70iv8hR3tp0G9HofUgRHsD3DM2McJiWabGFnihI=)
                          33: YJQ93n5t7zQFymNQxLoR_JxUzGg.roa (hash: mZ/zXdDuAPbF9AuNtuIKJQ/+wfxB0ATUNZJ5nR8SYUE=)
                          34: aG2Dj23_-RuByoi0aH4_J6DfnnA.roa (hash: XzjEkrDvL0kHfNvxNR946YKw5dsAD72RXrWPCygekvQ=)
                          35: jCH4NzwZ9o7Sz1_Htpxn2MejC6g.roa (hash: rjXR+Lu1w5blWwJTTdtxIATSvnCy0MaGVUzsj0yhmE0=)
                          36: knDmeA2ssnsq3koQjYEYOH22ljE.roa (hash: wXYxKGYHG8/DzazVRSxXd9+t+/QYFTtKVJ9nvMVpMMU=)
                          37: mQDoApEENVpSMVJzsl8D0gU6I6c.roa (hash: wFbNbmcCt23Nf+DU0vfqQxKCI6hL0oD6wGfjvDN+fGE=)
                          38: mw5z1pFkh2d-1DRwWTOukH2liME.roa (hash: KbE04LQ94yOx/lsc8RqLPSiv/e+Wg45pd1d7WYv9cfY=)
                          39: nWWVWP2BcHaVfNWoF4AVYtp5pxc.roa (hash: NVfU3TqNbn5gHACaDa6BG6sq5PC56l3fZkk6hnFB3c4=)
                          40: pPOTkkl8EzCy9tLzI5fRTCKjARI.roa (hash: ISeNjEuf5fFjjXII25/DWCapgvbh7E9b8sy+V71b+lM=)
                          41: q_0JuquKdY-SMKTsswahjU0TRj8.roa (hash: oGR6DtwHAbzXeQnpsnvIXuSP2Pj0AihP5fyO1Wt+hv0=)
                          42: tK5-Dv8iwro9KpuF9BAaDBdiBYM.roa (hash: Fktj1/eyN9kcCZ433bbPzTPhj9hwa3lqNIZHD7ao3Aw=)
                          43: tNRE72AaYL5xye6uieaRpXKWVIU.roa (hash: VKbusTa09ya+dmyG0vaUZIVIXLGpa1vvblQAP3TIcT8=)
                          44: trRxPR5RRxoQ3Ns8QrK42ywlsEo.roa (hash: D9RQoNZDkoGH6BlOKR4j6GjLTRz/1KfkGwt5zMfF9FE=)
                          45: usru7aF7Qk_ffJeQ0EFKoc4fUuc.roa (hash: qkaoKI1z1JM17/6IOkvgSikXMOdggPM7AMM3gUDHAdM=)
                          46: uwtLJFpRqIxSyEsmetJYpEp7D-8.roa (hash: bQ1x2vhBt39hjMm9WcBFuXmb8kxlKwL4lJ5Ll87ZxmI=)
                          47: zo181zmI2YXllkZVHp7aBQi7csw.roa (hash: mZN8IszRJCk6phNjvnHBtgYiiAUQq/ooPoQtir/r9fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:3c:c1:11:19:03:16:c4:7f:d4:58:5f:11:49:aa:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Apr 27 00:00:26 2026 GMT
            Not After : Apr 28 00:00:26 2026 GMT
        Subject: CN=f5eeccb9b12545e180c6fa775f5dc842dacf0f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:cc:80:bf:77:23:80:09:21:3d:67:73:7e:
                    7d:1a:49:38:d7:4d:c2:2e:24:fa:bf:bd:0d:a6:ff:
                    e7:3b:ba:5d:09:58:2c:46:2a:5d:ad:54:f8:18:3a:
                    9f:a0:97:5a:4e:2f:49:5d:f1:24:26:3a:8a:33:f4:
                    d2:b4:e6:7a:ca:f6:bd:3e:39:1a:ed:56:7d:38:a0:
                    e4:e3:e1:08:24:ce:22:4c:2e:9e:3a:86:1e:ec:2e:
                    94:fe:2d:09:fb:dd:1e:a1:67:3c:10:8d:6b:0a:84:
                    3a:a9:0a:74:5b:56:61:cb:7d:a3:7d:a7:2f:19:ba:
                    25:20:9c:22:27:bf:b7:b7:6a:ed:b0:4f:a6:5d:7d:
                    b3:f1:bf:15:76:73:8f:0a:9c:a4:9b:11:2e:12:40:
                    3c:53:79:70:87:25:1f:60:d2:78:ed:b5:1a:7c:7a:
                    4f:95:7b:52:91:04:e0:0d:8b:31:de:78:4e:77:42:
                    e8:fd:d4:88:1b:97:80:80:4d:25:3c:ae:4f:2c:a1:
                    d8:43:d4:fa:af:ac:1d:3e:67:95:1b:e9:1b:d4:a4:
                    95:ab:37:a8:7a:d7:79:8b:5b:54:3f:14:0f:72:f2:
                    e5:c7:22:fd:6f:b3:a1:ef:29:e1:fe:4c:06:e0:c9:
                    d0:8e:f9:3c:fa:a6:21:e4:0f:49:e4:76:39:11:6f:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EE:CC:B9:B1:25:45:E1:80:C6:FA:77:5F:5D:C8:42:DA:CF:0F:34
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:41:79:38:1c:30:ae:49:63:d6:f9:5d:bc:83:d2:4d:e2:7e:
         2a:34:5b:07:71:a1:45:3d:09:84:23:a0:27:26:a1:5f:82:e5:
         1e:9f:7d:a5:d9:35:8f:fc:b1:66:e4:cc:f6:89:9a:a3:1f:57:
         1a:00:55:47:19:58:83:22:2d:2e:15:ca:45:5d:35:5c:80:e6:
         66:41:b3:de:39:e1:a9:3e:98:46:6e:77:e6:2f:23:47:16:dd:
         94:fb:01:f4:e9:1e:5c:bf:1f:4a:a0:f8:f8:c4:c6:88:d8:77:
         d7:68:3f:26:59:e6:fe:3d:48:15:25:54:8e:29:d6:32:8b:0b:
         2d:ff:99:bc:f2:b5:60:21:ab:d7:96:b4:1c:18:7f:67:f3:bd:
         d2:2b:cb:90:a8:ac:9b:9d:9a:2a:0c:ae:4c:66:96:2e:1f:c0:
         c4:af:4c:9c:53:16:e0:67:18:db:f9:af:d4:01:e4:f2:8b:9f:
         37:f6:8a:68:6e:06:ff:28:11:b0:07:38:a3:b2:1d:71:ce:db:
         1d:27:d7:d5:28:6f:76:db:3a:a7:6c:a2:75:2b:db:24:8f:31:
         8e:91:95:07:3b:12:60:de:37:e0:5a:51:1f:26:2d:d9:06:90:
         29:5d:8e:01:b0:37:43:82:11:04:c7:85:15:84:ed:13:f5:bd:
         9e:c5:b3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPMERGQMWxH/UWF8RSaqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjYwNDI3MDAwMDI2WhcNMjYwNDI4MDAwMDI2WjAzMTEwLwYDVQQD
EyhmNWVlY2NiOWIxMjU0NWUxODBjNmZhNzc1ZjVkYzg0MmRhY2YwZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwLMgL93I4AJIT1nc359Gkk4103C
LiT6v70Npv/nO7pdCVgsRipdrVT4GDqfoJdaTi9JXfEkJjqKM/TStOZ6yva9Pjka
7VZ9OKDk4+EIJM4iTC6eOoYe7C6U/i0J+90eoWc8EI1rCoQ6qQp0W1Zhy32jfacv
GbolIJwiJ7+3t2rtsE+mXX2z8b8VdnOPCpykmxEuEkA8U3lwhyUfYNJ47bUafHpP
lXtSkQTgDYsx3nhOd0Lo/dSIG5eAgE0lPK5PLKHYQ9T6r6wdPmeVG+kb1KSVqzeo
etd5i1tUPxQPcvLlxyL9b7Oh7ynh/kwG4MnQjvk8+qYh5A9J5HY5EW/DnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXuzLmxJUXhgMb6d19dyELazw80MB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkF5OBww
rklj1vldvIPSTeJ+KjRbB3GhRT0JhCOgJyahX4LlHp99pdk1j/yxZuTM9omaox9X
GgBVRxlYgyItLhXKRV01XIDmZkGz3jnhqT6YRm535i8jRxbdlPsB9OkeXL8fSqD4
+MTGiNh312g/Jlnm/j1IFSVUjinWMosLLf+ZvPK1YCGr15a0HBh/Z/O90ivLkKis
m52aKgyuTGaWLh/AxK9MnFMW4GcY2/mv1AHk8oufN/aKaG4G/ygRsAc4o7Idcc7b
HSfX1Shvdts6p2yidSvbJI8xjpGVBzsSYN434FpRHyYt2QaQKV2OAbA3Q4IRBMeF
FYTtE/W9nsWzSQ==
-----END CERTIFICATE-----