Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
File:                     P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json)
Hash identifier:          eCpE2u4w5CiRhFii0TI4vyLEf5jP3nTUAaBGnJ3EEvg=
Subject key identifier:   D5:37:A8:89:AB:62:85:B0:AE:E7:43:1A:8C:01:B6:1B:99:E2:97:98
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Certificate issuer:       /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial:       019F9FCD39C2B985B6D456A30542377591F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
Manifest number:          1AA2
Signing time:             Sun 26 Jul 2026 19:00:54 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:54 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:54 +0000
Files and hashes:         1: 1-tLa3uQlKqYPUDXiozjHhnGEtoU.roa (hash: JVBp0Qb89/mhP12xiMfYCu073UdqTnLDo0xQ4I+RS08=)
                          2: 1-wtzjvrNbSXFtl-Du4Vp8ANI0qI.roa (hash: HWSxT5ef2VgW9p6awE9gvEUJX5QnSWl9sjDiEgwfnBE=)
                          3: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=)
                          4: 24akyMR_PPjN-8iURmGLIi8Hhzc.roa (hash: liVOUJ/Ipi/txROB9UIQmB6tFXMZEqiD6/HH7+bKdHE=)
                          5: 2RVScBFmLrguvZKcAVopID1IIw4.roa (hash: fMtmwEeBJcU9F/MSODJEfgSMoBu55I7dpytdfwBJCTo=)
                          6: 2gHgEKsKoZSB0yOJg5gmQnI3MYU.roa (hash: Dl7qDmE/jLoe0abkFXvtN9m8R5QtVl31hRq+JZMxUtE=)
                          7: 4laAR0F7wlTO7vDDQTy0D13KxL0.roa (hash: QLmezVQCfyx+ql2UEt6zzy7UABZFvPOrKrdiS+wXWX4=)
                          8: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=)
                          9: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=)
                          10: 8dFZKR72cphf0s7LqinMgRYYIkc.roa (hash: e27YNEiHBqFxjcXUVxpMm6Jq4acNXbMD4K9l38nrYxc=)
                          11: 9xf7IWEflzujgmw2tsn_FARmi4w.roa (hash: f6AK6JKMeGD679lYzG5x++jDC+1TvkO4ezRO4cNQaqs=)
                          12: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=)
                          13: DSgVqsl2mY6jVjdUpD6SBfhFhtw.roa (hash: zqdBnKfPe4noKU77L99qeBDkexlxVYJwpDa2hXSTmN0=)
                          14: ETO1DQMQEwbLKsop70f_IRqpjvo.roa (hash: W+oCWHNVENtoQwyY4yZkPcwzYYlyeqnKwiYZfApMNAQ=)
                          15: HpmsS2IoVoKo1sKZA8m6RqJao8c.roa (hash: PNCMPsFSRy0WyHgVig6VCDB6V+KoLZKiFB8wYjakgKc=)
                          16: IgF2zWC81KdRs1EV0--Evnh6oao.roa (hash: Zg5weZsXjhtLqg7Ynf8aRix95RurzmnmHsyVP9G927s=)
                          17: JL63CBvhwqPEZ24EicyTnRw9mXI.roa (hash: oCFS8hp0fLsMJw21lXQxSmeqk93E3ApIgbPSMTVR71g=)
                          18: Kspb3Y-3TqVkeHkqeGqXqk4OQWA.roa (hash: 6ep+ieeLgHqg5HT8yEOylVhvojGIS+IXzOftgEonsw4=)
                          19: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=)
                          20: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: 3exSfbcU7ji1h02TfxhiHxZdX4TdxdxK7JrwHP/HThQ=)
                          21: QFIFjY-TvdhFpu5liSbZap-Vvrw.roa (hash: ++dcv8XUbXJ+JM0rFaYwn+vsJq/alYRvMZD3jyve1ks=)
                          22: SiarQ2TxRzr8itmuRAYLtAX-QzQ.roa (hash: 8XW+4yaYwXUOorPxqs2KPD6l7RdxPUrXyqX6O82hTP8=)
                          23: StvAsE8dqcbcJCGc9s0d-K3IMUw.roa (hash: gIggPBm4zeijGxMTzdgWV5ekCK3aV4Cyh43PttmoHL8=)
                          24: UoFV35V7SZwvvNBJAgeo6Gv7r3o.roa (hash: arnQa5+zyWRNt4ppru9EEoPbLcDB2HcooQOj4l8fQFM=)
                          25: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=)
                          26: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=)
                          27: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=)
                          28: YF43X1-q2B-Uj0oUuLYoZXyjNc4.roa (hash: n2I5ucmpF7lWc83VwA13sO4NXWBvGl+URpKpUJ+cEw0=)
                          29: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=)
                          30: _6rvmtNmrnvGKiw_iyKO5Jb6UsQ.roa (hash: 6mJhKXkfTm6Z9f3tQOF1JBIIXDGP02J3lqdrEbYkL5w=)
                          31: cUdQj0BXve-FaUMW0hc4xPjsWIs.roa (hash: j1WHZLfGh/Vii4JpOTYOhiR3cYcDynFOoemzCuuJ6bQ=)
                          32: ccY5m7v5PRIkB7oD3m3vvVzFFPc.roa (hash: KX7tvQX9CDn/irIX3Gk0tc4SjjpuihVhQ6A1UTKIjEs=)
                          33: cu5GFgpwfQEyzS26nXv6k9rJNLI.roa (hash: PvnG+bCRsjef7AzlsnAC7/rY5Eg1jXxPdEvS5KrmsKo=)
                          34: dXjiGv52gZAHnFY0adh6D8ALEbk.roa (hash: 4eZUASFLR400gs9RBDLD6zYs5vb8XWdrBSpeWpBN3SM=)
                          35: eaRU8ArJ7pd71GW8eGNZdKDKSzg.roa (hash: UMgWTM4VW3d6SEyYOSZSzAnOp1pFMK895I+iWlLcwOk=)
                          36: iqfCZS4hlo_1gH2VHTAQtEJIFzQ.roa (hash: 7R06hVcvKRS4r0mVMGe11l7riscRHNefp9iYByWYPXg=)
                          37: ldNAN0mfpVi6CZXqHPWFS3596EE.roa (hash: q8HafsshHQV4Ck59kSD3LSIBdSsnhwXt5UddZDp3vtw=)
                          38: mvHb-8Z0ycvMSJhWupwMRR4wA-E.roa (hash: F0CUWvlAdOp9w97cQi4qF0fyu4dYrDSQJRdTIKAGQEQ=)
                          39: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=)
                          40: nhvlBTexMzYdSopGwC7dgxpQpMI.roa (hash: U2+w8OKlz7AZDKQazAR8t2cIc3asaqKSW/usz9u1R1s=)
                          41: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=)
                          42: prXM22xmdWIfkxQhdhboyz17O4s.roa (hash: 5npFebfPf8+xWTPiNp/kFq0PqtpYbgmvo0LkaR1PNew=)
                          43: qWwgzCH9K8JWgnDsCo6SBO_wFC4.roa (hash: 56LC9PWT2zD1vsuWut3ozyqt1WI7tzVhIC16/hTn/HM=)
                          44: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=)
                          45: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=)
                          46: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=)
                          47: uSOK0eX4TYuumH5Ic2rfeIeTvuk.roa (hash: 1WexEmtWrn8mQtb7UJqhpFZgWTvHiJV0taQVnveBTR0=)
                          48: xkOjBQQmnRM7wGsI3bxYUlzAZbE.roa (hash: eCK450RJgJyBdGmpyTMZoH4wm4stUV8ppgjNpt+6t5o=)
                          49: yRSlMDLQhDhftzFernkIlXB4O1U.roa (hash: qgZ+MmsDc5nUPfO04pEJfel+yA36DrhN3lb1wWub3e4=)
                          50: zBCFp8o_tuV_kBEsIWt5fFeZCzo.roa (hash: s6zrZhzWsfkGNl0cC1SAmvMa2Etx9RUnwtHCxzJ2ErQ=)
                          51: zQXVrYEwwy5l2qY9Yl1wT7p06iQ.roa (hash: 77rICbTLzf6YbndloP5V1m7TdTvpRVmsJmjzeBw1ClU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:39:c2:b9:85:b6:d4:56:a3:05:42:37:75:91:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
        Validity
            Not Before: Jul 26 19:00:54 2026 GMT
            Not After : Jul 27 19:00:54 2026 GMT
        Subject: CN=d537a889ab6285b0aee7431a8c01b61b99e29798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:63:6a:67:04:3b:6b:6f:12:00:a8:39:b1:
                    c7:da:ba:c3:6a:30:6f:98:08:d2:e4:1f:94:ee:48:
                    d0:e2:25:1d:69:23:72:43:f3:ee:d8:41:31:1e:f5:
                    88:02:56:82:76:cf:66:df:70:5d:ba:8d:59:c6:71:
                    27:6d:b5:23:f8:68:99:ce:31:0c:fb:ee:41:ad:eb:
                    71:d2:a8:9b:10:e9:73:2c:87:a0:15:30:6a:b5:37:
                    ea:3f:62:4a:fe:13:56:1a:be:19:a5:ec:79:ec:11:
                    44:73:89:75:5d:8d:b8:0b:ca:ae:8e:bc:d0:89:43:
                    8e:6a:82:ef:77:70:00:80:5f:fa:05:b4:48:a9:79:
                    b6:3e:55:52:5c:1e:c3:11:49:d1:5e:9a:f8:f0:9f:
                    d5:82:01:32:3f:58:27:49:96:02:6e:d2:8b:b3:c9:
                    9d:d1:4c:a1:5e:ca:37:00:0e:d7:21:3c:c1:db:49:
                    35:d2:0d:99:e4:cd:b5:7a:f5:fb:dc:42:26:1c:e5:
                    86:24:79:81:31:d3:43:dd:2f:c8:46:b6:59:a8:65:
                    bc:f2:65:e9:74:df:e8:be:ae:b2:97:4b:fb:21:e2:
                    1e:3a:3d:4b:c2:6b:ee:62:48:1d:57:5a:2b:76:e2:
                    d7:10:5b:8f:cf:88:fb:59:52:12:1e:1b:1d:98:a1:
                    20:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:37:A8:89:AB:62:85:B0:AE:E7:43:1A:8C:01:B6:1B:99:E2:97:98
            X509v3 Authority Key Identifier:
                keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e9:c5:2c:2b:17:d8:70:a4:8e:bc:d0:a3:5c:5b:63:34:02:
         f5:1c:80:24:8e:f7:6a:86:f5:69:43:28:f4:cc:44:83:70:f7:
         59:c5:e6:98:6f:bc:95:24:66:fe:dc:c5:5f:72:f3:76:b9:e2:
         a7:93:a6:8e:44:1a:f6:9b:70:7f:5a:d5:85:46:6a:09:97:f2:
         63:36:1b:af:54:54:f8:f8:af:20:d5:9b:9d:3f:22:99:a6:6e:
         85:a6:cd:d4:c3:0d:6b:1f:2a:03:1e:73:6b:22:2f:7b:a4:bd:
         19:09:ef:cc:d5:a6:39:fe:43:a3:eb:b0:dc:ba:a0:ed:eb:3b:
         49:90:77:ca:1b:63:57:ea:40:de:b1:56:3e:10:30:cd:b1:ca:
         75:4e:ea:9e:c2:4f:f9:b8:27:53:3f:41:f4:7c:af:37:fa:4a:
         1c:0c:97:52:b4:e1:21:d8:e6:4d:2b:25:9d:a2:c0:02:86:1b:
         a4:9b:8f:84:ae:6a:8f:1a:22:72:00:52:47:63:a9:e2:8b:f9:
         24:3b:b4:58:74:8b:d6:18:7c:b5:e9:2d:a9:ce:49:63:15:9b:
         86:38:51:4f:71:c6:06:01:d9:47:79:b1:0e:b5:4b:64:b4:28:
         b7:98:14:b7:63:41:fd:85:98:30:38:95:df:1d:19:d0:37:2f:
         a8:92:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----