Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          Pn0YvN8Y9OJdkJxjXkIe3uTuK1d2q9hG45UoweufOBg=
Subject key identifier:   5B:A8:73:88:3F:91:24:EB:A5:D9:A8:E3:A5:B9:C4:CB:8E:B4:F9:62
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019F834375314AEB08A2DC3FBB8F48AF90BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          120D
Signing time:             Tue 21 Jul 2026 06:01:03 +0000
Manifest this update:     Tue 21 Jul 2026 06:01:03 +0000
Manifest next update:     Wed 22 Jul 2026 06:01:03 +0000
Files and hashes:         1: 0wJmdEsIc6piCPouXDNhCCpeSRQ.roa (hash: WR/b5AIQMqRHnWFbdkMYzAfrUMySKK0esBYcUMp0I1M=)
                          2: 1-in6fcWIaPM9o0JaQgI896hF-zw.roa (hash: +9m5BgtCfpchHYPV7/EjyZt6YHGzYJDxbgj6oT6HF5k=)
                          3: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (hash: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0=)
                          4: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (hash: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o=)
                          5: 3icWZ0l13CoXwoj1OeRHgYert90.roa (hash: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk=)
                          6: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: T2Ivr/XCsrlc8TvDXgWqIMBgT/c1kaHIFLvP7tGnA+g=)
                          7: 9k5BtTPPxnZiW0r-J9VyWSs6SCI.roa (hash: F+RPFKfqZfbIU5EIxsSYhbg7pY/p6XGYN9oPR99wNrI=)
                          8: C0gLDzEON7GbUuqeqStfjnIBp_k.roa (hash: kW2ilQ40sXgngeB19vuaQAEZ0a+UVe7vAL02vYsHhxI=)
                          9: CYqAHaNWukk-ByTGpHKXz3QjQas.roa (hash: wiU3rtjJU2K2wdSE2doiy1m3e5+T4eVxinx3u0FFHbQ=)
                          10: CjAdakK4jK3bzKfmCY1veFE0mhI.roa (hash: Z5oJMwQkoJMOahrr4QbJ28O5skdvLzLVhMGsjLOYb1g=)
                          11: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (hash: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw=)
                          12: EED5PEY1a1IMhSE0BwQBTJLp1mc.roa (hash: elqOAc4bpv6jCN5g6K4Rk1qf2TmccJP7YVS2HbgSYS8=)
                          13: ElgFDiuFJ69k81EViaoKdimWii0.roa (hash: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=)
                          14: HbjKNiw4d3SEg0dTumigj0PGsTM.roa (hash: nW4tvMSwJMcIQf6OvnWLF1rZzRY1A2YzlXfxp1Y/+GE=)
                          15: KO3mbecsHziWft5oSlk1_j2d34M.roa (hash: f8pLS1dd6igj0miudYVCW/atCJnG106OYVdNd0IpsmE=)
                          16: LtoQvzCaMW0D-GhISv0hO8NnPOs.roa (hash: NcaX+GMamiFW/3NMIXtO3ttNk67Gbq5SGUiAVxBO82M=)
                          17: Mt4AQ66nGpX52iVTjG_QPgMc6j0.roa (hash: Nn/pGbRWzSFMrKeCQn+bGQau+a99ydSdqv5kVOvZ67Y=)
                          18: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (hash: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI=)
                          19: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (hash: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc=)
                          20: Qerk2VIQWhlnZtUFOR1amkJ29g0.roa (hash: y117lHapRieYxp1hZihDZzze+hWwVr4/qKnm8Hy7HDc=)
                          21: QihhibEPB5qBqDDL6gcnigScDv4.roa (hash: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA=)
                          22: QkwhGPSuc7rlqlghZY18xAA7lM0.roa (hash: nAcfbt2ttDYq5SWZx/GAjI41TdBLCEtgGu5tjf8Jj2A=)
                          23: UETzsQ14kEiR9ZLBzc1Rs6TQ7y4.roa (hash: mJed5UC6Bhm9fWUs4Xbxi43CN/6iMd2evk2vhZxj36Q=)
                          24: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (hash: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ=)
                          25: VTvixWkQMb81xqq15q9rkLGzQns.roa (hash: ryhXeNesoIfEURs7jvSEodrx0dn3DmlePOw6kt2lyr8=)
                          26: XnT8EkhkZ4ckaqupDpvRmKmadIU.roa (hash: LOQvwDLJiJLfGtgfx8v+cSvzCjMCe4xzGPCXgXKQfOA=)
                          27: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (hash: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg=)
                          28: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (hash: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo=)
                          29: c219QE8Kcog9UvMKST6A1X7Uzw4.roa (hash: a1rqIUue8AkZGET3xy9zr5OLEkOjTEfxL6rRJ8ZMXeY=)
                          30: cIdwaFMnaN_nODeJi4PVUhETURc.roa (hash: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE=)
                          31: duHlauWDxyB55t783Auf0OjNQSo.roa (hash: Ir+MKAjO46cZx7B3mNkleV8ECfCdxsl+P9B/SC4lcqo=)
                          32: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (hash: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=)
                          33: iAuw5JQ3mAXjxY6QWG9RY3yTA-Q.roa (hash: UOg7kVgDqAJH5jfqy325Mwl+Vg9DYyHjwnI/jC5MC+Y=)
                          34: iBGEz-tej_FAq47hFEt3LXiPlAU.roa (hash: ZRiJC5SNia2u87xjZ0fDw27CPe3Mlgd/yd0/2xGYRfk=)
                          35: ikDfAfW-xsNgatn_b62wDmF7okY.roa (hash: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0=)
                          36: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (hash: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I=)
                          37: n7USEOktH5zuMAuITWQF7AXRczQ.roa (hash: ikLG4Fs9JJDgwb3XKOBoWhu8ubnMCzT/Buk9vuX9UaM=)
                          38: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (hash: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc=)
                          39: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (hash: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s=)
                          40: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (hash: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg=)
                          41: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (hash: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4=)
                          42: xIdot6FAjw7dfRg6u_ByXcj3lDM.roa (hash: 8+XjLrCilLhi21bpw8d0FOgL/oy8JtzB6AjiHlyT9fw=)
                          43: xXH0TOzedy66ElcG97fd78bjZKs.roa (hash: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:43:75:31:4a:eb:08:a2:dc:3f:bb:8f:48:af:90:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jul 21 06:01:03 2026 GMT
            Not After : Jul 22 06:01:03 2026 GMT
        Subject: CN=5ba873883f9124eba5d9a8e3a5b9c4cb8eb4f962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:0a:b2:0b:3f:b4:4d:67:a8:bb:a5:2d:8b:
                    c3:9a:44:f7:1c:57:7b:2b:05:6a:8e:b8:9d:bd:75:
                    19:07:7e:bd:fe:60:6c:7c:00:af:e1:20:90:71:b6:
                    41:e3:15:d0:63:d8:a8:88:eb:16:50:49:f1:da:eb:
                    ce:fa:27:f7:37:a7:e1:cd:89:8a:31:92:84:3b:9e:
                    32:51:60:70:43:af:db:3f:16:09:53:3f:92:25:93:
                    20:48:57:fe:5d:6e:c7:34:ef:5f:2b:0e:18:a5:e4:
                    b4:11:fc:13:f3:ad:69:da:48:88:56:e1:7e:37:b9:
                    d6:bf:e5:6b:5f:88:62:1c:60:82:23:8f:71:1e:a7:
                    a5:b6:0b:31:7f:d0:d9:d2:76:14:cf:6a:96:c6:23:
                    49:ff:ab:46:c6:a2:9b:4f:95:3a:f0:65:a7:b9:4b:
                    b4:73:0a:40:4f:e4:42:95:32:98:e1:9a:b2:20:ef:
                    a1:00:c1:58:cf:fe:02:1a:85:04:04:53:b8:e3:e8:
                    21:51:21:07:02:3e:fb:ca:d1:24:93:3e:78:a4:b2:
                    10:81:86:1e:d0:4c:75:1e:28:f6:97:1d:c0:e9:57:
                    ef:7d:11:d3:c1:6c:4f:c4:6a:55:41:54:09:1d:a7:
                    14:af:de:91:6a:59:81:03:fa:f8:d2:6e:f1:d1:8b:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:73:88:3F:91:24:EB:A5:D9:A8:E3:A5:B9:C4:CB:8E:B4:F9:62
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:73:dd:4c:0d:26:48:85:9c:53:67:d8:a9:38:8e:22:0a:35:
         a6:7a:20:96:5d:63:04:96:a5:b3:66:24:a2:ae:44:8b:54:4b:
         68:d9:85:ee:9c:97:96:2d:e4:04:3a:aa:65:e2:42:fb:cf:95:
         df:ea:ea:60:8e:3a:c9:ad:71:42:30:bb:64:36:3f:d9:21:1a:
         6c:f3:6e:92:99:d2:af:5f:f9:9d:05:36:93:0f:53:51:13:38:
         bf:d5:28:89:92:02:7c:de:78:91:2e:8f:ad:ec:7b:33:ea:48:
         27:1c:a3:81:2e:38:16:54:98:78:81:93:9e:64:1a:ea:f8:48:
         1e:c5:fb:d2:7f:42:58:77:26:1c:4e:a2:37:32:37:44:5d:3d:
         b8:e5:1f:17:ba:98:9f:28:9e:b5:33:35:47:8b:a5:1a:56:af:
         b4:c7:39:dd:2d:e2:6c:48:a1:2b:c2:47:1c:c5:f3:d7:3f:28:
         4f:36:9c:89:f8:76:c0:fa:f3:1b:b4:28:14:29:37:ee:21:ca:
         f0:dc:84:86:c4:fa:9d:0d:bf:24:53:0e:e2:d8:f3:c0:c1:ac:
         8d:74:97:c9:3e:ef:26:df:7d:c9:97:91:92:0b:3f:1d:0e:35:
         8b:a8:b0:74:d0:4d:c4:e3:44:fb:94:18:20:e4:65:28:b4:d9:
         44:c6:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----