Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          pXRNRwSPUnbulCUQQXfXZjCE6Wap7YZKaIw0H+zub6g=
Subject key identifier:   DA:97:B6:D0:7E:EF:7B:68:5F:2C:E1:B9:00:57:41:03:E1:C8:1F:52
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019EE0D422D1C6E4F163194F7ADE6DFB810D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1A49
Signing time:             Fri 19 Jun 2026 17:00:59 +0000
Manifest this update:     Fri 19 Jun 2026 17:00:59 +0000
Manifest next update:     Sat 20 Jun 2026 17:00:59 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          4: 1VLg1aY9v7jaSjHtofK36IMeBaE.roa (hash: HI2whi4CG4KcDsjD2jvuiBEFXV0jVOJ6ZL1iFW2q1Rc=)
                          5: 28uNguySV9FxVmWhQEdaW5jt540.roa (hash: 0ULn8cAnuq4gs0Nanlvx5FnInPzMeeOp0GfmkkuHGbk=)
                          6: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          7: 8DwDtE_zLMPfhC2LWLBMv8i2DIk.roa (hash: s83tT0zl7wdD8/rswUNE/caIDGeEK8q3CUDy62J1e3k=)
                          8: 8QpVBxX2eirF8sGJtE7zd4UNxBI.roa (hash: CnXejZBAHN4vYEbHPm/eBo0FdHr7KBSmiggR33stBfk=)
                          9: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          10: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          11: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          12: Dn9O3Hg1LniWbRCJrfFCOCEs0gM.roa (hash: kqqNoy0anJ34DkFYeX4WbpE6KpSDvttdZYzayqSypVI=)
                          13: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          14: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          15: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          16: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
                          17: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          18: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          19: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          20: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          21: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          22: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          23: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          24: ZAkzvDuShqbgdA4si8lgDBLLYcM.roa (hash: gpLWb00jmi2CBQgo9H2EFZ0+OdBOrkyQzKyxnR7pVDU=)
                          25: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (hash: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=)
                          26: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          27: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          28: dqTANP5pNZTCRfs274ktIJ5kyVE.roa (hash: A8pKTaM/ilVYUk6hX24CD6ZMeMiPQwdfZB9Z9vekHdY=)
                          29: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          30: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          31: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          32: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: 4JstyGY//KhZga8SEVCxweJgKh7k/0NIxmO4Z0++Rzc=)
                          33: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          34: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          35: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          36: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          37: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          38: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          39: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          40: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          41: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          42: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          43: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e0:d4:22:d1:c6:e4:f1:63:19:4f:7a:de:6d:fb:81:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jun 19 17:00:59 2026 GMT
            Not After : Jun 20 17:00:59 2026 GMT
        Subject: CN=da97b6d07eef7b685f2ce1b900574103e1c81f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:c6:d4:50:8b:f8:0e:da:1c:79:8d:9d:96:
                    da:03:97:1f:f5:e6:05:ff:fc:04:0e:86:4d:d8:c8:
                    9d:94:8b:67:89:ac:94:59:29:62:f2:55:a6:d0:d3:
                    eb:e7:a8:7d:22:22:cd:0f:2c:9c:2a:30:3e:b7:47:
                    37:7c:99:ee:1a:1d:84:46:7a:83:23:79:67:65:0c:
                    56:da:15:b3:7b:84:df:d6:59:66:3a:a3:b9:be:8d:
                    61:00:05:49:82:47:fc:90:a8:6c:f8:14:ba:d4:5b:
                    fc:89:89:9d:c2:26:b1:2e:50:4c:5d:4a:37:f6:41:
                    04:71:d0:01:59:4a:ea:d6:4a:f1:fb:d8:a1:ff:fe:
                    9d:6c:cf:ba:3b:e1:2b:aa:a1:62:7d:48:bf:5d:de:
                    a3:c5:e6:d0:1f:47:8f:6a:de:33:fe:30:24:73:09:
                    3f:cf:c8:e6:63:c5:bc:4d:a9:9b:68:d3:c5:9f:18:
                    e3:c5:79:ab:d0:d0:14:ef:50:dd:fd:e1:55:3e:87:
                    99:41:55:b4:cc:b0:9a:b6:46:f3:83:ff:f4:28:af:
                    ae:b3:bf:c7:cf:92:44:0b:60:80:7e:b1:16:69:b1:
                    0a:7a:04:b1:d6:70:51:d4:92:92:44:6c:84:19:0c:
                    48:4b:24:01:64:b7:6b:4c:c0:1c:f7:04:82:5f:94:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:B6:D0:7E:EF:7B:68:5F:2C:E1:B9:00:57:41:03:E1:C8:1F:52
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:56:fe:bb:4b:85:ef:0e:e0:53:3e:2b:34:60:fa:5f:38:9b:
         4e:c0:76:18:1f:27:b0:8b:96:1f:c3:2b:c0:ff:5d:27:c1:18:
         45:74:03:4a:8c:f1:58:8f:e2:dc:f2:e7:3b:84:af:db:55:53:
         16:c4:1a:1f:be:10:07:d1:65:0b:da:0f:f2:16:26:4f:70:b9:
         48:23:64:e7:b1:22:6b:f9:de:b4:ea:c1:6c:96:80:fe:0b:a7:
         ec:ff:0a:31:58:e3:5c:b1:2a:ce:6d:d3:ff:78:bf:d2:96:82:
         46:ee:ff:10:94:62:6c:87:8d:aa:fa:8f:e1:d9:0a:ce:22:cd:
         a7:ea:38:f5:5b:28:1e:4e:7e:9d:33:c2:b2:84:d1:e9:2d:9f:
         82:2a:8e:bd:37:5b:cb:e1:c4:b1:68:ef:99:ab:08:f1:f3:f8:
         5f:34:e9:3c:ee:ef:f2:e6:57:39:e1:45:a2:9e:38:6f:27:21:
         6a:35:8c:bb:97:31:e4:36:53:e2:73:a9:6f:a4:0c:da:3c:e7:
         da:6e:69:7b:07:e1:f3:3e:62:e5:9b:fe:77:b0:cb:09:c1:f1:
         fb:65:44:8f:29:49:3d:d0:f2:6d:a0:8e:08:c9:3f:35:4a:c4:
         57:40:bb:5e:be:ff:94:7b:f3:80:24:be:fe:a2:92:a2:e8:ef:
         0d:5d:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----