Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          67ySYXtVfr/KlaLWgSmcVOdKtT+s9k4XJOXETWGYRS0=
Subject key identifier:   7E:7F:45:35:8D:1A:90:A0:EA:9A:5D:53:13:1C:6B:86:BA:9E:0C:35
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019DD577C4184FF2D402BCD5AC2BAC1FE573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          19B7
Signing time:             Tue 28 Apr 2026 19:01:28 +0000
Manifest this update:     Tue 28 Apr 2026 19:01:28 +0000
Manifest next update:     Wed 29 Apr 2026 19:01:28 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (hash: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8=)
                          4: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          5: 1LK6q103xKr7zFHTqfU4dHStwII.roa (hash: u2a/y3EzQctfyAgJiu2mqrq73OttQ/DadVLtNi/pOXQ=)
                          6: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
                          7: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          8: 8DwDtE_zLMPfhC2LWLBMv8i2DIk.roa (hash: s83tT0zl7wdD8/rswUNE/caIDGeEK8q3CUDy62J1e3k=)
                          9: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          10: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          11: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          12: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          13: GI33crLs1YhbryhcezjNjDVjS1g.roa (hash: KA1gXvMpl17ErTAeepPr4wN+L34jC9m0lf4C1BjqtxU=)
                          14: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          15: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          16: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
                          17: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          18: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          19: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          20: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          21: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          22: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          23: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          24: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (hash: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=)
                          25: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          26: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          27: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          28: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          29: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          30: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: PHb5CrCg0ZTR3yRttgNte/tK9iNCIhS+SbyZ16Ome5c=)
                          31: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          32: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          33: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          34: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          35: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          36: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          37: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          38: sKmeiayA9VEeFneHBogrVXd9Dz8.roa (hash: gixYXs8OW9/FjuOE8LqMnrageVpFQza4LwILa+VJgTM=)
                          39: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          40: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          41: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          42: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
                          43: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (hash: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d5:77:c4:18:4f:f2:d4:02:bc:d5:ac:2b:ac:1f:e5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Apr 28 19:01:28 2026 GMT
            Not After : Apr 29 19:01:28 2026 GMT
        Subject: CN=7e7f45358d1a90a0ea9a5d53131c6b86ba9e0c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:7f:9c:e2:ae:8d:b4:e5:43:1c:b5:97:da:
                    e4:a5:54:92:9b:19:27:53:df:86:c7:5c:0c:f7:b1:
                    d4:6e:d2:cb:b5:a7:b8:c0:a9:b4:b3:6e:a7:60:40:
                    f6:ba:10:a1:58:7e:b4:5d:d8:dc:57:dd:4f:d0:b7:
                    ba:88:df:a5:8f:c0:ce:84:9d:8c:c4:01:37:ba:f8:
                    a1:7d:e2:4c:a7:38:3a:f3:b2:b9:41:79:71:d0:fc:
                    5e:97:97:0a:9d:48:0f:40:90:93:03:05:f3:b9:90:
                    8e:bd:56:8b:8f:15:a2:2f:a5:70:5b:0a:9c:9f:64:
                    e3:70:2e:1c:5f:01:04:87:3d:00:28:21:10:77:68:
                    c3:bd:40:c0:f5:0b:c4:05:ca:e6:cc:67:bc:31:8e:
                    6d:08:d0:03:6d:6d:2c:b6:07:83:fc:3a:38:1f:1f:
                    00:bf:fc:fa:38:4c:37:75:25:05:7b:c3:81:74:17:
                    d6:29:15:94:0c:66:52:b2:6d:71:d1:32:02:4e:14:
                    a3:55:14:98:eb:f7:b4:49:ac:15:3d:2f:09:ba:ec:
                    3f:22:33:62:c9:3c:e9:68:f0:f3:16:58:1e:2f:47:
                    fa:67:a4:ad:9f:e1:4f:a1:eb:08:ab:dc:58:ba:ea:
                    4c:2f:21:e3:bb:45:ab:91:50:ed:2f:ff:78:8b:85:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7F:45:35:8D:1A:90:A0:EA:9A:5D:53:13:1C:6B:86:BA:9E:0C:35
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:85:d1:13:ad:24:83:48:31:a3:67:e7:b0:5b:99:cb:7f:53:
         ba:85:9d:af:cc:4c:e2:81:5f:31:21:08:fb:3c:ec:c4:ed:96:
         07:c8:0a:f4:bd:53:a0:3c:92:8e:dd:a7:4b:d9:87:db:64:3a:
         d1:86:b4:76:1d:96:50:04:1c:b1:b0:1b:c0:a3:37:00:59:a5:
         59:ab:51:b8:48:40:75:3d:f3:82:4d:53:51:58:f4:ec:9f:f6:
         9b:ee:5f:70:d3:ac:97:c7:f0:94:e9:39:f8:93:ce:55:69:4b:
         9c:c3:39:b9:33:2b:a6:e1:cb:87:df:36:24:55:a3:16:4b:5d:
         ac:de:1c:1e:68:ec:13:26:a5:8c:20:46:cb:37:18:61:48:62:
         48:28:b5:9a:c8:b1:7c:4a:ad:5e:9c:7f:cc:41:e0:81:07:f5:
         60:ec:9a:b4:25:ab:bf:86:f5:88:06:39:f5:05:e4:70:ac:c2:
         e9:09:f7:be:a7:99:f5:ee:7e:fb:e4:cf:4b:df:d2:cb:de:1f:
         c8:fb:ff:ca:5b:da:45:ec:21:31:58:00:6f:a1:ff:a5:dc:98:
         fc:13:23:10:c4:67:43:21:b9:5e:34:21:c0:f0:ec:ea:e5:3e:
         3b:fa:81:76:30:e9:40:3e:05:31:2a:a4:db:60:d9:57:c9:4d:
         73:7d:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:59:17 2026 by rpki-client