Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          HrEWbGp9adMAY40w24PIepI3yl9cBtHucERzMU8xxag=
Subject key identifier:   02:C3:1F:CA:57:CF:36:FA:5A:46:A4:E6:1F:5A:2C:1C:25:0D:D2:3F
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       019F8230E2905FA5FA4D95C06BC2E654DE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          0240
Signing time:             Tue 21 Jul 2026 01:01:09 +0000
Manifest this update:     Tue 21 Jul 2026 01:01:09 +0000
Manifest next update:     Wed 22 Jul 2026 01:01:09 +0000
Files and hashes:         1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          4: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=)
                          5: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          6: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          7: ABh9BVEUwIw_okat0rY-aX6ZyPU.roa (hash: eWGDuCUhWH7AwA1JYOY9kZ0kb9CrgiFOHE0IRNR2Fdc=)
                          8: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          9: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: 7aJNqY0pWjj18dXGcaXTM1mdA6rq9IjYfOkbl9U2P24=)
                          10: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          11: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          12: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          13: JjJL9CLuJEBOIckms7eQRal0dlM.roa (hash: 8NACh9U+23n1UQ9SFNueqK87W0nyrWi7z0FA2prmkEE=)
                          14: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          15: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          16: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          17: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          18: PEkym1OPMpNIdeN11ZQCBbwOhAc.roa (hash: bY07kjjzHaYOKoX3oZoXOe61arnA6Qa9njUm+T8zLXY=)
                          19: Q30EU1erGZsCCMuCgL71lzXCsB0.roa (hash: yxqrbAXer9RdCmSpvVHPaT1/BGFNWf63zfk7mwlIh/A=)
                          20: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          21: QkV8SpGFe8YhzYBjU-dwf-dOYjE.roa (hash: De5CcGpoNqIPcla+kTBwODaQboj4V8tyh8GSsXcHW4I=)
                          22: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          23: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          24: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          25: XkFF5iy8cNEiMGbNts9sMLJ4l5o.roa (hash: MGXnjAVWXxsjSqpO9GUP1arrzPGYa/FORm1VJm318GI=)
                          26: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          27: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          28: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          29: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          30: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=)
                          31: glOAY_gAtPPHYUfTRyzej09l9Uc.roa (hash: KOZ6TNPDLr+ntpuwzfJN8PDJ09iuYSdA1Xv0liIKskU=)
                          32: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          33: jPk_ETVXQYD8EgjMbvt6slsHwcU.roa (hash: qCPgnU62uZHSoyHV8fMk0D6+40SXzkgBZK4EIkXKL38=)
                          34: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          35: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          36: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          37: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=)
                          38: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          39: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          40: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          41: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          42: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=)
                          43: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          44: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:30:e2:90:5f:a5:fa:4d:95:c0:6b:c2:e6:54:de:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Jul 21 01:01:09 2026 GMT
            Not After : Jul 22 01:01:09 2026 GMT
        Subject: CN=02c31fca57cf36fa5a46a4e61f5a2c1c250dd23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:67:82:aa:b2:ad:e1:17:33:59:ec:56:91:
                    5a:50:61:d1:d8:e1:22:9f:3c:2a:d6:6e:f2:d2:76:
                    e7:85:c1:2d:c3:46:e9:15:ac:b4:37:8d:20:cd:99:
                    60:5b:fd:ec:6c:07:e3:7e:34:a7:bd:2b:30:2e:50:
                    41:d1:8d:91:02:77:fd:96:c7:d8:63:da:8a:46:6d:
                    13:ba:9b:1b:48:7f:65:55:97:df:a7:bd:4f:cd:12:
                    94:ab:17:c4:b0:04:99:e3:50:eb:47:ab:b3:de:bc:
                    7b:5e:75:d5:e5:40:f9:8a:f8:7c:23:fc:56:51:21:
                    4b:f4:23:e3:d4:f4:40:af:db:ee:35:c4:8a:8c:98:
                    b0:e5:33:9f:d2:8f:ec:54:79:eb:10:d9:cb:42:09:
                    34:23:60:8a:b8:2e:92:c8:e0:02:d5:1c:22:fa:10:
                    f2:f1:b9:d4:80:ec:ef:a0:ce:a9:01:74:da:10:c9:
                    74:d2:3e:ed:42:94:42:80:6d:e3:d6:c1:60:9c:f1:
                    a2:96:89:78:5b:c3:1b:7e:81:9d:e5:28:ce:19:9b:
                    6b:d9:1d:b8:1a:2a:8f:3e:2e:16:67:a1:8e:46:c0:
                    8b:d6:8a:6d:29:cd:3b:0f:d8:e8:dc:97:c2:17:04:
                    ca:0c:4a:2a:c6:75:59:68:6d:2f:dd:a5:b9:4c:01:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:1F:CA:57:CF:36:FA:5A:46:A4:E6:1F:5A:2C:1C:25:0D:D2:3F
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:90:61:04:3c:47:86:bf:dc:a9:41:5a:53:68:63:8d:36:5f:
         4f:2d:aa:fd:7e:a1:12:b8:66:22:92:4d:58:7e:7d:a8:3c:13:
         55:67:9b:50:6c:09:58:e6:5d:f4:99:3b:7e:39:32:99:12:02:
         7d:21:30:b8:40:01:f1:59:cc:b8:73:a1:41:5c:43:f6:11:5f:
         1e:43:24:e2:78:98:36:1f:09:11:88:a1:c4:39:fe:ec:38:25:
         05:74:83:be:a6:39:bc:ff:85:d2:1a:f8:9e:04:e2:30:9a:5b:
         d8:ad:84:ae:c2:fe:43:2d:ef:bf:09:e8:10:61:65:12:b0:64:
         a5:91:52:46:df:2e:2d:28:56:eb:e5:17:cc:6a:27:8a:87:49:
         b0:94:ab:5d:d3:46:41:64:5f:e1:6d:7d:34:a7:fd:0f:1c:02:
         f0:cd:fc:44:f2:c8:1e:e7:ef:8c:50:b0:e7:25:2a:ab:6b:03:
         7b:4a:97:67:3c:11:43:f7:7b:c0:a7:34:0b:24:33:1e:27:98:
         80:e1:b1:11:9f:d5:de:a7:c9:f0:a2:b3:02:ab:1f:93:6f:72:
         f0:8f:7c:b8:ce:e0:a4:06:ef:f4:de:93:e0:13:b8:00:03:61:
         fd:48:6d:cb:5d:40:bf:1c:d5:24:22:85:17:7b:3b:26:b6:41:
         be:50:3f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----