Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          FXRahQ/szqVOAoj7w7deQIBs22HhmQv66uMk4xhk6cg=
Subject key identifier:   DA:63:3F:37:4A:6A:73:66:00:06:24:03:A4:DC:F4:64:B3:51:E1:6F
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       01A06D95E57A03F26D55BEF731ACE81BF01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          02C2
Signing time:             Fri 04 Sep 2026 18:02:15 +0000
Manifest this update:     Fri 04 Sep 2026 18:02:15 +0000
Manifest next update:     Sat 05 Sep 2026 18:02:15 +0000
Files and hashes:         1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          4: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=)
                          5: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          6: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          7: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          8: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: iYLMP9y0KJtqoKMEue5j7VNzPgBsgRfjATZQH1C1JiU=)
                          9: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          10: DrCOmEUQ4JwglphgJCb6AVaakAY.roa (hash: qp/g2z3npHJzshleCgog068nrOuVJGLc4l65RkGLOVI=)
                          11: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          12: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (hash: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=)
                          13: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          14: JjJL9CLuJEBOIckms7eQRal0dlM.roa (hash: 8NACh9U+23n1UQ9SFNueqK87W0nyrWi7z0FA2prmkEE=)
                          15: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          16: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          17: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          18: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          19: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          20: QkV8SpGFe8YhzYBjU-dwf-dOYjE.roa (hash: De5CcGpoNqIPcla+kTBwODaQboj4V8tyh8GSsXcHW4I=)
                          21: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          22: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          23: U8zMUiMk1Ot906wBPhNnh9qIyVs.roa (hash: 9tU/X0pyerM1WjggaqK28em0X/I42isjLNz8F4mP3TU=)
                          24: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          25: UnpRVCK_Gc5VbVNm8iLP9MKKZLc.roa (hash: EIulUW9Qb1i3y88NRqFWG6S+4xRTW+qht9M8c6ut9FY=)
                          26: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          27: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          28: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          29: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          30: fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa (hash: 8on9Wj7wgWS3bgbMN8K27Nuy/bvBtTxIn35r63/Pk1c=)
                          31: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          32: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          33: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          34: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          35: lj1ffwjXwh7WORUNiNsfKctjupU.roa (hash: P094pOYDmE+5wi1DhajKZaTB8J1E2F0Ql3tkEBOTrqI=)
                          36: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=)
                          37: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          38: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          39: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          40: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          41: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          42: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
                          43: yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa (hash: 0G99mwqEuR6I8GBLFxxB42DbMhMAwQDAL1U9zeTz8vE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:e5:7a:03:f2:6d:55:be:f7:31:ac:e8:1b:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Sep  4 18:02:15 2026 GMT
            Not After : Sep  5 18:02:15 2026 GMT
        Subject: CN=da633f374a6a736600062403a4dcf464b351e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:c7:30:da:89:62:c3:59:bc:a5:69:f1:bb:
                    87:ae:73:5c:00:9c:11:2a:cf:e5:b9:8a:70:9e:09:
                    b2:5b:97:ef:53:41:f3:41:2e:3c:1a:56:68:1b:7f:
                    74:5e:da:27:0e:32:19:fb:e3:34:87:e0:da:50:23:
                    cc:7b:2e:b2:4b:08:ba:6b:d5:d1:c9:a9:a4:b1:4c:
                    0b:26:10:e0:04:96:4c:06:d2:35:c3:b4:8a:64:d7:
                    11:59:c4:ac:f1:ec:e8:c4:4d:00:9c:f9:c1:a8:a6:
                    eb:ec:d4:99:cd:04:01:60:73:53:a1:76:94:63:f8:
                    98:c3:8a:cf:8c:3b:a7:96:8f:54:7f:a7:ad:38:b1:
                    46:26:f7:53:90:40:f8:66:02:94:3a:2f:37:ba:d3:
                    88:b5:58:74:07:53:e3:63:63:28:3d:d3:cf:d5:88:
                    b8:8b:15:70:99:13:c3:0d:90:91:62:74:1d:72:af:
                    13:b6:ba:d0:71:34:cb:0a:70:85:34:87:99:59:4d:
                    01:c2:7d:d2:3f:bc:f1:70:a8:44:82:fc:10:b5:7a:
                    79:4c:9d:c4:e1:4c:d4:de:9d:2d:23:b2:7c:34:58:
                    88:8c:41:ed:74:82:9b:56:ae:5b:54:77:81:14:23:
                    92:97:53:74:f1:39:ec:65:d2:eb:4f:23:9d:43:5f:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:63:3F:37:4A:6A:73:66:00:06:24:03:A4:DC:F4:64:B3:51:E1:6F
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:44:ae:4d:79:60:d0:2a:fe:72:90:36:87:61:4c:4d:91:
         aa:d0:81:b5:11:44:6f:57:37:14:0f:c1:d2:3a:4b:51:86:76:
         f1:d9:02:83:3c:e9:c7:b7:f3:43:4b:c2:0b:4c:75:10:5f:b2:
         a4:a8:0b:0a:80:52:36:11:eb:ed:c8:3e:ca:60:90:8b:f7:63:
         56:a4:71:42:ba:c0:fa:ed:a5:a9:94:38:fb:6c:96:85:ed:dc:
         75:ad:70:21:f9:49:85:f5:a8:4e:79:b0:88:2c:27:d1:70:5d:
         f1:3e:8e:24:e4:55:7e:31:06:a4:e0:b8:7a:79:3d:a6:bb:5f:
         fa:32:53:d5:21:c7:45:af:38:4f:0d:d6:ab:e9:37:e3:9d:96:
         eb:b1:97:b5:2e:7e:2a:62:7b:6e:ed:51:a4:b4:16:8c:c5:bc:
         44:e2:dc:29:52:d7:14:c2:3e:41:4a:58:ea:2b:38:37:7a:ca:
         1f:38:20:e4:85:c3:c9:d6:b5:50:23:32:f2:b7:b7:28:07:5b:
         e5:b7:68:ff:03:5d:39:25:ed:51:22:dd:a8:74:d4:ec:ae:79:
         cc:40:c3:71:cc:b8:09:2c:6c:0b:8f:13:f4:20:24:54:d3:a2:
         1f:2a:4a:ce:4b:fa:f3:84:cd:5d:09:ad:5f:00:39:bc:b2:3b:
         51:52:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----