Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          cmT4ze0dotk+cTvWjy8SR88eHPsNIvUHoOgdTinQdIg=
Subject key identifier:   A0:03:D6:00:6E:47:47:65:2E:C8:8F:15:2C:36:DF:46:D8:F3:29:E4
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       019E9A042DE80AD1E0086D2D670A8E9031D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          01BF
Signing time:             Fri 05 Jun 2026 23:00:25 +0000
Manifest this update:     Fri 05 Jun 2026 23:00:25 +0000
Manifest next update:     Sat 06 Jun 2026 23:00:25 +0000
Files and hashes:         1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 4hg0NnklZUKEkYITHinO4XgRltI.roa (hash: kpbA6ZYrYnW/umlW9B55Y6L8ty5MPzE2m5MIoOkeyYw=)
                          4: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          5: 73gLLa2WEuSOVBryed6FbQh9h_4.roa (hash: uiB7J4OKMlOERU3DxxkeNEI1+/nHYCXhUByMM7Z7TYU=)
                          6: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=)
                          7: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          8: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          9: Bt944BayBPUs5tY1-40d44HAARE.roa (hash: zi5M7iQxvBHgvnNeQP8FWxBFiEPXlMuyXlNAQguQJsE=)
                          10: BxU_QLYCv-NeFxAvHuVsehzq1Ms.roa (hash: ET+EI9D2GwXgCmETdUOtJ2GyqY2jX7dUpkPSLtH/MJo=)
                          11: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: VBTMFyqKYSTD3AEr8/sspdYyFmHeLvPLJwkKANzuGxQ=)
                          12: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          13: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          14: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          15: H8iBI3oxi9mzced7XKm6sNzu2b0.roa (hash: Eg4AzBzQ/I1unxdwVQekHYusJF4JhPkZ22ij6AU935E=)
                          16: JjJL9CLuJEBOIckms7eQRal0dlM.roa (hash: 8NACh9U+23n1UQ9SFNueqK87W0nyrWi7z0FA2prmkEE=)
                          17: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          18: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          19: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          20: O0S8wpXTO6ZfS1N1kOZ3UQlC6eQ.roa (hash: bb5Aw3Wth5cpLBSgblsvH1ZMSUY2UqNKpY+JLd4x8qk=)
                          21: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          22: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          23: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          24: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          25: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          26: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          27: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          28: fJ4RTkcAcu1_glmVBKsTaz8-VOw.roa (hash: ylSEi7ocQYsHPL2vorGa5RyfsK8vM+dH8wAx4Jn5w88=)
                          29: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=)
                          30: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          31: jPk_ETVXQYD8EgjMbvt6slsHwcU.roa (hash: qCPgnU62uZHSoyHV8fMk0D6+40SXzkgBZK4EIkXKL38=)
                          32: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          33: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          34: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          35: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=)
                          36: pYqyRDZ3yKoa2ihOr54mHCL3tRc.roa (hash: ZEIRLcKve49FAAP8uRktT/jxMpkhtZPvKW4kSe/sfOo=)
                          37: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          38: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          39: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          40: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=)
                          41: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          42: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:04:2d:e8:0a:d1:e0:08:6d:2d:67:0a:8e:90:31:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Jun  5 23:00:25 2026 GMT
            Not After : Jun  6 23:00:25 2026 GMT
        Subject: CN=a003d6006e4747652ec88f152c36df46d8f329e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:78:26:02:34:64:e7:dd:db:f1:44:e3:fa:
                    f2:a0:b0:ee:0e:da:23:13:67:55:d6:0a:05:1b:30:
                    3d:fe:83:e2:64:19:a6:9b:ce:66:0c:9d:b3:66:56:
                    b4:e5:a8:3b:13:e1:9e:9f:19:6f:a0:41:cd:49:6a:
                    9f:2c:39:ce:f7:d3:f6:0e:5d:f4:75:00:bb:7e:05:
                    1f:c8:03:bc:93:be:a4:98:fd:ff:74:b9:50:ba:3e:
                    04:ca:dc:e3:ff:f7:f5:f5:a9:1a:9c:c9:90:35:2e:
                    b0:8c:eb:f1:8c:e3:dc:fb:12:b6:aa:2d:2f:10:eb:
                    46:8d:12:56:7a:aa:fa:a7:8c:46:f6:69:ff:a6:c7:
                    1b:1c:2b:1e:cd:cc:e5:e1:26:a5:e2:41:9e:7e:d5:
                    fd:4b:98:d5:14:9a:a2:0f:57:39:44:9e:43:ac:26:
                    d0:07:1d:90:e0:8d:9d:97:ca:f0:67:73:ea:5b:01:
                    ca:b3:f3:82:c5:72:a6:4f:09:f6:a7:01:75:bd:b6:
                    77:43:6a:99:2d:c2:ce:6d:db:8c:d9:9f:88:65:e7:
                    79:27:da:16:5b:76:5c:f5:bf:94:38:8a:f2:9e:90:
                    55:d4:fb:1f:c3:14:94:04:ed:1b:04:46:14:71:4c:
                    9c:6c:f5:01:03:04:5b:58:9a:8c:3e:e0:69:c4:28:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:03:D6:00:6E:47:47:65:2E:C8:8F:15:2C:36:DF:46:D8:F3:29:E4
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:5f:33:0d:d9:95:36:50:4c:41:c0:67:3f:f5:9a:ae:d1:
         b3:e8:54:93:60:04:67:32:38:bb:d6:bf:a7:de:06:9b:99:7a:
         54:54:98:11:c0:10:e0:5e:b2:95:a1:de:de:90:41:f7:4c:12:
         c7:32:3f:e4:e5:f3:dc:69:e5:6e:de:3c:fc:99:ef:26:a8:4a:
         b2:d0:1e:20:ab:32:41:5d:0e:c0:bb:0c:dd:34:ed:74:cf:98:
         2c:6c:1b:4d:14:e0:5c:2e:c2:d6:2d:2e:c6:d1:90:62:43:6d:
         cd:57:00:bc:0c:d5:35:2b:ad:70:8e:fd:58:54:a8:7c:6f:e1:
         ec:72:2f:f1:b4:ea:b4:fe:6d:49:31:43:d0:d2:e3:77:fa:96:
         7d:7a:21:6a:5b:72:b4:bb:6f:c9:30:d4:63:a4:37:a9:0a:62:
         5c:8c:2e:24:ba:28:cd:50:bf:9f:8b:3e:c5:65:a1:d3:39:e6:
         f5:46:f5:43:0d:5c:ec:96:99:13:05:e7:37:f3:05:7a:54:06:
         63:41:be:f6:02:b7:46:69:fd:c6:2a:3e:b4:90:bc:35:35:3f:
         7f:de:92:d4:4b:ef:e2:7e:8b:7a:61:c8:9a:73:87:42:c6:22:
         c8:73:ba:31:dc:6e:05:25:3f:09:65:55:ba:3d:4a:1b:09:19:
         d3:0c:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:15 2026 by rpki-client