Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          KLZYCeaxCWjEgJjll7FziERR8ierAhX5+l1zRaY3HFw=
Subject key identifier:   29:12:16:22:13:8F:1C:F5:E4:F3:DD:51:9F:35:81:85:04:98:C7:4A
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       01A156D38E9E61519F1CE259FD34DBCE49AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          0349
Signing time:             Tue 20 Oct 2026 01:01:07 +0000
Manifest this update:     Tue 20 Oct 2026 01:01:07 +0000
Manifest next update:     Wed 21 Oct 2026 01:01:07 +0000
Files and hashes:         1: 008aaJ7C0NI-B76Oz-DgwXoqQGA.roa (hash: Wl56s0djkIFMtZEcBorh/gchNgdhdVWtVVwku8y2YNI=)
                          2: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          3: 2QBmwvC_Xu9zRPYUQ2laq2mKYco.roa (hash: 86VoVG5xisD/zC7oESTivnN1oBV8l66WmkJKuTrECTs=)
                          4: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          5: 4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa (hash: tskoLkmbKnpidodrFvl8GOFIM31iV0Ojzu1LEIBf4fw=)
                          6: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          7: 6z-ninbRTJQj-TZknzEwKYouOE4.roa (hash: d8nKt5PAnam+L6inWEaMyIFTs3jvVRg0o00gM43ZNQw=)
                          8: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          9: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          10: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          11: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: EDA/dwQWBv7ODPeqZVg5lz1FTp0OCpjcQOJ7CVF2dU8=)
                          12: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          13: DbxJv-sLQ3W1fyhrdioSNv97wS8.roa (hash: W9ilqt7H8VyXzg6z0JRuXfb3gXCFeEGnkjjtm+EEDs4=)
                          14: ERr_HtkQWGUFjzv4scSz1RjkxkY.roa (hash: LrxlextA3UrAvkKiffumcx8o+lgVydKGnEQqNKzGR6Q=)
                          15: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          16: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (hash: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=)
                          17: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          18: Ho8zkqZKLkLA4effCVpP6TkX1-c.roa (hash: 2o4YqIFG5/X+kXM1QRZNRPqvc4hIDCgqt0sRRrbUsZU=)
                          19: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          20: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          21: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          22: O0GJXUB8mPo0kfsusOtJBHkt4Vs.roa (hash: u7UbrFzUbOV5TgsI912dyxu81xZTMSTmqJ8sorD9At4=)
                          23: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          24: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          25: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          26: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          27: U8zMUiMk1Ot906wBPhNnh9qIyVs.roa (hash: 9tU/X0pyerM1WjggaqK28em0X/I42isjLNz8F4mP3TU=)
                          28: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          29: Uk-DZbMMzQYoC8uG1Ys4Z5BX5uw.roa (hash: IInUKYbmU30Zg9l2Ho6956f4Sd0UxMOn19Kx6W9PbjY=)
                          30: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          31: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          32: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          33: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          34: fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa (hash: 8on9Wj7wgWS3bgbMN8K27Nuy/bvBtTxIn35r63/Pk1c=)
                          35: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          36: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          37: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          38: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          39: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          40: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          41: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          42: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          43: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          44: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
                          45: yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa (hash: 0G99mwqEuR6I8GBLFxxB42DbMhMAwQDAL1U9zeTz8vE=)
                          46: yuu6pkLIeW44ejjBMErvhGu5LgI.roa (hash: 6xHzo/Vs6bOP6rzLYIi1OSbob9D+BHaYxFHHU+Ycr9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:56:d3:8e:9e:61:51:9f:1c:e2:59:fd:34:db:ce:49:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Oct 20 01:01:07 2026 GMT
            Not After : Oct 21 01:01:07 2026 GMT
        Subject: CN=29121622138f1cf5e4f3dd519f3581850498c74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:d7:b6:00:3a:97:73:9d:90:86:f1:44:e6:
                    6a:07:5d:ba:10:e3:9f:11:db:8b:73:25:72:74:36:
                    ad:ab:86:10:2f:9b:72:6e:c0:b5:e0:05:72:93:e8:
                    a9:9f:d1:9c:a4:fb:96:b1:7b:16:c1:2b:50:08:6e:
                    fc:b5:13:a0:d5:5b:2a:4a:71:37:ff:bd:ff:65:13:
                    31:c7:bc:bf:3a:75:0f:1e:70:a4:5a:c2:98:5a:70:
                    49:52:11:17:17:28:28:75:81:2a:e0:fb:cd:43:38:
                    c9:0a:72:4f:8d:59:ae:06:ef:22:63:b8:14:f6:35:
                    3b:b6:87:55:86:44:8e:5f:74:ff:47:c4:1c:42:88:
                    d1:5e:6b:e0:b5:b4:53:55:37:29:39:42:a0:c7:f1:
                    5f:f2:a1:c0:a6:59:7b:81:38:2b:7e:72:87:88:eb:
                    28:f2:3a:ec:bf:9a:c6:ab:65:12:f0:62:68:24:15:
                    ce:3b:c7:fc:b8:f9:a6:f7:0f:6b:2a:a1:a1:ad:85:
                    12:fc:5d:f2:2d:f1:61:41:98:82:86:ff:a5:97:f5:
                    46:3d:47:54:dd:99:cd:a6:4c:71:50:a5:ed:05:16:
                    76:54:dc:3a:62:78:4e:c2:2a:b1:c0:c0:f8:57:c1:
                    2b:36:cc:86:5f:70:54:1d:cf:61:fe:73:03:b9:b8:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:12:16:22:13:8F:1C:F5:E4:F3:DD:51:9F:35:81:85:04:98:C7:4A
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ed:96:6e:a1:57:ff:bb:47:bd:6c:2a:12:c1:ac:ab:4b:69:
         8f:29:ef:a0:b9:de:68:8b:4c:f0:bb:87:41:9d:a2:bd:b9:0b:
         92:5a:4b:f3:e0:81:81:7a:c9:76:a2:b2:41:1d:32:6c:38:01:
         52:b2:d9:e8:7c:49:5e:b0:a9:54:75:7d:40:9c:c4:54:c2:31:
         9c:9e:63:fc:39:85:71:cb:b5:7f:f3:d2:29:3a:67:d6:fc:5c:
         c5:03:33:db:b9:af:d6:80:e3:e2:c5:c8:91:1a:5f:34:91:e7:
         d3:f5:c7:58:94:cc:1e:ea:ab:c7:70:e5:1a:06:eb:35:43:ef:
         66:c0:8e:5b:52:cc:a0:f1:2b:bf:4b:20:c0:50:56:83:dd:7e:
         ba:ba:05:16:e0:be:68:a2:23:32:2e:5e:ea:2a:2b:0d:41:12:
         f9:e1:0b:f9:11:76:77:69:37:42:82:b4:a9:04:e2:27:e5:7e:
         30:87:43:5f:0c:31:15:1a:70:8c:b4:7c:9a:f1:b4:5b:7f:75:
         92:c1:cd:98:d4:b8:a1:43:c3:fe:89:79:9d:47:0c:84:ec:68:
         ad:f9:94:52:97:d9:50:67:cd:bd:e7:67:68:c0:60:1c:db:b3:
         37:9f:81:6d:9a:f7:74:fa:f7:f9:50:fa:af:69:19:2d:38:3d:
         6a:64:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----