Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
File:                     pXbrLMRi5uS_Deabn2NIdd67quI.mft (raw, json)
Hash identifier:          oOwPa2mQpUxozvOWZewC6K8mG7quMHxDTMZZBGPJ9eo=
Subject key identifier:   C7:A9:31:01:AB:5E:99:0A:1A:A1:87:E7:41:3A:D2:D3:28:89:7F:AF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       019F916DCFE8508EC267AC49EC78874AD2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
Manifest number:          1B5D
Signing time:             Fri 24 Jul 2026 00:02:00 +0000
Manifest this update:     Fri 24 Jul 2026 00:02:00 +0000
Manifest next update:     Sat 25 Jul 2026 00:02:00 +0000
Files and hashes:         1: 06ltcr-VR0mDGk3DU2V0Qs-Epps.roa (hash: xy2x0t9miUDfzt16/BgNvKW7tRDWVpdYnHH/h+rimzA=)
                          2: 0fZnFf8vYw2u7gGSaiDC11kwrcI.roa (hash: zB9Co8CQovAdtoFO8Oirg8OcBTwP2vhu4tTPYXlt42o=)
                          3: 1-SnT6A8bIuS8ou7zP4my1zHqrOc.roa (hash: aJsxowleE7sR/aPvc4zJv3ud0JqycjWWVi9pWoJuKwA=)
                          4: 1-n3yV7unC1R_VH6LNEHRzhwF1uI.roa (hash: bksm2tdTTWynaSU7T31wLxV6bmzc/5dIs6ZNULpbBIQ=)
                          5: 1-oGEqahOFkNkQIRe_6IUZEcES3M.roa (hash: MYJXd+XG0CeXetoUYxUZS4E3V5LgJZv3JuaGKGF3UM8=)
                          6: 1-pMl3d4gNxU27FCDZAJAkSHCnQ.roa (hash: 5SWZgCq5BYZHkDe5mSnx1U8yWTgXkvxikcxmv8Yb7Sk=)
                          7: 2PSXYK7RiGtCGo6lHFrZ4YsqmDU.roa (hash: 4TWFFeF3Hdb5/B2o51pGRlZHpk3qG7DjIDAPvFIJfGQ=)
                          8: 4x9FdsuCZT8eQjbR_xFCkkyHceI.roa (hash: bwssY4p6B1jXdqnHRj8lHM3+o/n499u3nrapMoxhK40=)
                          9: 8Oc7yZGaKTkBanIXgPYbk2WNQUE.roa (hash: VRHFGWRbTtCED6xXvR0yrUQ50Zl08CMmuoJmDA12A5s=)
                          10: 9L-xdmzq1vPbVIZE4LGH9lfQdfU.roa (hash: ZFDBKyJNyXJjvUoWiLr0+Z4nHsDCkp8D5fnifpB0xFw=)
                          11: 9qA9sqmUNbTfjHXf5lbIrMrVJ4U.roa (hash: MROtdxgdJSiF4ic6iYN7rINtE9+cgZKF4pOEr5+fMag=)
                          12: B0Q_Xv2CCSGwBRd2N5EnGbOwSfQ.roa (hash: 3cuIsi9z8hL9CpLEDy3zaGuNLR9bt9rQc5C+l+npObs=)
                          13: BORX2baZXFSi_y-y3B8t3b5J83E.roa (hash: dnOsSYOCocfCl6/WQXbXn6XrzUHSbY3O7Og03V8AEIY=)
                          14: C0PrDFjg6tEYdS7FGUYA9AvbjNY.roa (hash: t+XZROmYPw3eLWYfe874QIA62oa0drYjVlfaoEDAL5I=)
                          15: CvjKye9QoYot8ER41kU6pPcB3mQ.roa (hash: Og/70Ea5OciFlJJWqDbYc5NckE7t8Qijn42JYoURBjI=)
                          16: D30wBvo6GdQk07GrbjXC-y7kfQg.roa (hash: PtMGitpAQ1ws80rS+qjGvkY94JZdrap7rW2dJVfQ0rw=)
                          17: EDw81Ndf8QM0hI3Du2-BtictZc8.roa (hash: 0Ie5QPEH8aozKhvRoPlTgN3mrJZoJ2Kdz74uU/Dg7yE=)
                          18: EEQ18MJD-QFM041ezxz0Jr-cpQk.roa (hash: 6f42tqMjwuh7lt1pWqrlzUGqWxEundbWYPEM0xO9PW8=)
                          19: Ge_F9ExwO8_45uYKevZJ8TRrhLI.roa (hash: Kx5DX+vDs5UGFHjBPSnm22s/IMa2TGmIuIccjRdHY/A=)
                          20: HDLoBx6dn1hVxeyNNfrtKu5cJ4c.roa (hash: 9BOP424i31SQG/f/kGszodIMh4zCFrxdHzCs0ciWVpc=)
                          21: JqW1WPPSVZnz4iQHIwTn0BLYEKQ.roa (hash: 2KgOywV1woJUToJzdJgSMQbv7HQALViCU1GtkGFDSEk=)
                          22: JqbUTI-9JOv7gxixt9zvusy-I8E.roa (hash: ilgqpehysLbcTHvBFar71+XxiSH0AXiI5J1P/8e+kwA=)
                          23: LHqHW9JEYIGAstAeujwVjGAnAV4.roa (hash: 44Wfdlv/Jzm8iNDITTVf9J5E21EcMxuIU2n+lftK7bo=)
                          24: LUrM5M1jyn9SjE_8bOv6xvYQe-k.roa (hash: LCY9O7UT2HAkFoAxAKXWqDElvt4mcsbUASMy2I+isys=)
                          25: MFsq3qu335pSX697onMxFayK-c0.roa (hash: FynggKDh+hLRtiOMsix0QLO/WqfvLoGMaCpUNRkrcIs=)
                          26: Mq4zHrJv8SUNxMLgH4Liadg2gIc.roa (hash: tiLfzaXFRJMpnu63EW5TdAWk7qIWks7TnP5MMQ9XzvA=)
                          27: NZFzkjHlfHCdtQ6S-hl9y7Mx_O0.roa (hash: f3IMQbtL0u8EAnkO8+sS2QnwoNNNuipd718n1qYmzMk=)
                          28: QCOkKhVPwXWq7ZYcjP5XA5__-w0.roa (hash: yCp7nQtUoqbxV6edT97tismvCFyHyPZSJ19bn2y3n4k=)
                          29: SfBnrNJ_WUS1dtNWbITfzkTiNhM.roa (hash: 9gUcD5SLmgCHBGNc2ITvT8oGUHundV2RJ6KAmEpd5mk=)
                          30: UWSPscndFGTS22rrfdXjXjmUZGo.roa (hash: 8jvHYNnuZiFEdx1Q03ylnQb6HTKed6pcPkOBGR/7lKc=)
                          31: V8S9uEMRQHTiJe2Dmi7gKIeY4eE.roa (hash: BnWCyXK61ZzTwl6uSNEjhf+McXpj4KEp4v4nw1JFsDE=)
                          32: WG2DneehVsZLtEB97QmFiozSHtA.roa (hash: w7HadhJfiMg/H4/fTxT7DLgkFiEfL4YiuC2Sf3Vf21Y=)
                          33: WJ0PcmZhrUHOBXD2AiV-791a1us.roa (hash: IxIVvojLZIR7RokBDSnWLcCkx/Ei9k+QD7DbnhZ+ed8=)
                          34: WSqAKS32qZddCtX5UkiFXlnkp88.roa (hash: WhL+3anRVyQf5+/PAbPHrY7brX4fpcHT/ZFt4pvR0AQ=)
                          35: YQ-gP0kZeYU2c0LSFwYXjYGj5hQ.roa (hash: E2d/Dy1xrKgHWhv+CLqUXvuhdHClj2t3HDBm46v1VdU=)
                          36: _QEbXOhnZV9n3vJqF96EEUMuwNk.roa (hash: XChvxWori4tfEGM4dfBOVq9EW2lVcg4mXna8rVd0PwA=)
                          37: bKjdtdZf1MexZvwsZU8GG9nJ2Bc.roa (hash: X9PwP1YC3aYFvLjsNt6hJsaqgdzN4NS80AzewvXraLM=)
                          38: b_Jj4ndzbbJhfL1PK08CR3gVb1A.roa (hash: Lt/3+ctYRCJEgjReONFEypD/Cjkx6rt3BOJ652qe5d4=)
                          39: dDT81OZArp1fAr11sj9VmFYfU0c.roa (hash: Gjy3gDVZzdo7TKolwicOBHEDamNUZG2Mp68wSldVntM=)
                          40: eDXvZpstldgN4xMIuoyEJ-3bUcU.roa (hash: kdUC/ApEYS2oZmPQfbVTHLZNuToCB7Vc0zOuwwKfCYM=)
                          41: eKwdjDqkgJpnZnLF7bhEep64XuY.roa (hash: 6PvNkU9ZF/yeAnbxrrE6J+6HIvzH4RWXec0DFPywPts=)
                          42: f5NRc42CDlXfYrprC4TWBAU3rsE.roa (hash: JYANubKqFba0N/vnv4S0e+FuEYVufe3rNyzCy2U2QgA=)
                          43: fwKQV1qDoScUWvD8w3jY6Y1H424.roa (hash: pwTRaa+fWbiaEpdC6Ep6GUm5pSF124Ac2gXqDdETHHU=)
                          44: hsKcvSWPO1CU4HkLHvqJIY4FgNA.roa (hash: jjrjI4HfCwNCsIc0HV5NXcWDcLbMHhmdxzYAyvFBJTo=)
                          45: mx3Y97UKzReWa2refDdx6s76_V8.roa (hash: iAIQmwVPfsG75148Pk6RxiYUp7ydaonILqUfYmzqHUU=)
                          46: nYq1bioZ2vuY3Rx5KeiuPIpm9K4.roa (hash: CmOI6EFvrz2q10h/34RtY2ze+cAxMH/PPioWanVwDQo=)
                          47: o8g4Vc3joaDg_8_6wn-aLmOqudg.roa (hash: Ge8kAzJMYUTouk87sT4qfOz3SH/UdiNLCCUaPjk18yQ=)
                          48: osdItLYXtqv_3S-fUAWrgx29l0Q.roa (hash: EniukNt9QbYrvruqDzGJT5DRAibkPCPYhoMCwZoVAjw=)
                          49: pLdekSUaP9qFXtLb6p8E8WZalVI.roa (hash: T48BRSJXGbhmNwVCvSfUPt5qFe21vZiy84Nvh8Y1AjQ=)
                          50: pQR6GwEdEqmheG6MQ1YT7TnY9eY.roa (hash: 83gz5YQmQn5/u8Qq6HbUF1goC2QANvEFfllGwF+288I=)
                          51: pXbrLMRi5uS_Deabn2NIdd67quI.crl (hash: E8CsedhkQsrKoNBJuzCC+jo3nfQoWIqOdggZP8T9syk=)
                          52: pxJLf_SnyYQPkS6jULkJowf-YNs.roa (hash: ObTk5ybJvZUQ/IiOdX3wubDRQ4h3MSzCcvSxdGLH+xA=)
                          53: qs9R9aB1EUwzgDT6SnmA4lUTeIM.roa (hash: P/WtHowAVT9B77yx30eKuQRgUp3mHE3I3YvfftlEmuk=)
                          54: sy0rJws5znQcOs3iGuvcxKEefs0.roa (hash: VhHu+av/lXY+oT085B2nq0itRfZ+Lf45zAnVi5gCA5k=)
                          55: x-cXbdNXg6CBnodia6aUDxUJZas.roa (hash: jfl+nhSLGqOL1lAOJyC8wvY/62ojmN9UTLGAHHP5b/A=)
                          56: y3IDHMPafUN66evhs_FGbUIFlak.roa (hash: n9PagArYyrmkf0AtpLcSu8nW6jM2gUrBWKZ+vTugGSA=)
                          57: yP5IZXb_7446VPUdBZ-5do1NIhQ.roa (hash: NXBSg4FpuwKqoQ/ToBcnJwcPWxl5WInzzwqficKUDaQ=)
                          58: zBhmRyi3KpJKMZKH1_lQRYUf9SQ.roa (hash: 2bsZDaJMn75/pG+XjUpjbPVCYXUEJ/cJ76HZaxtGWu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:cf:e8:50:8e:c2:67:ac:49:ec:78:87:4a:d2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jul 24 00:02:00 2026 GMT
            Not After : Jul 25 00:02:00 2026 GMT
        Subject: CN=c7a93101ab5e990a1aa187e7413ad2d328897faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:c6:6b:cf:51:31:46:dc:97:0f:1e:c8:8d:
                    eb:11:34:6c:d9:80:ce:64:40:4f:99:1a:af:fe:39:
                    5a:a2:6b:b5:53:41:54:7e:4e:ce:65:09:6a:8f:e9:
                    02:0a:e4:f7:e7:d1:06:52:01:8c:42:ab:71:e9:e6:
                    52:ab:98:15:47:5e:ac:33:f6:19:2b:2a:bd:3d:f3:
                    85:fb:dd:ab:8f:56:1b:de:8f:75:68:e8:02:ba:ee:
                    73:8d:31:53:b4:b2:d6:90:1b:b2:0b:df:f6:b8:59:
                    13:ea:5e:6b:c5:9c:13:11:43:b3:5a:7e:81:65:90:
                    57:63:bd:5a:9d:d4:30:7d:b1:b7:67:c9:ff:68:dd:
                    d8:f8:53:16:01:3c:65:5a:2c:a0:2a:da:a0:34:c2:
                    5d:86:fa:cb:d5:1f:c8:f9:4c:85:60:a3:37:89:e7:
                    d3:40:30:c3:98:7c:dc:96:1b:42:f6:a3:86:99:f9:
                    e4:f3:9b:24:fc:16:7d:2a:63:80:23:40:04:9f:e7:
                    54:81:8b:33:56:f7:6e:f0:15:6e:df:ae:7c:a5:e3:
                    de:89:f5:3d:db:f5:ee:e0:12:ff:70:71:f5:2c:7b:
                    fa:32:6a:7c:e3:cf:47:f7:6b:3f:c6:0e:8a:89:75:
                    df:3c:63:82:f2:d7:6e:57:20:58:af:32:8b:aa:c5:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:31:01:AB:5E:99:0A:1A:A1:87:E7:41:3A:D2:D3:28:89:7F:AF
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ec:52:8a:65:7e:2b:37:a0:ab:2f:1b:c6:69:96:1f:79:bf:
         ef:ba:c1:56:f2:bf:09:a7:da:b7:bd:7f:de:b5:78:d3:d7:ab:
         3e:92:20:96:27:db:38:c5:87:41:3a:98:3f:a0:bd:72:16:09:
         dd:9e:13:d8:1d:f6:cb:b7:db:9a:ee:d3:d8:61:37:10:0f:b6:
         8d:34:72:c3:b9:a4:a1:83:49:52:0c:13:ba:3f:c6:92:e2:14:
         94:97:ff:4a:ac:33:70:91:b9:c4:2e:f3:2d:af:d2:11:a8:7c:
         d9:38:73:6e:f6:ee:d1:5a:bc:92:eb:f2:39:de:79:39:32:7a:
         d0:7b:bd:35:97:f6:96:78:50:29:95:c8:8a:d9:43:ac:af:35:
         de:9e:a7:e9:df:14:f0:6a:2f:a7:4f:74:24:3e:50:10:58:83:
         9c:73:6f:91:df:25:6f:bc:0f:de:1c:b2:a9:99:9a:b3:b0:69:
         b2:0d:b3:2b:d2:d4:d1:b4:b3:b8:a1:5d:2f:b2:12:b2:1b:7b:
         17:e4:c7:51:73:35:31:ca:5f:44:08:f0:fa:6a:d4:52:a8:51:
         b5:b7:81:8b:7b:3e:ee:ae:a1:78:6e:c0:b1:bd:1f:2f:81:bb:
         c1:ec:f8:da:b7:82:21:f4:a4:64:c3:d4:aa:31:98:a4:b8:04:
         e2:e4:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:10 2026 by rpki-client