Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
File:                     8C2sYF9GWXGMChXh9zLL1PSKrns.mft (raw, json)
Hash identifier:          VrJ9CJWuQWFe/G2IIRd3TDp8M93zhEV8ad+nsVSsorY=
Subject key identifier:   A1:8B:50:1E:EC:BD:4A:9E:6E:6A:12:D7:C3:73:46:FC:C0:A6:91:A9
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       019F90FF56D77D4EEF91B29096700D1C51D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
Manifest number:          19EF
Signing time:             Thu 23 Jul 2026 22:01:20 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:20 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:20 +0000
Files and hashes:         1: 1-5hlvMiawPJhDesGa1hua0Z8BCA.roa (hash: BfnuRMvzsKjw1r6Bbn0LN0nj8+jvf67Ex6NtuxitDqQ=)
                          2: 1nmLtwr3_xN50X0yyl7WQKTVv98.roa (hash: uJrw+w0+LATHhQU+jXTMfZ98iGwXOHwn/VgBuobhVEA=)
                          3: 497otZddeNozXBoDa4RW_3BJUUA.roa (hash: RrfBGeLjLrahf5Fq8xtl0pH9MkRki42Oz1D2w2x2gcg=)
                          4: 4uQiIz-NMAyBiXKYAOFesJYFaTo.roa (hash: sgg7t/axC5+BJccoHRq2eZqdOKI6JJ+dD5n9PgXCumE=)
                          5: 6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa (hash: MRty88BfOMZk7CPSt+WkF0Jw+KzFd+Cug5OdTNKjyKg=)
                          6: 7ytwb7Womq08ykvieFP3In40-Rw.roa (hash: osTlvrBih0cPXahWkQhNIUbUc1RlCh2qx/FZaxLigMw=)
                          7: 8C2sYF9GWXGMChXh9zLL1PSKrns.crl (hash: xnaPpKZnL+hrjBITNkVIIQUTNqH3MP+3ZVKjq84IUt4=)
                          8: C9o_73_XlKWwZbFCnJva18iPkB8.roa (hash: uD75t1SS6PfmQHvP9mDG+mDve1RgK0EmPySeWbN7cPI=)
                          9: CQ-BEl0cMUjmhYzcY2ZYGz7iPmg.roa (hash: IVdKTM0Yxp2TPDqtVbZnlReXxKJAgo4s135GUv5aFjI=)
                          10: DROi7Rp35sbr_86r7xv563blIMY.roa (hash: 7tFkBPwhrQlBuEG6rIRbYO1U6Y/jsLvlcfB6EpkaFjw=)
                          11: DSUUFBeA0ZB_ry8HQx7RaUAofhI.roa (hash: WblU2LEBXlZHlgqM8eisTMs9DCuuDvc8/DOwyfHQxh4=)
                          12: DXxFsnXwwNOGBcXslTr_wxOHW5U.roa (hash: WbVnLGOKZKrDUXnOGjZKmIubU2SC7h17bYnLNJHVzpE=)
                          13: DZf9TSOhIl01Wj7q_PAfd6SKgC0.roa (hash: CNq3YHFBPR2HgonCmBELHEPsZzqD94xOnuMspOcb4Sg=)
                          14: Eq0lVbnpwt-j35Pt16fwKtpYWlg.roa (hash: 8XgY8nFFV6rMdltJ5ykRgUQrFC+LRpa8w5mJU4kQ77s=)
                          15: Er970agph2hLDyUlRJlJHOLFcbA.roa (hash: oKGHOBpG4eQUVxF3qK1OSzoiisohDbRhmk7gK3ibtXg=)
                          16: JaxfUROoj6_NE96Q3__O9cwsQjg.roa (hash: ILIdmkOAIzD229XH8RpeKSfXmuZBzViWpFrbxXXN1Q0=)
                          17: LN31RTvGNNs31aCpj-wD6ee3dXo.roa (hash: C8SYZE0oqDJoDWLfNKKDQCP77oIU9jXrR3D5bTf/XTE=)
                          18: LrIq3yv1RE6T_G5fTsyEiBHJC9w.roa (hash: KZeppNLsQGbaS62+IPxzV/xqyVyehH9tx8dfR8ms5Hk=)
                          19: LtMkeVGzz7h7CkGqERqV6V4qsFw.roa (hash: RGCmsp7/VHcixBUIVcMwlIa1/oiBpWlQTFWDvtpCknY=)
                          20: MaIYiMv9oMH3UrGRpQxs3PmnAkM.roa (hash: t9r1ASd9rgul0//4WLxQCfdWKzz9owsa0TXBcSfyu0w=)
                          21: NuqPhouRONL44rUb1cLtqoOo1jg.roa (hash: cnRw58Xkwpz25Kb8YVWzU5CREedmYPvRcaBJ1jenGwY=)
                          22: ONeqkPnIGoNNtO8mGjFbkXmPWcw.roa (hash: kYO1wyTB/f6FZFDGDpkcy3vl9zMFVUkU3iINvS8pdJw=)
                          23: OtCGjso3OIWCT91z-dIAYXRLgaE.roa (hash: WzB/mkhNLhkBDDIyblbVxHLJteaxiC10uxzpbmBXXEA=)
                          24: R31qObxiyQRlsNG-FXBwOBiVcU8.roa (hash: u2PZhnDmqyjhRjCWYLGVizKep6XRYMVgkRgwc2jvHNo=)
                          25: WOaZgUiFG3331FVBQatZCXAC0dE.roa (hash: hlsZVOzwIyp+sFW7ERc8C9T73C489aiUFZqPHUBwG7E=)
                          26: WyBzP1akOaPSMtH83i7cdE8IRJI.roa (hash: xYMkoOWF3Z1or1lZb3hlI7rxmaHJaALyTgSuHbLZoNg=)
                          27: YpEIU7oBXpQHjZnpi0wheo8-1x4.roa (hash: timvsij1t+AwdE8hg7UZpIDt/dbM6PaXZ26qNPAglrA=)
                          28: _3HkKCfyg2p0JgvR26Gejd3Jyr0.roa (hash: IvyxG/8DsPEwSYh6UOg3Oba63B6pRVilCWEvL9ZX0K4=)
                          29: _n6zTWE5SpfSTPhy5YLorMZeiUg.roa (hash: eMCHBXlIbla8Sso8GtkKSwTjb6V35xuvU5uz7iYF9ik=)
                          30: bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa (hash: mFM8fPDKlogmsI5AE4bX3ek/ET4zQQFwwzKp3y4dESw=)
                          31: caCNERnJxfTGouZNM-ZhrZMZ3Dk.roa (hash: QxIZr8silfyaFcfQ4eLDZhsTooVK0dikoa7i3WYvqgc=)
                          32: ci3wqyDprqwbhq0cWz8ci3-6Cao.roa (hash: licFYzWIjztrfnZ7+8ryd0A2Wh1SW3GkTCtGQYIfjxc=)
                          33: e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa (hash: oYoj+Ap4IHXg1gtH78drwk88Ptq15W+fIpoCre/+UjE=)
                          34: gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa (hash: Hgp5BhkZ1R5EgXib6KjQEGqRGTYiApeWX+wRLpcWukM=)
                          35: h8j2rZi6YE0oBAImebndnjRdDAM.roa (hash: y8g6VlOFnaXteE+vwuQSHx1ywVH7Kmooo6Pd73iGin4=)
                          36: iBNkdxjoFZSykmkB0JSA3w3U7r0.roa (hash: fGAEdD7pbx6+gbCw5REx9yU5OTaVPQoHov6zQrqTWxc=)
                          37: ihTWirRVFtiifabGL54o1Hr7CZw.roa (hash: wQkCs7eQ2rpkelVIqbWJ+aWjqbRePWvwVn2KuudiplQ=)
                          38: jvOfuw9rWU6EJvLhXgPfJE_KT8s.roa (hash: AWBZLQMuBiaZN340mhPRyITSlDhQnxohD2VrtfAI5E8=)
                          39: kxil1Z63WH5g5nMISzgclUNYVfg.roa (hash: bW6nN7sMwjxCwELFXsQx2gQTfa2q7HuAdDBSc++BMGc=)
                          40: ne1Hve3IxHD6J17bvXlDCoPZloI.roa (hash: E85TTNY9E00OvFpACeu2MfPIAJt6N64uMbnXW5x8sCM=)
                          41: s_XOUNE27Rt9EfkW6tpKIzfnB74.roa (hash: BJWU9WY8p23Wc9XLAEAvNVCPXfxDvC9l2as3ADvyFPs=)
                          42: sb9NYEHASJQ8rASkYUIiJ_hADHk.roa (hash: eVCnk3lLJ6eEaX9eyj8I8AsqhGoadKAGqnF2yOjkiig=)
                          43: t6o9CcRozbZixEiqMV0MRsZpTM0.roa (hash: /sMmNa9m743M2OGS7Cbc67P9Pek3pHjvDg425PY1NVE=)
                          44: tqIqzl7hVeEhRTF6xUhqjA4FAAc.roa (hash: bvY4/tharyuzDPrRsmC185qxD3sZT9but5rOBl+Adzc=)
                          45: u3JKV-adkwKGsv5hodSaNbHzPB4.roa (hash: c3YsJQeJHhLtbxb9inM4xaKttWXYOVN6+JQXx5fxGOs=)
                          46: uwWeM12akfviVBKgj5V4jKYX10s.roa (hash: GWFPsvp4uvzRWxgRHQVC8crG4d3ea80ySU8gEcTXtgQ=)
                          47: v38vnXS7MFs5Wkz96Z1hk-0G0Ds.roa (hash: Jcz9P2Y4QeuqZOaA28xqXNYGZV40OskOqiuBj2qNWnE=)
                          48: w70489xMl6X6aCjHRjAC8Ah5HNc.roa (hash: rqJZ3tCvcXQJoQ6aJMbBqiFsgTmKKLtIm5U+CF77FX8=)
                          49: wAB319bF59pbqogEGue3dUyMfyU.roa (hash: 7tbkhOvjhN26XlWaA9QFm7KpD6qs3B3JEKiopbBlJO8=)
                          50: y7Yhc7l6YNnMUl1U-lU4LXVz6B4.roa (hash: 9QPX2u4tZEN3H/22+qKUcxXcBFy2u4JGqbw8FLY/7C4=)
                          51: zAff6ilnehpGGi5BDUZ7hLHheXA.roa (hash: 4vg6QTx+7Obl0HEsR7tGfz+AKdR30zhHteU6BT4n1so=)
                          52: zxXgFrqVOHijRHiRR71FP7_iwAY.roa (hash: gW3oGK3WuYusfZYDVwP28OguyD2JdnpNIpD21g+ThnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:56:d7:7d:4e:ef:91:b2:90:96:70:0d:1c:51:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Jul 23 22:01:20 2026 GMT
            Not After : Jul 24 22:01:20 2026 GMT
        Subject: CN=a18b501eecbd4a9e6e6a12d7c37346fcc0a691a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:61:d5:63:98:2c:9f:b5:4c:2f:2f:17:f6:
                    81:7a:d3:ca:7d:48:fb:94:63:59:75:c5:72:33:a0:
                    bc:39:8e:b9:7a:5b:1b:05:50:81:8b:16:02:c1:bf:
                    1e:30:cb:4e:5a:2e:0f:d5:f5:7c:b0:77:4e:0d:a6:
                    35:0b:de:92:72:fb:d7:a9:0b:bf:47:c4:d4:bc:ea:
                    5d:49:36:66:b2:59:3b:33:46:18:3d:d7:ca:0c:2c:
                    56:35:d9:26:54:de:7a:dd:f8:d9:15:61:0b:4e:99:
                    23:e0:a4:aa:12:9c:62:52:0c:a3:13:9b:21:05:df:
                    f2:93:61:85:ee:ab:11:38:89:94:87:f4:19:3f:39:
                    4c:e4:4d:00:73:9b:87:0f:35:3a:dd:c6:44:95:c1:
                    72:46:39:5c:ce:d4:2c:45:67:2b:2e:c8:20:fa:2d:
                    61:12:33:1f:71:c0:bb:64:b9:3b:51:a0:84:19:1b:
                    e2:bb:25:1b:5d:33:32:de:39:37:e5:e6:84:64:9e:
                    3d:81:43:18:8a:a6:8b:2f:ba:b9:98:08:e6:e1:f5:
                    8b:aa:ef:d7:14:b1:37:71:73:54:6f:94:09:af:15:
                    43:dd:d4:d8:7d:fc:e0:af:f2:ff:12:e7:33:16:5a:
                    70:ba:df:4c:9f:14:35:6e:67:ec:7a:34:95:1f:f4:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:50:1E:EC:BD:4A:9E:6E:6A:12:D7:C3:73:46:FC:C0:A6:91:A9
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f3:6e:52:c8:19:d2:a4:ee:af:9b:e1:60:15:18:f2:a4:02:
         5e:48:2f:54:0a:a9:92:76:4c:be:81:79:99:13:76:06:f3:ca:
         3d:5a:eb:f5:5f:ba:e0:6d:0b:d7:32:fe:d9:13:c6:a0:6e:dd:
         64:18:0e:63:b2:0e:ea:33:a7:f9:05:04:12:55:c4:c7:19:73:
         e7:9b:14:d3:09:68:76:64:19:e8:3e:93:ef:2c:21:9d:12:85:
         73:d6:79:e1:21:59:37:40:b0:3f:50:bf:12:4c:bd:1b:9f:e4:
         0e:f6:62:ba:5e:57:f3:0b:92:8c:fd:cd:25:70:ab:b6:6a:16:
         ab:13:2c:84:08:ef:26:55:e1:7b:13:47:8f:0f:f4:31:39:9c:
         93:b3:ce:f2:31:33:85:ae:a9:44:cb:95:18:cf:eb:15:1a:82:
         1c:32:7e:3c:65:61:e4:7c:cc:3d:c3:21:82:48:5f:64:cd:0f:
         a1:23:89:d6:72:a2:91:de:f9:c9:22:2d:30:d7:19:d3:76:4b:
         72:27:73:3a:22:e9:bb:ba:99:f9:3a:1a:69:54:06:65:8f:49:
         08:41:83:d5:3f:e6:44:cc:42:74:da:65:28:60:72:90:25:fd:
         94:6b:54:9c:62:95:be:5a:9b:07:a4:2a:b3:f4:f3:03:57:01:
         0f:1a:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----