Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          yQ2CLghd8oxXSz0hQ+al3il7s+G5aAP+vo0hzXG4hXs=
Subject key identifier:   EA:7E:8B:4E:E6:30:FA:B7:8F:71:F6:4C:2B:05:F8:18:E2:33:32:0F
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019F9090A0180818AB3AE7138B46AB397193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1AA4
Signing time:             Thu 23 Jul 2026 20:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:24 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          4: 1VLg1aY9v7jaSjHtofK36IMeBaE.roa (hash: HI2whi4CG4KcDsjD2jvuiBEFXV0jVOJ6ZL1iFW2q1Rc=)
                          5: 28uNguySV9FxVmWhQEdaW5jt540.roa (hash: 0ULn8cAnuq4gs0Nanlvx5FnInPzMeeOp0GfmkkuHGbk=)
                          6: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          7: 8DwDtE_zLMPfhC2LWLBMv8i2DIk.roa (hash: s83tT0zl7wdD8/rswUNE/caIDGeEK8q3CUDy62J1e3k=)
                          8: 8QpVBxX2eirF8sGJtE7zd4UNxBI.roa (hash: CnXejZBAHN4vYEbHPm/eBo0FdHr7KBSmiggR33stBfk=)
                          9: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          10: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          11: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          12: Dn9O3Hg1LniWbRCJrfFCOCEs0gM.roa (hash: kqqNoy0anJ34DkFYeX4WbpE6KpSDvttdZYzayqSypVI=)
                          13: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          14: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          15: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          16: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
                          17: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          18: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          19: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          20: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          21: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          22: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          23: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          24: ZAkzvDuShqbgdA4si8lgDBLLYcM.roa (hash: gpLWb00jmi2CBQgo9H2EFZ0+OdBOrkyQzKyxnR7pVDU=)
                          25: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (hash: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=)
                          26: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          27: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          28: dqTANP5pNZTCRfs274ktIJ5kyVE.roa (hash: A8pKTaM/ilVYUk6hX24CD6ZMeMiPQwdfZB9Z9vekHdY=)
                          29: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          30: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          31: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          32: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: Ggs/baK7KlrPjBA3/KXGPpAaQruhVjHSuzC7FWFw+pI=)
                          33: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          34: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          35: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          36: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          37: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          38: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          39: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          40: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          41: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          42: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          43: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:a0:18:08:18:ab:3a:e7:13:8b:46:ab:39:71:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jul 23 20:00:24 2026 GMT
            Not After : Jul 24 20:00:24 2026 GMT
        Subject: CN=ea7e8b4ee630fab78f71f64c2b05f818e233320f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:24:bb:a9:4f:04:24:71:ba:0f:27:4e:fd:
                    72:4d:3e:26:66:f0:47:fa:19:75:65:42:ff:b6:c9:
                    63:c7:a6:1f:c8:a2:81:1a:dc:de:2c:f8:7f:81:f5:
                    0d:9a:58:93:9d:8c:5e:a6:2e:4d:6a:48:35:1e:7d:
                    a7:64:9e:83:ca:cc:4e:53:d8:a9:7e:6c:78:f8:ab:
                    73:18:40:41:36:0e:b4:36:7c:47:31:86:6f:17:9e:
                    87:5b:7f:73:cb:b1:89:fb:9d:48:66:8e:39:c6:da:
                    37:89:85:70:52:02:fb:7a:9c:51:95:98:ad:3c:15:
                    67:90:84:e1:b9:00:ba:8b:fb:47:85:b5:63:ea:f9:
                    96:98:38:bf:10:d6:b8:81:4d:89:66:39:e0:f6:8e:
                    71:40:8c:3c:17:6e:bd:47:f9:a6:31:1d:4b:c7:12:
                    12:73:ac:b5:ce:93:93:77:c8:2e:29:1d:ee:f3:c0:
                    a8:47:89:d5:dc:8c:b4:61:c6:69:1c:e5:64:fa:c4:
                    3b:78:0b:fe:1e:36:2e:03:d3:33:7e:97:ca:af:59:
                    32:f7:2b:eb:74:9c:6a:ff:c0:5e:41:82:7c:71:87:
                    a9:c8:be:04:d8:55:d3:78:93:cc:ae:16:55:60:b2:
                    d6:2b:c2:23:7d:d8:cb:c3:4e:cb:4e:ed:74:a0:8a:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:8B:4E:E6:30:FA:B7:8F:71:F6:4C:2B:05:F8:18:E2:33:32:0F
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:db:2a:1a:e1:15:72:10:0f:8a:3e:ea:19:4d:45:12:af:
         89:05:cf:3d:29:dc:f7:49:3f:11:95:9e:51:5b:ea:82:53:77:
         ce:1f:8e:67:2a:b7:e3:37:f3:09:2e:9c:5b:1c:62:1e:58:9c:
         de:10:d2:29:14:96:2f:b6:be:01:2e:d5:03:2f:80:e2:9f:2e:
         f3:aa:cf:7c:e7:31:f3:e5:88:3a:77:aa:4e:d3:b0:63:b5:71:
         3e:a7:d1:aa:69:0f:9f:4d:e0:64:07:c4:0e:d1:97:86:85:89:
         9b:2f:2f:72:cc:57:74:fe:30:57:ae:5b:43:48:f6:17:90:1e:
         48:76:81:7c:10:45:b3:8c:4e:78:23:38:3c:37:34:a1:17:cf:
         31:b4:95:24:e3:3f:41:b0:a6:7a:9b:c7:4f:d4:20:cb:53:d3:
         9b:8c:13:7d:de:fe:ed:ea:70:79:21:de:21:b2:fc:db:af:a6:
         7b:15:57:57:ad:94:8d:5c:96:53:f2:3b:ad:b3:3a:b2:8e:b2:
         60:92:b0:19:59:df:f8:ef:44:9a:17:db:41:2a:f5:91:5f:2b:
         c7:9d:3c:7e:67:ff:ad:45:26:e1:db:ec:6b:73:d4:18:46:23:
         2f:2c:37:08:b3:58:24:e5:86:c5:2e:80:48:78:a3:ba:fb:9c:
         af:95:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----