Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          phgv4r+6lGKki/C3+WEV/TbNSNCXFpsYJZcZD5CrAyA=
Subject key identifier:   E9:8F:27:EE:D3:5E:84:4D:8C:E5:AD:D3:67:A6:75:F9:18:F3:66:36
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019D27044FD3F681101CE9DB884B0D45F40F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          195C
Signing time:             Wed 25 Mar 2026 22:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:27 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (hash: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8=)
                          4: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          5: 1H2LBwxOS6ZK7kP0bHuOOjYLFXM.roa (hash: lM8jCRUWD5XjSKSKG5x5Vcw7snm2M+L123CpHLdB1I8=)
                          6: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
                          7: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          8: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          9: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          10: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          11: GI33crLs1YhbryhcezjNjDVjS1g.roa (hash: KA1gXvMpl17ErTAeepPr4wN+L34jC9m0lf4C1BjqtxU=)
                          12: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          13: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          14: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
                          15: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          16: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          17: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          18: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          19: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          20: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          21: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          22: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (hash: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=)
                          23: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          24: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          25: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          26: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          27: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          28: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: 8AIWG5qG/Xmx1nUr4RdVv27XdblA63xbkdxPh93twWo=)
                          29: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          30: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          31: lTWEkgJKELlSipjMtxAwhYWB7pA.roa (hash: J6isN9PWN65bgatPG4qkpJ6/vf7Bogjcg3QwVkpblQA=)
                          32: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          33: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          34: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          35: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          36: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          37: sKmeiayA9VEeFneHBogrVXd9Dz8.roa (hash: gixYXs8OW9/FjuOE8LqMnrageVpFQza4LwILa+VJgTM=)
                          38: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          39: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          40: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          41: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
                          42: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (hash: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:4f:d3:f6:81:10:1c:e9:db:88:4b:0d:45:f4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Mar 25 22:01:27 2026 GMT
            Not After : Mar 26 22:01:27 2026 GMT
        Subject: CN=e98f27eed35e844d8ce5add367a675f918f36636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:2c:9d:f5:ff:21:33:12:b1:0a:c4:91:57:
                    94:9d:d6:42:fd:a3:07:f1:ea:ee:d0:56:af:a0:17:
                    c3:83:3c:2f:1b:c5:8b:86:09:ad:64:3a:c1:d0:28:
                    68:97:97:bf:73:7a:db:39:9f:02:eb:56:ee:f7:cb:
                    04:2c:0c:ec:41:9c:d6:60:62:d0:8d:4f:b5:90:91:
                    59:8a:04:94:f2:ce:93:73:75:14:1b:83:4d:48:e9:
                    6c:2a:91:07:54:a4:f2:f4:09:34:26:2c:b2:9c:e1:
                    3c:f9:5f:0f:f4:bc:d0:30:9f:cd:10:18:66:42:d9:
                    06:f8:73:a6:9c:ea:8e:ac:3b:d8:2c:df:79:aa:3d:
                    aa:55:13:1d:fb:92:5b:f5:45:aa:98:c5:f8:c3:98:
                    f8:71:d9:2c:fa:06:3d:f3:8b:70:18:b8:04:16:37:
                    ac:a4:e6:6c:d2:0e:cd:52:0d:ec:89:17:bd:68:c3:
                    c7:7c:84:e5:26:fc:a4:db:72:e8:77:b1:0a:1d:47:
                    fe:c1:45:79:13:60:a4:fa:b4:e1:7f:51:bf:53:dd:
                    eb:05:d0:fb:51:17:d4:53:75:88:f8:20:af:e0:0d:
                    05:68:3e:17:4d:79:e9:51:33:97:ac:82:68:64:b0:
                    45:97:ec:d7:c2:e9:a0:af:98:af:57:9c:a2:1b:bd:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8F:27:EE:D3:5E:84:4D:8C:E5:AD:D3:67:A6:75:F9:18:F3:66:36
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:ab:52:80:c8:57:13:1b:43:03:d1:13:9b:c7:1a:4d:1d:
         11:b1:c3:56:02:55:99:5e:44:1d:62:6f:c4:6a:02:67:de:15:
         b4:5a:1d:0c:08:de:2c:ef:a4:a1:d2:c8:4d:ce:14:d2:88:8d:
         8b:4c:69:6c:b0:9a:d2:07:47:28:c6:64:53:a6:39:66:a6:05:
         94:56:11:97:57:b6:93:5c:b3:78:a5:6b:78:ae:d7:3c:17:b9:
         7f:4c:d7:71:5a:28:99:3c:48:71:87:ff:68:fa:d3:06:4c:39:
         fa:5a:3c:b4:ca:c2:ce:37:f9:55:70:eb:55:b7:5c:1a:e8:05:
         e9:1f:3a:d5:c6:9f:e2:b2:1f:c7:33:20:51:a6:3a:fd:90:05:
         dc:91:e8:68:61:ea:8c:f9:f4:c3:49:fc:13:d1:2b:ba:7b:9e:
         f6:6d:e6:d0:11:3f:6b:76:69:9a:5a:8f:02:45:fb:f9:92:e4:
         63:07:e6:17:ab:5d:88:b6:af:cd:da:06:a6:c5:7b:15:ba:71:
         01:73:67:df:7c:15:4c:80:5f:42:c2:b8:1e:af:4e:3a:22:ec:
         30:54:d8:ad:99:5c:39:71:64:bf:df:85:cb:ba:b9:cd:38:b6:
         d6:2a:0e:8d:98:ec:b7:ac:f1:ec:16:26:24:b9:33:66:9d:f8:
         36:11:01:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBE/T9oEQHOnbiEsNRfQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwMzI1MjIwMTI3WhcNMjYwMzI2MjIwMTI3WjAzMTEwLwYDVQQD
EyhlOThmMjdlZWQzNWU4NDRkOGNlNWFkZDM2N2E2NzVmOTE4ZjM2NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZIsnfX/ITMSsQrEkVeUndZC/aMH
8eru0FavoBfDgzwvG8WLhgmtZDrB0Chol5e/c3rbOZ8C61bu98sELAzsQZzWYGLQ
jU+1kJFZigSU8s6Tc3UUG4NNSOlsKpEHVKTy9Ak0JiyynOE8+V8P9LzQMJ/NEBhm
QtkG+HOmnOqOrDvYLN95qj2qVRMd+5Jb9UWqmMX4w5j4cdks+gY984twGLgEFjes
pOZs0g7NUg3siRe9aMPHfITlJvyk23Lod7EKHUf+wUV5E2Ck+rThf1G/U93rBdD7
URfUU3WI+CCv4A0FaD4XTXnpUTOXrIJoZLBFl+zXwumgr5ivV5yiG737HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmPJ+7TXoRNjOWt02emdfkY82Y2MB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMirUoDI
VxMbQwPRE5vHGk0dEbHDVgJVmV5EHWJvxGoCZ94VtFodDAjeLO+kodLITc4U0oiN
i0xpbLCa0gdHKMZkU6Y5ZqYFlFYRl1e2k1yzeKVreK7XPBe5f0zXcVoomTxIcYf/
aPrTBkw5+lo8tMrCzjf5VXDrVbdcGugF6R861caf4rIfxzMgUaY6/ZAF3JHoaGHq
jPn0w0n8E9Erunue9m3m0BE/a3ZpmlqPAkX7+ZLkYwfmF6tdiLavzdoGpsV7Fbpx
AXNn33wVTIBfQsK4Hq9OOiLsMFTYrZlcOXFkv9+Fy7q5zTi21ioOjZjst6zx7BYm
JLkzZp34NhEBaw==
-----END CERTIFICATE-----