Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          rF+45U/1XZuhMKDNpGc/NSGLQy0LXDzxlzl/CSB+Iio=
Subject key identifier:   50:65:A8:95:F3:7A:F5:C2:42:A4:C5:CB:E5:1E:2B:12:25:38:85:60
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019E1DFE7FE992180E2A7E6308DE75A02640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          19DF
Signing time:             Tue 12 May 2026 21:01:18 +0000
Manifest this update:     Tue 12 May 2026 21:01:18 +0000
Manifest next update:     Wed 13 May 2026 21:01:18 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (hash: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8=)
                          4: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          5: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
                          6: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          7: 8DwDtE_zLMPfhC2LWLBMv8i2DIk.roa (hash: s83tT0zl7wdD8/rswUNE/caIDGeEK8q3CUDy62J1e3k=)
                          8: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          9: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          10: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          11: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          12: GI33crLs1YhbryhcezjNjDVjS1g.roa (hash: KA1gXvMpl17ErTAeepPr4wN+L34jC9m0lf4C1BjqtxU=)
                          13: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          14: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          15: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
                          16: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          17: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          18: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          19: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          20: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          21: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          22: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          23: ZAkzvDuShqbgdA4si8lgDBLLYcM.roa (hash: gpLWb00jmi2CBQgo9H2EFZ0+OdBOrkyQzKyxnR7pVDU=)
                          24: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (hash: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=)
                          25: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          26: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          27: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          28: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          29: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          30: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: CaJnVZWcg5/DOiAw3N2ZyF3GTmILzGObZCLUlR/SsRI=)
                          31: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          32: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          33: l8fv1lWzJ96YIAiccDY-Ru_YiDk.roa (hash: OCSa4wjJgX04FeTqlHLX7vkmmY81j9E4gAqpW6Sh6G4=)
                          34: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          35: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          36: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          37: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          38: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          39: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          40: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          41: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          42: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
                          43: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (hash: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:7f:e9:92:18:0e:2a:7e:63:08:de:75:a0:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: May 12 21:01:18 2026 GMT
            Not After : May 13 21:01:18 2026 GMT
        Subject: CN=5065a895f37af5c242a4c5cbe51e2b1225388560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:f5:a3:01:cd:ff:d1:b2:31:d1:06:cf:24:
                    7c:06:06:4b:aa:39:80:f5:dd:e9:13:c8:be:50:1c:
                    b3:40:8d:de:8b:3c:cb:08:00:0b:83:bc:05:d3:3d:
                    8a:25:ea:b7:e4:d1:2c:d0:6a:a3:a8:c4:b3:ef:a0:
                    79:f5:1e:70:95:cb:6d:d1:a6:02:94:e3:57:47:69:
                    bb:53:c3:1e:d5:7e:a0:34:3b:21:23:4c:b8:c5:b1:
                    5e:b5:48:fb:7e:13:74:aa:d0:93:39:29:ab:c8:68:
                    92:ed:5a:7a:23:f2:d4:4e:93:f1:d0:3d:7e:1b:2f:
                    b3:55:ff:44:e9:00:f7:c1:1a:ba:8f:75:71:7e:20:
                    c2:55:81:0d:3b:7e:5b:d4:0c:e9:86:d8:43:20:6e:
                    cd:3c:7c:b9:5d:4c:6d:51:04:3f:3e:8d:02:f3:22:
                    47:1c:01:b4:a0:7c:c2:5d:13:05:e7:c8:66:5c:7e:
                    26:a7:ac:af:18:54:27:b9:7f:41:7a:60:da:39:d1:
                    3f:62:8f:2d:63:33:b0:0f:ca:9f:78:a2:8e:9b:3a:
                    89:34:b3:d9:cf:2d:b9:1e:9e:6d:ab:28:69:76:6d:
                    e7:93:0b:a8:b6:51:88:3e:da:8c:09:88:45:ef:3a:
                    27:e9:e1:e8:9f:9d:45:6a:cb:22:7f:e0:f1:47:11:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:65:A8:95:F3:7A:F5:C2:42:A4:C5:CB:E5:1E:2B:12:25:38:85:60
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:07:94:30:62:cd:4f:70:57:b9:76:09:91:6b:ed:1c:c6:
         8f:47:a9:84:3b:75:d8:28:38:0e:f3:62:f6:ec:97:ef:49:99:
         d9:31:e4:47:13:da:69:1c:aa:e8:2d:09:cf:8e:39:22:94:dc:
         36:2b:b2:b5:7e:c2:f7:86:7a:5d:01:69:c4:ac:46:26:e3:93:
         c3:f2:6d:85:30:a7:a8:a8:48:08:a9:1a:97:fe:04:e1:e7:ac:
         37:5e:9b:52:f6:dd:c0:bd:c7:58:eb:f5:5f:db:0a:3f:21:cc:
         86:73:db:3a:97:86:f5:de:34:37:ee:42:5b:4a:65:18:a3:51:
         af:8c:97:f6:fd:9a:5e:e1:15:06:67:da:68:95:6c:a0:5f:3b:
         0d:18:5a:30:78:60:93:39:32:b1:e9:75:0d:b2:9a:cd:ba:71:
         20:ca:bf:db:c6:19:fa:29:aa:fd:32:2e:e4:e3:d4:05:d4:7e:
         72:84:86:a1:12:bf:7d:83:4d:c6:33:36:85:8a:ea:b1:ee:7e:
         8a:e5:67:47:71:5a:a6:be:1c:6c:17:87:44:4e:68:ef:4f:6c:
         2d:6f:e9:20:8b:10:1e:a1:47:84:9e:a4:bc:89:b9:2c:84:36:
         dd:c5:e8:19:92:39:00:38:d7:3c:62:63:1d:48:ca:c0:43:42:
         68:8d:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----