Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          WQwzqEdu5QnnOuMBTv7Uu7FxGe0jR0nKxDU1vohbwRI=
Subject key identifier:   46:3A:67:1C:29:2E:B8:AC:ED:FE:44:0A:1C:EB:4E:1A:C0:16:BB:FF
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       019F9090DEAFF5D78E599DB9F381BE120690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          0249
Signing time:             Thu 23 Jul 2026 20:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:40 +0000
Files and hashes:         1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          4: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=)
                          5: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          6: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          7: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          8: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: KRDezHa8jQC67YDMBxMrtuZPpoGgOE1c/SHWVjaOskw=)
                          9: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          10: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          11: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (hash: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=)
                          12: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          13: JjJL9CLuJEBOIckms7eQRal0dlM.roa (hash: 8NACh9U+23n1UQ9SFNueqK87W0nyrWi7z0FA2prmkEE=)
                          14: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          15: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          16: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          17: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          18: PEkym1OPMpNIdeN11ZQCBbwOhAc.roa (hash: bY07kjjzHaYOKoX3oZoXOe61arnA6Qa9njUm+T8zLXY=)
                          19: Q30EU1erGZsCCMuCgL71lzXCsB0.roa (hash: yxqrbAXer9RdCmSpvVHPaT1/BGFNWf63zfk7mwlIh/A=)
                          20: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          21: QkV8SpGFe8YhzYBjU-dwf-dOYjE.roa (hash: De5CcGpoNqIPcla+kTBwODaQboj4V8tyh8GSsXcHW4I=)
                          22: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          23: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          24: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          25: XkFF5iy8cNEiMGbNts9sMLJ4l5o.roa (hash: MGXnjAVWXxsjSqpO9GUP1arrzPGYa/FORm1VJm318GI=)
                          26: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          27: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          28: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          29: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          30: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=)
                          31: glOAY_gAtPPHYUfTRyzej09l9Uc.roa (hash: KOZ6TNPDLr+ntpuwzfJN8PDJ09iuYSdA1Xv0liIKskU=)
                          32: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          33: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          34: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          35: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          36: lj1ffwjXwh7WORUNiNsfKctjupU.roa (hash: P094pOYDmE+5wi1DhajKZaTB8J1E2F0Ql3tkEBOTrqI=)
                          37: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=)
                          38: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          39: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          40: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          41: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          42: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=)
                          43: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          44: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:de:af:f5:d7:8e:59:9d:b9:f3:81:be:12:06:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Jul 23 20:00:40 2026 GMT
            Not After : Jul 24 20:00:40 2026 GMT
        Subject: CN=463a671c292eb8acedfe440a1ceb4e1ac016bbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:e8:f0:16:3d:75:f9:ab:1f:d5:5b:65:fb:
                    70:fe:9b:b9:eb:d8:f9:c6:16:ef:42:37:eb:9a:15:
                    a7:15:c7:bb:3b:11:2e:ea:78:64:9d:54:5a:d2:74:
                    81:76:d9:79:a1:6b:af:b3:ff:52:e0:a5:74:47:38:
                    60:c2:74:f1:f0:e8:6b:6f:33:ad:01:0c:84:df:a6:
                    38:c9:db:3d:27:0d:2e:60:a1:14:c9:cb:b4:58:2a:
                    8d:aa:2b:34:b1:04:43:68:32:99:2c:90:17:29:f2:
                    59:3b:b7:5f:39:e3:6f:63:d4:ae:07:56:30:93:92:
                    99:74:2f:31:19:8c:ae:33:79:db:bc:cc:cd:e2:87:
                    c4:58:f3:60:b7:c2:90:dc:aa:08:45:32:9c:81:d0:
                    91:40:8e:8b:0e:84:da:1b:48:bd:7b:2c:49:23:04:
                    ee:c9:95:bb:81:61:43:80:f6:cd:3d:1f:ee:0a:23:
                    59:db:f8:d8:23:fa:0c:f1:91:e1:41:7f:77:dd:b4:
                    32:d9:1e:e9:be:40:47:67:c6:68:e7:51:1e:42:95:
                    ca:29:3c:88:e6:57:b0:fa:6c:f0:c2:82:01:a5:a6:
                    26:dd:af:7d:2d:71:0f:12:9e:c2:47:94:5c:cc:e5:
                    a0:4d:dd:44:ee:20:f3:48:30:36:9d:0c:88:5d:e0:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3A:67:1C:29:2E:B8:AC:ED:FE:44:0A:1C:EB:4E:1A:C0:16:BB:FF
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:49:de:f7:db:4c:75:11:57:ca:66:33:9a:71:c4:59:c6:
         f5:b3:da:c3:df:d9:0c:e4:4c:e1:b8:dd:9f:03:5e:c5:f4:61:
         1f:cd:f2:a5:cd:34:1d:f3:a0:5d:4e:20:f5:a7:d5:ec:c3:50:
         a1:6f:66:60:ed:db:3f:76:d7:bf:55:6a:bc:52:e2:4e:f8:c0:
         09:64:40:29:f9:a1:47:45:62:0a:9b:f6:03:e7:fe:d1:b4:f5:
         10:2e:97:ce:23:de:23:c4:fb:87:40:e6:08:ca:51:e5:7f:81:
         4c:b1:95:4a:f7:f5:12:1f:1b:5d:cb:18:1c:28:75:4f:88:e4:
         d9:f2:e2:b9:c5:f9:0d:8b:e0:91:b0:b3:84:85:d3:f5:2d:80:
         fe:ed:8f:16:bc:95:38:10:98:ed:95:96:f7:1c:30:1c:12:64:
         b0:67:d3:a4:3e:67:e4:91:31:90:fb:5e:6a:36:e6:6f:55:b2:
         a8:3c:e3:23:70:51:34:2d:0e:ab:65:4f:82:7f:80:98:7b:80:
         f8:b0:a1:31:87:f9:2e:bc:44:86:80:29:17:0a:b5:4b:9f:a1:
         59:30:8b:d9:e2:8f:47:03:c7:84:db:be:8a:95:03:c3:49:32:
         76:86:2d:23:63:cb:16:ab:ad:c0:fe:8d:91:15:9d:a6:39:85:
         90:2e:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----