Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          SB6TDGSgIqtD9H/6f46HVq9jiHsiO5ta3cFRZNP3+Zw=
Subject key identifier:   81:73:29:19:AA:56:C9:62:DB:53:15:60:56:23:CF:EC:11:F7:83:62
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       01A0D15BC43ED076EC899BC389B5C1CFA41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          0301
Signing time:             Thu 24 Sep 2026 03:00:47 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:47 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:47 +0000
Files and hashes:         1: 008aaJ7C0NI-B76Oz-DgwXoqQGA.roa (hash: Wl56s0djkIFMtZEcBorh/gchNgdhdVWtVVwku8y2YNI=)
                          2: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          3: 2QBmwvC_Xu9zRPYUQ2laq2mKYco.roa (hash: 86VoVG5xisD/zC7oESTivnN1oBV8l66WmkJKuTrECTs=)
                          4: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          5: 4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa (hash: tskoLkmbKnpidodrFvl8GOFIM31iV0Ojzu1LEIBf4fw=)
                          6: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          7: 6z-ninbRTJQj-TZknzEwKYouOE4.roa (hash: d8nKt5PAnam+L6inWEaMyIFTs3jvVRg0o00gM43ZNQw=)
                          8: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          9: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          10: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          11: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: aJSAwhbBoc5ZOn4ywCnxTVrScQKKqXTswP5dVyHEF40=)
                          12: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          13: DbxJv-sLQ3W1fyhrdioSNv97wS8.roa (hash: W9ilqt7H8VyXzg6z0JRuXfb3gXCFeEGnkjjtm+EEDs4=)
                          14: ERr_HtkQWGUFjzv4scSz1RjkxkY.roa (hash: LrxlextA3UrAvkKiffumcx8o+lgVydKGnEQqNKzGR6Q=)
                          15: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          16: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (hash: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=)
                          17: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          18: Ho8zkqZKLkLA4effCVpP6TkX1-c.roa (hash: 2o4YqIFG5/X+kXM1QRZNRPqvc4hIDCgqt0sRRrbUsZU=)
                          19: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          20: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          21: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          22: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          23: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          24: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          25: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          26: U8zMUiMk1Ot906wBPhNnh9qIyVs.roa (hash: 9tU/X0pyerM1WjggaqK28em0X/I42isjLNz8F4mP3TU=)
                          27: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          28: Uk-DZbMMzQYoC8uG1Ys4Z5BX5uw.roa (hash: IInUKYbmU30Zg9l2Ho6956f4Sd0UxMOn19Kx6W9PbjY=)
                          29: UnpRVCK_Gc5VbVNm8iLP9MKKZLc.roa (hash: EIulUW9Qb1i3y88NRqFWG6S+4xRTW+qht9M8c6ut9FY=)
                          30: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          31: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          32: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          33: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          34: fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa (hash: 8on9Wj7wgWS3bgbMN8K27Nuy/bvBtTxIn35r63/Pk1c=)
                          35: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          36: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          37: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          38: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          39: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          40: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          41: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          42: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          43: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          44: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
                          45: yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa (hash: 0G99mwqEuR6I8GBLFxxB42DbMhMAwQDAL1U9zeTz8vE=)
                          46: yuu6pkLIeW44ejjBMErvhGu5LgI.roa (hash: 6xHzo/Vs6bOP6rzLYIi1OSbob9D+BHaYxFHHU+Ycr9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:c4:3e:d0:76:ec:89:9b:c3:89:b5:c1:cf:a4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Sep 24 03:00:47 2026 GMT
            Not After : Sep 25 03:00:47 2026 GMT
        Subject: CN=81732919aa56c962db5315605623cfec11f78362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:7e:f1:c4:4f:b1:86:e1:a7:5f:7e:36:e1:
                    af:94:a2:f9:01:f3:13:1a:b6:63:dd:4e:e5:a6:2e:
                    e9:c7:f3:6f:f0:2e:f4:f0:8f:ea:61:c5:64:77:95:
                    d3:21:97:77:93:34:8d:90:32:76:53:19:80:af:dc:
                    73:48:c8:1d:6b:65:d9:ad:6e:c5:d8:cc:3a:a9:9f:
                    51:c0:06:78:54:9f:01:ce:fc:a5:db:10:d1:80:1d:
                    8d:73:5f:1a:ce:2c:12:49:38:e1:f5:f1:77:15:69:
                    07:de:ec:9a:91:54:92:be:5e:f6:02:b9:44:6d:4c:
                    34:1d:e2:77:7a:5f:cb:64:4a:a2:d9:11:ac:3d:ee:
                    56:de:9a:c0:9c:c8:95:9f:93:0f:2a:13:ac:9a:90:
                    3d:98:82:b1:00:bb:bb:2b:bd:e3:31:3b:7e:f9:82:
                    f3:ac:8f:76:a0:5b:aa:c2:85:cf:ab:99:ad:7b:b8:
                    7f:7b:d8:7c:dc:41:38:05:7f:ae:34:04:f2:65:4c:
                    ab:37:d7:a8:d2:3d:ab:c9:3a:66:4c:c7:83:ec:45:
                    59:13:6c:95:21:77:c7:15:7f:57:3d:36:52:a9:96:
                    93:3b:86:02:08:ed:57:fa:1b:01:e3:52:d4:54:c4:
                    db:ce:74:47:a1:52:d0:ea:94:ec:8e:1c:1f:28:63:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:29:19:AA:56:C9:62:DB:53:15:60:56:23:CF:EC:11:F7:83:62
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:8f:a8:fe:fd:d4:5b:9b:ae:af:8e:8a:8e:96:ff:76:db:
         9b:94:51:9a:a6:ce:f8:cc:13:1c:5d:28:b0:1e:66:aa:1a:30:
         83:c5:b1:f6:49:1a:a5:4d:4f:df:c6:f5:6e:d7:bf:3c:4a:5f:
         55:90:3e:fb:81:93:e6:5e:d8:36:71:99:19:8e:01:9d:55:22:
         9d:7b:81:f5:e7:74:19:12:71:dc:15:fe:ec:35:f1:dd:00:33:
         b1:f3:74:e2:66:9b:2d:06:51:60:df:53:11:39:bf:f2:ec:b0:
         54:9e:5c:9c:45:42:e8:00:97:d5:9b:15:0a:8c:69:74:d6:33:
         63:3f:f5:8b:a8:f7:e7:02:00:46:49:eb:25:4d:ec:c2:e8:38:
         64:96:97:76:7a:93:a0:d5:8e:a4:f9:52:0b:83:9f:42:7a:82:
         49:35:17:0b:dc:2a:dc:4d:66:d1:c9:56:17:f0:a7:4f:7f:e4:
         93:39:35:c2:dc:7d:79:4a:48:ab:aa:08:b3:d3:86:be:09:58:
         b3:51:f3:a5:3f:a2:b3:1e:5a:2c:00:8a:80:39:05:8f:1e:97:
         18:6d:b1:74:94:8b:34:90:38:33:12:38:a5:15:6f:d9:85:33:
         f6:a6:ef:e5:81:1e:9a:f6:ff:36:e3:47:65:ab:fb:6a:b9:64:
         d0:bc:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:22:18 2026 by rpki-client