Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          f3fnRdrjRHq+osNhius6UjtySHjLmqUIjsPXgWjQ72Q=
Subject key identifier:   3F:2A:7A:30:FD:88:19:D0:42:6C:9A:69:A8:BD:C3:AF:9C:82:E3:7B
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019F92112CFFBE410BA3A67E50FDC8F5FFEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          1A2A
Signing time:             Fri 24 Jul 2026 03:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:26 +0000
Files and hashes:         1: 07YHnmSGL3DGY6c5DbcijP217LQ.roa (hash: 12gHzQSyTMLeGjVAmr1zmwWq9fnXc3yyJAMhoMfsUbI=)
                          2: 1-vNISdAgr1vxuSu-Toco8sAAfmc.roa (hash: FafBdHtMW1cgxu/h4FqfgmHc5gJkbiyqRpvw+bdoRVc=)
                          3: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: BA9hlQvUB6MpfOEqWS/qP48YDvSKY5mvE8N/Al4koSQ=)
                          4: 3NoAtRyFyT3mqxuhl8rikGi6CPw.roa (hash: UkQRBoygiIXUDqnF/nZfu6Z2PAxT1DRUs4/Fx1lQwIc=)
                          5: 88GXt-Nj8epfXsaOzg77sNdRo5s.roa (hash: xLg/Jf5JnayYecy0KNeCwmuhUM+tMuNIkboAxtbEGYM=)
                          6: 9SzKR2jRUVwOaueZVAhbWUN2hKk.roa (hash: FVohvzzEsQ8ZWQ3bVSw2whz2W6Fbc2vk/r+zxXJ8JGo=)
                          7: 9a7DiM85xWW0SUOHj55_qdtGlrM.roa (hash: /wdQL253QIgX63BRfrM9hjhyJ7le6nAjEl2iFxxdTHQ=)
                          8: BEr_R-Y76jDsSzh3bfESjoOwl0Q.roa (hash: XKEvtHfwkP1nMOaRrnUEt9y98qABQkwe3lGvAnv9row=)
                          9: Gw6V9uCemQ5q9nUpuJc23On0l9U.roa (hash: a6bh8blpDH9jpPjz9ME1FXuntPXQYUSWc+js+/s1GKU=)
                          10: HNnkcaU2Hh5IuZWTx2ax25PCVFo.roa (hash: QEMvN1hGawGHGM/XJD+BepVtmnpndyGrmsYjk5D0vXk=)
                          11: JBmh4xJQPOrgXhW8afp75WMHXtU.roa (hash: Eu21koGIAierUmhNQZ3QsI0F1soGks0wdE/brAHqtA4=)
                          12: Lj4vCV3CzpslBrQs2uQPQz0J-lI.roa (hash: 4PkaGjUOJQRMD/3HjoXORV26Z0v+UJe+d4n4F+P5Bew=)
                          13: QCeLT32TJH0BUjUrilhb7chA7xQ.roa (hash: F/9NdtpeCDeb/lM2ZGhLi9OKN6meb7oC3ZPfJfW/F4c=)
                          14: U-vM5k7kX-abfGLQNLBMdCq5aJw.roa (hash: bJBvjK0cokVnLIfc7kCrIZ00FbL6Ke3KrGBJupQgo1c=)
                          15: Ul9RpH6oBexBY5C_PA23LHZoBkc.roa (hash: XRUFccREziuIDl6+6nxzRgNDnHGi0XuldvNlFW7whIw=)
                          16: VEJFTWLInqVBVVVzjcXE8u0k4jU.roa (hash: MDCdlTYX/q6OjZDJTysgXveF6ZbyFuxNgUow4xZBH2M=)
                          17: Y_FLWnuNhEx2wO3ILnJnHpE8S50.roa (hash: 4sjgJfec1CI7poYdj8/LooNLid4ueqSY+AsJdUDwJp0=)
                          18: cGR-cZXHq1SVvLMV3yudMjgOmWE.roa (hash: 5J+DPS65ZibV4JHjVNRUad5cnyzzDzeOQ+1szjLfH/U=)
                          19: dMUsL87HVH-hWFe6QaT2O1cjz80.roa (hash: aQSqen+T1CnOwM6TpzsdO+vcc77lV4HKUI++ospju5c=)
                          20: f_VCnUgXclXXJeFK4ehEKaPm8bU.roa (hash: NU+9MIVHryfjHTTYgjstCko8E5LtsVYshqXivZ7/0Mw=)
                          21: g9nvnWhPN7HGDg6WSK6sNNq-hwQ.roa (hash: EGlYc35ugDR/mZ+qyX18v46iRt9KU7dFwLsJGdSQa3o=)
                          22: nUkgQUNMRu2yt34CpAmuZ7CRd3U.roa (hash: oYaAcBrnNv8vR9XJmeJGa+sR9kYdUVsLd+oHXCrr0f8=)
                          23: sl1JvwMo_PnxNUT0n7b37VjHYBI.roa (hash: 4s59F4JeRBM9UIf8FZMIueAYaOBneqDZ1z5HCj442e0=)
                          24: xvqiP1uUbaodSEMAQDXDC58GS80.roa (hash: oaCy9//PkG6/HUpYGlrrSEfQitLFp/CqGYs5ulfXPTo=)
                          25: xxI-hj6mHmiHl2OwN4j5ztBMH8U.roa (hash: 1zAXiE+IF/aHyRDjomYAlxs9J+15UvpbWtlzl8GfuYE=)
                          26: yt9D2jLsreAMWCWEdKVQm0MM7k8.roa (hash: lKhmu0VxkSr9o+yCKmoctbtSS//EnsnvUzIyvtwGci0=)
                          27: zSfbkXSSTZ9b4VM38AL0y2ev5KM.roa (hash: qh9HWWdJnJjIlbbHx9ULyJvN/7KGQA0brIGqvUHqcAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:2c:ff:be:41:0b:a3:a6:7e:50:fd:c8:f5:ff:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Jul 24 03:00:26 2026 GMT
            Not After : Jul 25 03:00:26 2026 GMT
        Subject: CN=3f2a7a30fd8819d0426c9a69a8bdc3af9c82e37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:59:25:e7:80:04:18:d5:29:7b:22:ba:d1:
                    80:f2:13:89:00:d2:64:46:c5:0a:1c:aa:bd:44:30:
                    37:96:e9:d1:28:a6:28:3e:48:9d:93:b9:65:92:83:
                    49:a9:75:f0:db:26:c1:bd:77:1d:f3:f1:b3:65:d4:
                    61:35:a7:33:66:92:45:30:75:8c:93:56:7d:ab:66:
                    43:97:e6:e5:01:47:ff:f7:d0:13:da:37:6b:ac:31:
                    61:3d:67:53:c6:d5:c1:91:56:a4:6e:80:39:34:e3:
                    53:0f:9c:55:61:e6:36:02:99:26:24:9c:44:6f:78:
                    fc:7b:e7:40:7f:63:1c:d4:b3:ad:d1:d4:77:9b:46:
                    08:1a:f3:af:50:e1:74:8b:35:14:09:d5:98:ac:95:
                    3e:64:51:d3:79:29:d7:95:a1:04:2b:c7:73:62:90:
                    9d:94:c7:df:c7:bc:37:32:bb:30:2f:96:09:da:3b:
                    11:5c:94:5d:5c:e4:99:88:8e:6d:f8:3c:f6:3e:74:
                    ac:01:3b:a3:1e:7c:0f:b3:20:84:b8:7b:e9:35:fe:
                    7e:b8:a6:89:51:91:8b:1c:f5:a9:a2:b3:e7:15:fe:
                    ec:15:ca:83:a1:0d:1f:f4:ab:97:9d:32:7a:ae:88:
                    d1:b2:8e:ff:e7:f2:ff:9a:13:85:57:49:12:9f:d0:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2A:7A:30:FD:88:19:D0:42:6C:9A:69:A8:BD:C3:AF:9C:82:E3:7B
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:18:bb:ce:18:c8:95:46:72:f3:21:c0:1a:92:62:cc:15:a7:
         41:75:6c:bc:3b:92:eb:cd:a0:f8:71:40:72:69:6c:19:42:8d:
         13:0e:75:23:7e:85:27:42:4f:13:ff:20:31:bb:35:14:ff:c6:
         a7:c1:e9:eb:78:00:fc:12:75:39:ae:13:57:b7:f5:06:00:f4:
         fe:55:72:32:8e:ae:7f:26:a6:0d:a0:10:a7:52:57:30:3f:80:
         4d:44:ca:db:76:10:9c:39:31:62:2e:a8:27:7b:c4:6f:df:c2:
         7e:66:19:38:22:4d:78:fd:a1:9b:43:7a:c0:ca:57:91:81:f5:
         9b:98:e2:a5:f1:15:6e:12:4b:7c:5f:10:35:fa:13:85:ad:6f:
         46:0b:18:08:e5:e6:51:f5:a1:16:00:77:15:7c:a9:26:4f:68:
         5c:c3:a2:9d:6c:2b:65:88:80:db:30:26:d7:22:52:9e:39:71:
         72:d7:b5:b0:c7:84:3e:3f:9c:76:16:b3:42:a8:75:5c:bc:48:
         0b:2d:98:3c:c2:a7:72:1a:2a:51:f4:70:18:21:0c:ba:b6:f4:
         36:b1:d2:8a:ae:d9:00:2f:48:8f:2f:a1:fa:89:1a:5d:f2:81:
         99:81:f7:2b:58:c6:80:c2:d2:fa:b4:05:21:27:fa:c8:27:50:
         0b:3f:cd:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SESz/vkELo6Z+UP3I9f/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjYwNzI0MDMwMDI2WhcNMjYwNzI1MDMwMDI2WjAzMTEwLwYDVQQD
EygzZjJhN2EzMGZkODgxOWQwNDI2YzlhNjlhOGJkYzNhZjljODJlMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBRZJeeABBjVKXsiutGA8hOJANJk
RsUKHKq9RDA3lunRKKYoPkidk7llkoNJqXXw2ybBvXcd8/GzZdRhNaczZpJFMHWM
k1Z9q2ZDl+blAUf/99AT2jdrrDFhPWdTxtXBkVakboA5NONTD5xVYeY2ApkmJJxE
b3j8e+dAf2Mc1LOt0dR3m0YIGvOvUOF0izUUCdWYrJU+ZFHTeSnXlaEEK8dzYpCd
lMffx7w3MrswL5YJ2jsRXJRdXOSZiI5t+Dz2PnSsATujHnwPsyCEuHvpNf5+uKaJ
UZGLHPWporPnFf7sFcqDoQ0f9KuXnTJ6rojRso7/5/L/mhOFV0kSn9Df+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8qejD9iBnQQmyaaai9w6+cguN7MB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBi7zhjI
lUZy8yHAGpJizBWnQXVsvDuS682g+HFAcmlsGUKNEw51I36FJ0JPE/8gMbs1FP/G
p8Hp63gA/BJ1Oa4TV7f1BgD0/lVyMo6ufyamDaAQp1JXMD+ATUTK23YQnDkxYi6o
J3vEb9/CfmYZOCJNeP2hm0N6wMpXkYH1m5jipfEVbhJLfF8QNfoTha1vRgsYCOXm
UfWhFgB3FXypJk9oXMOinWwrZYiA2zAm1yJSnjlxcte1sMeEPj+cdhazQqh1XLxI
Cy2YPMKnchoqUfRwGCEMurb0NrHSiq7ZAC9Ijy+h+okaXfKBmYH3K1jGgMLS+rQF
ISf6yCdQCz/N3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:45:36 2026 by rpki-client