Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File:                     dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier:          Pf8jksKH1LwsR+R0OfqS6OutM+Gt6jwkodBwjryrt/E=
Subject key identifier:   27:42:DA:8B:51:D8:79:6F:06:57:40:77:73:19:A7:44:17:BF:6E:16
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019F92B6ACB9AD1446C2A4EF35EBD9210AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number:          126F
Signing time:             Fri 24 Jul 2026 06:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:12 +0000
Files and hashes:         1: 0sIEUkqEuEuah5snwOEtEaxPaYE.roa (hash: /mxXa9/sDwHidvSWMCNn+Onl2+SHGU2kNlwneM+xeYY=)
                          2: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (hash: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg=)
                          3: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (hash: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4=)
                          4: 1Waoar8xJafvNKM98KbPPpZpO10.roa (hash: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0=)
                          5: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (hash: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU=)
                          6: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (hash: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw=)
                          7: 4Hry2GHWIQNsyjQrTIx9fQN6gB4.roa (hash: gzVtaF4oZV0YS7EVbW+xgNO11PuUAiMDYx+s9V8pZcs=)
                          8: 4T3IbnYh4saIcnPZM7_bM8SrdUk.roa (hash: bQElEoR/i/ETSq5yQpPm2JLHUn2xQq3oHlgi8Prxj7o=)
                          9: 4dXgMOVCVmLmzl7AuS--VH5SaAg.roa (hash: pqIU557sGgJL4CWbBTIBl7mSAIEET2y/vdRGqIZMiEA=)
                          10: 5kD8ebFyAYRBjL9zZDM_BA0rydU.roa (hash: gNWk6zOUThu7OX+sSIk81C3W9qGJqn3Q5HaYYpqkaQc=)
                          11: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (hash: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI=)
                          12: 8lO_H4hOHoON1dWUWaop2xG_b_I.roa (hash: 90AyhJi0wELEqJw6BDuoQqDPuxv8jeJRieXX/c/ZuCo=)
                          13: Cg5-4-MPHdR8rHLYCSeMDcuN3WA.roa (hash: Cib4HxTsrIRtaj55BTF6+WAR6MahtZRAFeprgaqN1EU=)
                          14: CjWwIBzZKcwNZ7E-O06pyCjEZ7E.roa (hash: yFinRGejY7CI0wek+NR7BAvOn5Z0rhxA2bcYeyVF/jE=)
                          15: DbHsIS1wsGD5VENgKaURW87eGBM.roa (hash: Pg7LFkTLHIS+tij3rt6g9Emn9DJ6nvCMWnQoCISIDpo=)
                          16: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (hash: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok=)
                          17: EcVb7JNJifPpvwcAjqtAg6vi2Xc.roa (hash: mm4OOwG5SG+HqTpp8VfmTmhzslFhiA7H7+fw+8qk+jA=)
                          18: G2BoL9ecCjBaRoaJDjebPJCWqzE.roa (hash: loS4tbrMcz0xl9nMvLRcoLHx1sX1e9WMQZBXsfgZpHU=)
                          19: GfvrudqQtadcfEHpprwynTfNYIA.roa (hash: ReY30DmSZMs/0/wYnNlZrGqTcQIT5Z9nTZMHFV2s+iY=)
                          20: HSTLkhClz6LRADHXHrCQqqSC04s.roa (hash: s8VSLrC5qvSowdJpecSp5doTo7LDHBtmqawdvNkdw/I=)
                          21: J5hS-MwRa0Pp1Ax-eXmJXTFPUAI.roa (hash: 0OShF4FaS2H4QHgvZ8CoH/llz34UbR5B713YVNSs1JE=)
                          22: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (hash: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c=)
                          23: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (hash: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg=)
                          24: KBQCvdZ1Fih2U9PEnXZaHYZQKaQ.roa (hash: aJ2vN0uyC0Hga0lux0w4oAz9DV1ub2HSd8DIya7fmtI=)
                          25: LnnTovLuI750TfHC0xewXl7THNU.roa (hash: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A=)
                          26: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (hash: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg=)
                          27: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (hash: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4=)
                          28: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (hash: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8=)
                          29: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (hash: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw=)
                          30: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (hash: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4=)
                          31: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (hash: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM=)
                          32: Ub75tOZdOg2xdvFErJ88k7KaSUs.roa (hash: AsFVQQMMcv5/BxrT0qGoB9Hl+vwn3+3VyS/clSKWb8w=)
                          33: WzVSfSCn9MA71szaeG3UuHYtodU.roa (hash: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY=)
                          34: Xf46Pw2tgmQ6pve1qLg9BZ7i_dI.roa (hash: D+T6tWOFOaWIc3tUG494jBawlfeKBbjhnuioC/+eLKw=)
                          35: XpKA71gUP1e7UUjZfSVd57bX570.roa (hash: 6PtbKEpVQwlUQzyUCiZ3HIGqzJT0phPeJKaGDFOYcU4=)
                          36: Y77lZEjMBzMzMT32ddXL4QtjN5Y.roa (hash: zzyV8SctE+KAdmnw/zoC5QVggHbeNAKkJ+yHounflSo=)
                          37: cK89N5HfyZS7jF6HhZwkXV8Y2Bo.roa (hash: JcqlClpjnKH1fpiTqdXi9LCmWrDRy3adS44+Dzy+IYc=)
                          38: cWk9dxF1_jN82ED0F2U4rCb7Jcc.roa (hash: 9FgNWBb//T/G58yCB9FCCVaCw/gh2N4AQ1kSifxtRFQ=)
                          39: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: 4zPaOzUkx4EXlXa9M5xRLxIC/TkMucpR2JLmlLpSFK4=)
                          40: hOBQ2pkA-0KSRD9W7HYv7T_EUBs.roa (hash: WyYXRQPNi7imcTjkFnUupixWz7zRkOa+LoRgnw8jDP0=)
                          41: hSaax3PNMqT-lY0FA2NBN-L2Y6k.roa (hash: TL8+SkkJk80gm8fQRrJdTYhaB9ZhdsTEkaDJpoXwUDg=)
                          42: hdJu7f4kSdt-uKkfr1zrXBPa9Ks.roa (hash: GG98Q1bl7OyANKUpp9Wym8WZdgAzVgCTFjDl+3fraHo=)
                          43: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (hash: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc=)
                          44: iuklIzN3cd1myy3SDGqaIIPCfVQ.roa (hash: 3qfnX7bi5LJVGXxA1CUbsRAXKqiE2M+t9Nh2aQQGCqc=)
                          45: jypXh21hN7YdEpy4dXX0h1grdhA.roa (hash: 2PCWogNS3NDeaLLtCqO6S4RyV1g0zZ01LBa4NOA2iZI=)
                          46: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (hash: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM=)
                          47: o_xmKrPL1_AoZs8GvOPm1dKIyhY.roa (hash: bZaaKprcnpy1yZ3w1Gq+0Y+GwujtgYnOL+MJw5ekemQ=)
                          48: qCxbncErzk4900gAaePx5yenewA.roa (hash: GQ8NXjQ+vN1fWJvNU40z0ytK/A56AMCqS+vkok7OXnY=)
                          49: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (hash: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE=)
                          50: rby-gGvDas1Xa9334DJTczkmtYc.roa (hash: h/3pkwNZ0gwBP4ba5gjKhseXzTn04Qnwy4D9dTEdSQ8=)
                          51: s3SYC34soWmzoKTsPOX5kVncr4c.roa (hash: NNv/S0wj01Qx/jiwO1ikXgdpR/5j5vjGnHKp5dqdD6M=)
                          52: sSmiX7qzIyZZBnvlsyXWyCUq0w0.roa (hash: tkEIfRS+g8cxAhTQ3NQOI8Ng+3BIy+8//+cVCwbQgNY=)
                          53: wwKe_5nbJkCZEay725-TDTyy8Og.roa (hash: pMdRZjm2+fkkArj9Ia/EQLb5RslFHxVSqKZVI19kX04=)
                          54: xSlSopVrA7ar-AzHU43kvDoRkZo.roa (hash: EIL/MjiMscFzU/GPSjw2hRcZh5VxPz7Q7L9p0rCpFC0=)
                          55: y4wAHtuhXySsgZAsgfueu86X_u0.roa (hash: ujLBVevk0lCyiIWcos/hcAcdY8h12ok+FT7VQSNGf6M=)
                          56: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (hash: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:ac:b9:ad:14:46:c2:a4:ef:35:eb:d9:21:0a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Jul 24 06:01:12 2026 GMT
            Not After : Jul 25 06:01:12 2026 GMT
        Subject: CN=2742da8b51d8796f065740777319a74417bf6e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:db:49:d8:ad:0c:3a:23:b7:6d:21:df:7c:
                    1e:95:2b:4c:4b:f1:d7:cc:1c:e4:a7:4d:f0:69:33:
                    a7:cf:29:91:9f:7a:1d:28:61:5a:ab:0b:41:c3:1d:
                    44:2f:72:26:b7:98:1e:86:52:8a:83:91:cb:fa:24:
                    2f:dd:31:11:c8:9f:c2:99:83:0a:6f:b1:4d:00:96:
                    20:89:c4:29:f6:32:cd:95:45:58:9e:56:dc:8d:67:
                    86:62:f3:03:8d:e0:64:8e:fe:f2:fd:02:0a:fb:fa:
                    f4:3a:1b:35:b2:99:38:75:b6:b6:36:53:0c:a0:15:
                    18:5b:08:ad:a6:53:41:ab:ba:99:3f:b2:0b:32:91:
                    d4:23:2a:c3:ea:97:5b:2c:e9:6c:bf:8d:e8:11:c7:
                    ca:e9:8e:fe:f2:35:dd:79:7c:15:04:11:ce:ff:3d:
                    e2:fc:1c:44:b3:88:c0:09:28:90:fc:12:0a:21:a5:
                    7a:5c:d1:cf:32:5c:46:9c:8c:84:43:56:75:5b:0b:
                    e6:93:f0:44:f2:34:d3:cc:d3:83:b6:74:57:39:79:
                    98:8c:e1:56:c0:3f:0c:81:13:fb:ea:24:5e:b7:85:
                    db:bd:8a:07:08:f0:d7:ab:bf:0b:5e:8f:d5:94:69:
                    0d:23:19:c5:1f:24:b9:23:a5:da:ce:cd:1d:34:e7:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:42:DA:8B:51:D8:79:6F:06:57:40:77:73:19:A7:44:17:BF:6E:16
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:1a:85:3e:56:09:7f:62:c6:b4:b6:fa:c0:92:2d:a2:a7:
         7d:8e:3c:ad:d9:9c:6b:cf:b0:3f:27:b4:58:5d:61:b0:8b:0f:
         71:41:54:04:c7:72:24:22:46:01:ee:29:de:86:bb:f0:e3:9e:
         0e:e8:ca:c9:dc:b5:78:ff:a0:8d:8e:7d:11:eb:0c:ff:d0:4c:
         79:27:27:2d:25:87:c5:64:83:53:01:e9:0f:7f:1d:c8:b9:c5:
         70:da:29:47:66:84:f4:5e:eb:0c:22:ff:0d:9d:d4:f8:26:1d:
         83:09:2d:5c:7c:17:a6:86:a1:29:53:5f:3b:9c:60:1e:a8:1f:
         b9:db:d1:a9:3b:ac:c6:2b:11:6c:a7:13:1d:c3:5d:fb:71:26:
         aa:09:05:de:ae:04:52:19:f8:c0:1b:b9:1b:c2:ba:06:57:e0:
         6a:60:23:b7:8c:19:11:f5:ee:d2:4e:cf:33:5d:44:2b:5b:f1:
         98:5f:08:79:61:e4:03:e7:bb:39:a9:61:1b:98:e6:41:90:6a:
         a2:e1:5a:79:32:8f:4a:c6:18:c8:05:53:eb:cc:5f:be:68:15:
         2b:f8:b9:da:46:e1:5e:de:78:c2:39:31:01:79:4d:e1:a6:b2:
         62:c2:35:ec:1f:37:2f:ec:5c:99:b9:31:ad:82:f8:62:3f:de:
         35:43:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:24 2026 by rpki-client