Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          3nNTytL1GfU8uhfkINxqCvJ0cyPfYFHPwGf5VHCa1PA=
Subject key identifier:   6F:4A:31:71:D7:63:F6:32:88:F9:02:C4:79:7F:00:80:8C:83:9D:3F
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019FAA50C15CFEA86D3453E605D744FCC538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          1AD5
Signing time:             Tue 28 Jul 2026 20:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:46 +0000
Files and hashes:         1: 1-9eUDWcxbt2aqbNSlZi8gTl5DCU.roa (hash: p8wctqzFNtkBy6RhhhlaT7VtYKQMWW5FKZWtYRgVcII=)
                          2: 1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa (hash: tXfoCwpHJbuZxjYEzHdSS4wRnSV0yN9so5GmJzrVHLc=)
                          3: 1mjIKq3pYXZaN2BSPKlpDgPvvEY.roa (hash: Gkj9TyCq5wWz+8w9siqAjOe4H91dm53NLP/2JX0jqQs=)
                          4: 1tnpzS9bPdTi6kptyi5Xot6Lkcs.roa (hash: m+1o4LcpvjWIHo+6xD8DdTd4ysKSpLSyrCkv5Lyjul4=)
                          5: 2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa (hash: ync7Bqe2ZS8Us4KTHfLVYTl8WbPdgW2Owp+mtCPVyr4=)
                          6: 2_UvfbsFxKUUaVcrdfYacSKl2L4.roa (hash: L+O8j8f4gfZj97qEmoJdpXmH/Ua6ICqOYh06yVj5Qkw=)
                          7: 5qZtdGGQPYCB4GQr1wjcWz32C6A.roa (hash: aKQ60+nGzkXNMGNGLDuML0KK2apTuxjrP6T8ue86sWs=)
                          8: 6rUWxtK9hflh7SiPi0L1itfKjH0.roa (hash: DcndbDem6DcVRyOX/MWxW3qzvVsFc82BfTKKDpuSwns=)
                          9: 84JQ-q28IgepVWWn1RnkFQCMVDw.roa (hash: X/B5EUUIjqvihk73P21ehXhsz8HkVn/cr6XprBLK1c4=)
                          10: 8P_M0aIDtey6z1-uBYdoER49gbI.roa (hash: FSnmoR8GJtfy3UCUFj4zRO9IpsS4G6PEH7oMczL8wlA=)
                          11: BBMCp3XI6fUPNGiFtfO0986n1Ko.roa (hash: qMZxyeEgLDpsgSqlkuooSlzn2+QDVRPYCvdIlrpHAto=)
                          12: E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa (hash: rwJ5587Bc7BJP4v6xl5VcHy6DfSAotRzBjDqDy0qIfU=)
                          13: FGLrLKZULm0mhSDMTuKG_6HhyEA.roa (hash: gghYFbteB4VfP78hKwnuTRHlZR7ah9jq0XQbq7TGOa4=)
                          14: LCUAonXkhp0LjwZ81kJI3nt9TWc.roa (hash: lLu444r01FkRkZ0S2d0cVE1xsfEc9dwcMAXGpGbWkPU=)
                          15: M-v28PFLiT56tATmxh_dxjXIz48.roa (hash: wk4xU/TxE3WuvzAmyr1klkvnIlWP+ZayRu5Ot8is1ek=)
                          16: MPZI5Ag3oVUotbrLJ-jTSk9PNSc.roa (hash: 1W4yBCJS8hT7+MlXKwTHE3UevZSzyRfk6i0BdfUfbqU=)
                          17: OXURxrNe03171n8bX9Y6CdBFZZA.roa (hash: cfxWumMR7w5M2kaXm/XjKT3g/gie/zgJWrUDlK4masI=)
                          18: PwNpNcu_KPAE2NEU3_FYMkH4QMo.roa (hash: 9SOmpyMs/GD01GRB3/BDtcx5I1orOimGv1PrvwfmPSw=)
                          19: Q7LE3zRyj2PiXfX4DjGUSLJfRWA.asa (hash: priQBgblZwQ15I4e2C8JGKkq1VUH3STULgQlzCRtt8A=)
                          20: SIiK7KO9qRsYGFDrQF29ZYeRN28.roa (hash: V80trQbO4tDLVeGxGEbPS8GIdLCj2usc5m9tpR0hd4U=)
                          21: TQAaFv5ALTHh63epl7LLu1DH9nc.roa (hash: hUGYLBMhX2Ty5hzrbfSfblaqdRUKpDToGmssIdKl46w=)
                          22: ThU2mBbAHrnyESzRe6tfkZlbjUI.roa (hash: ULNfH10N674XhO/1prWJKP2j9z5MH6CUdMdCXtR/9Gk=)
                          23: WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa (hash: MevGR9qgcVcvlRayBhJVUo3kjeWsQbcikC4WmtwTEw4=)
                          24: Z-YCzchVF5bQH2HicwMC7TiNiIo.roa (hash: S79GiezgHAF6LzHXyznfu+6Fnlx8lKM8RhqxjBgw0Qo=)
                          25: ZFugbepKYTyLHjNQ_A_Spcy85fw.roa (hash: Lpy9yyaswfsBLVkwAC3kl/YWo2ay9+3uy935D949Kvg=)
                          26: ZNKvFPEQOxElP83PEas3vxV_rd8.roa (hash: Yw7PJJLrozmu0y73W6WqhOH+ocmNk1/zb5Wm1iOru30=)
                          27: Zcxa-wcmGJQEbWCPWNRy_S9kAeA.roa (hash: cR+01K9zK2mMvRiOd2NbvFpy3P7pPHXeI9e4ZoZCoSE=)
                          28: _1qYl_E9z61RVGmZyGtCwxyB0-4.roa (hash: 18SyY5CRP2Y5oEKH9NlPWn4JmOCzEhI4FF2wBT008ig=)
                          29: _LKs4DOySWv1z14Y1ZYT-bLL0VI.roa (hash: pLam89N4ZFHQ5gHY1TNoOT4rZ5LlwBf5Kvu3TpHLqsc=)
                          30: _Zm8MTF_L7EyQ_6YveeS2IaebTE.roa (hash: VQ+xE18B7YQkYF3RoWjSVJ+ofw9TAXhOCMfHnM466LQ=)
                          31: a-bdMU0PKpZcHud_zlSMCqMPwfc.roa (hash: FjKrhZi7OcCNDSXEQfdLc/TNzOD//gv/lZ5dmyUEaYU=)
                          32: aUWRzQkmamgBj5uYCZs7Snjb2w0.roa (hash: D2dS6ceN+toMKXqgsq9ovyx12/VkAZ6hcbpyGxWkCbw=)
                          33: bMTS2A87aEejzK3eKCQU8zS4Tsc.roa (hash: NSTOiMnZOnB16p7UkLVVaCLUT9cLixKW/555b9iQG/0=)
                          34: hXwiXKPzjzALLb2-aV0H6o80chE.roa (hash: KsKknnspRreD+LtOldSofmy5lxz3mxIMssf2KBvH1MI=)
                          35: htGXjVomK79OKrmcY2KJgs4ezPg.roa (hash: Ecl/Jiy52V1qsICQs2cHZIKGG76jH9NDSw0LPqpC/rA=)
                          36: jkioZ7sMtN29opHHMof3tv_YZR0.roa (hash: z+ea8bYxi98v1D0ZT+9JXvz7vJ4jYL4VA16/BZkZvwM=)
                          37: k7liMI-mVHSTMRDvMrSZL-jxCbM.roa (hash: xZlOE0QNFIw75v5pKjN9RWbBa25oUalqrJpJqiZC2ck=)
                          38: m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa (hash: DOPMeZOfGq+jzc64BcbcPLyOPAp+75vksjgsOjXMlhQ=)
                          39: mB5IiCH_newq6qbP2kCzfpUSUUw.roa (hash: YhW5V+4PKfLERoAKrC4EG5FsVV0PNU0jPh/XSltcZh8=)
                          40: nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa (hash: nLy78X+XVrYs4fJKoVbx5CKz3kGaFoiDi0xYmsQEn8I=)
                          41: nXNm7L0qr0zNLPtmnsZ9t8ZPdQ4.asa (hash: UVzG7yF+4a8gsfT9/B2cI/1JtUpeGpNqD5w0Teal8f0=)
                          42: oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa (hash: OZrzmSaMIO4XTjvZmhAaJ6ipcXJYLxmtmBRfg4r1PS4=)
                          43: oHc-nkmsilbbiDnBph8w8RWDedE.roa (hash: psoNkHS46YmFs3DN1g4YoQU6t9obCYJJ0aBEy2Qjzvs=)
                          44: oSVvPOy3DcS_J21hCHOPnBixIsY.roa (hash: DFtHinQdzCM+BlKU8F5bIFjAI/DQwKU4K4hplb7qoKM=)
                          45: q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa (hash: W+o+neEd5lLOipfuBZ07SXEXSqZC2MoxbUXZ+XALuTI=)
                          46: sos9OQo7SQuATzDAO-88fckXZrM.roa (hash: BvLpnURp1OXbUtdg+BiPw0Dsxp8uR19uuIXSDPU3W0k=)
                          47: ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa (hash: kI6+F1DWAcc+3XLZk055UBjOatQ51Syy2IyT4uzsHTY=)
                          48: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: Ek/VQdW1RWrtaX94FUHIDJ84sPAGwwpTXO86YAlcT8k=)
                          49: v0EgzvwenfUuFzJ1WPOCjKPv3xA.roa (hash: HBF5KdghmC5VF+0k49VIpdG77syNkClmpAWbA/Bfosc=)
                          50: v8SeWykxnCkXQyOZscP2MgpOyZg.roa (hash: O93SDzFlSIJjhC2CFme+MFhBi83g9A1lij8xh+MsV5Q=)
                          51: vBHybgSk9XyYuYVEw0sA6GQ_4MI.roa (hash: M5r4bh+l9wxE0z5JZySaZplhkfEIZBBXpG5eKvAudHA=)
                          52: wb6tluOUZUayN9G05LwXOnEHcWs.roa (hash: jn6hTpf5caV20SdBM51r7krZlI86ZWqMVK8AHsPyORw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:c1:5c:fe:a8:6d:34:53:e6:05:d7:44:fc:c5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jul 28 20:00:46 2026 GMT
            Not After : Jul 29 20:00:46 2026 GMT
        Subject: CN=6f4a3171d763f63288f902c4797f00808c839d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:8b:07:73:8a:97:b5:6a:02:f2:7f:35:0f:
                    79:f0:02:6b:14:ab:05:4c:13:cc:fa:ec:5e:1b:e4:
                    16:57:84:90:3c:09:85:ac:8e:04:37:4a:74:df:f8:
                    e1:dc:e0:9a:3a:de:29:52:fc:60:42:34:48:76:f2:
                    d0:52:ce:d2:cf:1b:e3:6b:0a:ed:98:2f:b3:2c:cc:
                    0e:87:74:87:6f:0a:76:20:fc:b6:92:ff:8d:e4:af:
                    fe:58:fa:cd:f5:4c:de:d4:63:f4:78:a7:98:07:52:
                    ad:0a:6c:b7:3e:c9:2b:b1:b4:cc:46:12:19:13:b8:
                    30:a4:99:b7:6f:b3:1f:a6:4a:e5:57:9b:3c:4e:27:
                    3e:52:b8:d4:db:2e:53:4e:d3:c2:a8:54:2b:6f:7c:
                    1b:57:b4:94:e6:af:67:71:73:31:8b:2d:68:91:ee:
                    63:f5:4d:0c:c1:6c:29:db:d8:8e:a4:1d:a1:c9:c2:
                    a5:c3:05:bc:3a:51:50:4a:87:bd:71:d2:a8:14:75:
                    da:07:47:9d:c7:21:50:f8:0e:64:8b:19:e3:a7:31:
                    98:16:40:c8:f8:71:cf:3b:e8:ba:66:68:42:5c:e5:
                    ce:af:21:ff:fa:18:7b:00:d4:8f:11:db:ca:f0:d4:
                    d7:ca:aa:4d:b4:d7:7f:50:53:2c:61:9f:53:37:6f:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:31:71:D7:63:F6:32:88:F9:02:C4:79:7F:00:80:8C:83:9D:3F
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:31:e4:ec:c9:d9:23:47:15:c0:ca:c5:21:d0:08:d0:d7:c0:
         98:c1:ee:80:b5:08:da:00:46:29:9f:f4:94:f4:aa:f8:88:05:
         2b:a9:e4:02:cc:16:13:8b:d6:02:34:89:2c:58:4e:3d:14:e6:
         3e:8d:06:47:6f:54:fb:63:fb:bf:de:9f:31:c3:77:4b:c1:85:
         70:39:e8:57:e7:61:5b:4e:08:03:a9:8b:08:a3:03:20:39:38:
         7f:fd:26:99:ec:70:71:d4:b2:cd:02:01:9d:b8:dd:40:26:4f:
         37:41:8a:73:8e:2d:97:ef:6c:b0:ea:49:06:fd:df:b3:fe:46:
         63:1a:d4:cf:77:7f:b8:c5:1e:d4:ca:25:d2:32:7d:d6:21:45:
         d4:d3:98:8e:f0:61:c0:2d:5b:8e:bd:56:56:8e:36:47:17:eb:
         1f:ba:48:3d:f2:67:33:c0:3e:52:ab:e1:1e:fc:80:07:86:1d:
         00:40:70:19:50:e6:82:fe:a9:2b:6b:26:34:7f:01:3d:00:c0:
         0a:59:e6:41:05:71:a4:54:5b:1c:1d:92:6c:e7:f1:e5:34:fa:
         ea:bf:70:a1:70:48:c0:c0:8a:33:fc:38:6c:07:35:70:d5:4d:
         9d:a4:f5:fd:37:85:59:a1:35:ca:e1:8e:ad:8d:f5:d0:ea:b3:
         b5:28:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----