Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          JDCIUQpvtykY9e/Jl+zDWqo/EuEjuCW6yiVyZsn44d4=
Subject key identifier:   2D:08:4C:A3:3B:47:B9:46:DE:72:59:04:42:72:4A:4F:5C:7D:E1:D3
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019EBF5AE74C2DCF5FEA44B9C5557C5B9883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          19AE
Signing time:             Sat 13 Jun 2026 05:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:06 +0000
Files and hashes:         1: 0GwtoUzvyeaOyVgiz5_5u_fQDK4.roa (hash: ZzkFfie4rwQqLWELgA2gskNhetqEHZ8eQDpZfZACQJA=)
                          2: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: KIhmgYsU0XgCQ836Ov/5mai8Ej3FHZRwVveR9tFr4MU=)
                          3: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          4: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          5: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          6: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
                          7: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          8: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (hash: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=)
                          9: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          10: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
                          11: BRRlr-O65m98wAyGeEux0ziZQTg.roa (hash: r4yxbGgOabU6dy/wqqnsPsdmZlo8myEwwZceeDTTub4=)
                          12: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
                          13: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          14: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          15: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
                          16: IUNZ7k6Be0InVz26bkrmn4bWfkw.roa (hash: DDlLvGK0psVjxhmGzrMeKyqnXmOhbxm+rWrp7gXndKE=)
                          17: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (hash: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=)
                          18: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          19: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
                          20: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          21: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          22: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
                          23: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          24: T50C-DbO69bkRbIaWhwMYd2FZgI.roa (hash: ApEBmHxOi4b9nbcBs1a7m2y81kSTfHQtMQXnRNaqMbQ=)
                          25: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          26: WL3yj9F5EC-LYoSwjsy29igBJEc.roa (hash: 0LJi+OF7BjH+1HVPut0hQmzHVdemfjE/ARNgLqPZKxI=)
                          27: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          28: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          29: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          30: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          31: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          32: f741Q7g4kseNO1ry24nPUdQstbs.roa (hash: /ArewhrEGu9bVv2osl1xlS+ZuEvT8uAPiOtXxX8FF0k=)
                          33: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          34: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
                          35: jorfWq_1YnE5kHaeGqCZdPdeWNY.roa (hash: Y1UP/CLj7/bw212cAWqRM94fuvrK4D40u1bvJepra2k=)
                          36: kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa (hash: ZLVUzims+TzWoAmZUdu5UaeXmFUGOW5FgDZQ1MpAcHo=)
                          37: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          38: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          39: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
                          40: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
                          41: tBhpf_IZ7Fibfqtl7zH3lqH017Y.roa (hash: ox0YS1gIV1gOxLDd7Fmh9JprCynpE2EH1wuVaVCwIBw=)
                          42: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:e7:4c:2d:cf:5f:ea:44:b9:c5:55:7c:5b:98:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Jun 13 05:01:06 2026 GMT
            Not After : Jun 14 05:01:06 2026 GMT
        Subject: CN=2d084ca33b47b946de72590442724a4f5c7de1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:ed:5b:f5:c6:05:9c:43:ba:e4:43:30:04:
                    fd:57:fb:1a:a6:b1:24:2b:53:d2:7b:3b:90:35:06:
                    c6:52:13:4f:b1:84:4d:13:59:c6:b6:08:f4:47:b6:
                    f7:fa:23:5b:93:ca:0f:85:24:0e:2c:87:d9:b2:d0:
                    61:27:8e:c9:c7:36:bc:55:c9:8e:c6:02:ab:f5:46:
                    22:e2:75:38:f3:84:65:a4:84:30:8f:73:4d:02:ad:
                    7f:09:6d:fd:ad:80:97:f0:30:a0:b7:36:27:38:f1:
                    f8:8f:89:79:0b:18:f4:cc:97:e0:e2:ee:f0:63:42:
                    9c:fc:ab:db:e3:c7:ba:cd:43:21:5d:8b:53:74:cc:
                    8c:2e:c1:b7:d7:53:cb:0c:7f:01:4c:fa:b1:24:6d:
                    e3:3a:a5:88:c3:d0:de:b8:55:fd:4b:c8:b1:42:c3:
                    96:f9:c6:26:9d:6e:6e:1a:d4:8f:14:e2:28:fd:4d:
                    f2:d1:f4:3d:19:39:58:fd:c0:4f:df:a5:fe:c8:e2:
                    87:ca:d5:0e:b1:bd:8e:78:73:df:40:b0:47:87:5a:
                    da:cc:d8:16:67:93:2e:82:04:8a:ae:6b:2f:77:60:
                    aa:57:da:c4:40:7e:0e:6c:bc:e4:58:fa:8d:e8:9b:
                    d8:f8:cf:9e:80:5e:59:83:ef:cf:de:89:7f:fe:c9:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:4C:A3:3B:47:B9:46:DE:72:59:04:42:72:4A:4F:5C:7D:E1:D3
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:90:05:ba:98:cf:0b:eb:de:ed:d7:00:e6:23:67:6c:3d:
         fa:58:bb:cf:69:c4:86:76:1d:62:93:72:60:d0:ee:e0:3e:a5:
         45:56:5d:ba:55:f3:1b:fd:49:29:a4:3a:4e:20:f3:ca:0a:e9:
         b2:9e:57:e7:41:de:7a:39:dd:a0:ee:4d:7e:44:c9:e9:c6:a4:
         e5:f6:a4:84:97:21:c9:7f:31:e2:cb:84:26:a6:57:16:af:ad:
         47:32:53:4c:1e:38:af:90:94:41:42:db:13:b1:6d:aa:96:cf:
         b4:78:ab:3d:ea:0a:50:7d:b2:b2:d8:08:99:9c:af:c7:c7:c3:
         53:5b:1a:ab:3e:d4:36:d7:6e:64:a1:df:da:14:61:26:99:e3:
         fb:ad:01:d3:f1:78:69:61:3a:1d:e9:4c:06:26:51:2e:9c:53:
         ea:2e:b6:13:13:dc:2b:d3:e5:12:4b:1e:1e:d1:01:d0:d4:dc:
         9d:27:ab:da:f2:e4:be:a5:ff:61:7e:ea:92:66:a3:01:f5:2b:
         c7:07:b2:b9:5d:cc:c4:ea:c7:70:be:70:fb:2f:76:82:0a:8a:
         c4:ec:94:fe:ed:e8:86:28:c5:06:14:fb:b7:be:79:c4:3d:47:
         31:ce:57:d6:f6:33:7f:b9:ba:f9:4a:97:47:a6:be:f3:66:54:
         3d:75:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----