Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          9C+b7dZZD0BBQl8AafdZcixf5UneF46EZOZqFarhPcI=
Subject key identifier:   E0:BD:ED:B5:3E:E3:A1:C8:86:8E:BA:6E:CE:E9:57:9A:3F:A1:53:9A
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019FAAF5488EE0C8C91CD78B5A882A49AD28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1A29
Signing time:             Tue 28 Jul 2026 23:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:29 +0000
Files and hashes:         1: 01kfrBCLXsb_MBRY0V39-NQ7rgQ.roa (hash: 0enDaZKwuYkATDRkwnd98W7Je5T9WDnrNDfkylmrhd0=)
                          2: 0GwtoUzvyeaOyVgiz5_5u_fQDK4.roa (hash: ZzkFfie4rwQqLWELgA2gskNhetqEHZ8eQDpZfZACQJA=)
                          3: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: XjMnKpsFVRBFurHE2SuI7UvXzeeagyDofkqLLK2h/GM=)
                          4: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          5: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          6: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          7: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
                          8: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          9: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (hash: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=)
                          10: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          11: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
                          12: BAIynlsyHU_iC9dbEPMu0P4DC0o.roa (hash: NwY40F+kFG2yfJLJ2eEnwJuZ8Y7l5nWAQmBeMkshuLg=)
                          13: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
                          14: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          15: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          16: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
                          17: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (hash: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=)
                          18: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          19: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
                          20: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          21: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          22: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
                          23: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          24: T50C-DbO69bkRbIaWhwMYd2FZgI.roa (hash: ApEBmHxOi4b9nbcBs1a7m2y81kSTfHQtMQXnRNaqMbQ=)
                          25: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          26: WL3yj9F5EC-LYoSwjsy29igBJEc.roa (hash: 0LJi+OF7BjH+1HVPut0hQmzHVdemfjE/ARNgLqPZKxI=)
                          27: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          28: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          29: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          30: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          31: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          32: f741Q7g4kseNO1ry24nPUdQstbs.roa (hash: /ArewhrEGu9bVv2osl1xlS+ZuEvT8uAPiOtXxX8FF0k=)
                          33: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          34: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
                          35: kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa (hash: ZLVUzims+TzWoAmZUdu5UaeXmFUGOW5FgDZQ1MpAcHo=)
                          36: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          37: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          38: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
                          39: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
                          40: vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa (hash: Zv1crVWU2SJCgoulPO5QlvRO9ESYG9SyXRdgkNWxWmM=)
                          41: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:48:8e:e0:c8:c9:1c:d7:8b:5a:88:2a:49:ad:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Jul 28 23:00:29 2026 GMT
            Not After : Jul 29 23:00:29 2026 GMT
        Subject: CN=e0bdedb53ee3a1c8868eba6ecee9579a3fa1539a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:94:b3:76:b3:00:75:b5:33:eb:b6:e0:fe:
                    f6:3e:08:28:4f:74:82:75:ee:ba:e1:76:0d:45:a8:
                    c5:00:ea:78:68:e5:3d:53:d0:4e:ad:82:c4:19:f6:
                    16:7d:b0:26:f0:19:64:72:28:35:aa:50:e9:a5:26:
                    37:e9:2d:df:e5:de:43:52:fa:88:c5:0f:e4:ea:4b:
                    1d:40:a2:bf:f5:aa:6c:ff:a4:5d:2c:b0:27:7b:bf:
                    fb:06:58:2b:94:87:02:09:fa:1c:ea:f6:70:dd:fd:
                    e0:ac:87:93:64:ef:6f:10:de:4b:e5:1a:51:c1:30:
                    44:d5:0a:c2:67:3f:bc:d5:9c:ea:1a:d5:f6:fc:2b:
                    33:8d:70:60:90:0e:05:d8:c3:04:b2:88:b4:89:b9:
                    8b:00:85:be:a4:d0:dc:ff:f4:f0:f7:cf:a4:c0:55:
                    85:d3:28:c3:c5:fa:8f:9e:3c:0c:04:56:d6:13:79:
                    83:6b:1c:e9:47:7d:ff:b1:85:94:54:b8:2e:b0:0a:
                    89:99:f6:ae:47:d3:f2:d6:61:c3:0e:16:ea:58:4d:
                    e6:1a:4f:1b:b4:dd:1f:61:c2:17:b3:3c:11:c5:58:
                    2c:e8:fe:85:cf:63:84:6b:42:c2:22:20:29:8d:2a:
                    5e:14:57:68:df:e5:44:70:67:28:3e:db:fe:ac:96:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:ED:B5:3E:E3:A1:C8:86:8E:BA:6E:CE:E9:57:9A:3F:A1:53:9A
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:be:b1:68:a6:8e:b9:23:af:63:95:56:f3:28:46:ea:c9:
         64:92:6c:7d:ed:73:6c:d1:9f:32:46:46:95:9f:1e:77:34:57:
         21:0f:c6:97:d3:a9:40:03:85:74:7e:4c:c0:e6:9d:a1:c3:c4:
         f9:2c:35:a1:be:a7:8b:ef:6a:8f:77:0c:36:ee:aa:3c:74:06:
         6a:e6:b2:d4:44:19:4c:5c:ae:91:25:30:2d:96:b0:0a:c7:80:
         0b:be:53:70:fe:7d:af:9b:1f:79:14:c4:94:d1:81:9b:b1:f4:
         e4:f7:c6:bc:00:7d:40:84:eb:2e:52:5f:c0:d9:9f:8b:ca:bf:
         d1:89:aa:c5:fe:08:4a:a0:fa:e4:fd:e8:65:83:ea:15:89:a8:
         f5:6e:ed:4c:33:a7:e4:01:ba:b0:2b:15:3e:32:bc:58:b4:0e:
         77:c7:0b:cb:d6:77:0d:13:d7:d2:e8:fb:d1:9b:0d:0f:ac:8b:
         5b:52:9c:b5:71:59:8d:1f:93:31:a5:0e:51:47:ee:ce:f9:ea:
         3a:a3:59:e1:8d:b6:5c:b3:68:5e:2a:89:ae:40:09:a4:65:54:
         95:8a:8a:f6:65:1d:18:b4:9f:59:dc:52:e0:ab:a6:f6:f1:13:
         a6:58:0d:b0:2a:3c:c4:e6:26:bb:85:d2:2e:d2:4e:c8:1e:98:
         2c:4e:bc:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9UiO4MjJHNeLWogqSa0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwNzI4MjMwMDI5WhcNMjYwNzI5MjMwMDI5WjAzMTEwLwYDVQQD
EyhlMGJkZWRiNTNlZTNhMWM4ODY4ZWJhNmVjZWU5NTc5YTNmYTE1MzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0mUs3azAHW1M+u24P72PggoT3SC
de664XYNRajFAOp4aOU9U9BOrYLEGfYWfbAm8Blkcig1qlDppSY36S3f5d5DUvqI
xQ/k6ksdQKK/9aps/6RdLLAne7/7BlgrlIcCCfoc6vZw3f3grIeTZO9vEN5L5RpR
wTBE1QrCZz+81ZzqGtX2/CszjXBgkA4F2MMEsoi0ibmLAIW+pNDc//Tw98+kwFWF
0yjDxfqPnjwMBFbWE3mDaxzpR33/sYWUVLgusAqJmfauR9Py1mHDDhbqWE3mGk8b
tN0fYcIXszwRxVgs6P6Fz2OEa0LCIiApjSpeFFdo3+VEcGcoPtv+rJZWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC97bU+46HIho66bs7pV5o/oVOaMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmF++sWim
jrkjr2OVVvMoRurJZJJsfe1zbNGfMkZGlZ8edzRXIQ/Gl9OpQAOFdH5MwOadocPE
+Sw1ob6ni+9qj3cMNu6qPHQGauay1EQZTFyukSUwLZawCseAC75TcP59r5sfeRTE
lNGBm7H05PfGvAB9QITrLlJfwNmfi8q/0Ymqxf4ISqD65P3oZYPqFYmo9W7tTDOn
5AG6sCsVPjK8WLQOd8cLy9Z3DRPX0uj70ZsND6yLW1KctXFZjR+TMaUOUUfuzvnq
OqNZ4Y22XLNoXiqJrkAJpGVUlYqK9mUdGLSfWdxS4Kum9vETplgNsCo8xOYmu4XS
LtJOyB6YLE68XQ==
-----END CERTIFICATE-----