Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          Y9j4yWDSw5KI520usDx6h1UYO5JzgbIyL45/bv97cb0=
Subject key identifier:   8D:5F:E0:6A:94:AD:43:3D:10:2D:3E:E6:FF:93:B9:3C:E5:E4:DB:F4
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019FA929B906459EE257FEAE68A10A05A860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1A28
Signing time:             Tue 28 Jul 2026 14:38:31 +0000
Manifest this update:     Tue 28 Jul 2026 14:38:31 +0000
Manifest next update:     Wed 29 Jul 2026 14:38:31 +0000
Files and hashes:         1: 01kfrBCLXsb_MBRY0V39-NQ7rgQ.roa (hash: 0enDaZKwuYkATDRkwnd98W7Je5T9WDnrNDfkylmrhd0=)
                          2: 0GwtoUzvyeaOyVgiz5_5u_fQDK4.roa (hash: ZzkFfie4rwQqLWELgA2gskNhetqEHZ8eQDpZfZACQJA=)
                          3: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: zlaPJoWGJrRNpP4okQVGxFqFs9p5JfI8wDd2ogNtmCY=)
                          4: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
                          5: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
                          6: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
                          7: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
                          8: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
                          9: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (hash: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=)
                          10: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
                          11: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
                          12: BAIynlsyHU_iC9dbEPMu0P4DC0o.roa (hash: NwY40F+kFG2yfJLJ2eEnwJuZ8Y7l5nWAQmBeMkshuLg=)
                          13: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
                          14: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
                          15: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
                          16: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
                          17: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (hash: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=)
                          18: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
                          19: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
                          20: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
                          21: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
                          22: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
                          23: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
                          24: T50C-DbO69bkRbIaWhwMYd2FZgI.roa (hash: ApEBmHxOi4b9nbcBs1a7m2y81kSTfHQtMQXnRNaqMbQ=)
                          25: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
                          26: WL3yj9F5EC-LYoSwjsy29igBJEc.roa (hash: 0LJi+OF7BjH+1HVPut0hQmzHVdemfjE/ARNgLqPZKxI=)
                          27: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
                          28: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
                          29: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
                          30: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
                          31: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
                          32: f741Q7g4kseNO1ry24nPUdQstbs.roa (hash: /ArewhrEGu9bVv2osl1xlS+ZuEvT8uAPiOtXxX8FF0k=)
                          33: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
                          34: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
                          35: kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa (hash: ZLVUzims+TzWoAmZUdu5UaeXmFUGOW5FgDZQ1MpAcHo=)
                          36: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
                          37: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
                          38: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
                          39: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
                          40: vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa (hash: Zv1crVWU2SJCgoulPO5QlvRO9ESYG9SyXRdgkNWxWmM=)
                          41: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:29:b9:06:45:9e:e2:57:fe:ae:68:a1:0a:05:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Jul 28 14:38:31 2026 GMT
            Not After : Jul 29 14:38:31 2026 GMT
        Subject: CN=8d5fe06a94ad433d102d3ee6ff93b93ce5e4dbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:c1:c6:10:15:04:e0:e0:7f:28:79:aa:f2:
                    34:14:68:cf:2b:4c:01:a2:cd:62:8f:1d:be:74:16:
                    1c:2f:2c:72:e8:b9:f9:fa:b9:f3:59:df:d7:a9:76:
                    c9:f7:57:78:2f:f7:ee:df:e0:e3:8f:64:e6:5c:d5:
                    ed:fc:65:11:27:4f:01:12:72:34:42:c6:33:79:b8:
                    bc:83:70:1e:51:dd:b7:b3:95:00:af:8d:18:ef:55:
                    b9:38:fa:33:b0:54:66:e6:06:78:57:98:3b:d3:39:
                    41:fe:9d:e3:86:44:af:3e:fb:40:b1:b3:69:d1:26:
                    db:08:41:27:06:66:ef:23:ef:44:3e:b1:51:9d:5c:
                    e5:ef:5d:98:d6:1b:66:98:ca:14:24:f9:6f:a8:93:
                    8d:ee:d5:88:2f:a9:73:ff:31:b9:3c:9a:0e:4e:68:
                    ac:77:a1:a6:ab:2e:cf:37:2b:f1:1f:c7:51:5e:b5:
                    dd:f9:ab:e7:c3:94:f4:66:4f:05:51:fc:9c:b4:20:
                    8f:9d:e6:f7:b8:29:57:a9:99:04:6f:a4:9b:d4:90:
                    d6:b2:d7:a5:1e:55:93:8b:37:1d:aa:5c:c5:5f:b5:
                    23:2c:a5:f9:ba:b5:1a:0e:db:47:2d:95:cc:63:5f:
                    06:df:f8:54:c6:72:ff:da:38:e8:09:9d:fb:8b:33:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5F:E0:6A:94:AD:43:3D:10:2D:3E:E6:FF:93:B9:3C:E5:E4:DB:F4
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:bd:39:44:81:65:e8:a7:b3:b4:88:b1:c7:f4:3d:86:b9:
         12:03:a0:fc:32:12:10:7d:73:b1:f2:45:ad:15:28:9b:ec:b7:
         b2:e3:b5:98:cc:12:c8:a1:98:a8:04:02:14:96:3f:3f:1d:ef:
         24:73:60:7a:98:00:fe:de:98:7b:b5:36:3f:fb:0b:f2:66:1e:
         bc:81:81:cf:8a:4a:4b:73:f8:89:58:7c:4a:db:2b:54:51:32:
         5c:8c:7c:8b:e2:4e:57:fc:f5:96:e9:3a:a3:1b:9c:38:9d:02:
         75:41:55:66:9b:b0:f8:88:ab:ed:cb:70:73:1e:05:8d:d0:94:
         7f:37:84:78:c5:1a:cf:4e:56:80:06:0e:ff:05:13:b3:9c:c2:
         fc:1e:cc:4a:c7:c8:1a:5a:de:da:83:b4:d7:8e:f2:a7:96:a7:
         c7:7e:55:fe:47:5e:9a:39:12:09:2e:fc:78:8d:9b:9e:81:06:
         5f:0c:3f:48:5e:2f:19:1b:df:31:07:66:b5:15:6f:5d:7c:a5:
         8b:70:99:2b:73:3d:56:37:ee:d3:1e:2f:b6:20:6b:5e:cb:d3:
         6c:9a:c1:b1:87:cd:43:20:a4:a9:4b:0a:23:8f:88:3e:56:7a:
         45:f3:0f:c8:4e:6d:0d:5e:4f:25:06:92:b3:4c:97:91:0e:6c:
         88:ed:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:22 2026 by rpki-client