Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
File:                     fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft (raw, json)
Hash identifier:          bVY8Pr6cw0S01UhymtRc+t7omOw9wm8c4kCD81bOU2I=
Subject key identifier:   FE:D0:11:80:6F:F8:76:88:82:C0:68:E4:67:F6:64:33:A1:BE:34:7F
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Certificate issuer:       /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial:       019FA82B1EC9A6140B744E7C35E50751FA94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 10:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:25 +0000
Files and hashes:         1: 0CJ9u17zIPcruLsVJEts_CUZ3fw.roa (hash: Gg5SPXWp5505pInWA62OkVBNCjh/Ak+0D6VAOWzVDdM=)
                          2: 0xZa5yWUtoc-24jdugiflkmmIc4.roa (hash: qEcPxa3jNxSXYXEJgRMGQ6gYdmaxH+Dt3Hzpzwm1GXk=)
                          3: 1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa (hash: 0v6Z94OQ8OEYuVPUX/BBkgAoPKUlQ0dv8VbYzRMpkfw=)
                          4: 1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa (hash: DwYLVMYxwptlKH2Jo7VsqdJLNSIsspd6i0cEzgvakYU=)
                          5: 1gbHCEbgQwjeiouKm5GaF97BBGc.roa (hash: ybmEELamwbI3k/0S59jWHQ3NihRk/30dBtI2TdBBoS4=)
                          6: 2BycUX4OMpp_ONmpWqOOx8A7GP8.roa (hash: fBXfZQwwJARK7+JDrhcq1IBYyI1YOEEWIdgMx7lYI70=)
                          7: 31IuJXymzyCCz-nBx80UcTy2KJM.roa (hash: N3OXjTJ7vPVzKKs9xt/0Z8rYQDz7GcNmVIDCtknzJo4=)
                          8: 3OKNlLRJJnY0WTL3jmhbPyh3QVM.roa (hash: jE4i9KPU+4ZRPuD5yVgasSVEVq5ZbrevQvdkI1ApONA=)
                          9: 4w9eMhz25cgw3wBmUofTq4aW9uM.roa (hash: Yu6i3q4t0BYz44PAfY8hgxLUoKL6ChdFdr0U09RhdHg=)
                          10: 53nVjykINhU1E1uARYyClLYic88.roa (hash: zoRw839yzl1D6EZAFd7ggDldbFRrTlMpGkY1G7jePDM=)
                          11: 5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa (hash: NwWWrwv2iEIMkY7yf+unqyAydilFqabTc8rRRuphZ2s=)
                          12: 5pDS3kHKWiU32-QZaJs7OmwHgaU.roa (hash: 7a9hnytsdQqjYSTUgg430pVu5zqq3po37oF6uG0MC0Q=)
                          13: 7rCdRbLq6hIcfsQnA303r_W7D30.roa (hash: erc0IzcRLIFTs6Qge/GkDnIJ6SiitmFUuwWwrs3G+Xw=)
                          14: 8d1IalPXfs0mlmk2FgzdLLr1OuQ.roa (hash: twW4N52rkz8GHbPzPt85ACh973N+eEARK2hpJgcEEds=)
                          15: 9e4nhDBDV7BzN-doC3Rdukk4IwM.roa (hash: kDPiKKf9CtaPCGXBNFKViWoi33U2OU7GaDd0TDYj/II=)
                          16: 9xIOZBHwAAkNANpknXvG8dZrLL4.roa (hash: OabLyuPtexleKLH5wRVOVV9OaUguM+6/MQcUPjkveC8=)
                          17: AKdP_WnCYSC6ouwGRCd07y2VJDk.roa (hash: gnjZovsh4NDuHzxJtWk8Vj/NpReZ+7VV6PpuQ1xNrgk=)
                          18: BJy-8q5rdLqS1VrgzjydPMIrwPc.roa (hash: 2+PepOInvhAWOYeDFTDRuwPrzFlVe49zW1KY3Vp4ZYc=)
                          19: Dnv6uILkWUS1v_KPYuw5SnVEXb0.asa (hash: yPbKBIOVqPlMzEgCK07iafSaBNUrtik8ciRuhN3kEs0=)
                          20: Jb5fhsHpDrmyLdjGRz0uFhEem98.roa (hash: UCI+d59xT/eDs0DShUfWDjWNMDQWAEcZTjIhSv7QN2k=)
                          21: K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa (hash: g076Y7WvmqIjLiy3ZLB52YNXxeeqiR1jHUxs7vXARmE=)
                          22: MUHAo43ATksR-SLPdrPtyQpVw8I.roa (hash: 8g6eM7AQ3CGLVzNv2I7I6eXU5p8aStR5V5IVK5ftuSY=)
                          23: Np7zLmXKA3yA-ioGsFaWFV5ebns.roa (hash: ite+WatU4VDz5FpF5VICtwu7wBAE93/8nd6qjBjs2Jg=)
                          24: QsmDC0xumyz5MRI0VCdCEwmFohI.roa (hash: h8GNRtwjDCB9bY1Ozw+rHXsw0nChaonJyo4obxp9+nE=)
                          25: R7Vr98elCl8-XI40OwgjbRBy2ok.roa (hash: uXZhX4GIglHQod9UoZAg4FOS+PXKnbh8c2QJQLW5IfY=)
                          26: TXUKJJoKGveOWU1d4MKKpC7vG9g.roa (hash: +6CW9WY885Em14YZDApYOXXY83soIXGmk3RqofjJhjs=)
                          27: ZAaTnU6s_eFv366TC0JclDW0ZhE.roa (hash: YT//ILFoSXtbMg4NnvN2nPtXhEErfTq55aBeha2nE1E=)
                          28: Zvl0-NvrVEp8EIrCodSVSvFs_MA.roa (hash: 4PwFjqVYHtrMdoqJtqZUtQgbid0TJjs+0mXNy+Un5T8=)
                          29: _nI_PNVjm1tzW7fbPHRQ_UNXGio.roa (hash: 7b8iKmGmZaMSXOaqiUPziUPJsSVF6OMYA76iGGmqXEs=)
                          30: baE-uTGXhUmXS65TJe0eoTaAdTA.roa (hash: AjzX6VNfFo0NJGvUKk2w+nDwgkPWIsuzZYkfZRHLP3E=)
                          31: bybU-ALtdFOAYGWPJIdrXnlJpsE.roa (hash: IhoD5+ZK284yvX7U34qLp2ObNOIWs6rJkCYkyy0P2oI=)
                          32: cAZ9pFFoJ2zhoSD5UHgH9xQkSKA.roa (hash: Upfym8cWm9hUGkNLSusIrU8RFQubfsySUw7WwyXAjHs=)
                          33: dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa (hash: 7YBcg3eoh/u0arCV5cilBpldW9SOARulU+iJYPbWCbY=)
                          34: ext-QDDWINcKwa2Mw4rXO7S9uXs.roa (hash: fWesDUJo13M+KG37vYxdJdEn2ynVJZfDjSl1lpbRFz0=)
                          35: f2zJwbsJQDjbgUwAMqBn3yhf67g.roa (hash: HoFw8uwofu/rWBg89N7bjQ91Fy2ImP28Tf0BytyeuJg=)
                          36: fB8XWNLLHNgHnYx78o3T2kcAKPs.roa (hash: jj9t1chBJ2t0t3tOHNeIqeQLqq+L6Q2JAiPF62ls9ac=)
                          37: fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa (hash: 9Pj2j1VDZ2oEcMkOoN8txqGGDjWHMZWAwK3n7bTvCg0=)
                          38: fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl (hash: UXp9dOqOQvKR0e1GmkZKAwU5I9CNnhnBcndZ8uFkFL4=)
                          39: gcB9OLOx-KqwqMp-e_TB7COz-xw.roa (hash: zOEacADZrsOUIT8na1aHga1C9RSgmdETsExbU8pE4Dc=)
                          40: jg6hfYCoXuAuPPoa7YinNKFlL28.roa (hash: rY+k9rbHpeWLCQT7qtOX5aiLx5RJnRuBw9S8uvo5yHI=)
                          41: jlFc5NpGt74_oDqgxwbh_oUqWRw.roa (hash: DciZoXOI6etcmmM8obtBaoffqMMBlF7e1baiFAPLUpA=)
                          42: oBfZRDR6FjLvr_-XU2lAaHQi0-Y.roa (hash: UyvbGxYl+EH4oQJaaT8IlVRUYz3dVoAAV1AeA249Oqo=)
                          43: oN6JJatzLo336CTblNZNKlHW7do.roa (hash: q5KHKCdbs6gJ4OP0+u1pdK9DEZupbyyK5LLY66y6Wi8=)
                          44: rKMXOu1LAkitTnIIuffCkZ36o8I.roa (hash: WkIoax7Ob7CGue2VjVswuJpb+FMRnB0LCAFbENC607M=)
                          45: rkXmkXfMN96unGF951D4RUAZm7s.roa (hash: DOvHWXPvMRR6+Gmo9Hh9n91hxEM9f/WGszHqiHPudYU=)
                          46: t1H1WeUKIekI-A1M_0yvxre-Cbw.roa (hash: pVeGrAx4QubBe5v7/7IYgcs8DtMQFCIpeWaaPUnESSA=)
                          47: uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa (hash: OuyxmyR7qFi2pZrcmF4ecIE7EgJUQ6+HiBKeZV/ae5E=)
                          48: w2Zllddsp3ETUfwlekfQFAQqlxo.roa (hash: Om10yXY3nPE/Bz/T/FmfqE3jNsjHIMUKT6SBgFk16bM=)
                          49: wAZtAE_3By_Xf-nupeBBOmp5mhY.roa (hash: hc/J/aEXc6fO3eZxYzWtgyBj0rsf+xPtP36ty39IdFA=)
                          50: x5guuAosMFmq5eJvD3KWfyibJEo.roa (hash: 0TT2fn2DQ/oQeYAJOgp14i1XmJQ6hYMiNIM3lUNvqpE=)
                          51: x6odgv4GBx7koYM0lfehBGyNvyM.roa (hash: hiMJKGkjwzFZrEmaNtZ57Yu5ODoeuShCdiRgVeJUTjM=)
                          52: xJmKkBU_6pGBGJ0NkbFR4R-7L7k.roa (hash: vjNNKW6FfN0Njf5+Jh/bQgnhiyKq9w9GA3uAf37wjig=)
                          53: xlfcRKaFcsMxbU98Nn3IsjnvEWo.roa (hash: v8hp66YtzHnMWY7lZCrnZ5MeLMLXbo1tlMs+Ycfpccw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:1e:c9:a6:14:0b:74:4e:7c:35:e5:07:51:fa:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
        Validity
            Not Before: Jul 28 10:00:25 2026 GMT
            Not After : Jul 29 10:00:25 2026 GMT
        Subject: CN=fed011806ff8768882c068e467f66433a1be347f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:0d:38:a1:b0:e4:e8:e2:09:2f:c1:21:ba:
                    b5:ca:1a:0b:af:a3:51:e1:13:de:2e:1b:73:5a:b6:
                    c8:af:68:98:b5:d5:3e:73:5f:e4:66:61:d8:3d:58:
                    c6:cc:68:e3:67:56:15:00:ee:20:b3:89:79:a8:63:
                    d9:ed:4a:f0:76:08:a4:e8:a4:c5:56:c1:a3:47:05:
                    e5:93:22:6b:a4:51:db:f5:31:af:e6:1d:cb:43:3d:
                    23:da:0e:85:d8:7d:65:2e:c5:db:a1:c7:58:c9:14:
                    b6:12:5a:3a:8c:34:1c:04:de:17:f2:4b:6b:ac:a3:
                    dc:7e:b4:5f:41:10:f2:ad:ac:bd:0e:2c:c3:5e:e7:
                    ac:e0:24:09:a5:a4:a5:5a:98:c6:cd:32:53:fa:ed:
                    71:96:1d:f2:3c:33:06:e7:ea:3a:6b:3a:0b:99:a2:
                    36:27:5e:25:00:6a:b7:12:f6:26:d1:3b:f6:bd:07:
                    21:e4:d0:b2:a1:98:c5:80:e8:39:a9:c6:08:b5:b7:
                    39:95:1a:6f:7e:b6:4d:5c:fb:aa:98:01:e9:26:89:
                    96:39:ec:03:e6:74:2f:2f:a3:5f:4a:a7:c5:43:fd:
                    b5:fe:8c:d2:60:c5:67:77:39:82:2c:8d:cf:6b:46:
                    c0:c0:47:d9:60:e0:50:97:74:ca:27:34:9b:2f:fc:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D0:11:80:6F:F8:76:88:82:C0:68:E4:67:F6:64:33:A1:BE:34:7F
            X509v3 Authority Key Identifier:
                keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f4:e8:d9:de:c5:b2:0a:89:20:03:5f:39:88:41:33:b7:8c:
         31:ad:07:ea:4d:f5:35:ef:30:f7:e6:21:d2:5c:cc:22:a0:ab:
         43:3e:f0:2d:0a:89:bc:c1:ad:ec:61:a1:2f:eb:2c:45:b1:66:
         d0:37:82:5b:ac:cb:0c:68:88:c5:f9:84:35:02:96:af:b8:52:
         64:2b:39:a1:42:87:93:25:50:d6:a8:75:22:8e:af:20:e5:fc:
         c0:0c:b9:e6:ca:3c:e1:4c:43:8b:74:72:eb:08:75:2c:79:0c:
         02:96:b3:52:04:3c:b2:47:f9:35:13:db:36:bf:c1:5d:c9:aa:
         f8:4b:6b:ba:0e:a6:f2:c4:d1:e3:45:b4:b7:50:ce:09:e5:65:
         35:8a:2a:50:d3:d4:d2:a0:e4:46:7b:05:91:ff:f1:04:2a:8d:
         46:56:bd:3b:8b:c0:d6:67:0f:d7:54:1a:8f:67:d3:dd:2c:c2:
         94:81:09:d8:cc:4e:52:8c:39:b3:28:88:4f:0e:fb:e3:49:3e:
         18:b7:2f:eb:e7:82:cb:fa:93:0a:1a:3b:69:64:56:11:1f:3a:
         bd:6d:d9:55:04:40:a5:2f:b7:2a:1b:aa:0c:10:e3:37:1c:e3:
         fd:ed:04:5b:bb:77:c1:f5:4a:b2:4f:49:b2:c4:7d:3e:2a:94:
         f0:24:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:33 2026 by rpki-client