Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File:                     4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier:          nEK6KV/2AgWDpsIQ44Ul8QmNnLiHLIT77yqsbgCCG8Q=
Subject key identifier:   B9:1F:19:13:F3:45:09:34:AA:58:B6:E1:3E:E2:B5:1C:B2:5F:31:B5
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019FA7F4815D4A557774E7740912015F9815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number:          1220
Signing time:             Tue 28 Jul 2026 09:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:46 +0000
Files and hashes:         1: 0wJmdEsIc6piCPouXDNhCCpeSRQ.roa (hash: WR/b5AIQMqRHnWFbdkMYzAfrUMySKK0esBYcUMp0I1M=)
                          2: 1-in6fcWIaPM9o0JaQgI896hF-zw.roa (hash: +9m5BgtCfpchHYPV7/EjyZt6YHGzYJDxbgj6oT6HF5k=)
                          3: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (hash: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0=)
                          4: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (hash: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o=)
                          5: 3icWZ0l13CoXwoj1OeRHgYert90.roa (hash: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk=)
                          6: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: bJbviLBobb/xAYxIITljdplGbt7LCZchmFH0uq2mQRw=)
                          7: 9k5BtTPPxnZiW0r-J9VyWSs6SCI.roa (hash: F+RPFKfqZfbIU5EIxsSYhbg7pY/p6XGYN9oPR99wNrI=)
                          8: C0gLDzEON7GbUuqeqStfjnIBp_k.roa (hash: kW2ilQ40sXgngeB19vuaQAEZ0a+UVe7vAL02vYsHhxI=)
                          9: CYqAHaNWukk-ByTGpHKXz3QjQas.roa (hash: wiU3rtjJU2K2wdSE2doiy1m3e5+T4eVxinx3u0FFHbQ=)
                          10: CjAdakK4jK3bzKfmCY1veFE0mhI.roa (hash: Z5oJMwQkoJMOahrr4QbJ28O5skdvLzLVhMGsjLOYb1g=)
                          11: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (hash: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw=)
                          12: EED5PEY1a1IMhSE0BwQBTJLp1mc.roa (hash: elqOAc4bpv6jCN5g6K4Rk1qf2TmccJP7YVS2HbgSYS8=)
                          13: ElgFDiuFJ69k81EViaoKdimWii0.roa (hash: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=)
                          14: HbjKNiw4d3SEg0dTumigj0PGsTM.roa (hash: nW4tvMSwJMcIQf6OvnWLF1rZzRY1A2YzlXfxp1Y/+GE=)
                          15: KO3mbecsHziWft5oSlk1_j2d34M.roa (hash: f8pLS1dd6igj0miudYVCW/atCJnG106OYVdNd0IpsmE=)
                          16: LtoQvzCaMW0D-GhISv0hO8NnPOs.roa (hash: NcaX+GMamiFW/3NMIXtO3ttNk67Gbq5SGUiAVxBO82M=)
                          17: Mt4AQ66nGpX52iVTjG_QPgMc6j0.roa (hash: Nn/pGbRWzSFMrKeCQn+bGQau+a99ydSdqv5kVOvZ67Y=)
                          18: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (hash: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI=)
                          19: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (hash: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc=)
                          20: Qerk2VIQWhlnZtUFOR1amkJ29g0.roa (hash: y117lHapRieYxp1hZihDZzze+hWwVr4/qKnm8Hy7HDc=)
                          21: QihhibEPB5qBqDDL6gcnigScDv4.roa (hash: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA=)
                          22: QkwhGPSuc7rlqlghZY18xAA7lM0.roa (hash: nAcfbt2ttDYq5SWZx/GAjI41TdBLCEtgGu5tjf8Jj2A=)
                          23: UETzsQ14kEiR9ZLBzc1Rs6TQ7y4.roa (hash: mJed5UC6Bhm9fWUs4Xbxi43CN/6iMd2evk2vhZxj36Q=)
                          24: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (hash: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ=)
                          25: VTvixWkQMb81xqq15q9rkLGzQns.roa (hash: ryhXeNesoIfEURs7jvSEodrx0dn3DmlePOw6kt2lyr8=)
                          26: XnT8EkhkZ4ckaqupDpvRmKmadIU.roa (hash: LOQvwDLJiJLfGtgfx8v+cSvzCjMCe4xzGPCXgXKQfOA=)
                          27: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (hash: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg=)
                          28: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (hash: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo=)
                          29: c219QE8Kcog9UvMKST6A1X7Uzw4.roa (hash: a1rqIUue8AkZGET3xy9zr5OLEkOjTEfxL6rRJ8ZMXeY=)
                          30: cIdwaFMnaN_nODeJi4PVUhETURc.roa (hash: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE=)
                          31: duHlauWDxyB55t783Auf0OjNQSo.roa (hash: Ir+MKAjO46cZx7B3mNkleV8ECfCdxsl+P9B/SC4lcqo=)
                          32: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (hash: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=)
                          33: iAuw5JQ3mAXjxY6QWG9RY3yTA-Q.roa (hash: UOg7kVgDqAJH5jfqy325Mwl+Vg9DYyHjwnI/jC5MC+Y=)
                          34: iBGEz-tej_FAq47hFEt3LXiPlAU.roa (hash: ZRiJC5SNia2u87xjZ0fDw27CPe3Mlgd/yd0/2xGYRfk=)
                          35: ikDfAfW-xsNgatn_b62wDmF7okY.roa (hash: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0=)
                          36: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (hash: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I=)
                          37: n7USEOktH5zuMAuITWQF7AXRczQ.roa (hash: ikLG4Fs9JJDgwb3XKOBoWhu8ubnMCzT/Buk9vuX9UaM=)
                          38: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (hash: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc=)
                          39: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (hash: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s=)
                          40: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (hash: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg=)
                          41: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (hash: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4=)
                          42: xIdot6FAjw7dfRg6u_ByXcj3lDM.roa (hash: 8+XjLrCilLhi21bpw8d0FOgL/oy8JtzB6AjiHlyT9fw=)
                          43: xXH0TOzedy66ElcG97fd78bjZKs.roa (hash: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:81:5d:4a:55:77:74:e7:74:09:12:01:5f:98:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jul 28 09:00:46 2026 GMT
            Not After : Jul 29 09:00:46 2026 GMT
        Subject: CN=b91f1913f3450934aa58b6e13ee2b51cb25f31b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:ce:dd:cb:d1:20:12:56:c3:b5:03:ec:bd:
                    6a:04:67:c1:6a:43:ca:9d:05:f8:97:bb:23:a2:4c:
                    11:5d:5a:f8:15:67:98:e2:6e:c4:fe:28:1e:ac:16:
                    c8:90:93:6d:33:35:86:13:3f:18:6c:57:d6:37:67:
                    0c:fd:e5:79:18:57:f7:74:e4:79:3c:7d:2a:c0:9b:
                    80:dd:3d:28:c1:fa:e7:a6:29:25:22:79:ef:b3:b4:
                    b6:e2:86:80:01:59:5f:1b:4a:22:2e:7a:2d:9d:be:
                    05:91:01:85:df:e9:a1:d3:46:c1:5b:5b:70:4e:31:
                    e7:d3:a6:c7:22:45:a6:f4:d8:7a:d6:cb:a8:5b:f6:
                    ae:90:07:6a:5a:2c:31:90:8d:46:ce:f5:1a:94:1d:
                    6e:75:ba:4a:59:30:25:2c:fa:71:6a:4d:50:f9:bd:
                    6d:8d:42:dc:10:21:b1:32:db:84:12:08:77:4a:6a:
                    cf:3e:39:9e:f8:1a:8b:45:14:8f:cb:ab:a7:c3:f6:
                    62:64:ca:67:57:15:a1:43:a3:58:ac:9b:8a:c1:85:
                    f2:95:f1:0c:37:e7:d6:56:d5:08:4a:41:50:a3:bd:
                    84:14:33:d1:f5:bf:ee:e8:47:89:d2:e5:b8:10:64:
                    b4:83:b0:c6:e7:bd:79:76:dd:4b:4c:49:dc:a4:40:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1F:19:13:F3:45:09:34:AA:58:B6:E1:3E:E2:B5:1C:B2:5F:31:B5
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:6e:cc:2e:6b:16:a7:d9:f7:1d:e5:b8:70:2f:75:b2:47:
         33:43:69:de:5e:6c:c2:ab:c5:e7:8a:bc:15:a4:46:c4:19:43:
         05:76:dc:a1:35:c2:d3:79:a7:20:d8:78:9f:a5:fe:6a:5b:8f:
         a3:e2:7a:5c:35:58:16:72:c0:a0:83:70:93:e5:e8:1d:89:b0:
         9a:1d:cd:85:cb:e2:28:95:de:b1:84:6a:83:8c:36:02:62:d5:
         66:95:dd:13:80:df:bb:27:83:fd:a9:49:05:ff:cb:d3:df:b5:
         8c:52:7c:75:cb:23:1d:42:2b:97:67:01:df:fa:8e:45:e8:85:
         29:2d:c1:ef:b8:66:e2:3f:08:7b:47:03:71:5b:d5:1c:cc:b7:
         19:16:29:c0:e7:20:ef:12:c2:9d:8e:45:23:b0:fa:07:0c:24:
         f5:42:2e:ee:15:44:bd:70:6a:c8:e5:fe:92:e8:82:4f:3e:61:
         98:c1:c0:79:31:8b:bc:af:4d:3d:37:1b:0b:2c:78:2a:55:66:
         3f:2d:b1:c3:7f:70:e9:93:0c:43:c3:51:60:d2:98:73:1e:3f:
         a1:83:e5:8f:77:22:b3:91:b8:1d:fb:bd:4b:3a:31:fa:aa:b4:
         82:36:f2:52:58:c3:2c:99:14:33:42:9c:9b:40:99:1d:07:07:
         ee:19:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:20 2026 by rpki-client