Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
File:                     49HX1DNmpbAGPDdXExnfpDLRUxs.mft (raw, json)
Hash identifier:          x+1IG07zdGQcVHOYOp33AsBgQmG2HvdhAUxvi6W7S44=
Subject key identifier:   70:D2:F3:93:3F:E5:89:A8:19:49:96:CB:48:2E:D4:98:A8:4D:87:7E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Certificate issuer:       /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial:       019FA7ED9D0B0E80E862DD694846E6828510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
Manifest number:          01A9
Signing time:             Tue 28 Jul 2026 08:53:14 +0000
Manifest this update:     Tue 28 Jul 2026 08:53:14 +0000
Manifest next update:     Wed 29 Jul 2026 08:53:14 +0000
Files and hashes:         1: 03QkTi9GzFT7SMJ6M9A2QpgBAk4.roa (hash: 7L7n0N6ltSkOIvNajMsESRPk2kRWJAtjZLHis/0BwL0=)
                          2: 1qpAl4bTS8EVENkLAwILH5C8a8A.roa (hash: xf0YY0lUTQ36a4ZM0Ib91bNmA7fKC7ZOqgsJfC456BE=)
                          3: 26kBDVeG_VYi-ZFZd5G68UN3tuk.roa (hash: 9OHeXcyNPbisJqScgFJQwj3uD+4wKe3BPgYKS/U9OyU=)
                          4: 2VKIV5Pmpq7i49-7CNPhkYLJ0Ws.roa (hash: 9yfUaLJe3s5BNXMRs/G6I4N3tD+yudXfO8n0JDvf1PQ=)
                          5: 2fOu3akN7Ffewk90s7BRFJLj9vQ.roa (hash: tbJdKWT2BB43JlYmWbpZmGtBR96IOquty8lnbV7NgJw=)
                          6: 49HX1DNmpbAGPDdXExnfpDLRUxs.crl (hash: Eeh7NJmhqosVkhWGWnu1rPZ8oag9gj/2glnNyNngWBU=)
                          7: 6P3-4YK9QeEE0oZT06pEweWT8co.roa (hash: o0rAyUZr5noVwGqS3zuNM7Dp7MTAXKOBH68gBB9os6g=)
                          8: 6y6W7W8j_dSlc57S1luvac1zdrQ.roa (hash: rZpAH8qmJ3sCtaLAax/eniPTJwByfwh5ew5CuQY9/rw=)
                          9: 8pARH6tQiMW5VOww33fEnzxJ8JM.roa (hash: oalnnS5D3eLopK4CN73XkDh+N3g2fvrPYgN9383me2M=)
                          10: 8rDC9IgLGbOHG-ixnkG_FJFbrtE.roa (hash: jbR4b6G7mM9vrC8m296ytin0fFNIRNbHALs5IKfCokA=)
                          11: 9M_-ThZ_MlDw68ktO_KoQ_tgoFc.roa (hash: 41W7/WG92yACTO9/WSh91Wkc9P9VltWflHv1S2/kcm8=)
                          12: A-Oh0JYT9drn09RfxxPebsgJWMU.roa (hash: xjeadXzD393dXyO0vYIRfjJYtrRyYNKRWCv+NOXt0R0=)
                          13: Cg5xET6RmMQBfyR10Oj77Wt2nnw.roa (hash: 6G9wmLDzIpT6cXH6+NXZsQQtpH7ZueqUnINpN3O5z3s=)
                          14: DqWF2X2tlpaWoKW3M-h_pfiIBsM.roa (hash: K3UVs8N6n7r4Y81Q9GwwqI8qlZtJnAVbJ6DN6YqS8Hw=)
                          15: Ec0yvbah3uWGl6aKeCIyV4BmJMs.roa (hash: A1JMXoc32RJvvNxgJAfThNWBISalyWRk1AbNtmyfUiE=)
                          16: Er0gna1Ao6i_h1uI03CBuG6DDqQ.roa (hash: TomzlXw4pYAX79JT2NruPyS/6nzlgMzigQCWfaldpgU=)
                          17: ErP0F5fkJKiX_AuAdFlXGZV3RbQ.roa (hash: sxTbitBBafHgfP7tK9divXjaBvSGpciAdkX9QhgOXxc=)
                          18: HafJJlxsimcAkGfC5XJdVp437bc.roa (hash: XiyN4pRhYN4iLWMsTeJd+IJH5u+uAOaKuInZTRI3rVs=)
                          19: I33pjVnLifAKrDDK5SI7-V47yag.roa (hash: quYdAyXAuVMJx403iknj9JqLtxaoyd+2N7sJUyF6gSY=)
                          20: IfhE8S5G_YWuz-WUX0iFTE_6Lac.roa (hash: 8T/5pVSgx6eK00RZ3y1+Kj5br6QCnING8+49FCt+r2Y=)
                          21: K_H4EXlkPtozoI-jGkurBXKG_QQ.roa (hash: L2v5uARepiJycDGedpAe/oaKbrth4ngDZpC9dGc5x+o=)
                          22: OoKOMkInp2ZWnq9To3x8n1ehaG0.roa (hash: GMx+7N+zsI36SsIqXrgc1w7JdCfl3pjikdsGO457plE=)
                          23: OziGpC6souOmKReTt5dhC7pogOM.roa (hash: xgsI0qjvkbjR73ylGoxPbmV7puhCOm64ceJYIm141LE=)
                          24: QPE9lzngCgIXzXP0-DGWEUAfi9M.roa (hash: GMLzLsjh3ns47O4M7QAsAZ5/IVsZ3QFoDk3rfZ3NKV0=)
                          25: RP4INHxev_wInDhSu4um-S7JA3s.roa (hash: f1YyuOv4+6OVa9kZ9wPDrEP0lLAxHRn5uG/48QDs9dg=)
                          26: Rh81AO4KubTkwBFWfhgTgvjBWww.roa (hash: DFt+EbQyoXkJixTCxqKd4xeajElkrMIub8mpou7mh4I=)
                          27: SmU641R_8CxFq7De2crtrfOYByY.roa (hash: 0xEikSFQcdObzPP+bNYxTZs6hUpDMRnZEZ7oSCQCmMI=)
                          28: SnRjh7mFY3ZtqKgpRUVND4GTCfQ.roa (hash: lEs2Fv20mbhy3waE5I1sqd+O7RdDwyYkt+KG96yZ2vY=)
                          29: T1tGWy84dYNNbYv-6SlSsllXUoI.roa (hash: M7iV+B9Su1qfBryo6GO1u+131TqnmgFqIcz+45oZmXE=)
                          30: TSGHGo2mm4skq9NSMtfNbmDhB6Y.roa (hash: o0vuFzo0xXDRqLpQOlTMNsKiUggTuKSoQsQGM+3WwHw=)
                          31: TZNSpFdvF_kWdWvSN9xo9E7pUAo.roa (hash: L4f495xs6bPrffq9bj9nd73qk/To0son5jRvMcRUKJA=)
                          32: VIBiJE8jO2D6NekR1BaSOtCO6Ok.roa (hash: Yn3CqdZVKDLeT4Hf6VkuKU0b5C8N6Ud2qMot9S9FbDc=)
                          33: WRyJaerT_NLOYa-_Cg0jS-FIQSM.roa (hash: 5sRRgPfgMg7bo1SqFHKdzqlgLXo0JREs2XRrXZA4n98=)
                          34: YVm5y72DTJs0DwaAuSfhTY3Uph4.roa (hash: cfQzny6bsKHZPLf41ZCugPQCHPYyodk6GiVApzKZ/V4=)
                          35: YjAsGAMC_eEB6CYNvgBf6j6OFAk.roa (hash: KyPiVbEfQImn/NKw1iFAXyEm3/JiAhipN+XmFgVmjGA=)
                          36: _33YSg5P9-_VmHHErBd0KLeX1o8.roa (hash: EmfpNJ7ONZRaHQj21Ww5hNoAXm5H/OGd166T+T6P94g=)
                          37: _rhlAoPDXAOwZHj4Z6sUVJGTVaA.roa (hash: nWp5IEwVXbskUGRK7G8OBDU0Ik0dX6hm5HXG2/lzYVQ=)
                          38: a9ZQLdqgR9sb2QJEs9QjmHLgYwE.roa (hash: uZRtUaAPN/0dXwn/vI9Mfmwtm7y5LlOWq9NU99JsUUI=)
                          39: bqob2Q0-sHUtqO7FA7B7gmyqQJQ.roa (hash: /lmQztGCuwPOTwxGVz1NH7Zy4jFnY3FxpxbhlVClU3A=)
                          40: ctV3P_eoB1zIzAVZkP9TmxWjT24.roa (hash: h+xusp2PhR8hlnZc4PtsgdzzkRCbD1zyGGhvIxq+qGg=)
                          41: dD7ci-MSV8rEZ6dBQrJZinXH3Ww.roa (hash: hbDyjrM3vU5CtMU5lAYqhDJ/nIs2DnUkJ4zFik8vON0=)
                          42: dHXyz9jE3eQGaYdkCkC9OnVQUTI.roa (hash: WWIWVw1+XDUE+Hx/T4bToQB6zdC+m+hvEsGqn8mcIwI=)
                          43: g0nJjbdnPwD-8jPinUoSqSj0lgc.roa (hash: xspj0DBKJDOCU49wCJKnuJ58HmNGsG5tjAkw8mYl17U=)
                          44: kXvHw9cD2-xv7OTTWKPtRAKl1cw.roa (hash: cAbJNa6gxxdVFZvwfyWUCAksaTgKIKpGWqzcssT+j/Y=)
                          45: lgYuxVSlV2ae2TANr9cVVzNoxso.roa (hash: tO+gqX64piRxokCPmWucAHemR7Lqxypp+2DfWUpXNCc=)
                          46: lmN7pZp7G9YqWk7ywjAdRDWiG1s.roa (hash: +c6Op+EMZHgUXobLlGNLIfPXfj6DX3IrcqpjTO/NzNQ=)
                          47: oxa1T3tefNI8jMcNXAHuBuIsmNQ.roa (hash: 3LG78LsL4OHFaotsrUyC2y2Fn6pTRZyKnP3sITHsEI4=)
                          48: qM2CoT5rrwHYkfeADxIvTqQDyIk.roa (hash: fpZCo7JorYcqUObsmeetAP/fUmURHBzzoPBjqMZndwY=)
                          49: qsudUYz2hm76NRyrrXOFc7JgG-U.roa (hash: XCCrqSgWboQDzkMfnSRRG4gUCD586HLeQ/fOU1UzO74=)
                          50: rwlvB_VgdIL7xx3fg1zUzG7Lmvk.roa (hash: Dzsj11IT+d0KSr0YpBwndQ2B8rxfuaWJQea/BdKgCIM=)
                          51: sK7vRxYyJ65XJVAysYweH-WYEks.roa (hash: UJhW79Q11d1shT3/cfF0A99JiqhdJFGVzi2YicBUfXw=)
                          52: uoAmCYb4JGma3FeQH3_YGCuhsJw.roa (hash: EcH49+F0N5aQG4uqhNbGiVfV1+BO1VpTeFehTTxWi2g=)
                          53: wXk9jLeC3C5VuuQaipZ-MHkgjHM.roa (hash: zaWayCz3/z3tt5f8nScALTzCebKBSYmrwMrWEFmXKLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:ed:9d:0b:0e:80:e8:62:dd:69:48:46:e6:82:85:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
        Validity
            Not Before: Jul 28 08:53:14 2026 GMT
            Not After : Jul 29 08:53:14 2026 GMT
        Subject: CN=70d2f3933fe589a8194996cb482ed498a84d877e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:1a:fd:67:61:50:a0:93:0e:0f:ad:58:f7:
                    48:e5:59:9b:04:ad:29:35:46:15:c9:aa:b9:4b:02:
                    8e:3b:c6:12:fc:91:15:7e:f0:0a:04:1e:98:a7:7a:
                    ea:aa:49:e2:8e:16:b4:0a:35:67:e5:2f:5b:57:4a:
                    c6:b0:85:10:0f:8e:74:6a:36:a3:b4:10:ca:c2:75:
                    17:42:0f:0c:db:36:ba:4b:6f:8c:bf:9b:b0:1c:f9:
                    97:21:a6:a8:31:22:f5:db:66:81:39:fa:93:3f:41:
                    80:4f:ac:0b:64:97:73:5e:2f:e6:fa:af:49:53:a5:
                    a3:51:43:29:16:0f:e3:d9:90:eb:51:2e:3b:c8:17:
                    89:51:11:10:98:43:e1:13:90:6c:c6:89:db:43:2c:
                    a0:c0:94:e1:4b:2b:26:8f:b2:75:65:d8:a4:11:c7:
                    19:ac:3b:c4:1c:04:bd:77:79:e6:54:bd:bf:57:75:
                    2a:fb:d0:fc:2b:34:db:7e:1c:d4:38:4c:4a:eb:27:
                    97:fa:81:1e:48:2e:bd:ea:c5:f1:cb:ad:c9:4b:39:
                    bc:30:56:45:8a:c0:d9:c4:2a:11:88:49:14:3a:70:
                    2e:0f:82:03:b8:92:a2:c4:a2:bf:46:af:9f:52:0a:
                    81:95:b6:e3:e1:ed:96:37:6a:ff:8a:27:bd:61:86:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D2:F3:93:3F:E5:89:A8:19:49:96:CB:48:2E:D4:98:A8:4D:87:7E
            X509v3 Authority Key Identifier:
                keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:13:04:c3:88:1c:d8:10:3a:8f:fc:61:97:2f:51:f8:8e:8e:
         c4:7e:ec:4d:30:71:f7:f1:61:a7:2a:d1:f6:c4:31:1e:cd:87:
         d1:4e:7f:dd:76:a6:e3:6c:5b:53:5b:6d:af:fe:5a:46:c7:2f:
         ec:5d:ae:16:0a:1d:0b:1a:9f:65:c1:10:05:79:53:d2:30:84:
         6b:98:f7:2a:fc:7c:5e:fe:b3:8d:b0:f5:b7:dd:58:44:08:90:
         9d:ca:65:3b:4c:6d:5b:44:d7:9d:75:af:f3:7f:e1:ef:11:44:
         4e:1f:55:52:74:20:55:22:f9:03:d7:b4:12:fe:55:4d:f4:c2:
         53:aa:31:77:89:5c:6f:d8:dc:c6:76:33:96:b1:7e:65:16:cd:
         b8:04:a4:fa:ea:a8:2d:d8:25:e0:d0:9a:20:5e:94:06:c4:85:
         ce:50:ef:e9:a4:cf:8b:e9:7e:70:fb:ac:ec:33:a6:77:09:82:
         9d:04:4b:89:3a:95:8f:81:4e:0a:ad:d9:33:24:3d:5f:29:ca:
         14:ec:f8:46:06:13:48:85:47:01:57:e7:ea:24:73:d6:a9:20:
         b9:26:4d:d4:c5:a1:50:ec:99:c6:8c:57:b4:fd:ca:cc:65:45:
         80:76:d5:99:62:ec:4b:a8:98:db:09:5b:1e:d4:be:dd:0d:6a:
         7a:03:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----