Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
File:                     49HX1DNmpbAGPDdXExnfpDLRUxs.mft (raw, json)
Hash identifier:          uKUy5eG4drAPnh1INmd7NzEnR6Nk1NJ5kEv6l1ke1k0=
Subject key identifier:   8C:EB:77:D8:36:EB:2E:89:C9:41:46:FE:B6:7F:4A:D6:D7:86:DA:7C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Certificate issuer:       /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial:       019EBF239B3684926B9CDCF7F73F8DEDCEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
Manifest number:          D1
Signing time:             Sat 13 Jun 2026 04:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:42 +0000
Files and hashes:         1: 1aDQEQPBPAC_w_8fqiW4AIxGWMQ.roa (hash: RnK+mcoz8AaUtmlED2tvPM299d9IKX09E3ef+ksQnZg=)
                          2: 1jPrjcP2Oj8_AmzW5zOOcEBA9t8.roa (hash: AEgZaSkuaCzxd1rcrgHOutoGBk8puLKlgjW59hEh1Oo=)
                          3: 1qpAl4bTS8EVENkLAwILH5C8a8A.roa (hash: xf0YY0lUTQ36a4ZM0Ib91bNmA7fKC7ZOqgsJfC456BE=)
                          4: 21NcYfRsremo1THdF4Fu_-amfjk.roa (hash: vjZQelzID1bkQLOFIHE/oKQQTaP/AQvVzCiWIvtxNWA=)
                          5: 2VKIV5Pmpq7i49-7CNPhkYLJ0Ws.roa (hash: 9yfUaLJe3s5BNXMRs/G6I4N3tD+yudXfO8n0JDvf1PQ=)
                          6: 2fOu3akN7Ffewk90s7BRFJLj9vQ.roa (hash: tbJdKWT2BB43JlYmWbpZmGtBR96IOquty8lnbV7NgJw=)
                          7: 41mMzi-VItWAIIDCWzKQceo6QQQ.roa (hash: G/9syssDFNQ9cx1LG2kfAnt4Dm8VD6WC5cHBNn1mvaA=)
                          8: 49HX1DNmpbAGPDdXExnfpDLRUxs.crl (hash: /xyv+Jcob7m40wkAWS2AWraPo9SixsqGNtTQ9mk3Dec=)
                          9: 5K8ok207PvC5p786MjVAljnosd0.roa (hash: nJalIRGjF6v3f50vQemTpioud2dpZHABU6LXzGwHaPU=)
                          10: 6y6W7W8j_dSlc57S1luvac1zdrQ.roa (hash: rZpAH8qmJ3sCtaLAax/eniPTJwByfwh5ew5CuQY9/rw=)
                          11: 8pARH6tQiMW5VOww33fEnzxJ8JM.roa (hash: oalnnS5D3eLopK4CN73XkDh+N3g2fvrPYgN9383me2M=)
                          12: 9M_-ThZ_MlDw68ktO_KoQ_tgoFc.roa (hash: 41W7/WG92yACTO9/WSh91Wkc9P9VltWflHv1S2/kcm8=)
                          13: 9bJfCaU9jjcbgwkv3514HV6a3t0.roa (hash: Iu6zKu3vexFGwK/OJ83RH5QR5u7MhPbyO8svvIWVbHU=)
                          14: A-Oh0JYT9drn09RfxxPebsgJWMU.roa (hash: xjeadXzD393dXyO0vYIRfjJYtrRyYNKRWCv+NOXt0R0=)
                          15: A4Dh7ZjplGb-PN4SKQhst4MePwI.roa (hash: stPyk70c80f5gGOf1fecn++zbSc8YHTYr3VUl3oBgHQ=)
                          16: Bga40NLFs-oNsdLSCybRNnC_plc.roa (hash: nw8QqSDhZLs/ZxfWTljSeJkxJYpk/iQ+hlJe4URoTP0=)
                          17: CLxmmzY5XSgsxI8CRjjJzvpYmws.roa (hash: KY/55fXsDwYRuaze9aKDk9CwxlXC0t+tJnvqtD5wY2g=)
                          18: CmjvQVjXtaOjlF3EqmLw4ipI_lc.roa (hash: 6EfZvO/i/QKaYyRocEzvnL4Y1ZMOUb1nG3zI9JwNSXs=)
                          19: DXhW05AaUxKgKfFZALTUXoukrf0.roa (hash: aygJbXm0jBENKkWE5cq/ZPih5L5O7wNfBCDVk2kAw5w=)
                          20: Eg95GWvbL0O2S6zlowrp_XJHc_8.roa (hash: MucaLnKlWAbPwb3JPaNgBM1qh35bfs5eUrpZwZVUSYQ=)
                          21: EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa (hash: UeXhJ2qTzLZJgTHgN9h/HZW4A+wpinm+DBVQ9mkXo+g=)
                          22: Hov7V6hVEmjU5ndiGUSv_Rn_SAU.roa (hash: uVN/2DfNKjtZgXNjK/TPWRA/QSvv58WdyhUkL8zDXMg=)
                          23: IRK7I1amzHidRVxJZDigDz1Gkp8.roa (hash: ePGXanE4zQTDq+4595u/jPY6c29fMe4Mj77oOpq/dPU=)
                          24: IfhE8S5G_YWuz-WUX0iFTE_6Lac.roa (hash: 8T/5pVSgx6eK00RZ3y1+Kj5br6QCnING8+49FCt+r2Y=)
                          25: ME6IpY0e6is0iL7jrzO8oaY85Rw.roa (hash: rAekRKCmN/5lCziqs3wus7Ac161OgYY0VDQ691q63tQ=)
                          26: MFRBciKeOLaEVII8EoYGAjInjXo.roa (hash: 1jrRBfFK1kBjJlTIkFS2C173ptvFoRQ4+QeEsL2DXVU=)
                          27: NULvqw0kCs2_ZCjWBt2VvJZGol0.roa (hash: Quuw7IcBlyEOqPvHtcoQTgXeSrnSYFAW6dEgncEw35U=)
                          28: Qq56FaCGU2IzplgSaj-xYpdHx3g.roa (hash: wz8dI35s4/dwIMjdXNsVkJaK1oAp+agECI61HaKZ3Dk=)
                          29: SmU641R_8CxFq7De2crtrfOYByY.roa (hash: 0xEikSFQcdObzPP+bNYxTZs6hUpDMRnZEZ7oSCQCmMI=)
                          30: SnRjh7mFY3ZtqKgpRUVND4GTCfQ.roa (hash: lEs2Fv20mbhy3waE5I1sqd+O7RdDwyYkt+KG96yZ2vY=)
                          31: TSGHGo2mm4skq9NSMtfNbmDhB6Y.roa (hash: o0vuFzo0xXDRqLpQOlTMNsKiUggTuKSoQsQGM+3WwHw=)
                          32: VIBiJE8jO2D6NekR1BaSOtCO6Ok.roa (hash: Yn3CqdZVKDLeT4Hf6VkuKU0b5C8N6Ud2qMot9S9FbDc=)
                          33: WRyJaerT_NLOYa-_Cg0jS-FIQSM.roa (hash: 5sRRgPfgMg7bo1SqFHKdzqlgLXo0JREs2XRrXZA4n98=)
                          34: aFo7O0fFwgQXegvkfL92mW-s4oQ.roa (hash: JwPvNbbv8zXsoA37xp0t914U5rIu6z8P0o4Ua6HueKM=)
                          35: c9rAo0EmNEjHl-r5VQD1G12O7fE.roa (hash: MhVSyyrZG4aTJFZKHlSu1nxe0q5tXAhm/l6ss8T1Dlc=)
                          36: dD7ci-MSV8rEZ6dBQrJZinXH3Ww.roa (hash: hbDyjrM3vU5CtMU5lAYqhDJ/nIs2DnUkJ4zFik8vON0=)
                          37: dHXyz9jE3eQGaYdkCkC9OnVQUTI.roa (hash: WWIWVw1+XDUE+Hx/T4bToQB6zdC+m+hvEsGqn8mcIwI=)
                          38: e84C3Z_POn6Dij3xHqkWvlvMlrg.roa (hash: LZb7HGnie/ujIbNTTPMrLlk4OP6qlKKV+DaKDgWeVD4=)
                          39: ls9EpRGVkf9uWGqpy9PWsdJvAig.roa (hash: /+rx7O9bDvus40VW4OOg2la7Y90XX0v92m6a9U2nDEM=)
                          40: mxOorWo-m_r3xYBzwQIdh2VNV44.roa (hash: JTeBGXBD5KV5hhTQfElIRq4ziKeL8qEIUKefs4GspgQ=)
                          41: oL8dRFTa-VXT5pt2mawCdeRxYS4.roa (hash: fxvt25oPqpvVhBCod9OfMtcD4pNykpzYpCWzeg2ziD0=)
                          42: pAsKvPuORsZKCevCTbS1CjWZF3w.roa (hash: taF3uPpvQQqinvc1nmhBfaKAOo85dutBVmam/L0fc30=)
                          43: pH82n877df1QzqVfRJ4WV5Nbb40.roa (hash: DMj3my5dZLLROve7XUkC+lZz5qbjerzJZCHCYCSK+HE=)
                          44: rwlvB_VgdIL7xx3fg1zUzG7Lmvk.roa (hash: Dzsj11IT+d0KSr0YpBwndQ2B8rxfuaWJQea/BdKgCIM=)
                          45: sxJAWWu9dW0Sz5eV-3SNztXEGX0.roa (hash: USyn7uTVqu2APOEFm/FzAlI2jxZAFHjhOVg3RtWWka8=)
                          46: uoAmCYb4JGma3FeQH3_YGCuhsJw.roa (hash: EcH49+F0N5aQG4uqhNbGiVfV1+BO1VpTeFehTTxWi2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:9b:36:84:92:6b:9c:dc:f7:f7:3f:8d:ed:ce:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
        Validity
            Not Before: Jun 13 04:00:42 2026 GMT
            Not After : Jun 14 04:00:42 2026 GMT
        Subject: CN=8ceb77d836eb2e89c94146feb67f4ad6d786da7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:61:65:c5:e3:58:f8:a5:11:ab:23:2d:fe:
                    fd:e7:30:71:94:4f:2d:39:95:62:c8:da:21:42:b4:
                    98:ce:a6:8f:3b:51:f8:21:a6:d5:32:67:e8:50:ee:
                    21:e5:48:0d:84:30:7f:4f:0d:1d:8d:f1:f0:d1:e7:
                    b7:49:9d:20:63:a1:f3:87:1f:1d:7b:74:80:c0:6c:
                    cb:1e:05:e2:be:34:5a:e7:7f:f7:96:c8:a2:57:fa:
                    08:9b:a9:9b:d4:93:f0:d6:d2:a4:4a:75:7d:30:58:
                    48:4e:2c:5b:d4:0e:01:0e:d5:e1:57:5b:d4:6f:27:
                    f0:d4:8b:0d:a0:bb:22:83:0e:dd:b8:40:42:9f:74:
                    76:e8:d0:b1:e1:a6:66:ed:c5:0b:d5:e0:66:e4:97:
                    1a:ec:46:fd:c4:27:53:a6:c5:0e:c9:74:8c:2d:6d:
                    3c:89:3f:bc:6d:ce:36:2d:c1:83:58:ea:2f:c4:1b:
                    06:b2:e4:74:84:c1:c8:79:f6:c5:df:75:38:7d:b5:
                    a8:31:71:17:3d:4c:54:5a:39:a2:b4:d1:52:72:83:
                    43:8b:c6:96:1c:f0:65:11:c9:81:f6:48:88:dd:72:
                    f4:66:b3:a9:1b:9f:a6:9a:9f:82:5e:50:11:a8:d6:
                    d7:4b:29:b1:c1:cf:94:01:e0:13:5f:db:7e:d1:b9:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EB:77:D8:36:EB:2E:89:C9:41:46:FE:B6:7F:4A:D6:D7:86:DA:7C
            X509v3 Authority Key Identifier:
                keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d9:c2:5c:e3:81:f2:4c:c8:87:48:05:82:42:5d:94:01:f5:
         fd:4a:88:a7:b8:5a:c0:dd:65:d9:98:eb:d9:bd:96:cd:31:8b:
         26:81:94:0a:4f:50:4f:cd:a6:42:4f:7f:c0:9e:1c:06:f8:96:
         54:e6:12:85:2a:b6:30:04:e2:ae:4a:8d:62:d9:10:7e:61:1a:
         8c:9e:c6:b6:6e:21:fb:3f:16:c4:74:07:e4:89:8b:31:80:8d:
         81:8c:54:68:a8:1b:86:50:f9:a6:cb:aa:c9:a2:a2:c9:8a:08:
         5b:0c:3c:ca:e5:f9:0b:a8:38:90:2a:24:79:2c:e8:9f:84:aa:
         b4:8b:b7:57:f8:a2:01:75:c8:12:d0:72:60:99:68:61:e7:67:
         da:56:be:49:22:f5:01:20:9d:9c:2a:26:91:bf:c6:c6:65:3f:
         9e:5c:b7:00:a9:b6:19:9c:a4:2f:8e:a0:ad:1b:42:51:b7:b3:
         dc:2c:6c:73:01:5f:95:76:68:d4:39:12:f7:1a:24:1d:77:12:
         9e:d9:fa:d8:ef:a9:93:52:b0:53:76:95:e9:30:ca:db:9c:6c:
         14:3d:07:8f:51:67:15:23:34:30:80:6e:08:21:d1:a2:39:47:
         e8:94:d4:5d:16:bf:59:21:13:45:b8:0c:5c:5d:27:15:d9:5d:
         96:cc:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----