Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          6IAVK7t2446QPf0nqdoUmDJNy7zCx0KvzCZ2hlqadrA=
Subject key identifier:   5A:3D:0F:4B:80:D6:01:38:52:D1:FD:19:E8:5D:B6:3C:76:95:3E:F5
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019EBEECDF3822FCDD7EEE7C1DAD07C1C739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1A35
Signing time:             Sat 13 Jun 2026 03:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:55 +0000
Files and hashes:         1: 04y30fjyI-3BDJ7uz2F505Z72u0.roa (hash: aZa8T3ZsQHcRS71nTo9v8vfzkySM2t6KPqF9AjnBbwU=)
                          2: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          3: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          4: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          5: 1VLg1aY9v7jaSjHtofK36IMeBaE.roa (hash: HI2whi4CG4KcDsjD2jvuiBEFXV0jVOJ6ZL1iFW2q1Rc=)
                          6: 28uNguySV9FxVmWhQEdaW5jt540.roa (hash: 0ULn8cAnuq4gs0Nanlvx5FnInPzMeeOp0GfmkkuHGbk=)
                          7: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
                          8: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          9: 8DwDtE_zLMPfhC2LWLBMv8i2DIk.roa (hash: s83tT0zl7wdD8/rswUNE/caIDGeEK8q3CUDy62J1e3k=)
                          10: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          11: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          12: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          13: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          14: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          15: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          16: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
                          17: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          18: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          19: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          20: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          21: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          22: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          23: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          24: ZAkzvDuShqbgdA4si8lgDBLLYcM.roa (hash: gpLWb00jmi2CBQgo9H2EFZ0+OdBOrkyQzKyxnR7pVDU=)
                          25: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (hash: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=)
                          26: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          27: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          28: dqTANP5pNZTCRfs274ktIJ5kyVE.roa (hash: A8pKTaM/ilVYUk6hX24CD6ZMeMiPQwdfZB9Z9vekHdY=)
                          29: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          30: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          31: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          32: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: e5e4Sv3n38X0Ie2U597MMb4XDZ3KuAjc2gBEq07fhN4=)
                          33: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          34: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          35: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          36: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          37: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          38: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          39: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          40: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          41: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          42: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          43: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:df:38:22:fc:dd:7e:ee:7c:1d:ad:07:c1:c7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jun 13 03:00:55 2026 GMT
            Not After : Jun 14 03:00:55 2026 GMT
        Subject: CN=5a3d0f4b80d6013852d1fd19e85db63c76953ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:31:6b:36:b1:bd:07:42:d9:24:a4:d0:b7:
                    63:4b:77:f0:8c:6d:b4:26:17:40:8b:ad:6c:6d:c8:
                    2a:68:ff:14:70:5e:1b:e2:ec:48:d3:38:5d:1f:49:
                    01:fb:a1:59:9b:34:3c:81:38:d4:07:f9:18:5a:9b:
                    41:d8:4a:46:06:f3:ea:e1:d5:6c:b6:83:fe:3a:de:
                    0d:f9:f7:02:6a:80:01:17:92:4c:c4:3c:c1:90:b5:
                    0d:5a:2b:77:12:16:f5:86:89:91:d9:05:ec:29:ec:
                    8c:ab:da:1c:5b:ce:34:1f:a2:b8:0a:f9:7b:9d:09:
                    3d:e4:fd:cc:f4:c6:9d:f8:92:61:87:90:53:b3:f7:
                    d1:7b:3a:14:b3:23:5b:c8:8d:7d:06:ca:ff:fd:00:
                    3c:67:bf:73:2a:ca:0c:83:40:bf:7e:1f:97:bb:84:
                    4d:ed:ca:81:fa:63:76:b1:1a:ce:7f:30:55:76:b2:
                    37:5d:89:0b:7c:e1:71:37:39:3d:03:5f:e0:0d:f3:
                    79:38:f8:c9:a7:8f:3d:c2:17:7e:aa:4f:90:99:b1:
                    fc:7c:92:f4:ca:c2:66:4c:22:ab:29:91:84:c6:8a:
                    bb:68:cd:67:49:72:3d:cc:87:f1:9c:4f:0c:16:f0:
                    4d:c0:b5:31:0f:25:91:fb:b8:08:38:39:5a:3b:1a:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3D:0F:4B:80:D6:01:38:52:D1:FD:19:E8:5D:B6:3C:76:95:3E:F5
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f9:4c:dc:a5:67:a7:ed:1f:d6:45:84:d2:8f:9b:f4:dc:5c:
         c3:07:93:a5:a6:aa:83:3f:67:87:97:be:1c:16:b9:2c:69:a9:
         a7:ae:f2:e3:ba:73:65:ae:72:5c:bc:de:32:12:08:39:2f:a8:
         83:a7:20:c9:87:b5:ad:d8:7c:f0:60:58:97:25:4d:6b:bb:85:
         ba:74:a5:b4:48:59:74:05:cf:49:0b:c4:40:71:dc:e6:8d:ad:
         17:7a:89:46:f9:69:1a:ce:91:6d:43:62:7b:7a:3e:25:e9:99:
         40:23:30:cd:18:58:e1:d6:8b:6a:b8:d8:33:4d:e3:f0:62:c9:
         fe:0f:1b:be:24:51:f6:e8:f5:17:d6:c1:37:8f:49:d3:c6:1d:
         dd:3e:45:d0:b6:c3:18:26:ee:c5:e4:b3:51:38:fb:41:95:5c:
         67:78:79:4e:04:6e:63:0d:a9:ee:f9:e8:2b:16:a5:ee:d1:1a:
         30:d5:3a:d3:fb:32:4e:bf:ca:95:70:21:33:d2:68:3f:08:f6:
         1d:1a:d5:4b:9f:dd:90:33:9d:a5:32:28:21:e7:80:91:8e:07:
         e5:da:3b:a8:e2:f3:60:92:66:70:69:b8:2c:d8:dc:4a:44:d8:
         1c:82:5d:db:8b:1f:37:cc:8b:df:32:ff:69:04:e0:86:39:7c:
         31:e2:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:00 2026 by rpki-client