Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          84cbkApCmeOf7xNGquqFV9rV8CqXGxk8HkUvZrtplgs=
Subject key identifier:   9F:61:9A:75:40:92:BA:0D:8F:35:21:40:DF:03:62:31:17:F5:2C:DC
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019D97AACEEE4BD73E66EE0F8367A014D612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          1997
Signing time:             Thu 16 Apr 2026 19:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:46 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (hash: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8=)
                          4: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
                          5: 1LK6q103xKr7zFHTqfU4dHStwII.roa (hash: u2a/y3EzQctfyAgJiu2mqrq73OttQ/DadVLtNi/pOXQ=)
                          6: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
                          7: 5LduChVgDdyfCHVYl4QO7YMXvZs.roa (hash: 7TPUEM8dI13WYBgC8Y1wxlMkMAlXoxbpVP38cgVmA2A=)
                          8: 8DwDtE_zLMPfhC2LWLBMv8i2DIk.roa (hash: s83tT0zl7wdD8/rswUNE/caIDGeEK8q3CUDy62J1e3k=)
                          9: 9OIUHm9Q3_MU-4wtq3AAtxG3G6I.roa (hash: bxrigFDDiTvViSLcD2+MHp7/O7Bye6w+t63Ng3FAzqM=)
                          10: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          11: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          12: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          13: GI33crLs1YhbryhcezjNjDVjS1g.roa (hash: KA1gXvMpl17ErTAeepPr4wN+L34jC9m0lf4C1BjqtxU=)
                          14: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          15: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          16: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
                          17: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          18: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
                          19: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          20: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          21: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          22: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          23: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          24: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (hash: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=)
                          25: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          26: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          27: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          28: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          29: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
                          30: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: xuoJOXaD0WffEOTPkJ7+zWxxzJmrO/4+skdaTbuO63I=)
                          31: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          32: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          33: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          34: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          35: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          36: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          37: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          38: sKmeiayA9VEeFneHBogrVXd9Dz8.roa (hash: gixYXs8OW9/FjuOE8LqMnrageVpFQza4LwILa+VJgTM=)
                          39: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          40: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          41: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          42: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
                          43: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (hash: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:ce:ee:4b:d7:3e:66:ee:0f:83:67:a0:14:d6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Apr 16 19:00:46 2026 GMT
            Not After : Apr 17 19:00:46 2026 GMT
        Subject: CN=9f619a754092ba0d8f352140df03623117f52cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:83:4f:46:91:5d:0a:0c:33:03:2c:6b:68:
                    b9:24:9b:62:a8:2c:2f:b4:3d:e2:3d:14:05:d1:7d:
                    17:5e:d4:d7:2e:b0:67:4e:27:ac:15:fc:6d:e4:b5:
                    f9:49:81:fd:d4:2c:87:b9:2b:49:89:a7:6e:46:5d:
                    07:34:c1:73:c3:a9:a7:b5:ff:0f:09:bb:48:fc:56:
                    fe:0a:dc:f1:2a:7f:a2:dc:f5:e5:e9:b0:78:9f:58:
                    62:74:a0:00:9d:dc:32:52:9d:50:98:d7:66:f2:e9:
                    f1:d2:d7:0f:1c:c6:5b:57:79:54:af:6b:d2:af:8a:
                    0b:84:a5:06:2b:b6:d5:fb:f2:54:32:f6:4a:89:26:
                    4f:96:c0:ba:c6:de:32:78:e4:6c:79:80:d2:d7:3e:
                    07:14:a3:dc:bf:e7:5c:ab:7f:da:2c:65:40:83:89:
                    2c:7e:2b:22:49:ad:c2:47:66:22:18:2e:06:e8:08:
                    69:db:51:05:b4:d4:3a:3d:81:f1:4f:84:d3:a1:4d:
                    de:fd:4e:06:bd:90:e0:e1:f7:aa:90:cf:6e:27:9d:
                    4d:0b:63:04:7a:51:20:2e:46:58:19:8d:dc:0a:0d:
                    8e:4e:eb:07:71:2c:68:11:41:b1:ff:89:a4:c0:5e:
                    09:b2:a6:7c:fa:c7:ea:90:d5:92:48:d1:31:fb:69:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:9A:75:40:92:BA:0D:8F:35:21:40:DF:03:62:31:17:F5:2C:DC
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:ea:88:e2:66:18:72:72:31:cf:d2:34:1f:1c:49:8f:d7:
         d3:2f:42:91:66:ce:ef:c5:f7:3d:8e:eb:d1:84:6b:e2:33:6b:
         9c:85:0d:bb:b8:5a:1d:c3:da:06:c9:82:b5:a2:37:9e:9f:ee:
         b4:cc:a9:2d:47:f9:7e:35:5f:ae:16:56:3a:a6:29:bb:9a:67:
         47:de:80:3f:47:2b:78:1b:e6:ba:8e:ef:a3:63:cc:6b:5f:ff:
         bb:8d:fe:ab:96:46:b0:32:46:36:11:ce:9a:23:37:1b:61:2f:
         d2:0a:fe:f2:e5:42:a0:fd:07:b4:f1:e6:bd:58:1c:8c:cc:43:
         b0:2c:b0:5c:c9:6e:1f:0b:d4:66:df:d8:44:ea:cc:b6:f2:00:
         5f:9f:87:1c:99:f6:c0:82:31:98:39:d1:8c:65:85:a5:1d:4e:
         a8:1b:93:6c:d5:32:03:57:cd:d2:93:ab:66:f3:65:04:0b:c8:
         c6:49:d3:76:0b:73:bb:8f:e7:b0:7a:ab:56:02:3a:2e:40:c9:
         30:0b:a5:68:b4:c5:b1:6e:33:4b:72:46:94:b9:c9:13:3e:ee:
         55:ff:4d:6d:a5:92:16:eb:c6:d3:81:19:54:3e:03:31:57:80:
         f5:e4:a4:a5:56:ae:11:75:80:51:4c:ba:fa:2d:68:15:28:ae:
         dc:67:d7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xqs7uS9c+Zu4Pg2egFNYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwNDE2MTkwMDQ2WhcNMjYwNDE3MTkwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZjYxOWE3NTQwOTJiYTBkOGYzNTIxNDBkZjAzNjIzMTE3ZjUyY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8SDT0aRXQoMMwMsa2i5JJtiqCwv
tD3iPRQF0X0XXtTXLrBnTiesFfxt5LX5SYH91CyHuStJiaduRl0HNMFzw6mntf8P
CbtI/Fb+CtzxKn+i3PXl6bB4n1hidKAAndwyUp1QmNdm8unx0tcPHMZbV3lUr2vS
r4oLhKUGK7bV+/JUMvZKiSZPlsC6xt4yeORseYDS1z4HFKPcv+dcq3/aLGVAg4ks
fisiSa3CR2YiGC4G6Ahp21EFtNQ6PYHxT4TToU3e/U4GvZDg4feqkM9uJ51NC2ME
elEgLkZYGY3cCg2OTusHcSxoEUGx/4mkwF4JsqZ8+sfqkNWSSNEx+2nC2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9hmnVAkroNjzUhQN8DYjEX9SzcMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcrqiOJm
GHJyMc/SNB8cSY/X0y9CkWbO78X3PY7r0YRr4jNrnIUNu7haHcPaBsmCtaI3np/u
tMypLUf5fjVfrhZWOqYpu5pnR96AP0creBvmuo7vo2PMa1//u43+q5ZGsDJGNhHO
miM3G2Ev0gr+8uVCoP0HtPHmvVgcjMxDsCywXMluHwvUZt/YROrMtvIAX5+HHJn2
wIIxmDnRjGWFpR1OqBuTbNUyA1fN0pOrZvNlBAvIxknTdgtzu4/nsHqrVgI6LkDJ
MAulaLTFsW4zS3JGlLnJEz7uVf9NbaWSFuvG04EZVD4DMVeA9eSkpVauEXWAUUy6
+i1oFSiu3GfXpA==
-----END CERTIFICATE-----