Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          EK9DKIy5mO1lS4VypEEs3aBZ8ymzlLzcyBdKJa3rYIw=
Subject key identifier:   8F:68:54:E8:41:9C:A9:CA:49:EF:CB:F9:63:FF:B4:EE:3B:9B:F3:6C
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019CA97C7AD50D2FA2AB410F9BF5300E47ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          190E
Signing time:             Sun 01 Mar 2026 13:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:33 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (hash: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8=)
                          4: 2uou-TZfMBCmDn3qqHICuBlL_c0.roa (hash: avZKLrCguu9xglaDNrlf7M6BslHtDyUXW1oXAQxH7jo=)
                          5: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
                          6: 8HFihh9Y55Uf5MctfqKSAvHPbGA.roa (hash: ++B6h7NUN86CMKkaiP9o3Yh1S0BRmdY+giTr6rfYnk0=)
                          7: BM1RQxvvyIKBL8g4zBcWqJcB1Mo.roa (hash: CQKQvWkgdhGn8ReQSUuQBWNAnJvAr9pLNfF5vfp4cXU=)
                          8: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          9: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          10: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          11: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          12: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          13: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          14: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          15: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          16: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
                          17: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          18: QGOUl6cOXI5SdOCs4uoyhWlaEsE.roa (hash: WqfVmqTlGSTwM8JccYt4gG+EC62yBErfUVOCMQdkE0I=)
                          19: R94LQyN_Bice-mqwm23_7oahpdE.roa (hash: uN+A8+G8qVqbMZurihOGeCkHxzaNIfplcMeMNGBCPMA=)
                          20: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          21: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          22: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          23: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          24: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          25: iVQy5SoSM4zkBUfQGE_Ln3tM0tE.roa (hash: u0/p39IWrD8QpSLa+CIZwp7Qq2RGh/gjiOP2gVYoORQ=)
                          26: jikjhRC9On9DS_EGfDRYMPVRdr8.roa (hash: JYeTWOZHFu5Qv/WHfiXn05hdjtiQq1bvSJkinnP55Ck=)
                          27: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: Ig8T5ZBjc5q/+qi3/Ti8IQ1mJWT8V2Gr3bDfjNb1zvA=)
                          28: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          29: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          30: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
                          31: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          32: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          33: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          34: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          35: sKmeiayA9VEeFneHBogrVXd9Dz8.roa (hash: gixYXs8OW9/FjuOE8LqMnrageVpFQza4LwILa+VJgTM=)
                          36: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          37: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          38: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          39: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
                          40: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (hash: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:7a:d5:0d:2f:a2:ab:41:0f:9b:f5:30:0e:47:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Mar  1 13:00:33 2026 GMT
            Not After : Mar  2 13:00:33 2026 GMT
        Subject: CN=8f6854e8419ca9ca49efcbf963ffb4ee3b9bf36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:22:ef:3e:25:ef:3a:b8:ab:d9:d7:66:56:
                    94:3c:be:df:ab:fc:bf:35:37:5d:17:fa:d7:03:de:
                    6c:e2:38:58:cf:c6:4b:29:32:29:8c:d6:35:e6:cb:
                    2a:99:8d:63:b2:af:e7:16:48:57:0d:1e:a0:de:55:
                    1f:f7:cf:67:a9:49:90:ae:c4:48:5e:af:f0:b7:fb:
                    a1:3c:90:d3:90:44:ac:19:07:95:66:ba:42:21:58:
                    ed:8c:e1:e4:39:f2:2f:cf:54:98:f1:3b:3a:59:75:
                    81:03:60:b8:3a:ee:01:f4:61:36:8f:4e:5a:ee:1e:
                    38:5e:66:4d:52:9d:d6:8f:71:40:a4:5a:a8:af:a7:
                    76:49:d7:9a:f9:55:04:41:4a:ea:3d:96:9d:8b:43:
                    f8:e0:2f:fa:3c:ef:2d:b7:ab:61:58:1c:65:65:0c:
                    dc:99:fc:78:10:6f:b8:8a:2c:5d:f1:4b:62:8f:cd:
                    6b:b2:64:bf:63:49:e3:ab:8d:e6:33:fd:27:d1:6b:
                    ba:66:7a:8d:fd:9e:e9:ae:3f:da:63:0e:f9:32:91:
                    5f:70:98:5d:9c:a3:c4:eb:f3:23:97:c9:e4:6e:7b:
                    a0:f7:9a:de:2d:2d:db:ba:37:62:1a:f7:f8:d9:91:
                    c4:f0:83:44:56:c0:b3:3d:56:fd:4a:fd:65:5b:f1:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:54:E8:41:9C:A9:CA:49:EF:CB:F9:63:FF:B4:EE:3B:9B:F3:6C
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c8:a0:30:00:7f:17:af:92:9d:27:37:e0:ac:50:90:88:15:
         86:3c:c6:f6:1e:f2:97:b4:f9:b5:96:09:60:83:23:be:0b:23:
         0d:32:d0:77:5d:af:82:b6:4a:bc:8b:0d:fd:72:00:42:44:99:
         68:d7:b9:05:50:17:1f:f7:8a:7a:18:a4:91:bc:77:45:a4:9e:
         68:8b:ce:6d:8f:21:8f:f8:2f:df:28:04:9f:ec:de:0c:62:8a:
         90:91:6b:6b:fd:f3:dd:0d:aa:a1:0e:5d:7f:3d:41:27:9d:a8:
         21:5d:dc:ef:80:28:b0:ed:e0:25:47:96:ea:04:ce:46:65:f5:
         74:fb:03:f6:86:75:37:a5:6e:10:81:ec:81:88:65:70:68:58:
         55:25:4a:d4:46:ae:70:6b:59:50:46:62:41:f5:fd:e5:02:a0:
         01:d2:e3:b3:8a:ee:27:8f:42:9c:6e:46:02:5c:f0:04:62:bd:
         92:04:66:3e:ec:9c:39:49:de:cc:80:61:20:0c:6a:be:e1:61:
         4e:54:4f:c2:f1:e2:17:7e:34:31:7a:c0:a8:17:b0:73:b4:30:
         f1:8c:eb:75:c9:46:68:a9:15:06:d1:f4:25:2f:16:5f:2a:07:
         d9:81:70:cf:ba:7c:2d:cf:48:77:08:2e:58:60:73:bf:1b:b8:
         2c:01:bf:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfHrVDS+iq0EPm/UwDkftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwMzAxMTMwMDMzWhcNMjYwMzAyMTMwMDMzWjAzMTEwLwYDVQQD
Eyg4ZjY4NTRlODQxOWNhOWNhNDllZmNiZjk2M2ZmYjRlZTNiOWJmMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmQi7z4l7zq4q9nXZlaUPL7fq/y/
NTddF/rXA95s4jhYz8ZLKTIpjNY15ssqmY1jsq/nFkhXDR6g3lUf989nqUmQrsRI
Xq/wt/uhPJDTkESsGQeVZrpCIVjtjOHkOfIvz1SY8Ts6WXWBA2C4Ou4B9GE2j05a
7h44XmZNUp3Wj3FApFqor6d2Sdea+VUEQUrqPZadi0P44C/6PO8tt6thWBxlZQzc
mfx4EG+4iixd8Utij81rsmS/Y0njq43mM/0n0Wu6ZnqN/Z7prj/aYw75MpFfcJhd
nKPE6/Mjl8nkbnug95reLS3bujdiGvf42ZHE8INEVsCzPVb9Sv1lW/EuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9oVOhBnKnKSe/L+WP/tO47m/NsMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMigMAB/
F6+SnSc34KxQkIgVhjzG9h7yl7T5tZYJYIMjvgsjDTLQd12vgrZKvIsN/XIAQkSZ
aNe5BVAXH/eKehikkbx3RaSeaIvObY8hj/gv3ygEn+zeDGKKkJFra/3z3Q2qoQ5d
fz1BJ52oIV3c74AosO3gJUeW6gTORmX1dPsD9oZ1N6VuEIHsgYhlcGhYVSVK1Eau
cGtZUEZiQfX95QKgAdLjs4ruJ49CnG5GAlzwBGK9kgRmPuycOUnezIBhIAxqvuFh
TlRPwvHiF340MXrAqBewc7Qw8YzrdclGaKkVBtH0JS8WXyoH2YFwz7p8Lc9Idwgu
WGBzvxu4LAG/vQ==
-----END CERTIFICATE-----