Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
File:                     _r8wIB8SoEDThtK07tRIRiPk0Rs.mft (raw, json)
Hash identifier:          IWfv/pfksjH674Uh/ysA6tkP3H4Q23qxAlCvqJJmoQM=
Subject key identifier:   0D:8A:72:B4:A5:DD:10:88:61:44:83:88:4B:A3:9F:C9:E4:9B:BA:3E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       019EBF9145CD85950B6AC78EE503E74E0BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
Manifest number:          19E2
Signing time:             Sat 13 Jun 2026 06:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:29 +0000
Files and hashes:         1: 0o9Lw0kDYdlfGJ29wYoUyc2zom8.roa (hash: qATqWNelp5kWeQPks533jdrIL1p5vs1PiC8G5RQkGlg=)
                          2: 0zrEo8QP0bXgcF12sU5vrygwlQE.roa (hash: 6YYAcAy/aDjwQQzA+nKyrCYZGuukSS8tQOHMaVi+CoA=)
                          3: 1-XfHBFax_1tomyWLg_6vgflWHJQ.roa (hash: 3skJCnuSusBD4Kz3JoMjZa3DYVYqgQ4pYXK7lif6dtQ=)
                          4: 1-nb-21DXmf62BIC9VxV2OpkYnHY.roa (hash: j+M5U6ra0ssEQFmg+65JUjEOQeVCtqgDScB/iptdlL8=)
                          5: 1-pO3E8eUqLfqJxU0B6yzlpNcKeg.roa (hash: H20bjGoEOuihmzJMLyFevmPp5zZxGzTakhEjF/1zfvU=)
                          6: 2aWNMQQRfEOt76Vh5XDrNXZmAlk.roa (hash: aGcEkbs8B9XGL0F0LNugSEY85pIuqgOQdV7ekqsiVOg=)
                          7: 7Yr6u97grf1hUVycycPX5OExet4.roa (hash: /YCWPkUdSqRfeH441ocRglLXS70RxpDbzLeVOBB7eEU=)
                          8: 8MHily8SQRnSnqa8jdWwNxzJOJ0.roa (hash: Mz5ev1bJoNfDfpyakjMaD33JbMOyNCdahq2K77uSBgA=)
                          9: 8TUPHciyGaksQ6MP8jAHNsAPpYE.roa (hash: Fv+3jD6OIzEu9o8Q5RQKAszPqo8Ehe/KlRJRhcwyRYM=)
                          10: A6PR5zhuGTtMw_OQ_F8hxk5Q5nM.roa (hash: TGslLfU4kNnaeAuNV7CpYV4k2JG7kGnYe5ortZjLBhM=)
                          11: B3zbM5xg9ITO7mwd4L77i5mDkUI.roa (hash: wnHErELQVSr33UQXeVMoJMrt6Y6sNJq/nzEiEMGtcLU=)
                          12: CTJNV0sxuquJoUebYx9HEZAvPwc.roa (hash: Qvb3kgpvGMS/SsbNaMMA8uX0p4GHCB6dLfWU+N88ybY=)
                          13: D15A6Y0sb7k1H2uqg-GtvZLut0k.roa (hash: V9FBzc/7Hn//D+9pyc2UMFFMygajW6Wjjn5Gwv7VHX0=)
                          14: DKZYOGWc7p7UFV3muvl9WdfKRxQ.roa (hash: DaUT/fT+NICYQVuOaDW47znt7KgZgGkTskJWTkPJpw0=)
                          15: EAvdcx6UXynkshpQCxtCVzMapSM.roa (hash: HyebAm+JL+H5M0WBgvfSq3Io39nqO3XXidXJ1toYvBU=)
                          16: ElynjHG_UQwIgCy4ktcvJuph5xM.roa (hash: 9OrXYPV+gIQCzxDfPDo7BqofJNl4lFKZU7HQvmqtpo0=)
                          17: F-eRL4YOdl4zK8v8QgtSQ6KtIsI.roa (hash: iVpKrd6Ug6fU+KHqi7wZWBiHrwYPUj6qELLKcXb+3ok=)
                          18: G0ma9CsDdSvHi0IS4gmmDD7Et2Y.roa (hash: rnOVHL8CzfDzL1AjH9eIc8KBikir17C0voUG58ezEDs=)
                          19: GGgoV9H1ZnFfJYF9H4RVv02H1sY.roa (hash: /7ZEU7xEW2nDYkqDSBL+vRIeG1ZNMeV4BKP7/O1n5kI=)
                          20: HMrkyJnqPLhWHWp3uSc-TJZ6evM.roa (hash: XRtW9/rDWh39fCwJcQvqM0stm2Q1JPWivWUvQ7XMdHw=)
                          21: Hhg2o2GVX0gA-YzFOIiXn-kbVdU.roa (hash: f3O43dRoTvsqvqAJ2oSJqSH8kS/z2CiiKFA5+7PRbFg=)
                          22: ILqlW9am-Ny8jSaAwVrjeBq_jnk.roa (hash: 7oOBX8eHDSPBlKPfgqArMljc2KOvyLrmS8O9T8mWbuc=)
                          23: LZJptrqByyRVN5I-1d313-ovSg0.roa (hash: woaDsTShO7j6tVSjZ3DIPcOFpjMcazzIgvjQSYqyykk=)
                          24: Md5tcSU0teTRpNubA7Z_jfoALig.roa (hash: fWMX2yQUvN7MEeTOLeKGuRXarovSwuRuaIdjkLDezKM=)
                          25: Nb7wMvyy7_8_tUsBu0CAZHI-u7w.roa (hash: sFvW2zTL0LYES516UioaLe6jUPi/sxoWUv9ji3dJL6o=)
                          26: OKm9cxPf32veHeJAKYn1FqPX-W8.roa (hash: ZvaU3xtVjcswzDH4WA8g/rfMZQ+9iWBXxvsEncNm1JE=)
                          27: P3uhwZVtBog2MCLVgG6wcSgmxc0.roa (hash: ieAD0UkSqCquHFAONT31C2Q9x8Ke2zXum3W10Ar+9qw=)
                          28: RAvnIlfF0SdQXmmY5bBWCD7Lz1s.roa (hash: dJFULBYB1BF183CUwkk8quF++Fuj43gc3tTG4XeqwmE=)
                          29: RW0ojBlsX-UMDAMTXaAJjNfClOc.roa (hash: jZcTAOAhoH03df4Q/rcMMKGLMXhfdLm2TLCLpCgQgyY=)
                          30: UpF_15q4vdNyZE6ZoTxzXEif_wQ.roa (hash: ZRj0TfEEIlaCTZI476/fNtISJ9n9/xFSHfysagr2srA=)
                          31: Y-IHPWMaGckQrH16kuwYjRaz6lc.roa (hash: yHuusFOjac/dJgf4/wrkl4vcJyWzKN4yhuik48GsQf8=)
                          32: Ypl2xwZ4a13Bhd-xkmyRdgaGhS0.roa (hash: vM2x7YuVwFLP24SGRsKa5AxeLkiP9gJUkmgCmMV/jOg=)
                          33: YuNHL3MqPtQ65KdhByule-7rY3k.roa (hash: K6EYndGp2dSRo54l3DqwEf+r694uIZecjw+hjG0dzt8=)
                          34: _Lm_-QcdqarLU0LNMaLm-NgW1zA.roa (hash: tA5twHJW6LmbqLjoKXMuZzAwfX9+8dHIKYFWHuS1qIA=)
                          35: _r8wIB8SoEDThtK07tRIRiPk0Rs.crl (hash: 5bytHvAtwQblrbFExI3aQts/hCKOqzwXtHF2czO5/cY=)
                          36: cpdhzer5jYFwdNKnX19GbCPi-NY.roa (hash: 5bwnqUanFRC5MM2Dr7B3YVum1dT8JJxcaR8C+6tDc+A=)
                          37: dPx5EpBkXGylxEr5yJnqSisZSnk.roa (hash: ewTFNQKosKYlf3K3mKhO/DxoL72WIL+jLWw/jTC/AhU=)
                          38: hdJNEC4k9VYKuIsDSDeTldkfx2w.roa (hash: 9mVLR3+7ZtRwJh3b3TAecSLtWAEh1ogVNYpFHs+XbUI=)
                          39: igce6sXyWMRuLXM6rVKdhvvPUvA.roa (hash: lJbTpwGiJnAGTrBCWtuwGuLG+y5pdRw8UdMiLvljmjQ=)
                          40: nBQWe1jmHTSZ7dpISsOH6MyX3Ak.roa (hash: m7Fmvy+e9j8BV69sSpg7q2dbJVIlQDmT7D7dNJf6GBM=)
                          41: qtZoVhX5rK4cZg7Ko3vwHIbRlE4.roa (hash: B+cfOBFQS0AHm1xsdf8uja/gqoAukeAQ2CKGxd1/H5s=)
                          42: rF9bfh_oBP3ybSyfzGepTfNy5Cs.roa (hash: 0idHC/YAh59nWfVR/AfEpg32uZCCAz2zzDzVigdrTbY=)
                          43: sQcdal7FL9sPoCwGgqBEe74MjYs.roa (hash: 38/+W5KtwZflyziocQUIiNPWgWXpqNWvo2kPETtHdRY=)
                          44: tPPQ2MX8zeKb6GqERCXjuGH8ds4.roa (hash: /I2V6ak1ikZZlvsO/kVy4ibcPNbQ8S94XaGCt6WfFvU=)
                          45: v6bPTwpra_lwtjUINIbbfpZIvU8.roa (hash: 4L7UWKvPIObMCy8KU/wBhI7qPkvmfHTFzJZ6aL8WFkI=)
                          46: x59UxU_los7Hl1SUMoPUdMaubzU.roa (hash: feBONM6ExLV2d5rAGWqq5VdULpcbX2Y0286qupSvhIw=)
                          47: xGSstVYCVs5vthNwQmR_-VYhf6A.roa (hash: QhmSgkubcVL97EAzVxMccq4bjANHavzm5rAf4mlSvQA=)
                          48: xph8qFaPT8h84DuqzAdcK_YZB0g.roa (hash: s8aCGZ/D7LJh8NIG3TfL891h0yRKDba66+N1I5CEjyA=)
                          49: yC5B0rT7Xy5HWb6b20HYfHMmPII.roa (hash: cd94rZ6SfXF3OCGPrP9y3o8F1w3N6nSTo6a88BEpspE=)
                          50: yLs8OPl8oziwieEbbfdCNTVMlCk.roa (hash: YN8vE2F6YUz/M7MQ323DHctfvFexIsnM+ZcFWFilXs4=)
                          51: ywsWs96Lkyy6USTdQGWVUnBfJGk.roa (hash: rLUKOshXAl55BwpYwHZduUKPcEeNr503oFkfH+OJ5TQ=)
                          52: zRr5zo4vzdBhkq1qbPubljxB4EU.roa (hash: cabHGFo/0oEEfQ6XBa6BalqOenhqiZJQQeeX3LsKyDA=)
                          53: zrirJ-nfVhEepwawAGj9edSQ_Mk.roa (hash: 5jQOo5egdNHstLmwNLujp17O6/gqruG3lZKpoYabUeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:45:cd:85:95:0b:6a:c7:8e:e5:03:e7:4e:0b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jun 13 06:00:29 2026 GMT
            Not After : Jun 14 06:00:29 2026 GMT
        Subject: CN=0d8a72b4a5dd1088614483884ba39fc9e49bba3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4d:80:78:0d:75:75:c0:df:f8:61:02:75:60:
                    ab:b1:13:4a:de:32:c6:5f:c5:94:21:de:f4:49:4c:
                    0d:07:a9:c6:b0:5b:a4:e3:84:13:ac:ba:e6:d8:95:
                    2e:85:b4:92:61:13:09:0a:be:fc:66:51:bf:23:61:
                    ca:21:4c:25:a9:e8:76:f2:ee:28:7b:66:ab:3a:84:
                    3e:77:91:32:3c:ea:36:51:cf:fb:cd:9b:28:1b:1b:
                    6a:ac:01:29:b8:2e:00:3c:d8:73:94:e7:ca:58:8f:
                    b2:0a:03:2e:aa:aa:5b:ec:78:d1:04:a9:48:26:c5:
                    4e:10:7e:9f:07:3b:9e:8d:c5:8f:52:9b:29:ee:52:
                    08:8a:68:af:db:32:15:10:3e:ff:2b:25:44:7a:80:
                    b5:23:3c:e4:c1:8e:d4:4d:f0:94:0b:c2:46:1d:8e:
                    94:92:b9:aa:95:96:ab:c2:b1:ce:f6:9c:20:b6:8d:
                    8b:43:37:30:38:a6:c6:2a:03:ed:0c:49:af:94:28:
                    64:3c:b9:78:32:70:d5:dc:3d:c3:08:cb:cd:3b:9c:
                    b7:39:ba:09:f9:43:68:be:c8:f0:00:44:37:ce:ea:
                    4f:00:3c:ac:a9:d3:68:2d:a0:1f:96:a4:91:0b:ac:
                    52:e6:57:9f:78:d2:ee:d2:ce:10:13:4d:4a:db:38:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8A:72:B4:A5:DD:10:88:61:44:83:88:4B:A3:9F:C9:E4:9B:BA:3E
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:96:96:96:3b:02:af:c0:dd:83:b1:72:52:e2:f7:17:c5:06:
         91:96:fe:45:dd:16:ce:49:4a:3e:99:ce:9d:33:40:70:f5:5e:
         e7:e6:af:c5:dd:5c:bc:59:a7:a5:00:98:61:11:7c:45:73:90:
         e9:ef:49:10:10:87:d5:b2:3b:f2:97:3b:b5:ee:1e:5e:f2:b0:
         9a:b3:a7:5b:48:58:22:f9:80:36:bb:21:f0:a1:6c:5b:82:c4:
         df:e3:16:61:ea:e6:e9:5a:83:4b:b4:8a:b7:2f:aa:1a:22:ba:
         54:30:25:14:d6:8f:7c:66:99:64:1f:1d:3b:6f:f8:fb:c4:7e:
         4c:12:4d:7c:bb:bb:42:91:35:f6:13:0c:72:c3:37:bc:43:22:
         8b:35:d8:e5:4c:18:b7:da:d6:10:a0:b2:f6:33:2e:09:bd:19:
         8d:b6:46:d6:e7:5e:af:97:fb:94:e9:ac:ed:40:a1:6f:9e:7c:
         e7:9d:4e:04:91:42:ed:ff:0e:64:7f:18:9c:d1:85:78:fe:be:
         a6:e8:f8:0d:03:6f:c9:25:ae:6c:9a:fa:38:0a:5d:af:9d:ef:
         9c:8f:d3:cf:55:17:19:d7:29:44:59:a7:87:65:21:ba:26:2e:
         ea:75:07:38:01:a9:8b:e5:f8:2b:a5:7d:54:c6:3a:73:da:72:
         7d:d0:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----