Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          9kkonQ1n04CifkUw5Y/VQog/58E2WM7/wbAB5Dyq1kE=
Subject key identifier:   44:5A:CA:8C:79:EE:40:37:E4:E8:18:AA:F5:92:D2:B9:28:09:B0:70
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       019EBEED64DC8AE6FE5D9AF4364E74691A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          01D3
Signing time:             Sat 13 Jun 2026 03:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:29 +0000
Files and hashes:         1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 4hg0NnklZUKEkYITHinO4XgRltI.roa (hash: kpbA6ZYrYnW/umlW9B55Y6L8ty5MPzE2m5MIoOkeyYw=)
                          4: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          5: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=)
                          6: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          7: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          8: Bt944BayBPUs5tY1-40d44HAARE.roa (hash: zi5M7iQxvBHgvnNeQP8FWxBFiEPXlMuyXlNAQguQJsE=)
                          9: BxU_QLYCv-NeFxAvHuVsehzq1Ms.roa (hash: ET+EI9D2GwXgCmETdUOtJ2GyqY2jX7dUpkPSLtH/MJo=)
                          10: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: XsrB/wFah60EBtsfw/owyiizAr6w8+SJ1MqheG6rXSo=)
                          11: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          12: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          13: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          14: H8iBI3oxi9mzced7XKm6sNzu2b0.roa (hash: Eg4AzBzQ/I1unxdwVQekHYusJF4JhPkZ22ij6AU935E=)
                          15: JjJL9CLuJEBOIckms7eQRal0dlM.roa (hash: 8NACh9U+23n1UQ9SFNueqK87W0nyrWi7z0FA2prmkEE=)
                          16: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          17: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          18: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          19: O0S8wpXTO6ZfS1N1kOZ3UQlC6eQ.roa (hash: bb5Aw3Wth5cpLBSgblsvH1ZMSUY2UqNKpY+JLd4x8qk=)
                          20: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          21: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          22: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          23: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          24: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          25: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          26: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          27: dm4QSh-IEHsP669NwW6-3HyiUfs.roa (hash: oEuN0EQ0oh6zEz1vucqlKLqBqlgTXMoc5rkPxD7V0x4=)
                          28: fJ4RTkcAcu1_glmVBKsTaz8-VOw.roa (hash: ylSEi7ocQYsHPL2vorGa5RyfsK8vM+dH8wAx4Jn5w88=)
                          29: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=)
                          30: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          31: jPk_ETVXQYD8EgjMbvt6slsHwcU.roa (hash: qCPgnU62uZHSoyHV8fMk0D6+40SXzkgBZK4EIkXKL38=)
                          32: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          33: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          34: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          35: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=)
                          36: oHjh2F9_CD1EuhFTlwlWXYhkMNU.roa (hash: +qX9lhbxCgvCFuwAzaJtsyjRd7qbWRJj3dirTH/UFUU=)
                          37: pYqyRDZ3yKoa2ihOr54mHCL3tRc.roa (hash: ZEIRLcKve49FAAP8uRktT/jxMpkhtZPvKW4kSe/sfOo=)
                          38: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          39: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          40: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          41: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=)
                          42: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          43: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:64:dc:8a:e6:fe:5d:9a:f4:36:4e:74:69:1a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Jun 13 03:01:29 2026 GMT
            Not After : Jun 14 03:01:29 2026 GMT
        Subject: CN=445aca8c79ee4037e4e818aaf592d2b92809b070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:cc:13:88:46:77:8f:d5:6c:1b:5b:ce:c2:
                    01:43:a7:3a:38:bb:db:cd:9d:5c:47:b3:d3:94:12:
                    50:fe:48:a6:8f:13:7d:a5:11:12:b3:bb:d7:b8:70:
                    3f:1b:6d:0d:75:0e:ba:05:91:1f:c9:f2:74:4b:02:
                    ee:93:d9:3d:ab:2c:ee:c7:c2:b3:c2:27:45:b8:61:
                    7e:72:9a:1b:de:67:d5:c0:d4:5f:92:92:dd:0c:e3:
                    0d:51:40:07:0f:d5:8d:76:e1:3e:90:fe:29:b0:09:
                    d3:59:58:ae:79:fc:db:1a:bf:f7:2f:15:80:1e:bc:
                    57:e7:93:45:2a:c6:e8:5c:af:72:8e:1a:3b:62:b9:
                    cc:44:c7:cd:bb:f8:ae:0d:92:37:39:30:1e:e5:23:
                    95:bb:ec:3b:c0:3c:7c:3f:9d:17:b2:ee:cf:87:7c:
                    d2:7f:8a:18:a7:06:08:d8:64:ec:a2:25:63:21:45:
                    b2:e3:8c:9a:89:83:52:af:47:69:28:a4:a8:22:18:
                    e6:1d:5b:39:01:3a:b1:b7:00:b2:14:8e:99:fb:b1:
                    af:52:3b:db:54:18:ac:94:f5:5f:eb:75:f7:d3:e6:
                    d9:21:c5:88:19:5e:0f:99:c2:0b:ee:38:2c:93:c4:
                    af:22:f7:1b:df:f7:3d:61:b4:d9:8d:dd:eb:96:6b:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:CA:8C:79:EE:40:37:E4:E8:18:AA:F5:92:D2:B9:28:09:B0:70
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:87:6a:ad:48:ae:9a:33:e1:88:0b:6f:5e:6f:9a:54:2a:e0:
         d9:a1:b0:91:cd:7a:ba:46:6d:7a:87:e0:c4:15:39:2c:a8:d3:
         af:bd:da:9a:45:40:d9:f7:c5:e9:1a:8d:2e:3b:83:d0:f8:c2:
         0d:40:f1:23:51:35:f5:f1:5d:a4:95:0f:d5:2b:62:54:9f:d1:
         c9:31:87:73:82:ec:2e:f2:40:33:e8:ac:90:fb:fe:b6:f2:ed:
         89:6e:5f:cf:83:dd:17:85:10:41:dd:38:6e:9a:2b:95:94:52:
         11:6e:13:3c:49:4f:d6:70:ae:2f:27:36:98:4e:dd:2e:76:42:
         c2:87:d4:34:f1:92:f5:c0:fb:5f:ff:71:f7:79:51:db:90:77:
         9d:54:32:eb:00:56:30:05:3e:8c:d9:12:d4:1f:9d:ca:2d:ff:
         ba:e4:ac:55:b9:1d:78:3c:67:5f:1d:6b:e8:1a:cf:eb:c1:51:
         f5:cc:14:ee:82:a5:88:b9:22:a7:9e:a5:57:9f:70:01:ce:70:
         3d:5f:0b:1a:01:dc:5a:c9:7c:e5:5d:3d:c4:6f:07:9d:29:74:
         29:5a:bd:2b:2e:eb:54:8e:a8:63:da:dc:ce:3c:23:94:46:10:
         90:86:cd:19:96:be:eb:47:e1:c6:1c:81:65:a6:e8:ce:6a:8a:
         cb:e5:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----