Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          4V4YBZCuUS3uJvOFp0w1cYqjTvErJTuK594Xmxvw4+c=
Subject key identifier:   37:35:22:DA:D9:04:CC:72:30:A1:5C:C6:40:45:27:D7:59:77:44:B9
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       01A0BE0BBF7B66C66CB1F569183FEFF64C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          02F7
Signing time:             Sun 20 Sep 2026 09:00:35 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:35 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:35 +0000
Files and hashes:         1: 008aaJ7C0NI-B76Oz-DgwXoqQGA.roa (hash: Wl56s0djkIFMtZEcBorh/gchNgdhdVWtVVwku8y2YNI=)
                          2: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          3: 2QBmwvC_Xu9zRPYUQ2laq2mKYco.roa (hash: 86VoVG5xisD/zC7oESTivnN1oBV8l66WmkJKuTrECTs=)
                          4: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          5: 4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa (hash: tskoLkmbKnpidodrFvl8GOFIM31iV0Ojzu1LEIBf4fw=)
                          6: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          7: 6z-ninbRTJQj-TZknzEwKYouOE4.roa (hash: d8nKt5PAnam+L6inWEaMyIFTs3jvVRg0o00gM43ZNQw=)
                          8: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          9: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          10: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          11: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: trhuE+GxaQt/X713/S7idie0QS3cFe2poMlLADj8UvI=)
                          12: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          13: DbxJv-sLQ3W1fyhrdioSNv97wS8.roa (hash: W9ilqt7H8VyXzg6z0JRuXfb3gXCFeEGnkjjtm+EEDs4=)
                          14: ERr_HtkQWGUFjzv4scSz1RjkxkY.roa (hash: LrxlextA3UrAvkKiffumcx8o+lgVydKGnEQqNKzGR6Q=)
                          15: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          16: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (hash: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=)
                          17: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          18: Ho8zkqZKLkLA4effCVpP6TkX1-c.roa (hash: 2o4YqIFG5/X+kXM1QRZNRPqvc4hIDCgqt0sRRrbUsZU=)
                          19: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          20: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          21: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          22: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          23: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          24: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          25: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          26: U8zMUiMk1Ot906wBPhNnh9qIyVs.roa (hash: 9tU/X0pyerM1WjggaqK28em0X/I42isjLNz8F4mP3TU=)
                          27: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          28: Uk-DZbMMzQYoC8uG1Ys4Z5BX5uw.roa (hash: IInUKYbmU30Zg9l2Ho6956f4Sd0UxMOn19Kx6W9PbjY=)
                          29: UnpRVCK_Gc5VbVNm8iLP9MKKZLc.roa (hash: EIulUW9Qb1i3y88NRqFWG6S+4xRTW+qht9M8c6ut9FY=)
                          30: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          31: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          32: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          33: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          34: fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa (hash: 8on9Wj7wgWS3bgbMN8K27Nuy/bvBtTxIn35r63/Pk1c=)
                          35: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          36: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          37: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          38: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          39: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          40: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          41: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          42: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          43: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          44: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
                          45: yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa (hash: 0G99mwqEuR6I8GBLFxxB42DbMhMAwQDAL1U9zeTz8vE=)
                          46: yuu6pkLIeW44ejjBMErvhGu5LgI.roa (hash: 6xHzo/Vs6bOP6rzLYIi1OSbob9D+BHaYxFHHU+Ycr9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:bf:7b:66:c6:6c:b1:f5:69:18:3f:ef:f6:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Sep 20 09:00:35 2026 GMT
            Not After : Sep 21 09:00:35 2026 GMT
        Subject: CN=373522dad904cc7230a15cc6404527d7597744b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:29:79:58:08:c4:03:34:b3:94:00:20:79:
                    91:93:f6:e1:54:75:4f:c2:99:f3:33:39:b1:a6:4e:
                    63:6f:36:b9:70:38:d2:32:75:87:aa:2e:64:f6:a1:
                    72:d1:b2:69:ed:75:d8:54:ed:38:f9:a2:67:04:26:
                    e6:fe:3c:86:27:6d:db:72:28:63:d4:66:3b:51:a2:
                    ea:a0:7a:4f:3d:59:91:b7:c6:17:0a:61:b3:cb:66:
                    34:36:22:94:33:50:18:c7:0b:a2:3f:a7:99:0e:dd:
                    2f:ba:bc:88:c1:10:36:21:7f:c5:de:73:da:5f:3e:
                    31:2c:34:47:5c:e2:45:5e:ae:ab:d3:6e:f1:40:1c:
                    6a:dc:94:33:a5:42:6e:ba:4a:7e:2c:df:35:80:e7:
                    0f:5b:ec:73:dc:77:76:d0:f2:8f:7c:93:3e:6d:64:
                    46:2d:69:41:0b:13:9a:91:cd:fa:51:f8:8f:4d:e5:
                    ea:46:6b:8c:1b:67:4c:d7:ce:74:96:1d:ce:a6:93:
                    74:d4:c5:19:a5:d2:35:f0:4c:d2:45:c5:3f:9e:b3:
                    dd:63:d5:b6:b4:1c:8c:34:9f:d3:6d:bb:93:b1:5f:
                    09:3a:f4:5e:36:2f:5a:0f:e0:ff:d6:97:b7:cc:92:
                    6c:e7:20:11:d1:bc:73:f7:44:a3:17:40:53:23:1b:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:35:22:DA:D9:04:CC:72:30:A1:5C:C6:40:45:27:D7:59:77:44:B9
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8e:06:d0:78:60:50:49:15:50:bb:fd:f0:90:47:f3:4c:4f:
         a1:64:21:ff:9c:c4:22:a6:d9:80:95:78:0d:e5:f3:23:50:b6:
         a3:4f:e8:10:6e:78:84:45:65:a8:92:9f:d0:9d:d4:91:1b:db:
         a4:3b:f4:d9:02:b5:ba:c0:64:ea:32:44:b3:d4:c0:d0:25:d9:
         6a:8d:43:9a:60:6d:0c:50:a7:03:2c:09:9d:25:1d:22:90:3b:
         81:90:bb:75:09:c4:4a:d0:5d:6d:1a:12:39:c2:7e:1c:ee:f6:
         0c:3c:42:7b:f5:47:60:a6:eb:04:cd:0e:0d:95:64:d0:a7:27:
         d4:3d:68:30:2b:49:44:35:4d:1a:d1:f8:6b:ca:a0:f6:e7:6d:
         fe:46:2f:5d:e2:22:54:c0:00:9e:d2:c1:d8:b5:87:db:50:36:
         c8:52:0a:a1:3b:1b:f6:d2:c6:2a:82:bb:51:f9:67:e0:00:5c:
         65:ec:77:b2:eb:56:5a:c1:16:a9:5a:ea:7c:e4:c4:f1:59:e5:
         5c:a9:61:3e:a9:ab:92:4a:b8:91:c8:9b:2b:5f:4d:78:c7:fb:
         95:98:e9:46:88:24:0f:d2:fb:4b:9b:3c:77:4c:5d:61:32:c9:
         25:c5:6b:19:a9:0f:e7:6d:69:f4:02:3a:bb:ed:ad:4a:76:c8:
         ec:2c:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----