Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          yCHv6uHKSoAJ+znXy11cs1Z80FDmGxLtGSd+8eNgLT0=
Subject key identifier:   83:11:B1:4F:99:0A:F3:39:6F:0D:C6:73:47:C3:73:37:CB:38:1B:7C
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       01A1DF82E1E1D53777A18D7986BABD442F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          0396
Signing time:             Sun 15 Nov 2026 14:00:59 +0000
Manifest this update:     Sun 15 Nov 2026 14:00:59 +0000
Manifest next update:     Mon 16 Nov 2026 14:00:59 +0000
Files and hashes:         1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa (hash: tskoLkmbKnpidodrFvl8GOFIM31iV0Ojzu1LEIBf4fw=)
                          4: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          5: 6z-ninbRTJQj-TZknzEwKYouOE4.roa (hash: d8nKt5PAnam+L6inWEaMyIFTs3jvVRg0o00gM43ZNQw=)
                          6: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          7: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          8: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          9: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: W8R1z5b+mesu1v+Xl8Dm7R39UD+4UtLhr/98vic44cg=)
                          10: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          11: DbxJv-sLQ3W1fyhrdioSNv97wS8.roa (hash: W9ilqt7H8VyXzg6z0JRuXfb3gXCFeEGnkjjtm+EEDs4=)
                          12: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          13: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (hash: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=)
                          14: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          15: Ho8zkqZKLkLA4effCVpP6TkX1-c.roa (hash: 2o4YqIFG5/X+kXM1QRZNRPqvc4hIDCgqt0sRRrbUsZU=)
                          16: MQJmul25-t8JPpys8-iPUdbspaY.roa (hash: ixeRWttSVkqn0ulhQJ+21vPvw9VjEcV7XYMf8VMjnI4=)
                          17: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          18: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          19: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          20: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          21: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          22: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          23: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          24: U8zMUiMk1Ot906wBPhNnh9qIyVs.roa (hash: 9tU/X0pyerM1WjggaqK28em0X/I42isjLNz8F4mP3TU=)
                          25: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          26: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          27: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          28: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          29: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          30: d5RPVknyCHa9Az1sdg2d6h_txo8.roa (hash: tsFgAEeBEgBCxA1rUqj7Zu3rw97F2orYx1W3CXe2igQ=)
                          31: fXOsQ3j-NO7BLqWTYtUzhCUluo8.roa (hash: 8on9Wj7wgWS3bgbMN8K27Nuy/bvBtTxIn35r63/Pk1c=)
                          32: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          33: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          34: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          35: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          36: nVRhEhnUAyFmCQkpeNU4XWp_TC0.roa (hash: eN8MxFRs0KevqXN8OI44BqVJ4U5N68dJ/cJ1umxMi+s=)
                          37: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          38: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          39: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          40: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          41: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          42: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
                          43: y7fVSF5YRkR2QeLzuwW_1IOSnTM.roa (hash: Q0XSzayknQH7nA2iszMprTs1YiSNDqJgRdq3EVxjE9Q=)
                          44: yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa (hash: 0G99mwqEuR6I8GBLFxxB42DbMhMAwQDAL1U9zeTz8vE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:82:e1:e1:d5:37:77:a1:8d:79:86:ba:bd:44:2f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Nov 15 14:00:59 2026 GMT
            Not After : Nov 16 14:00:59 2026 GMT
        Subject: CN=8311b14f990af3396f0dc67347c37337cb381b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:39:e1:5d:cf:af:8b:30:c3:2d:09:10:ee:
                    23:b4:37:72:db:ca:ac:c6:a9:d1:80:85:47:8b:2d:
                    e1:3e:00:ae:b2:8b:f6:e1:49:90:7f:ed:8c:1a:00:
                    1f:59:48:41:0b:7c:bc:35:84:34:82:d8:79:70:c7:
                    9d:a3:37:cf:3d:11:df:44:fc:5e:c6:66:a9:96:0e:
                    14:d4:f3:43:1b:cb:b3:ff:75:7e:c2:0b:68:6e:79:
                    46:2c:aa:12:2f:2e:a8:1d:dc:54:f0:9e:07:ed:27:
                    ea:d1:44:43:31:0c:b5:86:45:d2:94:f8:1f:a4:5c:
                    68:7e:5d:f7:c3:91:4c:c3:da:43:41:91:1b:3a:c2:
                    66:8b:cd:f9:d4:0c:c8:36:a6:3a:61:5b:a3:dc:76:
                    5e:5e:84:f7:60:50:e1:2e:ac:34:7b:9b:be:65:2f:
                    97:cd:85:d0:f7:4c:78:52:72:f9:fb:92:49:a8:a1:
                    63:c0:02:d5:fb:fc:15:a6:9b:2b:08:95:ee:21:51:
                    58:a6:ad:16:e9:c1:4c:4d:06:fb:ba:fd:55:4d:d7:
                    eb:c6:c6:ee:46:31:6f:53:53:7a:92:6c:05:43:e6:
                    98:c9:a6:e1:9d:98:b5:06:9e:46:57:b9:85:4f:f1:
                    07:55:6f:fb:07:7a:53:03:a4:7a:1f:98:23:e4:96:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:11:B1:4F:99:0A:F3:39:6F:0D:C6:73:47:C3:73:37:CB:38:1B:7C
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2b:c1:94:5d:2a:96:7b:08:80:05:67:24:8c:cd:cc:b7:ee:
         73:a3:b2:fd:d2:fc:b2:d1:b4:10:bb:05:0c:12:be:dc:56:e7:
         5f:04:26:9d:fb:22:49:da:d0:fa:a4:3e:cd:6e:4e:32:ea:12:
         7e:b4:23:f5:25:b3:13:1e:23:a6:9a:39:aa:ea:c1:7f:5c:02:
         02:47:5e:24:25:03:33:b3:26:26:88:ed:cd:08:a7:06:32:31:
         da:a0:c5:63:a5:19:13:f4:99:7b:b0:ad:cb:5c:66:6d:bb:e4:
         d3:a5:45:a1:57:c8:ca:18:97:3b:03:58:82:41:9f:ca:c4:c6:
         f2:20:3b:ab:5c:ec:95:5e:5f:14:b6:a1:08:1a:76:2d:f3:41:
         97:42:ca:7a:68:19:1b:1e:aa:b4:17:b3:00:f1:3c:59:30:95:
         63:a2:c9:bd:29:80:27:ba:7a:d6:b3:5c:5a:01:c8:56:41:e6:
         b4:20:d1:01:43:5f:85:8b:db:2e:24:79:60:cc:f4:94:92:34:
         4c:5f:9a:1b:e3:47:4d:96:a7:9a:18:35:ff:b4:c7:64:6c:ad:
         b5:a7:0c:1b:de:c3:10:89:50:c1:3a:62:9b:df:97:f2:15:33:
         62:c8:7c:15:e9:6d:7a:99:2b:98:d1:48:96:dc:64:32:ef:e0:
         4a:d2:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----