Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File:                     CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier:          amPj7YlQPWhjMtUG9YKKf1gFN1dU0+8AUFmEROi/P1g=
Subject key identifier:   E9:1A:29:70:19:DE:37:29:93:CE:FE:F8:6C:37:28:43:7D:35:3C:F8
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer:       /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial:       019FA9AC18F4675EF701D665727589197E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number:          0256
Signing time:             Tue 28 Jul 2026 17:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:55 +0000
Files and hashes:         1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=)
                          2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
                          3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
                          4: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=)
                          5: 8Gvof7po5-v9E0jq0yIDs4A09gQ.roa (hash: kD14pUKAJWYG2mhNvoc9jqi5c48Giw+3Z2sxuHaup5E=)
                          6: 8vcEWldQ9cTyKhmilwrjlJUGXrU.roa (hash: RfdbjcIDiieBN5O35/2qXlbmJjpl1hX/qtvrUsTjGro=)
                          7: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
                          8: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: 2btW9Hwgj4B5TFsrjEUIixLbtQvJhsRTwhRHlkTp/RA=)
                          9: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
                          10: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
                          11: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (hash: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=)
                          12: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (hash: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=)
                          13: JjJL9CLuJEBOIckms7eQRal0dlM.roa (hash: 8NACh9U+23n1UQ9SFNueqK87W0nyrWi7z0FA2prmkEE=)
                          14: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=)
                          15: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=)
                          16: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=)
                          17: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (hash: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=)
                          18: PEkym1OPMpNIdeN11ZQCBbwOhAc.roa (hash: bY07kjjzHaYOKoX3oZoXOe61arnA6Qa9njUm+T8zLXY=)
                          19: Q30EU1erGZsCCMuCgL71lzXCsB0.roa (hash: yxqrbAXer9RdCmSpvVHPaT1/BGFNWf63zfk7mwlIh/A=)
                          20: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (hash: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=)
                          21: QkV8SpGFe8YhzYBjU-dwf-dOYjE.roa (hash: De5CcGpoNqIPcla+kTBwODaQboj4V8tyh8GSsXcHW4I=)
                          22: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
                          23: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (hash: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=)
                          24: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=)
                          25: XkFF5iy8cNEiMGbNts9sMLJ4l5o.roa (hash: MGXnjAVWXxsjSqpO9GUP1arrzPGYa/FORm1VJm318GI=)
                          26: YlxA0Q-VURUu45wYWi9PrJBbFqQ.roa (hash: 0qOL2u6kgHDYQ5bN7MYpb3uZWaPAYWqCNMDX1bwrEkI=)
                          27: au2WKv16F4RefqldtFDlWWE895E.roa (hash: pySvnd00Anvn1oQzaRZ8yykcvoAisskF1FelD1QlZXA=)
                          28: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
                          29: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
                          30: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=)
                          31: glOAY_gAtPPHYUfTRyzej09l9Uc.roa (hash: KOZ6TNPDLr+ntpuwzfJN8PDJ09iuYSdA1Xv0liIKskU=)
                          32: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
                          33: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=)
                          34: krYA9kCbMaHNSI3OQFVP_J6sn6E.roa (hash: uK1oHX4C6jvDu53+JOAVxyEHJ3sWepsMqM595b4yrqQ=)
                          35: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=)
                          36: lj1ffwjXwh7WORUNiNsfKctjupU.roa (hash: P094pOYDmE+5wi1DhajKZaTB8J1E2F0Ql3tkEBOTrqI=)
                          37: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=)
                          38: pZleHazwShN0rF05084xa08s4ek.roa (hash: OmLeh9BUSD/tEEPb60vsGD7QdpIiI6UoPfPnPHHpitw=)
                          39: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=)
                          40: tdM1IwqW73HrJVgiscivcoYYwEk.roa (hash: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=)
                          41: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (hash: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=)
                          42: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=)
                          43: u25ED9sW2iiodcHbAMJqe5kvPPM.roa (hash: owys/NvvVjyFSRRoUdC7YGC5+ziHq4nq5rJMDpcS4K8=)
                          44: vP7i6OhT9RS_QltONA8pY4JCnao.roa (hash: ndOKjlpStXo6zJu2z4MrDPKsNu8GHMjvXhr76nuuHqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:18:f4:67:5e:f7:01:d6:65:72:75:89:19:7e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
        Validity
            Not Before: Jul 28 17:00:55 2026 GMT
            Not After : Jul 29 17:00:55 2026 GMT
        Subject: CN=e91a297019de372993cefef86c3728437d353cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:dc:20:66:3f:8b:bf:b1:a6:16:c0:22:14:
                    4e:3d:93:1d:fb:8e:b9:02:31:81:20:8b:de:49:89:
                    20:67:84:64:fe:33:35:f6:49:3f:f1:9f:e5:1e:d4:
                    8f:18:96:4c:bf:d3:8d:79:25:63:7a:3b:e4:d4:b1:
                    70:39:9a:78:02:d8:90:61:ef:ae:ad:fe:9a:a4:d4:
                    8a:03:ae:d4:fa:e6:b6:b2:61:e2:ae:cc:d2:4c:ac:
                    bd:30:a9:7a:cf:89:ff:be:1f:45:d2:c5:47:b8:e3:
                    d2:57:08:14:11:ec:18:d7:8f:93:9a:4a:11:66:76:
                    bb:91:61:5e:a0:bd:93:1b:f9:e9:3a:a4:94:f2:04:
                    6a:6d:a1:e6:f1:cb:39:56:e1:85:06:97:23:90:1b:
                    92:ec:f1:39:3e:b6:a7:4d:bf:8f:78:9d:84:f0:4a:
                    52:2f:a5:8d:89:dd:56:29:0e:0b:ef:98:78:3c:2c:
                    8f:e2:2c:a5:03:13:76:b6:cd:3c:ae:50:4d:c0:3c:
                    b2:ff:2a:79:c6:a5:d7:0b:09:77:95:9b:8d:ae:ce:
                    d2:28:41:f1:09:0e:cb:22:d2:0f:4e:7c:b6:26:98:
                    64:96:2f:87:89:37:dd:0e:f4:7a:df:e1:f1:32:87:
                    f6:a0:10:df:76:9a:c9:4c:bc:61:1b:2d:be:db:3a:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1A:29:70:19:DE:37:29:93:CE:FE:F8:6C:37:28:43:7D:35:3C:F8
            X509v3 Authority Key Identifier:
                keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:f1:5a:9a:eb:a9:18:8e:c8:71:4b:40:ac:41:5e:ba:8f:
         b4:a4:af:8f:11:56:19:c1:78:1c:bd:ed:d9:ee:3f:e9:20:5e:
         94:64:c1:96:b7:7a:d9:4b:82:78:6b:5f:23:8c:e2:e2:8b:52:
         ba:5a:f7:da:dd:71:53:8a:a5:31:e0:ca:74:78:d2:ec:f2:c3:
         22:d3:c1:ca:b0:66:2b:32:b7:7b:f9:a6:58:b9:9c:5c:b7:57:
         4e:22:83:14:29:0b:d2:52:b1:07:a1:85:73:80:07:53:0f:b1:
         de:ef:ec:8e:7e:79:6c:11:71:86:fa:1f:4e:99:0f:5f:9f:a6:
         1b:4f:e4:c5:6e:d0:cb:7a:a1:f3:a9:23:c0:2c:6a:0f:1c:78:
         69:5c:50:70:a0:10:bd:88:50:52:f5:50:29:56:f7:ee:96:14:
         90:86:73:e0:b8:ea:42:1a:f2:c7:55:ca:8c:09:a5:6b:a9:2b:
         0d:1e:fc:b1:22:d2:2d:60:27:e8:40:c8:7a:ac:d0:5d:ed:7f:
         73:b0:78:b4:47:d4:fb:22:58:5d:b6:d6:e8:b0:ef:a7:a1:35:
         52:ea:62:81:06:a6:0c:3f:47:2f:6e:ec:36:97:9e:b6:87:93:
         56:0f:8b:91:3d:d9:fb:9a:df:80:89:4a:58:84:7b:23:8c:95:
         64:01:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----