Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
File:                     Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft (raw, json)
Hash identifier:          t3cdujLTVcGkqBgV6lUvOLBEZS7/KT1iuEWH/1OjoFM=
Subject key identifier:   34:E1:E6:7C:2E:BD:A9:A3:AA:B8:1C:ED:70:34:85:17:BD:56:2A:BC
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Certificate issuer:       /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial:       019DA41CCB6BEE6C1656762B16C8C4DCC7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
Manifest number:          0193
Signing time:             Sun 19 Apr 2026 05:00:43 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:43 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:43 +0000
Files and hashes:         1: 1-754yn0cXUen0mB13RhFBCCHbog.roa (hash: 78zYqr5yGxGhh0YQuAoIg3iqxnVUJ3rYVBvGE6aSJfQ=)
                          2: 1StUnapseCiMQWnYb2eTMzCR1G4.roa (hash: B7xFqR6+lA6rb6M8+1+NxvfBy9Yh1w4f+NdiwDOlV2k=)
                          3: 4JUJMuH8gFs9DE68zxS3NF-MVyI.roa (hash: 10WPHR143Cr97gFTdRxouN6VSfBxJID1X9gNYQGB03s=)
                          4: 4yMe0KQWqHlqNRxGI-HI-YfNviU.roa (hash: q9QEUOuJmvF783pEdtgSs/IHgLaoLscMYbL67CJd8ro=)
                          5: 5jgtFtkGFs3MVnXU7EtZ-wtpMP8.roa (hash: RsoKDzcKosV3gQjC57ZfeVyrZTCxaDxJedySFB6iHSw=)
                          6: 5uKJZHdfDX6TXX-SRwiwxZGZ2Ac.roa (hash: dNb/ayekSV3gRwWnyBUmQiJqyh3+db3pUkOxjC/qYak=)
                          7: 7bUBJxfta8YWGQeRb5fl37Yaaxo.roa (hash: XQf9kxSl4sRFbthfZQdIsbNBSDsU9+N1iQ8oM1kavXM=)
                          8: 8Wa9_vPZrMT6pIcho3_TYjVtqk8.roa (hash: h7V44SoFq4shpd3Oi+k/Fm8gG7BNoMR2fp5YWnkKrKs=)
                          9: 9IXwTzzllCJjNWjosEw9IqDjZZ4.roa (hash: qwbUB4pGtNvNetLT365Cb9mkywkHbHRPACK7i2qfcIU=)
                          10: 9uJevseWtHq9WwkYBlyBhrsiipI.roa (hash: XWHVmAdhqAX/5wURmMpdbLR+UcMWugrpYTC02rWpXjA=)
                          11: ATueWFcqnvuZDV_kL2XwVjV3Y2I.roa (hash: 1jQny7qo2FR+SifYjdMTpPFd2HzzebiTliSeTIqgl4k=)
                          12: AozO2Ub53lV6NEQRvkO5cmyql4Q.roa (hash: RZCbTSnnDP9YK/6t18/TtUnd/v/TBLxovnyGgksZ+Wk=)
                          13: Ba5fXG6jmbh2acBviV-iIIKo76Y.roa (hash: sPziRn27AjBAPFRy3zSLQQKsc8W/cg21d5WvStLKdlg=)
                          14: D1jqmx7zgrM24HcsfAdM7H7e6TU.roa (hash: z9M641aDlhELJSePrkssedI/+dVAAWfwDtnl21FFKuo=)
                          15: D8MTwdqOGoqiadxznmbc58GGyCw.roa (hash: hWg4hQ21GnKD+Kub0XusadCxYjYanrHdJMGDk68zWQI=)
                          16: FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa (hash: 01XBXhI4ohSZEUimcwiN6YwEt7OYVjfuP0CIc0/Aghs=)
                          17: GeL70A_vDuJS5e0i9OdyUUo3fcE.roa (hash: t5lXhig/7fbuaofGOc2sBzyCP8TE7Bd4H7o5/WBYU2g=)
                          18: Ipq3DVKETg8P3AR2d3v53XRHP8E.roa (hash: OexlMNg1bkCu+ze+kDH7HWalEhLxpKBrfkNHr92XQtw=)
                          19: KJo3GAdKNFd3THsemF08pnREwy0.roa (hash: g8QkMjKCZnbmt7stE9ZOU/G22JCGHvHzbPa2y8dl68o=)
                          20: NzvJC_KMleGhtmNpsqKr65nFwKw.roa (hash: xdkY4pIv1Ov6lhrcogUMNsybPzhiBPJCRk9I0apg674=)
                          21: PPR9iY6e7wB8dBG4hPjEf_bXgrE.roa (hash: rVsXHJx7s3hFoA+dVNyfw/DyXL6OOCw5L+m6ouelVRM=)
                          22: QEfCumaTgXWaUkO-g8T9swSARF8.roa (hash: 3dEg/618pUge6m2U/fXAJFk7PdK5O84iQVDgQmHhNno=)
                          23: QmhsDLVBmQiPY9x8rnO8tnthhH8.roa (hash: /VXc1hJxO83UEQlvcc+2YA3Ta3dAnlOXwZ0TNMXpS3M=)
                          24: RJf-yUIMAhTeHpw5w0dxvSvA-T0.roa (hash: ByePBlZXfscW9XsJ3W1m30RSO4fXTm44BH7JPgnXxLw=)
                          25: URFT6fKsY2OtyB_MOBIcyuYtLjI.roa (hash: Bi6srY4oh+V5Uw676tTyw8yvtKoGhpD37htv9PBY0t8=)
                          26: Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl (hash: t6KegyUa8zcntDXFm14mCoLUAckN+26I3Mu/eqt7yVc=)
                          27: Ur8FLPafl7NLCGJMZdM86uXJeOE.roa (hash: XYYsdiGwo/GgWz447XdpK9VNCxb25m7GWU+Jc4A5wfc=)
                          28: Z3tFdufgPl6EBqM83ZZTUlCsxeU.roa (hash: bg7JnMjL5ADxpVlyak0KcCSpMSEHMIGLxB84iGem6Ng=)
                          29: ZaUpH66Vsau2pi4E9-JxtQL4Ugk.roa (hash: 5jkuZaWjiWaof3s8WP///20zxRF9XyokcKKTG2txPU8=)
                          30: ZediFr-kiNcab3zFz4eXtCdrDDY.roa (hash: ADnthEU+Brh9wA//ELyNS+LJVvpzl9jC3U47kC784aw=)
                          31: Zy4u8OQmpS--VuyxpTtEdgQj7u8.roa (hash: 3tm5LplJNsUwv6QzEI2j7o9juIR/DbsW3Y8t7c94ZKY=)
                          32: bg5OuQwu_G2wxecDYapAVTrKZSU.roa (hash: ggkhRBAvbvqvsvnY0841/FOrSyw9xDw7h9YsiZA8oaM=)
                          33: eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa (hash: US9Oa3u4UtqaGF2sA8nZWPbipyXsj6nuL34f5I+dpv0=)
                          34: erAqQdv4ek0okgzNUjEJUbHDl-M.roa (hash: UjC8V5nT2fjyaHmBG/uU01LBvVikDDo0eoyOrTbxKr4=)
                          35: fZyAK4-7mQSEWnWBipSmG29XhLg.roa (hash: VyEh3g7KQaKsqvuCH4j2Vw0hondgOxxQ+lgKbocRpTM=)
                          36: kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa (hash: VJmnS5B5bfBOwQGEw3DwSY9zU3wS19eOtw0ATx1JGzk=)
                          37: l4lKElWg8jkb3S2y8G5HtpLv_8E.roa (hash: eAlM3UbqMidzWRUNV68Iw9JlOfYfEzuWB2gx059CUzU=)
                          38: mn7OLNCLzPBqkrsyYpqFg1imvZI.roa (hash: wxWSpC2c3XkI8LLnMMHI9jlxpk6lm3++ec6oKWD2Sas=)
                          39: rxFdQ8wHm79-KwtfCQQduhZ5MX4.roa (hash: 4fE5VLNDidIj7JkBBuOBn6AqwpO9aA+OzOMLJ27mh8o=)
                          40: tmK8DHrmcBnINMMyD2QW0IgULBE.roa (hash: r85TfRa3AIHgPQ/FHH1jZhpg0dqRTysxXHtYOx/eV7Q=)
                          41: x7UH7ZJrApI32sK581_akJQW4t8.roa (hash: 7fHtqcAW0zaDA/MAx+F9yZB2mEvSMVFZMHyQwzDUnVo=)
                          42: xfcNNr-RUiHUybTluYi9uzkIfaM.roa (hash: aHivb/k+955qSn60sRyboNx3HuHGKe4bMkpui5dM9h0=)
                          43: zKqnquuEn-McTEol5oGnIhYAmy0.roa (hash: oCtvyo+fDE9JdHJIxhwHi/+Z9/aIRkF4L/I9VIjuKP0=)
                          44: zocALgimkWCVbzszBR2uphEiBtI.roa (hash: 4ANr/Owql6aOh54xvEE6sr/jfbMHNepGi5TVeFJshk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:cb:6b:ee:6c:16:56:76:2b:16:c8:c4:dc:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
        Validity
            Not Before: Apr 19 05:00:43 2026 GMT
            Not After : Apr 20 05:00:43 2026 GMT
        Subject: CN=34e1e67c2ebda9a3aab81ced70348517bd562abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:4a:e2:ef:d5:9d:56:01:a7:28:ff:91:2a:
                    0f:ad:bb:23:27:15:8c:80:65:66:8f:4f:71:3e:be:
                    33:73:6e:d6:28:5f:86:09:2a:c7:de:08:e2:80:82:
                    2e:c4:05:79:2b:d0:a8:d8:16:8f:b4:5c:37:28:85:
                    42:54:79:6c:2a:25:0b:50:d0:f7:f5:9a:fb:ea:f2:
                    03:c3:f7:95:41:8c:45:a0:bf:e1:b6:da:d6:11:c6:
                    49:1f:bb:94:ac:90:5d:ee:e3:4e:b1:39:b9:70:c3:
                    08:01:12:97:5b:05:b8:9a:ab:1f:c0:b3:b2:89:46:
                    eb:d4:df:07:81:19:17:5b:29:6f:b9:81:3f:66:80:
                    d7:05:86:27:6e:35:93:fb:62:a1:7f:d2:78:e9:37:
                    0c:bd:ef:2f:66:3a:0c:6d:01:e9:c0:1f:77:7e:f0:
                    5b:a0:08:8d:53:57:4f:dc:c4:7a:5e:db:db:11:a7:
                    44:fb:94:37:b4:66:ea:2d:df:65:c0:29:86:b0:27:
                    40:17:00:fc:c5:66:ef:c7:cc:e3:7d:60:33:f7:39:
                    a6:63:3a:d6:3e:c0:09:33:17:0c:d1:08:28:7a:bc:
                    8e:17:60:07:12:18:0a:ed:45:ea:a0:c9:9b:6b:b3:
                    9b:27:42:cb:62:46:47:7f:fd:5f:fc:72:67:45:ed:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E1:E6:7C:2E:BD:A9:A3:AA:B8:1C:ED:70:34:85:17:BD:56:2A:BC
            X509v3 Authority Key Identifier:
                keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:cd:89:a6:e3:85:06:a0:c6:f8:9e:1a:20:80:bd:33:2a:
         59:ba:8d:4f:9b:84:ba:3f:18:b5:d2:57:a7:fd:49:17:90:81:
         66:4b:ca:fd:4a:7d:02:60:f4:0d:a1:05:8d:06:b3:34:04:fa:
         2d:ae:9a:fd:bc:c5:2c:4d:94:3d:42:5f:95:e0:33:39:6b:ac:
         92:e7:5d:a1:65:46:54:e0:54:9f:8c:57:19:c9:99:ae:af:d8:
         18:b6:ec:a1:e7:a8:1d:d4:6d:aa:64:74:00:7c:1d:7a:5a:8f:
         6d:3f:8e:ba:fd:c6:aa:74:63:24:c3:97:65:ab:15:a6:b5:6e:
         6a:2e:7d:ef:26:da:f2:83:d9:37:52:61:c0:4e:3e:75:db:10:
         b6:1c:be:74:e6:e8:f8:f8:bc:67:2b:b3:71:74:2c:5c:cc:a6:
         00:d5:97:75:ce:42:07:46:51:64:b9:02:00:a9:f1:ad:91:ee:
         28:ce:c2:b0:0b:2c:ae:1d:10:4a:d2:61:13:be:0b:ce:6e:70:
         07:1f:01:92:08:4b:fc:b5:a8:71:ab:90:1e:79:86:6f:58:b1:
         03:0a:cf:5d:16:60:1a:9a:9b:24:7e:30:f9:3d:20:bd:2b:e5:
         67:ce:6e:15:10:fd:8d:cc:3f:6a:99:99:e6:c6:b3:62:63:11:
         1e:16:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----