Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File:                     dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier:          eSobQueebd32tiScOQ7cQDOXsFa+QkQcKOYsE7vZf5s=
Subject key identifier:   00:38:88:9F:A0:C7:32:45:98:D2:AF:7D:E3:E4:FD:B8:2F:3C:41:DE
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019FA7F40CB04CC7E94D7A960914DD67C937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number:          127A
Signing time:             Tue 28 Jul 2026 09:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:16 +0000
Files and hashes:         1: 0sIEUkqEuEuah5snwOEtEaxPaYE.roa (hash: /mxXa9/sDwHidvSWMCNn+Onl2+SHGU2kNlwneM+xeYY=)
                          2: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (hash: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg=)
                          3: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (hash: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4=)
                          4: 1Waoar8xJafvNKM98KbPPpZpO10.roa (hash: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0=)
                          5: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (hash: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU=)
                          6: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (hash: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw=)
                          7: 4Hry2GHWIQNsyjQrTIx9fQN6gB4.roa (hash: gzVtaF4oZV0YS7EVbW+xgNO11PuUAiMDYx+s9V8pZcs=)
                          8: 4T3IbnYh4saIcnPZM7_bM8SrdUk.roa (hash: bQElEoR/i/ETSq5yQpPm2JLHUn2xQq3oHlgi8Prxj7o=)
                          9: 4dXgMOVCVmLmzl7AuS--VH5SaAg.roa (hash: pqIU557sGgJL4CWbBTIBl7mSAIEET2y/vdRGqIZMiEA=)
                          10: 5kD8ebFyAYRBjL9zZDM_BA0rydU.roa (hash: gNWk6zOUThu7OX+sSIk81C3W9qGJqn3Q5HaYYpqkaQc=)
                          11: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (hash: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI=)
                          12: 8lO_H4hOHoON1dWUWaop2xG_b_I.roa (hash: 90AyhJi0wELEqJw6BDuoQqDPuxv8jeJRieXX/c/ZuCo=)
                          13: Cg5-4-MPHdR8rHLYCSeMDcuN3WA.roa (hash: Cib4HxTsrIRtaj55BTF6+WAR6MahtZRAFeprgaqN1EU=)
                          14: CjWwIBzZKcwNZ7E-O06pyCjEZ7E.roa (hash: yFinRGejY7CI0wek+NR7BAvOn5Z0rhxA2bcYeyVF/jE=)
                          15: DbHsIS1wsGD5VENgKaURW87eGBM.roa (hash: Pg7LFkTLHIS+tij3rt6g9Emn9DJ6nvCMWnQoCISIDpo=)
                          16: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (hash: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok=)
                          17: EcVb7JNJifPpvwcAjqtAg6vi2Xc.roa (hash: mm4OOwG5SG+HqTpp8VfmTmhzslFhiA7H7+fw+8qk+jA=)
                          18: G2BoL9ecCjBaRoaJDjebPJCWqzE.roa (hash: loS4tbrMcz0xl9nMvLRcoLHx1sX1e9WMQZBXsfgZpHU=)
                          19: GfvrudqQtadcfEHpprwynTfNYIA.roa (hash: ReY30DmSZMs/0/wYnNlZrGqTcQIT5Z9nTZMHFV2s+iY=)
                          20: HSTLkhClz6LRADHXHrCQqqSC04s.roa (hash: s8VSLrC5qvSowdJpecSp5doTo7LDHBtmqawdvNkdw/I=)
                          21: J5hS-MwRa0Pp1Ax-eXmJXTFPUAI.roa (hash: 0OShF4FaS2H4QHgvZ8CoH/llz34UbR5B713YVNSs1JE=)
                          22: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (hash: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c=)
                          23: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (hash: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg=)
                          24: KBQCvdZ1Fih2U9PEnXZaHYZQKaQ.roa (hash: aJ2vN0uyC0Hga0lux0w4oAz9DV1ub2HSd8DIya7fmtI=)
                          25: LnnTovLuI750TfHC0xewXl7THNU.roa (hash: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A=)
                          26: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (hash: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg=)
                          27: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (hash: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4=)
                          28: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (hash: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8=)
                          29: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (hash: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw=)
                          30: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (hash: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4=)
                          31: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (hash: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM=)
                          32: Ub75tOZdOg2xdvFErJ88k7KaSUs.roa (hash: AsFVQQMMcv5/BxrT0qGoB9Hl+vwn3+3VyS/clSKWb8w=)
                          33: WzVSfSCn9MA71szaeG3UuHYtodU.roa (hash: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY=)
                          34: Xf46Pw2tgmQ6pve1qLg9BZ7i_dI.roa (hash: D+T6tWOFOaWIc3tUG494jBawlfeKBbjhnuioC/+eLKw=)
                          35: XpKA71gUP1e7UUjZfSVd57bX570.roa (hash: 6PtbKEpVQwlUQzyUCiZ3HIGqzJT0phPeJKaGDFOYcU4=)
                          36: Y77lZEjMBzMzMT32ddXL4QtjN5Y.roa (hash: zzyV8SctE+KAdmnw/zoC5QVggHbeNAKkJ+yHounflSo=)
                          37: cK89N5HfyZS7jF6HhZwkXV8Y2Bo.roa (hash: JcqlClpjnKH1fpiTqdXi9LCmWrDRy3adS44+Dzy+IYc=)
                          38: cWk9dxF1_jN82ED0F2U4rCb7Jcc.roa (hash: 9FgNWBb//T/G58yCB9FCCVaCw/gh2N4AQ1kSifxtRFQ=)
                          39: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: /Zyiqc5aXdy7OeRVERZPnAP16o7kLDv/dOHO713a27Y=)
                          40: hOBQ2pkA-0KSRD9W7HYv7T_EUBs.roa (hash: WyYXRQPNi7imcTjkFnUupixWz7zRkOa+LoRgnw8jDP0=)
                          41: hSaax3PNMqT-lY0FA2NBN-L2Y6k.roa (hash: TL8+SkkJk80gm8fQRrJdTYhaB9ZhdsTEkaDJpoXwUDg=)
                          42: hdJu7f4kSdt-uKkfr1zrXBPa9Ks.roa (hash: GG98Q1bl7OyANKUpp9Wym8WZdgAzVgCTFjDl+3fraHo=)
                          43: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (hash: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc=)
                          44: iuklIzN3cd1myy3SDGqaIIPCfVQ.roa (hash: 3qfnX7bi5LJVGXxA1CUbsRAXKqiE2M+t9Nh2aQQGCqc=)
                          45: jypXh21hN7YdEpy4dXX0h1grdhA.roa (hash: 2PCWogNS3NDeaLLtCqO6S4RyV1g0zZ01LBa4NOA2iZI=)
                          46: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (hash: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM=)
                          47: o_xmKrPL1_AoZs8GvOPm1dKIyhY.roa (hash: bZaaKprcnpy1yZ3w1Gq+0Y+GwujtgYnOL+MJw5ekemQ=)
                          48: qCxbncErzk4900gAaePx5yenewA.roa (hash: GQ8NXjQ+vN1fWJvNU40z0ytK/A56AMCqS+vkok7OXnY=)
                          49: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (hash: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE=)
                          50: rby-gGvDas1Xa9334DJTczkmtYc.roa (hash: h/3pkwNZ0gwBP4ba5gjKhseXzTn04Qnwy4D9dTEdSQ8=)
                          51: s3SYC34soWmzoKTsPOX5kVncr4c.roa (hash: NNv/S0wj01Qx/jiwO1ikXgdpR/5j5vjGnHKp5dqdD6M=)
                          52: sSmiX7qzIyZZBnvlsyXWyCUq0w0.roa (hash: tkEIfRS+g8cxAhTQ3NQOI8Ng+3BIy+8//+cVCwbQgNY=)
                          53: wwKe_5nbJkCZEay725-TDTyy8Og.roa (hash: pMdRZjm2+fkkArj9Ia/EQLb5RslFHxVSqKZVI19kX04=)
                          54: xSlSopVrA7ar-AzHU43kvDoRkZo.roa (hash: EIL/MjiMscFzU/GPSjw2hRcZh5VxPz7Q7L9p0rCpFC0=)
                          55: y4wAHtuhXySsgZAsgfueu86X_u0.roa (hash: ujLBVevk0lCyiIWcos/hcAcdY8h12ok+FT7VQSNGf6M=)
                          56: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (hash: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:0c:b0:4c:c7:e9:4d:7a:96:09:14:dd:67:c9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Jul 28 09:00:16 2026 GMT
            Not After : Jul 29 09:00:16 2026 GMT
        Subject: CN=0038889fa0c7324598d2af7de3e4fdb82f3c41de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:61:39:45:92:59:1f:c6:14:57:29:b8:53:
                    b4:fe:89:9e:10:52:ec:20:31:ce:e3:8b:39:50:a7:
                    ad:90:07:f7:20:32:d0:90:23:3f:e6:05:d8:9e:b7:
                    c7:5b:9a:ac:af:ae:30:7b:15:65:10:a8:7c:f0:7e:
                    b7:c2:79:32:15:a3:55:63:b9:69:94:d0:9a:39:11:
                    da:a6:98:2c:ce:ee:7b:1c:60:88:25:5c:1f:84:f3:
                    db:5a:cd:7b:7d:ff:f1:33:ba:fd:c4:f7:a1:26:9e:
                    b8:04:99:a1:56:1d:cd:ea:87:81:63:39:5f:ff:0a:
                    ee:0c:ed:62:0c:73:28:4c:8c:2b:3a:7c:2b:bc:f4:
                    ca:5a:7e:f6:5b:65:ee:8e:dc:af:88:fe:9a:17:fe:
                    0c:39:57:f1:72:53:55:ce:c2:14:18:34:06:65:d4:
                    b4:00:ee:e3:a0:0f:f9:90:5a:c6:74:4c:5a:78:44:
                    8d:45:fa:8d:26:cb:71:6e:16:b9:68:8e:8b:18:00:
                    2e:d5:ce:7f:ed:b7:a0:0a:89:23:cf:e8:e7:3f:df:
                    fc:75:d5:0b:f9:49:eb:21:ed:07:5c:26:a0:d1:be:
                    7f:d2:85:dd:66:b1:12:90:52:0a:3b:32:f9:99:2f:
                    3a:23:89:ce:1e:a6:c3:f6:6f:72:a2:21:e3:fd:81:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:38:88:9F:A0:C7:32:45:98:D2:AF:7D:E3:E4:FD:B8:2F:3C:41:DE
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:8d:cc:d5:1f:b5:e9:60:b2:e7:fb:de:d0:33:28:d9:75:
         27:cd:23:50:28:c3:f7:11:cf:94:1d:44:c7:49:41:ca:d9:26:
         8a:2b:32:02:85:9b:c8:e7:e0:24:07:37:77:aa:99:78:5e:d8:
         95:0f:e5:28:33:1b:1c:04:ad:5f:e2:96:cb:d5:fe:31:d0:82:
         65:fb:ab:da:87:6c:68:78:2a:d2:20:ea:49:82:08:8c:4e:9d:
         ab:38:84:0d:37:d6:43:f3:79:bd:c6:b1:05:3b:fc:3b:26:e1:
         32:83:55:83:07:ea:ad:4b:72:6f:90:03:e8:89:28:c3:bc:fc:
         2a:24:ba:2e:fc:83:b0:d8:09:98:4f:e0:74:24:fa:ef:42:aa:
         8f:f0:d1:10:8f:df:97:77:74:cc:55:f5:65:b5:86:d6:f1:93:
         28:e0:89:e4:f9:ad:c2:c7:a3:7a:cd:bb:17:61:57:71:7a:18:
         be:9a:fb:cd:6d:89:c4:13:b8:d5:9f:0e:73:dd:0f:fa:16:b7:
         09:04:ae:f2:a9:ce:ba:eb:8a:7d:9d:d5:c6:39:4e:ef:12:67:
         b9:a5:de:27:92:68:8b:b1:f5:89:08:db:0b:b2:c2:c1:6d:10:
         ee:2b:f7:9f:83:a0:90:e9:88:98:cd:c6:3c:98:99:c4:d3:11:
         dd:15:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:25 2026 by rpki-client