Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
File:                     1m5HlK_Dorol0lKoVzR-1O6ua0A.mft (raw, json)
Hash identifier:          nDQy9q6fnhGcljKqCEZYPc3743sgxXVyyO2QtDj69RQ=
Subject key identifier:   8D:F5:55:7F:20:E7:4F:77:C0:B0:DB:87:49:39:CE:5B:DE:2E:C0:3B
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Certificate issuer:       /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial:       019FA8993E14D5BAD3BD9624550BCAA4B465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:42 +0000
Files and hashes:         1: 1P2qLpk9DiKKlSEE2a_XxSQ2VDE.roa (hash: vpK6DJzFGnXIL9dy0QXqYdh03cppRXx9vEZ+/QsVfPA=)
                          2: 1m5HlK_Dorol0lKoVzR-1O6ua0A.crl (hash: K/3NOCCtINd/SwM5Wia9RinkUWRvuRzj2JLFdrjgHCM=)
                          3: 2-VpeMgr8WlOJ7qhVALa8xf34sA.roa (hash: iQSGWDL9tXr7gqFzhBNlU6VdCbvCnvQDAQmo6oV6nR8=)
                          4: 4ugcXWTew_-RTsexCcRaMYVlSJQ.roa (hash: 3pTb9i59TWEwdsk0USORPlbOcbLxAM6aj2enaiKbwk8=)
                          5: 6DknhXRMmWwk8an-W3o77qoUFZ0.roa (hash: A411sMGCpxf+MILpBK8VyggjVHx5ELsPnFwL7AqAOyw=)
                          6: 6wJo24JaEg4HCL13OwZyd_p8EuI.roa (hash: Ecy52IEyOsXieauOVtOGrI8MLaSGwR5ZywaJVjVouO0=)
                          7: 9irQNPunNfIHH8n7jSs2qp4O5Ds.roa (hash: ZPLXxK3+eVCaIYcd9/RsDXygDUinpe1JgVsrDl6w9EM=)
                          8: BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa (hash: FTSWcIBrpAoN+BaWjFgyeHzR2aPhUIX+vxQU4l8lXDg=)
                          9: CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa (hash: bi6qpQBcCAHeXpWf/tbi6W0Y+r+V6vixCToqurIcUo0=)
                          10: ELkpby9Bdj_JYA7C384OWbqpxJg.roa (hash: h31rtApWx4Vz7rykyNrBq0suf7t4VBJaPWG2PoGxA84=)
                          11: EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa (hash: /6Yg37rQGMw7b7aHYe0qmGSvAz6Ym3IQkqAVWCha16Y=)
                          12: XcRInvJYcsn8LtFLNgtDJnMlA6w.roa (hash: 975sgmbb5YVMCQJ/ZuhSXOCDO/EGP3qD/sjyuljUer8=)
                          13: asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa (hash: KuqZv/NVMnD/Fd4vtymf7s80nLCEQdm+5RUgyn+ikB0=)
                          14: c7fV872rZD6th3xVaen9mG2oBpA.roa (hash: 2UMq0/v59ttMK2KDnJHhNgxit9sLmaqAfQZIeYzPFwE=)
                          15: csGRumIzLvV9if9_bIFsL3RnE3E.roa (hash: tiltBozvqFHHU3iwoERlFB04KrbLb6/sL/e85auuwKs=)
                          16: e7YLs7d9BooaEXjfhj35M1zCANk.roa (hash: 6kVp3Z3Ls+TJhmXsKC3JdMydn7wc1r4A0PwZJ8RWk5k=)
                          17: hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa (hash: FyvzqNs/DFqFEdYIOb+k/AxYw5XksOHLVMUkCECP37U=)
                          18: iQJFEogcmuEcf3e1YUWgCA2jhHs.roa (hash: R4DLgm0Woa+HAomEZejsM5VxONe5BX3yp63MRciIs1I=)
                          19: mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa (hash: ZjbIzsTsUVGIXpBPiMvFezlvhGdIUwjt60oGvSVVS0Q=)
                          20: pyKDaObepnnTMaR3rq2Q59TpNcg.roa (hash: zk/m77Vze3pEZGmWk0C+TDK3TCT3ImHxAqVzukqevdY=)
                          21: sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa (hash: 1FJzlm32YyhJ9vJsD7WZN63skJx2wuGv8LsAMhrOWKg=)
                          22: uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa (hash: wR746BXfUg0EQqUZIqyYoo2UiBtxVdcw2McS7HbXvek=)
                          23: uybN8XjuaR7_GyDrHfvLIk95_f8.roa (hash: TamexhXZwR0ORnAXw/7R6+cGgQQii+1odd+58W95Efo=)
                          24: y4ib_LgrxEdhHHtEW83XhEfkxAA.roa (hash: aJQKzXEaHtvyQ8mVh2ttdf6AWDHmUy9MG03EsOsN3TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:3e:14:d5:ba:d3:bd:96:24:55:0b:ca:a4:b4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
        Validity
            Not Before: Jul 28 12:00:42 2026 GMT
            Not After : Jul 29 12:00:42 2026 GMT
        Subject: CN=8df5557f20e74f77c0b0db874939ce5bde2ec03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:45:b7:3d:00:55:a3:1a:95:0a:15:25:22:
                    13:10:c5:51:a4:78:99:f2:b7:82:7a:f2:5e:5b:72:
                    1f:81:3a:ae:d7:a1:8f:0a:6b:85:05:0d:99:60:4d:
                    2d:78:65:89:00:1f:76:63:8f:27:85:cd:b3:ae:27:
                    69:ab:e0:a8:2e:79:6f:03:7b:8f:fb:47:60:2c:38:
                    c4:83:44:cf:6e:7e:36:c0:bb:cc:3e:dc:e7:e1:04:
                    f2:30:76:8d:b2:80:8c:72:17:72:cf:a7:f2:2f:ce:
                    e9:57:35:2d:df:1c:ea:db:1f:6d:72:35:42:27:52:
                    a8:a7:53:06:1d:04:db:cb:27:ac:e5:0c:25:d2:c0:
                    0d:95:aa:a7:67:ab:60:56:c8:d5:f7:0a:df:d8:b5:
                    20:3a:fb:0a:43:87:9e:81:3a:09:e4:29:6f:5b:08:
                    47:ec:4d:a2:dd:cf:cd:8e:b8:26:60:0c:26:df:d1:
                    95:b0:74:a0:57:25:43:94:46:25:6f:cc:71:f6:e4:
                    93:68:75:b7:30:59:dd:72:99:aa:83:4e:71:4e:2a:
                    a9:06:5c:00:d7:68:3e:b2:76:c6:19:41:be:91:02:
                    a1:8e:c8:bf:8f:1c:50:7a:0c:4a:7e:a2:66:d4:ab:
                    f8:b2:2f:b9:90:10:b4:36:2b:8e:f9:51:e3:b9:2e:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F5:55:7F:20:E7:4F:77:C0:B0:DB:87:49:39:CE:5B:DE:2E:C0:3B
            X509v3 Authority Key Identifier:
                keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0b:e8:63:b2:35:f6:38:3a:bc:d4:9e:1b:73:d3:db:f8:af:
         b3:a1:1a:f9:1b:6e:5b:8e:83:9b:9e:1b:5e:42:f2:56:1e:14:
         98:4e:fe:0e:4e:e9:3e:3e:de:83:7a:2f:f1:ff:30:fa:73:ec:
         d1:79:d2:01:4b:e3:f5:3c:da:4d:51:23:df:3d:97:5c:26:f0:
         97:ae:cb:97:3c:5c:75:26:95:9e:f2:2e:15:6b:05:91:a0:6c:
         e6:b4:46:70:82:4c:02:e6:ca:a8:4e:b3:4f:b7:44:64:03:31:
         f0:e4:7e:05:78:fa:89:d3:01:9d:1d:81:e1:7b:57:62:2e:f5:
         2b:8d:fc:5c:cc:12:b1:3b:79:c6:b4:47:13:41:bc:9f:b5:8d:
         e7:0c:fa:c5:a1:03:e2:90:cc:d0:af:e8:2a:da:5e:d6:fc:44:
         c5:88:bd:5e:85:3d:1c:88:07:14:ae:6d:55:19:e6:30:f0:e2:
         52:1d:8e:46:4f:6b:53:68:f9:65:3b:d9:e0:a3:cc:44:87:b8:
         b2:88:e6:cb:81:23:e9:12:74:1f:80:df:00:48:07:e6:74:09:
         0c:f6:be:2c:1d:e0:ba:fd:de:24:ea:7a:70:0e:f8:52:1a:4e:
         92:fa:55:ba:9b:b3:21:ce:f3:db:27:52:28:10:64:55:e7:d7:
         c3:28:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:44 2026 by rpki-client