Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File:                     Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier:          0CM2r369f09ApJg/zB6cBokKOZ22U6hwtS8vZMEoGwg=
Subject key identifier:   E5:45:D4:DF:18:5C:56:6D:05:1B:6E:51:AB:C6:83:6B:8C:57:B7:1F
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019E1C7D7EB80AAD3EDFEC57A25F929646AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number:          0D2E
Signing time:             Tue 12 May 2026 14:00:46 +0000
Manifest this update:     Tue 12 May 2026 14:00:46 +0000
Manifest next update:     Wed 13 May 2026 14:00:46 +0000
Files and hashes:         1: 0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa (hash: oJFIU8Cu0N2S9/wG/IfXoDuZ2TzeSG92c58fXMAz65w=)
                          2: 1WFcAkubK0j9tuvoOEpKw8rrMZc.roa (hash: US4FVafwO24GeaH/vI2owb0qrhh125+5+tzixj9zkLg=)
                          3: 4YDvutSU0UmPrwnDFoLiKufwEY8.roa (hash: zJVa6p9/6hu2WbxRpiJdGV1n058lDV+uyqxwOAwNowA=)
                          4: 4hgz4QMM31Dnzsk16v76ApMHw1Q.roa (hash: uTIYHBVMNL1a8dqc59Xavlk6v2XFQUwkIp5IXWbQIxQ=)
                          5: 6CzQRMn6GnwsVxYiA_23IYKMeoo.roa (hash: yTq5lptLiZc3PV2A2cnpwYQvB925u7nVJPs/y3zGz+4=)
                          6: 7H2mFDg6qfXpVYnxbXn0fEFWELs.roa (hash: J9Hxga4uilgUHWboi+rXmCtEsrXocnGU8yxF/NAwyo4=)
                          7: 7xz9ZtbXj7qhOrWl1asjKBlzz1o.roa (hash: al7m3r3hlQECrtwI9lRqdu9jwLTy7M0zSKzMUXGbBvQ=)
                          8: 8c8fo4MttyJv5SLRbDdRYu1xnic.roa (hash: 1vjbMqaT77+AxTSiKxSoxcqnrNY36Cpct9YPE7m/ttQ=)
                          9: 8cSFy7Ko1nag59SAcofvgS4Nnmg.roa (hash: IveoawDTw5t/FsiNYzrV2ir2XqSXTfIr+SxjBonLcNI=)
                          10: 93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa (hash: AJlYL2EFP/0kQaoDXjXnYGJqco+B4D+CiQvUKCb/WIw=)
                          11: 9w8n7TtHePHsLOfepkD5dQlDWpY.roa (hash: QNQ16n2FmGQi82u0p2e9PUzGlGzw6yfmOHXwlBjHsbQ=)
                          12: DPy9szbNMOQKof88htrB5gYXHg8.roa (hash: KpMcLwZt2U9k9KODAobx45vqz6G1VYYTX/rJeTqqTFA=)
                          13: HcULhPVBvVigoye4t6FA-KQWO9w.roa (hash: hAIwfnXvBlSldAfdYYWFGxIbO3wQO108WhCVpchVN6Y=)
                          14: LwRV0I5aAABSv2rkP0tPW4FRNzs.roa (hash: koEQn+aNjm6TSUwuZfgQBvNwwQjzXH0iVoRIHsH/lmI=)
                          15: Om-Yq1ZGRM1IIUjBT3G8r_WH3vI.roa (hash: NbN2DC3J+/IORMxUWXp73u1pYhmDVgIteGSJjaWkIyM=)
                          16: OwtGWChxCNtRyJj6ElbibxId-aQ.roa (hash: ka/36kkAkjg2s/fwE4e37YvaQAs87ErAmYuEuoZciXg=)
                          17: PCm2Il224mWbxHMgp2-whFWp5Y8.roa (hash: li5I0uPh7E9cKNVsRWXspiiKnjbCYQjxIQb8POSntgc=)
                          18: PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa (hash: UsJVbDBJ3BYi/wLg7BLlATz/hycpIsDhQ1LAnNbDRWA=)
                          19: QJmnWjrF5SckYqXHMQVWx6L7kxc.roa (hash: ZzvvSvqGh3FCeEYQX83Fju97+ka1cm0UIM/Bcb7Vjew=)
                          20: RUng57NMoW7ac1B2TzLtvUsBHXs.roa (hash: bXdd060UNM819brDZVY/MNr90jZYyXFvlUoD/+9CalA=)
                          21: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: ZCry5zEzxDZGXDtnyjeGD9c8C9DvmplBCfKTxVeXCGM=)
                          22: TDJgGMkZLrZ81GbvZCeAhhBMKFY.roa (hash: 6e5HzejThUKP+KfqmBRD2KB/4LGOct53fiIiefsSVx0=)
                          23: Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa (hash: H+8IU6Ec/C7W0gUzGWdPCX/2d2iav4ezOCEab5gRvr0=)
                          24: W_BCOjmAdkWfODZ7bvZ_1VEo820.roa (hash: aAqSVSwbC6esRzER14YmpKx6m+Lo1g184jMJRY9Bonc=)
                          25: Wx6ujnx5V9SmWdGZ7fl6JX-A-ik.roa (hash: myAFROxX49mA8li5Tx07MgNtYqh4WpPg6VTHZGCCys8=)
                          26: Y9-xxrcFnsxDZauuv568t-PFy6A.roa (hash: xIyIZR1hVpjqPtioz/biAZM6H7ey8FMbjIcIVI3aaQQ=)
                          27: _F5w43RHV6dx3R_wQAV5wzUAHzc.roa (hash: BxgPa91m82H9cRlL0aKlQX+98I+Jq5YFGlS8SucX+mo=)
                          28: _IfucW-In1l5Fz3tjcTrBT7FS9I.roa (hash: 0d3RCOf/PgnlqbIN8XSmRiR9HJQfbIKvyOIHy7stdzo=)
                          29: djSIdX2gTX0MCxSL5llsn6i5hhM.roa (hash: fcqxImDjDHGTSuae1yCoZlPJZwU1d5hw+ezJF6PZbRg=)
                          30: eIpleKuOfZq1bPfCT2L77KdKRYg.roa (hash: czjz3eTpWUJaPaJtmnQVcyeyF+Dq4AtmQioUJnZMjK8=)
                          31: eSFc-jrx02A_dWByF1qGRiDKKWw.roa (hash: I6Kx+g6HRJvl92E2ZUTTlvthedWJjMU1Cjwr0YGI0s8=)
                          32: e_F7Xbi0XqAy8Omhy8vQyDQa9No.roa (hash: oE2eMUbGUqjLN7domDF+Is0SbYEsjgkb9FJzi5XwtZw=)
                          33: eiaI1-hJNAgrmp0gE_umAxWn1sI.roa (hash: 0+nXI30Kx9KhbtXb4L+JY50O7XiXe8UjeNblohyYrj0=)
                          34: epL-6pVwzhIEf7qPG0idZwvRAaU.roa (hash: PUOL+WHkVofoMPu8K9ZuIn3mIvtNQi0EbJERGXzRSaU=)
                          35: epUEByvctUQFdD6x8uykLVw28K4.roa (hash: mbKHV+YI3RW2KrL8/aMhBlFmfvhswGZcacqDnNW/6l8=)
                          36: g5P1CePj7Ig3Woj5axzABAMb-Fs.roa (hash: /SHldXpCq9rbN+oRz89QqyP1fUqetjOkr2DsYsUd4t8=)
                          37: h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa (hash: VkUy1q7rwk/bJY0kmudHR01ERlqKVDpha+69blCqd7w=)
                          38: lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa (hash: MgQdaG1666kHidH2vRjUNtiAJVGqpfkJRhC7xtWbkDs=)
                          39: ljJZC2hEpJ5Azrtf0iqlzINfN74.roa (hash: 5Q5VXrZNXtx66LR6yEa6nurEugsz3hLaJZcfv1xig+w=)
                          40: oBbHZskBgePxfPA6yXAa9qsZaJ4.roa (hash: HMrh2dCkL1N2+YwCmiHFoho2RWsT9N7Z2PNHtiVeXho=)
                          41: ou98WwPXDlrEW3eM0KZKlXxPjU0.roa (hash: e6aNXSypQBdMmCLoYi3x6Uu9rY0X9chBD/3LiPy1/5c=)
                          42: pcwBdWeogQWKGBKaJvlkeUygt1Y.roa (hash: FyjOSrsEYcBQx6MNH4viXYO5bDrfzFXdgEpostcNkrE=)
                          43: qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa (hash: 53AqSfnCOo667DHb8w2oqtwcLknCSxXAHJeADmD+v3g=)
                          44: sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa (hash: DgS24JG1c/l8UCWAl1zW8utqR4YjdbEUYY2s38b7VVE=)
                          45: siv7eihEdKW_ap7AUDG7_39jUmI.roa (hash: WFYLo+dkgFW4+MbeoyoZaYOFmKk3TOwdJdQSzSoQ9SE=)
                          46: tbVX_nBTaE5VNov1rsfXFt2f7SU.roa (hash: rfYnZjKJQ0wuXUnU3TmEpEijE4Fpnxn/YL0Ur1YiogQ=)
                          47: urL4Mc4DykB_e6TYmMEoYhi2954.roa (hash: gfx7b8/If2mHd3qPOzceO0clF1lE+PE3Ji80UoFnGp0=)
                          48: v28XBIDcOIWawnqoBUd5lqyUYxk.roa (hash: WxydDKnqf++ZAuoc5GMUeeHtdm5DstgCBzp6r96AGOg=)
                          49: xRZUDhx7ihJfUObQvwoPd_wjCIE.roa (hash: CaizEiyOxtBDcQtuUG7hvPJywCQ5SLbLXz2o0r0E2ec=)
                          50: ySNwW6swWEy9g206lS3TF8Hot7Y.roa (hash: 2G2m7gXWJPeDJ1CaSCcPPIj5TE8F3VNFo+mX4zQe6WU=)
                          51: za88ND0OSXOKBDkHlXDSgAc0j-o.roa (hash: 3SNDrnhjIHUyQtYp1P1Obkb/xEBrgav3aCIr/q2YN6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:7e:b8:0a:ad:3e:df:ec:57:a2:5f:92:96:46:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: May 12 14:00:46 2026 GMT
            Not After : May 13 14:00:46 2026 GMT
        Subject: CN=e545d4df185c566d051b6e51abc6836b8c57b71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:b0:3e:b7:88:f9:85:01:55:85:d8:1d:1a:
                    2c:d3:e2:bd:28:b0:fe:b7:6c:b9:bc:fb:18:48:ec:
                    12:b1:d9:f5:b5:31:fb:81:af:82:3f:12:c4:db:ce:
                    31:8f:bb:a8:31:27:35:f1:72:b2:bf:e0:e0:de:e7:
                    9e:f8:e1:d3:fb:3f:99:6a:d8:bf:49:32:df:ed:0c:
                    a0:2a:de:d1:76:00:ea:da:7b:67:21:b3:67:1e:ae:
                    c8:e3:66:dd:7f:ab:c0:46:68:b6:4c:cf:f9:c2:bd:
                    0b:4a:a6:e4:06:20:3a:9d:3c:e9:c5:bc:f2:64:78:
                    7a:5b:65:92:71:a3:0f:7f:be:98:c1:c7:24:16:99:
                    de:ca:2d:0a:36:72:35:88:91:3b:13:8f:f8:2a:c8:
                    43:a7:96:7b:0f:d9:48:27:24:ae:45:11:55:9a:b5:
                    87:95:99:30:bb:b2:73:4b:cb:8e:53:cc:af:33:36:
                    72:c4:3e:81:19:85:9c:ae:6c:8d:cf:80:33:ed:d8:
                    1d:fd:ab:69:96:2c:f4:ba:ff:e1:14:7e:8d:c9:16:
                    cb:5d:16:07:05:2b:13:c9:52:00:8e:26:47:84:fc:
                    f0:7a:c4:dc:0c:3f:f3:cf:8f:9c:b8:26:a8:d8:e9:
                    5c:16:6f:eb:a2:32:25:f0:fc:80:cb:ae:d7:ba:e4:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:D4:DF:18:5C:56:6D:05:1B:6E:51:AB:C6:83:6B:8C:57:B7:1F
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1d:e5:59:05:03:4c:e4:0b:37:b9:2e:fb:c6:47:a9:b7:d1:
         9a:1f:cc:71:9b:d4:19:e0:a6:91:f1:50:ce:51:a1:11:db:2c:
         fa:cf:f6:06:2d:5d:13:d6:dc:38:59:b8:8a:db:03:76:bc:8d:
         83:26:7b:83:e9:37:c5:0a:00:b6:ad:e7:cd:46:b2:29:3b:4d:
         c0:6c:01:e6:c2:3d:4c:82:98:3f:e3:f5:06:48:25:8d:78:e7:
         44:2e:f0:fe:73:a4:fb:6e:4d:77:09:b1:a1:62:ae:83:fe:b2:
         a1:6a:8a:26:6a:49:ec:a9:80:e0:66:f9:65:fb:ed:29:45:db:
         82:6f:66:e5:3a:80:58:18:1f:ef:98:9e:4b:ce:b6:b2:a4:17:
         4e:f9:f1:ad:13:67:77:c5:7a:d3:0a:5d:a1:06:27:0e:e3:14:
         0f:b2:d8:50:7c:9c:d9:a2:2b:3c:78:ec:7c:b9:46:38:fd:b5:
         f2:95:73:8f:f6:a0:be:37:33:d4:02:11:73:5b:69:87:f7:d2:
         77:1a:a5:aa:b5:1b:9d:a5:5d:7e:f6:95:3c:71:f6:e1:4d:00:
         36:2c:8b:5f:74:23:5b:9b:9f:8a:6b:50:25:cd:13:33:05:39:
         9c:7a:a1:87:d6:e5:0e:fc:19:75:5d:4c:4d:4e:28:fe:2a:06:
         78:ae:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:27 2026 by rpki-client