Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
File:                     5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json)
Hash identifier:          B1GkR5unrqsAIkpJ8j2RfiGsXNTuWmgF2tmMR3Mwrr0=
Subject key identifier:   9F:0E:45:4B:20:76:0A:AC:99:D1:31:1F:F1:F6:28:2B:E2:6E:EA:0F
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Certificate issuer:       /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial:       019F8F4785D9D167301945BBF95908772EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
Manifest number:          19F4
Signing time:             Thu 23 Jul 2026 14:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:56 +0000
Files and hashes:         1: 1-bDqvi_4Mc-Zt2RhA9DsJLBmruY.roa (hash: KD4TndoP9a8jrSokheVf5gZGM8WkPWsQCaAuWU8HuI8=)
                          2: 1-ezGqblYU88DYGupfRZt0z0P-c.roa (hash: 3e97e1j/lafVJd2urvOUlhx4dA8czMnXPXhILFMWj/s=)
                          3: 35SOLMh2Tr_jR_FO2LonZS0Dwzw.roa (hash: cO/Z6F7txV6TpV/V5lfE+W3QYDMUy+GuCUzsuf9Drjg=)
                          4: 3qqdfy_UnFdVQlDpIxR1zw9DOmI.roa (hash: JXo5pmi2bOioFRZlNCJNAYMl2NAvXPqzIcF0g4BSru0=)
                          5: 441lsNWWkk3opsQNut7AzIBZ6Vw.roa (hash: oATiIhAV2CCuqPXCGfeoLqoQsm5Vn2kewH7dQxMNlfw=)
                          6: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: KvofktzXff8me/v+KFJBfYVGWtjMc2sy4IcqPEMnMR8=)
                          7: 6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa (hash: ES2CFvY9/aMMP3GdeYDhO1AlVTq0AbKmFVcT86x0bsU=)
                          8: AP29ZUhTpSq5v5F29RLmfRluGGg.roa (hash: Srhc1Pf/7fMSsd5MEwDg1pq9CSvUw5bMKTeun0cG0k0=)
                          9: BR6ncsWkhB2qv0oqp59JLRJ22t8.roa (hash: Sr6aWOFkIZvhFz7mwZ8Ee2XNqfnohzUvlNMsgOtw6Iw=)
                          10: JEMgZMqCppytL-XPExNRul1VH3s.roa (hash: dzjcBpIe+vXzor5NRw+072k/UWw88Cy8QHFD8Z2ohp8=)
                          11: R6i1lLd7jP95i07yJPiQGxTvFe4.roa (hash: eDaRk5NehXEf6pz76rOcTuAI9WKGYuVJ2KFhONuX1UI=)
                          12: RC_GkxlNqDGelGLhmGSuHpzh8YY.roa (hash: zmoFdcBbJpm89sGvucYAsXD3aYu3UDBB8FNuuO1sZ5s=)
                          13: S9uiecJ_V_rH09OQWGxwMdpwZbI.roa (hash: nUYADl7mzytkkU8x/rVrDEkyWr72tHMtYDmNMTGmu14=)
                          14: dJeU2d3NWjx1lsl1DJGshHnRCGI.roa (hash: Ej+gk8v3uPhQQghNflw4x1l6EEeEieQHfKZUGqRTvJ8=)
                          15: dx5kKwsHUfeaLHIBuy1rdyZUN1c.roa (hash: MvSYpg6vlKWZg0bSYJ636EBXNeo8SL/Itfm86FpKxtI=)
                          16: oaD-F61J8uFaQOVs_EMDy2GWPFM.roa (hash: oRDRlDLCwINYWsifpUB1J8rOuM3NUJ7WcDPWCCey5hM=)
                          17: s_jNQyIiTuwbGKzqZChjnXQ8yXk.roa (hash: BigSrB3O/lITzhT7Tp1a0ccxKTegNHB+OKmJdIYz9ak=)
                          18: wInMghm11FcLBqJT2EV9FM0ZiVY.roa (hash: UusTkTJUi8H8e/4BJF3uND4xQVZ//M68retdZEwQKm0=)
                          19: wvLOi-n9BkPXu49eSdLibW1rXgM.roa (hash: E28Ur4xLJI4knd7wx2DTfEuXgfZDFGTcpyO+1eE4Rkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:85:d9:d1:67:30:19:45:bb:f9:59:08:77:2e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
        Validity
            Not Before: Jul 23 14:00:56 2026 GMT
            Not After : Jul 24 14:00:56 2026 GMT
        Subject: CN=9f0e454b20760aac99d1311ff1f6282be26eea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:9a:0c:02:34:b3:c9:c5:86:f9:58:d5:35:
                    38:6f:21:e0:a6:06:d8:3a:65:44:3c:69:9b:45:3d:
                    56:93:b8:ca:d4:94:6e:07:89:1e:e1:ef:9f:d7:c1:
                    d5:a1:de:1a:10:d8:5b:9f:06:d6:13:80:1b:1b:64:
                    1f:23:bb:cf:3f:1d:d3:ea:63:66:46:2b:95:be:f1:
                    f6:bc:a5:80:cd:8b:89:cc:49:48:8f:c3:c0:a8:e7:
                    1d:9e:95:e6:4d:80:7f:38:01:6b:ab:a3:b1:4e:b9:
                    39:d2:5d:85:0f:3d:d7:2e:50:cd:fe:dc:bd:eb:31:
                    63:e9:89:fc:03:ea:02:1d:bb:20:49:bb:26:0a:46:
                    2e:64:69:c1:d0:11:ac:48:ab:2b:1e:7f:d0:fc:06:
                    0f:fb:8f:09:cf:ec:b6:58:3d:55:ce:e8:e0:a6:9f:
                    b4:13:7e:0c:1f:e2:ee:cf:42:6e:8e:06:24:2f:1f:
                    7f:21:a7:bb:a4:a0:63:c6:c0:aa:5c:b6:79:07:1a:
                    2f:63:cd:c7:46:91:e8:b0:f3:16:6c:88:ff:8a:aa:
                    4b:3e:e0:2d:ad:c3:79:24:5a:c8:a7:a6:fd:88:4a:
                    ba:42:fc:28:bb:bb:d5:0d:51:46:f6:d5:9f:5e:e7:
                    a0:b0:be:50:6c:2f:8f:de:33:3a:6a:d2:08:d9:56:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:45:4B:20:76:0A:AC:99:D1:31:1F:F1:F6:28:2B:E2:6E:EA:0F
            X509v3 Authority Key Identifier:
                keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5c:f1:a8:75:1d:bd:69:67:db:9c:67:61:60:49:08:c6:1b:
         0c:5f:e8:3b:e8:65:56:59:47:76:c0:8f:3e:9d:a1:9c:c6:10:
         c1:0e:6b:50:cd:20:1b:8c:f5:dc:8b:d7:3f:4a:9c:a6:38:f3:
         c1:64:f5:46:18:0e:d0:d7:38:02:a4:d0:01:0e:4e:91:c3:1f:
         78:83:8d:49:86:39:cf:e3:ee:a3:c5:fa:11:87:45:84:36:53:
         17:ea:0d:ed:66:08:a6:1c:a4:59:bd:20:99:07:46:c0:1a:aa:
         da:a8:36:e2:ae:e0:d2:c0:6e:ff:1f:6a:c3:7c:96:bc:80:43:
         66:0c:d3:ec:3e:2a:33:52:f0:01:90:45:42:17:ab:ce:4f:d9:
         ab:0b:be:0c:43:30:d8:d6:5f:ee:34:0f:30:7e:8a:88:e7:e1:
         f0:04:d7:43:77:76:44:3a:d7:42:05:b8:f1:e0:47:8d:fe:2c:
         b8:1a:e1:07:46:7b:a0:a5:50:77:b8:62:74:e6:9c:b4:c8:fa:
         a8:60:e4:14:92:9b:3f:40:74:49:c3:c0:cc:8d:5a:ea:21:57:
         fe:24:87:25:61:b9:26:a0:2f:56:1b:b5:bb:ac:cb:a9:dd:ca:
         af:56:f2:3f:ec:80:9a:55:60:cc:71:c3:38:50:42:e1:3b:73:
         d9:08:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:44 2026 by rpki-client