Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
File:                     1m5HlK_Dorol0lKoVzR-1O6ua0A.mft (raw, json)
Hash identifier:          3W4rts34TOV47Nwj7BE6YJ1oDKeJveTFE9pYB429604=
Subject key identifier:   FF:95:8B:8E:9F:50:BD:E0:A6:A4:3B:6F:50:0D:92:0F:09:26:74:56
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Certificate issuer:       /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial:       01A0D011AAC98646A9190AFE6BDD3037D33B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:00:13 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:13 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:13 +0000
Files and hashes:         1: 1P2qLpk9DiKKlSEE2a_XxSQ2VDE.roa (hash: vpK6DJzFGnXIL9dy0QXqYdh03cppRXx9vEZ+/QsVfPA=)
                          2: 1m5HlK_Dorol0lKoVzR-1O6ua0A.crl (hash: qAxO/07e4cYxQM7n07yyxEE8J/4QlVR/dMDKhqnMdLY=)
                          3: 2-VpeMgr8WlOJ7qhVALa8xf34sA.roa (hash: iQSGWDL9tXr7gqFzhBNlU6VdCbvCnvQDAQmo6oV6nR8=)
                          4: 4ugcXWTew_-RTsexCcRaMYVlSJQ.roa (hash: 3pTb9i59TWEwdsk0USORPlbOcbLxAM6aj2enaiKbwk8=)
                          5: 6DknhXRMmWwk8an-W3o77qoUFZ0.roa (hash: A411sMGCpxf+MILpBK8VyggjVHx5ELsPnFwL7AqAOyw=)
                          6: 6wJo24JaEg4HCL13OwZyd_p8EuI.roa (hash: Ecy52IEyOsXieauOVtOGrI8MLaSGwR5ZywaJVjVouO0=)
                          7: 9irQNPunNfIHH8n7jSs2qp4O5Ds.roa (hash: ZPLXxK3+eVCaIYcd9/RsDXygDUinpe1JgVsrDl6w9EM=)
                          8: BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa (hash: FTSWcIBrpAoN+BaWjFgyeHzR2aPhUIX+vxQU4l8lXDg=)
                          9: CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa (hash: bi6qpQBcCAHeXpWf/tbi6W0Y+r+V6vixCToqurIcUo0=)
                          10: ELkpby9Bdj_JYA7C384OWbqpxJg.roa (hash: h31rtApWx4Vz7rykyNrBq0suf7t4VBJaPWG2PoGxA84=)
                          11: EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa (hash: /6Yg37rQGMw7b7aHYe0qmGSvAz6Ym3IQkqAVWCha16Y=)
                          12: XcRInvJYcsn8LtFLNgtDJnMlA6w.roa (hash: 975sgmbb5YVMCQJ/ZuhSXOCDO/EGP3qD/sjyuljUer8=)
                          13: asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa (hash: KuqZv/NVMnD/Fd4vtymf7s80nLCEQdm+5RUgyn+ikB0=)
                          14: c7fV872rZD6th3xVaen9mG2oBpA.roa (hash: 2UMq0/v59ttMK2KDnJHhNgxit9sLmaqAfQZIeYzPFwE=)
                          15: csGRumIzLvV9if9_bIFsL3RnE3E.roa (hash: tiltBozvqFHHU3iwoERlFB04KrbLb6/sL/e85auuwKs=)
                          16: e7YLs7d9BooaEXjfhj35M1zCANk.roa (hash: 6kVp3Z3Ls+TJhmXsKC3JdMydn7wc1r4A0PwZJ8RWk5k=)
                          17: hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa (hash: FyvzqNs/DFqFEdYIOb+k/AxYw5XksOHLVMUkCECP37U=)
                          18: iQJFEogcmuEcf3e1YUWgCA2jhHs.roa (hash: R4DLgm0Woa+HAomEZejsM5VxONe5BX3yp63MRciIs1I=)
                          19: mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa (hash: ZjbIzsTsUVGIXpBPiMvFezlvhGdIUwjt60oGvSVVS0Q=)
                          20: pyKDaObepnnTMaR3rq2Q59TpNcg.roa (hash: zk/m77Vze3pEZGmWk0C+TDK3TCT3ImHxAqVzukqevdY=)
                          21: sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa (hash: 1FJzlm32YyhJ9vJsD7WZN63skJx2wuGv8LsAMhrOWKg=)
                          22: uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa (hash: wR746BXfUg0EQqUZIqyYoo2UiBtxVdcw2McS7HbXvek=)
                          23: uybN8XjuaR7_GyDrHfvLIk95_f8.roa (hash: TamexhXZwR0ORnAXw/7R6+cGgQQii+1odd+58W95Efo=)
                          24: y4ib_LgrxEdhHHtEW83XhEfkxAA.roa (hash: aJQKzXEaHtvyQ8mVh2ttdf6AWDHmUy9MG03EsOsN3TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:aa:c9:86:46:a9:19:0a:fe:6b:dd:30:37:d3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
        Validity
            Not Before: Sep 23 21:00:13 2026 GMT
            Not After : Sep 24 21:00:13 2026 GMT
        Subject: CN=ff958b8e9f50bde0a6a43b6f500d920f09267456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:6b:a5:c9:6d:0a:42:fe:a4:d9:2f:6f:2f:
                    60:0c:f8:cc:6e:64:4c:70:6b:90:68:99:a5:a5:f6:
                    27:aa:e1:b2:01:aa:fe:85:34:bc:3d:d1:e0:00:6b:
                    24:7b:5d:57:b5:eb:4b:4a:b6:dc:df:56:dd:aa:47:
                    5e:57:1b:c9:c8:ab:ab:c8:b4:aa:9f:fa:29:6b:12:
                    dd:84:8d:57:31:27:ab:73:1d:cd:ee:ec:20:d2:1b:
                    55:1c:51:6b:16:19:13:bd:64:05:3b:3e:c4:cd:93:
                    13:bc:5c:1e:5b:5d:ce:be:4e:f2:ad:9d:3e:58:33:
                    af:25:f8:9d:88:e0:f3:2c:0f:1c:6c:fb:e7:8e:b5:
                    48:a1:53:cf:80:e7:44:12:ae:b9:2e:d4:8a:b7:32:
                    66:2a:24:4d:4e:34:41:4c:0c:33:f2:ab:6f:5f:06:
                    5a:94:5d:7d:74:97:f7:cd:42:9e:65:1c:55:26:80:
                    ce:42:64:c0:12:0b:e2:94:39:39:39:32:a2:8e:dd:
                    db:cf:03:01:da:a0:1f:4d:a4:4b:8a:b9:dd:b2:90:
                    44:ec:ab:24:74:0b:c3:40:66:14:dc:7a:ec:8e:6e:
                    cf:be:00:27:1f:ca:fe:2a:bf:a7:c2:55:28:bd:6c:
                    76:ee:7c:e5:fd:a8:35:df:4c:e2:a2:79:6b:eb:60:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:8B:8E:9F:50:BD:E0:A6:A4:3B:6F:50:0D:92:0F:09:26:74:56
            X509v3 Authority Key Identifier:
                keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:82:7a:73:ce:c2:a5:6f:dc:34:bd:58:9a:d1:24:48:01:
         16:dd:f8:e7:69:5e:9d:9a:36:29:04:32:73:15:14:bc:cf:43:
         80:e9:74:37:1f:57:f3:89:c7:7a:32:6a:7b:63:42:80:3c:aa:
         c1:4a:26:1a:23:53:9a:70:18:8c:53:1c:a4:c5:09:84:34:fe:
         b8:07:0c:d1:0d:c9:d0:48:36:49:74:93:94:08:36:01:5a:bf:
         0d:20:16:88:a9:5c:cd:9d:7e:7b:e8:91:85:db:18:c1:2f:2c:
         05:ac:6c:b5:48:70:b0:37:d6:6f:28:b5:f2:78:7f:9d:63:36:
         e5:3b:26:0b:5a:3a:68:f6:31:d4:31:a2:60:36:29:df:d9:e0:
         61:d0:00:13:1e:ac:a1:01:5e:af:ff:a2:a1:11:3b:05:ec:63:
         e5:a6:d4:db:53:13:38:3b:7f:6f:b2:97:3a:a4:a7:51:57:ae:
         37:88:bf:76:d2:54:fc:57:dd:bd:56:3d:3c:82:37:fe:c6:b5:
         12:2e:2c:9a:ff:5b:10:7c:00:65:73:cb:28:f6:4c:38:a0:76:
         9e:1e:7b:1c:fd:44:31:64:89:6e:38:2d:92:bb:de:d6:39:07:
         58:d2:59:a5:bf:53:76:17:f7:a3:c1:62:07:2f:a1:49:22:59:
         13:32:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:05:47 2026 by rpki-client