Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File:                     mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier:          Jfal431sYCuan4HM01v5kLBPK8k16Q++uJh04XDeTS4=
Subject key identifier:   F5:A0:B4:82:50:EA:D6:33:77:16:43:2F:12:11:30:67:22:8F:BD:A0
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       01A1DD952B3C4035186720CDB86EB44ECCD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number:          1B2E
Signing time:             Sun 15 Nov 2026 05:01:43 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:43 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:43 +0000
Files and hashes:         1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=)
                          2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=)
                          3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=)
                          4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=)
                          5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=)
                          6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=)
                          7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=)
                          8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=)
                          9: Exzf4PskjTMc5LIyk1evDnbig4o.roa (hash: /XbM8Up/CzKNgL2qr7cqhEQox2OxF2jJdDjq9JA7I2M=)
                          10: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=)
                          11: FlUhhr8SXDum_EWDp9geIZ0dsgk.roa (hash: Sxlm9YFroUXgLZNS0tdgMYSmtPTusL3YRrPjkdaX58A=)
                          12: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=)
                          13: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=)
                          14: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=)
                          15: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=)
                          16: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=)
                          17: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=)
                          18: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=)
                          19: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=)
                          20: NE9VFTWYc9DNgnMGhTxjwBMSUrk.roa (hash: ivoaeSyLGXJ2Gfsefafme20MQECC/nXRC5EkGaugvds=)
                          21: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=)
                          22: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=)
                          23: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=)
                          24: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=)
                          25: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=)
                          26: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=)
                          27: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=)
                          28: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=)
                          29: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=)
                          30: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=)
                          31: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=)
                          32: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=)
                          33: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: 9dLDnXSC89Smia3a6/m+2RbbjELGMo6Wne9zSJKguY0=)
                          34: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=)
                          35: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=)
                          36: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=)
                          37: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=)
                          38: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:95:2b:3c:40:35:18:67:20:cd:b8:6e:b4:4e:cc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Nov 15 05:01:43 2026 GMT
            Not After : Nov 16 05:01:43 2026 GMT
        Subject: CN=f5a0b48250ead6337716432f12113067228fbda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:fc:5f:8f:77:b9:31:df:9e:f2:7f:07:1c:
                    44:c0:58:e6:23:0e:9b:c0:bc:fc:58:fc:5b:dc:ed:
                    3b:c8:dd:42:57:39:5f:c3:49:2f:1f:23:5c:2b:fd:
                    7c:ad:e5:70:80:f5:77:4c:d8:29:0c:29:0b:e9:a4:
                    b1:ad:42:0b:a5:d1:94:2f:71:e1:1a:c6:1f:d3:b2:
                    80:6a:98:41:66:13:a1:c4:89:8f:25:22:7d:86:a7:
                    1d:ed:7f:4b:38:ed:a2:6a:b2:81:f6:35:18:22:a5:
                    d2:6a:ad:86:a5:af:5a:f4:42:9c:2d:e0:6a:f2:68:
                    e6:0d:38:72:47:cd:e8:01:1e:f9:72:6f:01:ef:a7:
                    d7:7c:d2:d3:56:a1:f4:07:18:d0:3d:14:14:1c:b5:
                    94:64:2e:78:24:06:9b:be:88:df:cc:af:8c:e1:42:
                    e6:53:99:59:03:f8:e3:c3:21:55:0e:67:d0:a7:a6:
                    24:25:a2:17:2d:fb:b5:97:72:46:e5:f4:68:6c:37:
                    e9:a6:1c:ae:55:ba:b9:b9:6d:1a:e3:5e:7b:a2:46:
                    58:5f:3a:05:ce:fb:8f:b1:bf:6d:2e:8e:07:38:fe:
                    9b:f3:89:aa:14:50:5a:e0:16:13:5d:76:e1:6f:dc:
                    3c:24:79:1c:f2:4a:7b:3b:89:5e:88:b8:6a:11:cd:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A0:B4:82:50:EA:D6:33:77:16:43:2F:12:11:30:67:22:8F:BD:A0
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:ab:d7:aa:43:17:eb:e7:42:6a:07:6b:3b:84:8c:f2:05:
         43:d3:1c:07:0f:8f:a2:8a:a1:7b:b9:41:be:f9:bd:45:e7:c2:
         3a:0d:86:67:24:4e:0b:d1:84:70:93:33:78:b2:0d:ef:ba:81:
         5d:ed:d7:16:ad:2f:52:a2:ab:65:fc:e7:26:9a:f8:75:62:19:
         0f:3b:ab:47:a9:68:aa:b2:3b:2e:60:11:a1:6d:fb:c9:26:fc:
         59:77:1e:df:33:96:ef:93:ea:be:69:f2:c2:4f:28:b5:cc:79:
         9e:b9:f6:3f:e1:e7:c2:48:34:3f:31:81:e6:d4:b1:a3:ba:a0:
         4e:60:61:2f:65:ad:07:73:db:09:97:c7:fb:66:c6:24:8f:af:
         df:46:d0:53:9a:2a:ab:dc:18:8e:59:2b:53:bb:7d:1e:f3:d4:
         b9:80:c1:95:9d:f4:0b:15:14:65:0c:e4:14:62:32:d9:b2:18:
         f8:31:99:d8:1e:87:7c:88:84:7a:23:df:83:9c:14:06:1b:12:
         68:7d:de:9f:18:61:91:42:cc:b7:4b:82:cb:75:cb:4f:ea:90:
         6a:1a:29:f8:98:43:b7:c9:22:5a:dc:db:ba:c9:54:90:d8:33:
         e5:d4:71:c1:57:f2:67:3b:b3:b2:fa:cd:2f:36:59:77:d3:b8:
         65:1a:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:57:01 2026 by rpki-client