Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File:                     dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier:          O7MdEXnhwKFgoM1yS6iez+LFSoSl7btiDAYWUfysifg=
Subject key identifier:   A6:8C:59:82:EE:F1:E7:EC:50:1D:CC:E3:B0:3C:8D:A8:E7:20:3F:1E
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       019DFACD95DC788C47DBCE0182E275FADF07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number:          1972
Signing time:             Wed 06 May 2026 01:01:10 +0000
Manifest this update:     Wed 06 May 2026 01:01:10 +0000
Manifest next update:     Thu 07 May 2026 01:01:10 +0000
Files and hashes:         1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=)
                          2: 0mDShmyQKUp4YdL7Ak2fOwf_ln4.roa (hash: cmEc3xEggewJFYU5aqtKVs0Q4v5k0w3JZFkx4qlV9Wc=)
                          3: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=)
                          4: 37FmBErOCRsxKQZqtKw_TpsXPeg.roa (hash: dk2f7f5Kg/P6nbGtUsTcUoKtykQN93quUzHoHrPlbUA=)
                          5: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=)
                          6: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=)
                          7: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=)
                          8: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=)
                          9: CA3XMZSRf-G3ODjblICPF-EIxj8.roa (hash: VyF40sc+pRDppM7qNwDKdKVxboVcpPNc0TqHKAIYGnE=)
                          10: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=)
                          11: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=)
                          12: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=)
                          13: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=)
                          14: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=)
                          15: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=)
                          16: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=)
                          17: V6w0asIVAb0u0o3DV2hY90L8mCc.roa (hash: 5cbYuB7x2KhbgcRCflXJsJYRRrgG7Z/bM8U43xl7v+A=)
                          18: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=)
                          19: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=)
                          20: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=)
                          21: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=)
                          22: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=)
                          23: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: FEe9VzCmUUzuYHop+d8cRm+OQplzpNZCJQjXe/Kk99Q=)
                          24: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=)
                          25: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=)
                          26: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=)
                          27: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=)
                          28: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=)
                          29: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=)
                          30: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=)
                          31: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=)
                          32: o4PwLG_moTiY139IzZuL6upeTkA.roa (hash: ZfhKwHM96PoMcD115Xy9gRe1flstjY89l+eR5aAx9zE=)
                          33: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=)
                          34: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=)
                          35: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=)
                          36: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fa:cd:95:dc:78:8c:47:db:ce:01:82:e2:75:fa:df:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: May  6 01:01:10 2026 GMT
            Not After : May  7 01:01:10 2026 GMT
        Subject: CN=a68c5982eef1e7ec501dcce3b03c8da8e7203f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:80:73:7c:8c:3a:66:f0:08:4d:44:bf:4e:
                    e6:c7:a6:74:cd:9f:55:c5:62:0f:f8:e7:31:7e:d5:
                    e8:fb:7d:2d:4e:d3:82:4a:3a:c7:0f:17:76:78:73:
                    c3:5f:4a:d1:de:b9:1a:9e:dd:fd:18:6c:d7:82:ee:
                    a9:9f:4e:06:4a:99:d7:5d:8e:b4:bc:1f:82:22:7e:
                    2f:e0:ae:f5:03:c6:b4:a5:98:07:ef:cd:33:12:ea:
                    5a:2e:6f:e9:36:f8:93:28:1d:b9:7d:71:71:ee:12:
                    9c:1c:73:82:54:b0:cf:92:bb:b9:91:f4:48:58:86:
                    a6:ec:85:f5:13:4a:c6:4e:14:b8:5e:86:7c:5a:5d:
                    28:c7:5d:4c:10:7c:72:00:49:28:ea:fb:b6:16:79:
                    e4:c6:99:fc:49:19:a9:98:9c:82:65:12:17:74:c9:
                    30:0b:1a:97:4f:1a:6b:93:96:df:3b:d0:5e:f7:a3:
                    d1:73:c5:57:f1:5c:0a:d8:77:47:a7:17:8b:a4:d0:
                    5b:dc:65:e1:e6:37:ed:89:f5:59:c8:87:9b:d1:22:
                    f9:0c:1a:a9:35:72:05:ab:90:3b:9e:0a:f4:55:78:
                    55:3c:9f:ea:b9:26:e6:c2:21:b1:8b:ca:6e:9c:39:
                    75:4e:12:97:ac:24:7f:01:71:fb:d1:6c:2b:ce:63:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:59:82:EE:F1:E7:EC:50:1D:CC:E3:B0:3C:8D:A8:E7:20:3F:1E
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:65:d4:b1:dc:7c:0a:c3:2f:9b:fc:99:a2:78:05:af:18:
         15:1d:b9:a7:ca:87:43:67:a2:ab:99:0a:93:63:99:14:fc:0c:
         f5:a6:73:5a:6e:3c:91:ed:20:2f:77:03:fe:6f:ce:9c:42:36:
         13:11:9e:c4:11:be:ad:5c:81:47:db:30:3a:1b:35:9f:de:89:
         2a:f4:14:e2:27:60:db:bc:a7:06:92:7c:41:0f:b2:26:b0:cc:
         8e:1a:51:f7:1b:f7:64:3c:2f:c9:a4:0a:04:98:c9:8b:8e:64:
         f2:fa:7f:73:f8:53:12:ec:0a:ea:27:bd:24:c9:ba:5c:2b:df:
         fb:bc:b9:03:87:37:df:f1:f5:99:0b:b6:cb:99:bd:a7:5a:3d:
         41:d3:67:10:7c:fb:e5:23:75:8b:a3:04:a7:bd:b5:78:f2:c6:
         00:46:b6:7e:51:1d:f4:0e:12:2b:87:f7:25:b4:22:e4:70:e9:
         cc:f1:d9:65:4c:c5:ff:ba:f8:bd:f5:03:4e:ca:64:ec:1d:cd:
         73:45:35:98:13:5f:0f:77:ad:3f:03:d0:b3:78:08:14:e3:a8:
         ea:ca:54:f2:1c:13:03:a9:d7:0e:b3:58:50:2b:6b:dc:67:df:
         b3:e1:7e:77:d7:8f:b3:a5:74:65:ca:70:19:11:fd:e7:0b:cc:
         3b:d9:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 06:24:08 2026 by rpki-client