Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
File:                     1m5HlK_Dorol0lKoVzR-1O6ua0A.mft (raw, json)
Hash identifier:          k6UTMF04L8ZH6t6w4qIxQeeHDIVhDZOPbpFR3DcjOFY=
Subject key identifier:   52:1E:37:D4:73:43:2F:55:85:1B:FF:B7:5F:3E:C4:0B:DD:DF:34:96
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Certificate issuer:       /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial:       01A14D998D48B7DB33E8BE9C6F7E75951B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
Manifest number:          0126
Signing time:             Sun 18 Oct 2026 06:01:11 +0000
Manifest this update:     Sun 18 Oct 2026 06:01:11 +0000
Manifest next update:     Mon 19 Oct 2026 06:01:11 +0000
Files and hashes:         1: 1P2qLpk9DiKKlSEE2a_XxSQ2VDE.roa (hash: vpK6DJzFGnXIL9dy0QXqYdh03cppRXx9vEZ+/QsVfPA=)
                          2: 1m5HlK_Dorol0lKoVzR-1O6ua0A.crl (hash: /BUcPMLpI/j1FFczJHDAvGbdRrv54g7FrgLX3smiJnk=)
                          3: 2-VpeMgr8WlOJ7qhVALa8xf34sA.roa (hash: iQSGWDL9tXr7gqFzhBNlU6VdCbvCnvQDAQmo6oV6nR8=)
                          4: 4ugcXWTew_-RTsexCcRaMYVlSJQ.roa (hash: 3pTb9i59TWEwdsk0USORPlbOcbLxAM6aj2enaiKbwk8=)
                          5: 6DknhXRMmWwk8an-W3o77qoUFZ0.roa (hash: A411sMGCpxf+MILpBK8VyggjVHx5ELsPnFwL7AqAOyw=)
                          6: 6wJo24JaEg4HCL13OwZyd_p8EuI.roa (hash: Ecy52IEyOsXieauOVtOGrI8MLaSGwR5ZywaJVjVouO0=)
                          7: 9irQNPunNfIHH8n7jSs2qp4O5Ds.roa (hash: ZPLXxK3+eVCaIYcd9/RsDXygDUinpe1JgVsrDl6w9EM=)
                          8: BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa (hash: FTSWcIBrpAoN+BaWjFgyeHzR2aPhUIX+vxQU4l8lXDg=)
                          9: CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa (hash: bi6qpQBcCAHeXpWf/tbi6W0Y+r+V6vixCToqurIcUo0=)
                          10: ELkpby9Bdj_JYA7C384OWbqpxJg.roa (hash: h31rtApWx4Vz7rykyNrBq0suf7t4VBJaPWG2PoGxA84=)
                          11: EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa (hash: /6Yg37rQGMw7b7aHYe0qmGSvAz6Ym3IQkqAVWCha16Y=)
                          12: XcRInvJYcsn8LtFLNgtDJnMlA6w.roa (hash: 975sgmbb5YVMCQJ/ZuhSXOCDO/EGP3qD/sjyuljUer8=)
                          13: asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa (hash: KuqZv/NVMnD/Fd4vtymf7s80nLCEQdm+5RUgyn+ikB0=)
                          14: c7fV872rZD6th3xVaen9mG2oBpA.roa (hash: 2UMq0/v59ttMK2KDnJHhNgxit9sLmaqAfQZIeYzPFwE=)
                          15: csGRumIzLvV9if9_bIFsL3RnE3E.roa (hash: tiltBozvqFHHU3iwoERlFB04KrbLb6/sL/e85auuwKs=)
                          16: e7YLs7d9BooaEXjfhj35M1zCANk.roa (hash: 6kVp3Z3Ls+TJhmXsKC3JdMydn7wc1r4A0PwZJ8RWk5k=)
                          17: hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa (hash: FyvzqNs/DFqFEdYIOb+k/AxYw5XksOHLVMUkCECP37U=)
                          18: iQJFEogcmuEcf3e1YUWgCA2jhHs.roa (hash: R4DLgm0Woa+HAomEZejsM5VxONe5BX3yp63MRciIs1I=)
                          19: mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa (hash: ZjbIzsTsUVGIXpBPiMvFezlvhGdIUwjt60oGvSVVS0Q=)
                          20: pyKDaObepnnTMaR3rq2Q59TpNcg.roa (hash: zk/m77Vze3pEZGmWk0C+TDK3TCT3ImHxAqVzukqevdY=)
                          21: sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa (hash: 1FJzlm32YyhJ9vJsD7WZN63skJx2wuGv8LsAMhrOWKg=)
                          22: uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa (hash: wR746BXfUg0EQqUZIqyYoo2UiBtxVdcw2McS7HbXvek=)
                          23: uybN8XjuaR7_GyDrHfvLIk95_f8.roa (hash: TamexhXZwR0ORnAXw/7R6+cGgQQii+1odd+58W95Efo=)
                          24: y4ib_LgrxEdhHHtEW83XhEfkxAA.roa (hash: aJQKzXEaHtvyQ8mVh2ttdf6AWDHmUy9MG03EsOsN3TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:99:8d:48:b7:db:33:e8:be:9c:6f:7e:75:95:1b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
        Validity
            Not Before: Oct 18 06:01:11 2026 GMT
            Not After : Oct 19 06:01:11 2026 GMT
        Subject: CN=521e37d473432f55851bffb75f3ec40bdddf3496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5c:01:6e:ea:cd:b3:b7:36:2d:43:3b:b7:26:
                    35:14:d3:86:78:b1:43:14:91:1c:64:b3:f0:61:68:
                    9d:e8:83:f1:cb:2c:00:b1:e1:40:e6:1e:b5:0b:87:
                    30:bd:fa:50:4c:e2:8a:52:30:b5:ea:fa:d6:68:2c:
                    f0:f4:29:fe:e1:f6:6a:15:44:5a:1d:d5:ea:dd:b2:
                    c3:06:77:21:36:30:8d:05:07:c0:49:95:84:dd:1a:
                    14:c2:24:6c:6a:06:83:54:c0:b4:c7:ea:dd:e5:53:
                    e4:60:12:ce:6d:a3:3f:33:9c:4f:9c:24:18:2e:40:
                    0e:ab:2b:45:43:14:1a:52:c0:70:fe:04:e1:96:c6:
                    0e:31:8d:32:b3:b7:d8:52:4a:d6:cb:01:a0:d3:2b:
                    f2:58:4b:2f:1e:57:ec:98:c0:09:63:1b:d5:a7:f6:
                    9e:ec:03:27:d8:0f:84:60:91:f8:4b:c9:fa:8e:3d:
                    ca:c9:1d:77:1d:e3:bf:69:ea:a6:4e:df:61:c1:10:
                    fd:e5:e7:85:27:ae:79:d0:9a:26:69:9f:1a:31:3c:
                    39:b8:95:e6:1a:54:85:1c:6c:d6:93:c5:81:28:c9:
                    6c:4a:e8:2a:da:6f:83:5e:5d:bb:da:fb:84:15:58:
                    bc:63:26:db:38:bf:d4:9b:6d:3b:02:a3:df:8f:c9:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:37:D4:73:43:2F:55:85:1B:FF:B7:5F:3E:C4:0B:DD:DF:34:96
            X509v3 Authority Key Identifier:
                keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3b:2c:09:cc:18:16:55:77:9d:da:78:34:11:35:c9:6b:37:
         24:ea:ce:56:be:79:f0:ee:db:8d:c6:8e:b3:02:38:71:21:29:
         cb:2b:7b:2d:fd:fd:c3:1f:99:f9:5e:41:5b:fe:c0:27:28:7b:
         48:c6:dc:07:9a:62:ec:e9:0d:34:ac:2d:6a:ba:bd:3e:5f:cb:
         0d:b6:b2:5c:97:22:ab:74:b9:11:16:5c:51:1d:b4:b5:0e:aa:
         61:f8:de:8b:b3:3d:21:3f:83:bb:95:93:5b:12:1a:77:78:0b:
         83:b6:05:a4:e1:14:b9:cf:19:03:11:dd:39:5a:86:50:cb:65:
         9e:49:1d:9d:e3:20:09:0a:a7:db:d1:49:9e:40:75:8c:94:be:
         d7:ea:35:cc:5e:ab:51:98:33:56:94:00:9e:a2:78:9d:b3:41:
         fb:c8:48:87:f4:9c:86:95:1a:23:97:2a:7a:1c:94:6e:96:62:
         14:71:c6:d2:0c:0d:23:a4:34:08:a2:cb:6a:b0:b7:8c:1a:b5:
         1c:b5:7a:2f:56:33:4b:fc:0d:dd:88:60:20:3b:af:73:d2:87:
         8f:8e:67:3e:4f:48:9d:b5:03:9d:3d:5f:6c:ce:7e:a9:33:82:
         c1:99:9c:89:fd:c3:04:44:4f:af:4f:64:e4:96:2b:b0:ff:2e:
         e4:8a:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:53:18 2026 by rpki-client