Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File:                     mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier:          y4vRS7jn7iiU4SOWmHQea8hEiyO40Xs9j/Kc7U9m9K0=
Subject key identifier:   5B:DF:F7:B1:F6:83:F9:8C:E2:7E:06:F8:A1:86:2E:3E:14:D1:CA:62
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       019FA1846315DD3B93BA81109ABF5D11E8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number:          1A03
Signing time:             Mon 27 Jul 2026 03:00:35 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:35 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:35 +0000
Files and hashes:         1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=)
                          2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=)
                          3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=)
                          4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=)
                          5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=)
                          6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=)
                          7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=)
                          8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=)
                          9: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=)
                          10: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=)
                          11: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=)
                          12: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=)
                          13: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=)
                          14: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=)
                          15: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=)
                          16: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=)
                          17: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=)
                          18: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=)
                          19: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=)
                          20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=)
                          21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=)
                          22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=)
                          23: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (hash: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=)
                          24: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=)
                          25: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=)
                          26: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=)
                          27: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=)
                          28: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=)
                          29: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=)
                          30: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=)
                          31: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: mqfWjDr0Qp3FyJbrED6OOnivtJiR2FstckoA2oSfC9A=)
                          32: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=)
                          33: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=)
                          34: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=)
                          35: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=)
                          36: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:63:15:dd:3b:93:ba:81:10:9a:bf:5d:11:e8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Jul 27 03:00:35 2026 GMT
            Not After : Jul 28 03:00:35 2026 GMT
        Subject: CN=5bdff7b1f683f98ce27e06f8a1862e3e14d1ca62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:26:e4:44:ab:7a:a5:1c:cf:e1:2a:50:48:
                    4e:dc:e2:f1:db:19:71:8e:f5:0a:00:d7:2b:9b:bf:
                    9c:70:e8:0b:9a:d3:4a:81:1d:5d:56:f5:8e:01:32:
                    26:2c:a4:36:4b:ce:14:01:65:c9:63:98:2f:9f:75:
                    39:59:a6:11:f0:ac:42:c8:b3:8e:99:6b:c4:03:24:
                    23:bf:82:ee:6a:5c:89:d3:c5:42:a3:68:2f:78:05:
                    a2:ba:79:a0:71:00:8c:b3:ca:4e:16:81:09:8c:d4:
                    f8:41:10:59:5f:f8:01:85:3c:ef:1d:52:b9:64:75:
                    a4:c9:94:c5:0b:53:57:fd:68:1b:89:ee:03:08:17:
                    95:63:70:48:89:33:d4:c8:ea:f7:23:0e:0c:13:3e:
                    64:eb:cb:88:82:df:63:54:a4:b6:af:c9:a7:1f:5d:
                    80:c4:21:7e:9b:f1:59:31:ef:9e:b6:06:b0:0c:af:
                    47:a3:c5:85:8c:d9:88:a2:50:5e:32:bc:2b:21:33:
                    a4:51:aa:77:cb:37:1c:7d:19:c5:a9:47:14:58:61:
                    ae:d6:45:52:7f:8f:68:c9:69:3b:4d:52:34:18:91:
                    3c:b1:d4:22:70:1d:66:6a:e6:f2:92:8c:19:b9:c5:
                    72:ec:a8:58:dd:e8:9b:e5:1a:ef:bc:e1:a4:05:60:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DF:F7:B1:F6:83:F9:8C:E2:7E:06:F8:A1:86:2E:3E:14:D1:CA:62
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:8c:5a:d2:2f:62:67:cb:6c:b1:ee:3f:1c:df:76:fa:97:
         1b:94:e7:57:6f:c5:5f:e8:ad:4b:16:46:4d:13:35:2d:55:cf:
         55:b3:ac:4a:69:84:47:09:5e:39:a0:2e:ed:c2:be:61:62:8a:
         da:20:06:fc:b5:f2:ae:ad:36:4d:be:cf:9e:a3:d7:81:9c:47:
         2a:58:93:1b:ba:c1:4c:70:8b:aa:62:f8:fc:91:70:51:cb:86:
         b3:41:ce:44:7b:4f:55:6f:af:61:b5:7d:7f:02:83:b1:59:43:
         5f:58:b7:f0:78:ca:1e:fe:b9:ce:5e:89:ae:60:9b:45:e2:fb:
         5f:06:02:dc:25:71:82:8f:98:87:93:6f:4d:6a:35:c5:82:f8:
         0b:59:20:ee:d0:74:0e:b8:1b:29:9a:75:c9:f1:d2:78:cb:df:
         9f:4b:fc:25:18:8a:d3:e7:1d:87:3e:06:cd:30:42:f0:5b:86:
         15:95:d1:a5:d1:99:e1:b8:bf:14:29:8b:c7:26:1b:4d:53:85:
         0e:0c:56:de:f7:ed:87:04:c5:fc:02:52:c8:5e:91:12:8a:84:
         6e:0e:04:a7:a1:55:f8:67:95:5e:1e:c3:1c:22:88:f6:86:55:
         6e:50:e6:3b:58:68:f0:9a:7f:2f:61:f2:c9:49:76:80:bf:87:
         1b:76:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----