Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File:                     mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier:          yqScgOqcRdK0XOqkzxrpaI+rHozEAyjlzyavfbZEEbI=
Subject key identifier:   28:E5:4D:C1:D2:55:09:FC:F3:E0:89:4D:D0:F0:E0:EC:06:C4:E1:D1
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       01A089E74987AB026DBCC5955B2ACF142429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number:          1A7C
Signing time:             Thu 10 Sep 2026 06:00:31 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:31 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:31 +0000
Files and hashes:         1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=)
                          2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=)
                          3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=)
                          4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=)
                          5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=)
                          6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=)
                          7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=)
                          8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=)
                          9: Exzf4PskjTMc5LIyk1evDnbig4o.roa (hash: /XbM8Up/CzKNgL2qr7cqhEQox2OxF2jJdDjq9JA7I2M=)
                          10: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=)
                          11: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=)
                          12: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=)
                          13: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=)
                          14: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=)
                          15: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=)
                          16: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=)
                          17: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=)
                          18: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=)
                          19: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=)
                          20: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=)
                          21: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=)
                          22: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=)
                          23: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=)
                          24: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (hash: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=)
                          25: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=)
                          26: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=)
                          27: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=)
                          28: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=)
                          29: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=)
                          30: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=)
                          31: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=)
                          32: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: jLuREOB7EIdFj7IJl2OqyVq5J6ZzCUfW2SIn4HNAcJg=)
                          33: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=)
                          34: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=)
                          35: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=)
                          36: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=)
                          37: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:49:87:ab:02:6d:bc:c5:95:5b:2a:cf:14:24:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Sep 10 06:00:31 2026 GMT
            Not After : Sep 11 06:00:31 2026 GMT
        Subject: CN=28e54dc1d25509fcf3e0894dd0f0e0ec06c4e1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:46:66:27:da:5f:2e:9c:93:bb:c2:fb:cd:
                    44:3b:0f:a4:ab:1e:60:e9:d8:1e:58:30:4e:dc:f9:
                    26:ab:15:87:58:ee:cc:c6:4e:18:45:af:ff:f6:37:
                    0a:2a:5d:2d:71:2c:82:24:65:3f:ab:77:8a:07:4b:
                    d4:91:d9:6d:95:2d:ef:7c:24:30:61:d2:1d:66:13:
                    0d:72:9e:d4:3b:49:a4:91:b6:cc:8c:b9:49:ba:87:
                    cb:6e:e6:f9:81:39:92:90:40:24:5c:9e:c8:f0:25:
                    26:13:db:ec:73:11:50:4a:62:ed:d0:89:57:31:0c:
                    53:3c:b7:a7:9a:a7:77:59:12:b5:cd:d6:31:84:ba:
                    d8:36:6e:c2:63:a0:dd:51:cb:fe:23:21:65:bc:48:
                    3b:aa:3f:09:4b:68:2e:c6:d2:e0:47:da:27:a1:3b:
                    8d:65:99:40:ee:ca:32:eb:f2:d2:35:14:a8:25:e4:
                    f2:2b:1c:35:27:b0:69:fc:0f:16:79:89:5d:78:19:
                    e0:9a:23:e7:94:ed:02:f1:cf:47:b2:ba:eb:1f:63:
                    24:c1:6a:c8:4e:90:2a:81:bd:f1:d7:ce:c5:8c:c5:
                    67:62:c9:3b:61:35:67:e2:de:9b:df:ca:c7:97:2f:
                    5e:39:19:cd:e0:30:30:67:69:6b:36:6d:b5:5e:11:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:4D:C1:D2:55:09:FC:F3:E0:89:4D:D0:F0:E0:EC:06:C4:E1:D1
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:b3:c6:32:13:47:e9:4d:77:fb:42:92:0b:1a:ff:b9:cb:
         2c:bd:4d:64:41:33:95:87:bb:a4:e9:61:ae:4e:16:a8:97:6f:
         4e:19:da:52:be:bf:79:00:f5:62:88:55:3d:dc:84:fb:47:29:
         5a:5c:51:29:8f:85:56:90:71:7a:d0:2e:81:23:71:07:a7:21:
         8b:29:a2:44:10:7d:16:a1:e3:6d:2a:72:a5:c5:c1:70:53:97:
         28:98:44:c6:c7:af:b3:4e:e8:4d:70:ef:f9:ae:54:e1:fd:02:
         dd:f9:ee:5e:67:41:4c:eb:07:55:ef:26:7a:b2:21:52:4f:8b:
         70:39:a8:c5:62:95:e7:c3:40:23:1e:21:68:55:a5:67:9d:b3:
         6d:2e:0f:93:76:88:5c:41:ba:67:1b:09:8f:c0:62:9e:3d:a3:
         b4:34:2c:1a:4d:9e:55:48:bf:9a:f1:bd:31:90:df:3e:9b:a8:
         c5:9a:ba:ef:1d:96:16:39:43:30:d8:ae:d3:46:16:8c:67:dc:
         73:fd:c6:5e:2f:66:69:d8:d4:b3:ae:25:b6:0f:ea:eb:d0:bd:
         ae:10:8a:60:b7:0a:d0:70:91:80:9e:52:39:68:15:14:e2:f7:
         3c:49:b1:af:86:1f:8d:8f:8f:dc:05:00:6e:ec:4e:7d:c9:e3:
         b9:24:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:52:33 2026 by rpki-client