Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          48wdUn+INXqVuQ1S3/MsS/DLOe2+UVrx63qa2MQXuvI=
Subject key identifier:   9F:60:94:C0:54:51:98:55:90:20:AA:F3:71:1A:24:DD:13:69:11:4D
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       019D9B87D798850A269B2EB0869CAF40C663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          1903
Signing time:             Fri 17 Apr 2026 13:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 13:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 13:01:04 +0000
Files and hashes:         1: 22npFef-j0M49cVlWvOM23fYAyU.roa (hash: 9BoQFEFFXQE63XppyCXHiu5uKpdTCmc2QeSL3Gkzz8I=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: h5Z0glsp54ijgHQX7FO2ChZnG0nxmDmhTaCWXMaCfX4=)
                          3: 8oxtTnvpd2_ke4zwj7aMfBhyW4A.roa (hash: 7IjKBH0yCgpHTXLTsHrNCb/Cn+6s8o46F6a2US8IQaI=)
                          4: Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa (hash: heDfoYDNIQ7bB0XJ90BIyZD9NkiqghbSq/mIzF+Kcns=)
                          5: WIrRwzNj69OGrZGZ_TIAf1zyd4Y.roa (hash: RLknk8idVnWV0ZWfG3Uyrkx5h9Sqj0kpjXqaIlzLBtU=)
                          6: ZBv-tqzx_gaItXN6I7J1hMlcTgw.roa (hash: BjULVWcZIgFcGGgq3BGplnOKV+IjQ8KEIr+LuLjISXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:d7:98:85:0a:26:9b:2e:b0:86:9c:af:40:c6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Apr 17 13:01:04 2026 GMT
            Not After : Apr 18 13:01:04 2026 GMT
        Subject: CN=9f6094c0545198559020aaf3711a24dd1369114d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:54:76:86:5a:71:cd:c1:26:be:50:c0:8f:
                    4d:31:64:f5:f5:56:4e:b9:d3:2a:76:fb:86:92:af:
                    0d:72:43:f6:88:32:05:f8:99:47:fc:b5:8d:b1:76:
                    c0:58:82:fa:69:44:65:c4:9b:9a:ff:5b:55:a6:47:
                    8e:15:92:25:71:6b:a3:75:b5:15:76:dc:2b:d7:07:
                    0a:d9:b7:c0:89:d6:dc:d9:3e:3f:8f:db:5b:b7:a8:
                    11:4b:43:aa:e5:94:00:27:d3:79:62:d8:45:e6:d6:
                    ad:3c:86:66:9d:3a:2f:d7:62:f9:2b:5f:bc:e3:87:
                    40:a5:c4:9d:c9:d9:d8:8e:ae:89:b9:2b:44:52:57:
                    47:2f:26:5b:f7:1f:da:06:8a:25:45:55:0c:5a:2c:
                    20:06:4f:81:78:f3:18:99:c7:69:e2:67:c9:77:1b:
                    e8:72:e4:3f:3e:7f:03:70:a6:ba:31:1a:80:bd:6c:
                    0b:bb:0b:ca:9f:5e:34:91:fe:6f:ab:70:7b:b1:e5:
                    80:0f:35:07:3c:f4:df:92:ee:7a:2a:5d:cf:a2:f8:
                    81:92:7d:e5:c9:1d:c6:85:02:24:8e:cb:fb:a0:c7:
                    88:dd:96:11:64:a7:8d:95:e7:71:82:8e:fd:92:1f:
                    b5:33:76:5b:f0:89:13:6d:1e:bb:6d:62:ea:16:9e:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:60:94:C0:54:51:98:55:90:20:AA:F3:71:1A:24:DD:13:69:11:4D
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:45:ad:06:8e:d1:74:30:78:16:97:57:a0:80:3e:71:16:9a:
         6d:5c:ca:58:8d:1a:5e:c8:cf:a7:48:fb:69:15:3c:35:16:3b:
         b1:06:f8:64:55:5a:02:7f:1b:fc:7d:89:14:ec:2d:55:ab:ba:
         33:88:38:67:2a:10:7d:f0:96:5d:91:ec:9a:fb:b4:46:8b:e7:
         8c:56:39:3c:3f:09:09:60:75:86:ab:86:f1:0e:d2:cd:fe:b5:
         ff:e6:65:20:8b:40:08:0f:46:ee:62:3a:77:b2:95:bd:f6:8d:
         46:16:8c:16:82:bc:4d:ed:3b:89:43:18:10:83:5c:99:74:b0:
         85:87:15:0a:06:96:a2:f9:e5:1c:ca:ab:12:0c:35:ee:62:ce:
         72:f3:5a:23:5c:eb:cf:a0:2e:19:8b:94:d8:74:8b:d1:b0:e5:
         41:dd:08:56:47:42:34:ea:c4:f5:1f:a3:5d:1a:45:a8:12:de:
         1a:8b:13:ef:17:6f:0d:21:05:21:b0:f9:40:15:3d:3a:54:ef:
         15:06:00:0f:20:59:e2:3d:98:5d:d3:41:b0:b5:24:5a:6c:f4:
         0d:8e:27:fd:da:77:19:71:0b:fe:96:b2:47:7e:07:26:82:b9:
         c4:e8:39:b6:40:d4:a6:f4:6e:fc:19:ef:01:30:23:28:96:e9:
         ba:48:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:20 2026 by rpki-client