Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          t/mptXbef45Gy6jCJwdXZqBAM4mNLKFjTz7B6Mf15yk=
Subject key identifier:   7B:F9:BF:13:4E:9F:E2:7B:72:67:71:89:0E:C8:CE:6F:D6:81:18:B9
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       019CAC0FF7DEF3BB2A346772AF116B4DBD9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          1887
Signing time:             Mon 02 Mar 2026 01:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:53 +0000
Files and hashes:         1: 22npFef-j0M49cVlWvOM23fYAyU.roa (hash: 9BoQFEFFXQE63XppyCXHiu5uKpdTCmc2QeSL3Gkzz8I=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: x1DJhFNcnLHudYLCFH8LHC72XH3HugLo+/yXRiF0vVQ=)
                          3: 8oxtTnvpd2_ke4zwj7aMfBhyW4A.roa (hash: 7IjKBH0yCgpHTXLTsHrNCb/Cn+6s8o46F6a2US8IQaI=)
                          4: Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa (hash: heDfoYDNIQ7bB0XJ90BIyZD9NkiqghbSq/mIzF+Kcns=)
                          5: WIrRwzNj69OGrZGZ_TIAf1zyd4Y.roa (hash: RLknk8idVnWV0ZWfG3Uyrkx5h9Sqj0kpjXqaIlzLBtU=)
                          6: ZBv-tqzx_gaItXN6I7J1hMlcTgw.roa (hash: BjULVWcZIgFcGGgq3BGplnOKV+IjQ8KEIr+LuLjISXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:f7:de:f3:bb:2a:34:67:72:af:11:6b:4d:bd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Mar  2 01:00:53 2026 GMT
            Not After : Mar  3 01:00:53 2026 GMT
        Subject: CN=7bf9bf134e9fe27b726771890ec8ce6fd68118b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:04:a4:47:ad:78:22:75:5f:01:22:13:0e:
                    9e:0a:c8:a5:82:6e:95:b1:d5:fc:3b:c6:87:4a:24:
                    3b:d6:52:55:6b:b0:ba:aa:27:9a:97:d1:43:43:d1:
                    75:ce:90:ae:33:13:89:23:3b:ed:2a:8b:c9:0b:31:
                    50:b6:90:91:41:04:55:09:d3:86:60:44:d1:dd:9c:
                    42:a3:c7:db:36:1e:c0:72:3b:0c:ad:7e:87:a2:e6:
                    9f:a8:ad:65:9c:3f:5d:76:63:4b:30:7d:e3:c1:88:
                    aa:c1:3f:5a:9b:be:92:f6:d5:07:fa:07:62:b5:ef:
                    a6:68:ac:b6:75:22:cb:fe:57:e4:1c:dd:75:d3:73:
                    6a:6a:cb:a1:24:f2:5c:2c:d9:78:25:12:f2:c7:5c:
                    fd:b6:11:9f:7e:70:30:fc:5a:c1:5a:8a:98:15:a9:
                    db:46:12:94:80:d7:40:fe:51:52:34:49:02:a3:1c:
                    e4:9e:b1:0f:69:01:05:df:ed:7e:b0:3f:24:fb:90:
                    da:34:88:ec:c1:7b:2e:ab:b1:00:b6:eb:e0:65:7f:
                    9b:86:3f:b3:43:bf:6c:f1:68:b5:83:f4:07:65:24:
                    06:9d:45:73:0c:02:cf:d8:f7:23:4c:c4:dc:23:58:
                    a5:92:be:67:85:28:a5:1d:2a:de:ba:c3:67:7c:62:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:BF:13:4E:9F:E2:7B:72:67:71:89:0E:C8:CE:6F:D6:81:18:B9
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:71:82:b7:a7:85:e8:bb:7f:41:bb:5f:1f:68:ee:b3:28:8c:
         42:6a:b9:2e:b0:29:5a:16:0e:59:77:a2:8b:d0:1f:3c:06:64:
         d2:58:2c:ec:4c:dc:52:69:92:3f:9f:e2:e8:f2:db:20:dd:ac:
         00:7a:b8:71:c9:3d:73:e5:b4:aa:b8:64:6c:36:18:53:7d:31:
         86:80:36:48:dc:39:8b:31:99:01:14:22:a2:af:00:ab:dc:f2:
         3f:65:5a:a0:ca:7b:38:6a:41:63:2d:31:98:a2:e0:35:4b:f2:
         6c:7c:39:6f:44:5f:87:e3:36:cf:fa:ff:5e:2b:17:f5:71:3a:
         14:42:c3:e2:c5:13:1f:6c:5c:b6:03:80:d4:d8:17:0b:59:ba:
         71:16:c1:40:d7:4f:07:5a:01:65:39:09:bf:8d:db:b6:de:45:
         cd:02:f7:fc:37:6f:f1:3e:4f:60:73:cd:da:d7:23:a5:04:43:
         20:a0:74:32:de:e8:49:3c:ce:e7:cb:cb:d0:0b:f7:ae:13:a2:
         f4:3e:17:99:c9:cd:8a:b2:f0:51:d9:82:83:86:12:6e:e5:ab:
         b9:39:d6:66:33:1d:77:c1:47:9f:6a:10:40:ee:52:10:4c:5e:
         fe:53:1f:fa:2b:24:ed:71:de:c3:34:29:f6:49:68:e0:3a:f9:
         0b:76:78:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD/fe87sqNGdyrxFrTb2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjYwMzAyMDEwMDUzWhcNMjYwMzAzMDEwMDUzWjAzMTEwLwYDVQQD
Eyg3YmY5YmYxMzRlOWZlMjdiNzI2NzcxODkwZWM4Y2U2ZmQ2ODExOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHIEpEeteCJ1XwEiEw6eCsilgm6V
sdX8O8aHSiQ71lJVa7C6qieal9FDQ9F1zpCuMxOJIzvtKovJCzFQtpCRQQRVCdOG
YETR3ZxCo8fbNh7AcjsMrX6HouafqK1lnD9ddmNLMH3jwYiqwT9am76S9tUH+gdi
te+maKy2dSLL/lfkHN1103NqasuhJPJcLNl4JRLyx1z9thGffnAw/FrBWoqYFanb
RhKUgNdA/lFSNEkCoxzknrEPaQEF3+1+sD8k+5DaNIjswXsuq7EAtuvgZX+bhj+z
Q79s8Wi1g/QHZSQGnUVzDALP2PcjTMTcI1ilkr5nhSilHSreusNnfGL7JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv5vxNOn+J7cmdxiQ7Izm/WgRi5MB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHGCt6eF
6Lt/QbtfH2jusyiMQmq5LrApWhYOWXeii9AfPAZk0lgs7EzcUmmSP5/i6PLbIN2s
AHq4cck9c+W0qrhkbDYYU30xhoA2SNw5izGZARQioq8Aq9zyP2VaoMp7OGpBYy0x
mKLgNUvybHw5b0Rfh+M2z/r/XisX9XE6FELD4sUTH2xctgOA1NgXC1m6cRbBQNdP
B1oBZTkJv43btt5FzQL3/Ddv8T5PYHPN2tcjpQRDIKB0Mt7oSTzO58vL0Av3rhOi
9D4XmcnNirLwUdmCg4YSbuWruTnWZjMdd8FHn2oQQO5SEExe/lMf+isk7XHewzQp
9klo4Dr5C3Z4/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:28 2026 by rpki-client