Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          PQhn/rbtq1OcM9r+qD+Ur2B5H1YNuCA1hzuA/DkG46w=
Subject key identifier:   2C:E9:E1:33:4B:70:40:64:F5:D0:63:19:0B:30:14:04:53:7A:2E:ED
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       01A0CD11301C7F7D5E694281F38FCA00362B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          1A87
Signing time:             Wed 23 Sep 2026 07:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:50 +0000
Files and hashes:         1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
                          2: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: 24bUOgx8HJa/CKlmGH9X2xv1nZlxEObcBhjqvNgKVhU=)
                          3: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
                          4: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
                          5: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
                          6: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
                          7: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
                          8: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
                          9: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
                          10: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
                          11: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
                          12: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
                          13: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
                          14: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
                          15: V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa (hash: jzw1vz6ZEXyxdGOPFQhYOp4v00XuXiS4bMqLV6Nev1o=)
                          16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
                          17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
                          18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
                          19: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (hash: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=)
                          20: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
                          21: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
                          22: rrzmrim7bHJDiCrYhA8mru04a40.roa (hash: ofVbPhI7aV97rdzoC5yVpmL3qOizHqUQvemgYAVNMho=)
                          23: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:30:1c:7f:7d:5e:69:42:81:f3:8f:ca:00:36:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Sep 23 07:00:50 2026 GMT
            Not After : Sep 24 07:00:50 2026 GMT
        Subject: CN=2ce9e1334b704064f5d063190b301404537a2eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:4c:34:71:f3:9c:43:e6:a1:ca:92:c5:a4:
                    e8:f9:90:b2:e4:69:6e:6b:65:71:c8:6f:d7:62:05:
                    f6:08:73:2b:6c:c5:da:13:74:4d:df:d2:b4:89:3b:
                    65:f4:a9:01:5c:f6:14:f1:d4:14:62:7c:2d:0f:99:
                    53:81:c6:c5:d8:ec:f8:7a:7b:bd:a5:a8:81:d0:02:
                    27:de:db:c3:b4:da:2c:6a:5e:08:6f:82:87:c3:f5:
                    c9:fd:3f:a5:40:86:26:66:9b:de:fe:0e:20:8d:78:
                    a6:ff:f3:80:50:23:fb:7e:3b:67:33:05:bc:3e:88:
                    da:08:53:9c:90:e6:71:f1:5e:fd:b5:e9:d7:ac:05:
                    b4:d8:ca:6a:80:1a:8d:f1:fa:2e:f4:09:ad:05:f4:
                    f2:a9:92:07:be:4b:f1:e7:e6:22:0e:c8:62:be:43:
                    2f:61:8e:50:9a:bb:e1:a9:ab:bc:4f:b3:e5:bf:ad:
                    0c:4a:91:72:39:53:75:72:65:d8:b9:c9:2c:54:59:
                    56:8d:de:91:77:81:4f:b4:3f:d5:a2:7e:ef:1b:7f:
                    b1:cc:c9:02:5f:ee:a9:d0:9d:1a:40:c9:2e:cd:21:
                    dc:93:8c:4e:53:23:3a:8c:21:f1:fd:42:93:c0:3b:
                    80:a3:b3:f2:88:fe:83:77:1e:36:96:95:ae:55:13:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:E1:33:4B:70:40:64:F5:D0:63:19:0B:30:14:04:53:7A:2E:ED
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:db:53:ea:08:29:a3:ea:1c:7b:5d:53:94:17:45:71:7d:
         45:5a:c4:4c:71:03:ec:97:0b:75:fe:27:0d:05:0f:ad:9f:7e:
         0a:8e:c7:ca:e0:4f:cf:9a:b6:b3:56:27:55:f9:e6:c1:e5:e9:
         35:14:9f:2f:88:e6:fb:12:10:0f:92:b2:35:66:3d:d7:3b:fd:
         58:b6:b4:33:f5:a5:76:c3:40:52:94:0f:fc:8f:ee:17:5e:82:
         12:cb:8d:b3:fe:e8:38:9c:d0:36:b6:2e:61:46:e1:6f:8f:e0:
         a4:02:67:56:2b:4d:d8:11:bb:a0:e9:9c:83:74:b3:5c:d3:4d:
         51:e3:8d:fe:b6:ba:00:09:6e:00:e2:75:ca:0e:c8:f3:4b:4d:
         6a:14:f2:b5:28:59:06:c9:7a:8a:7f:7f:b6:2f:69:f8:6a:0c:
         61:34:55:99:9c:d5:52:7a:99:ba:6c:49:54:cc:9f:f2:53:00:
         c8:87:bd:fc:dd:7f:0f:fa:92:7c:c9:13:2f:03:07:a1:ca:27:
         da:6d:2c:bb:59:31:13:51:0a:f0:35:bb:a8:6d:ba:37:d0:ec:
         30:5c:c0:00:8f:9d:d7:fb:66:49:6e:71:3c:58:89:fc:31:8b:
         fd:09:1a:c3:72:e6:6a:26:cf:e1:8b:f7:4f:e1:8c:d5:75:6c:
         05:48:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:48:35 2026 by rpki-client