Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File:                     b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier:          q2XH1QnYhezHboEE3DASrqV6U4186V6d+FXhQJlk5jc=
Subject key identifier:   51:81:0E:22:E0:36:0C:0C:D4:10:6C:E4:77:9A:6A:AB:84:B1:40:78
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer:       /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial:       01A13D1333FACDC026ED29199A4B50B862B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number:          0D87
Signing time:             Thu 15 Oct 2026 01:00:31 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:31 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:31 +0000
Files and hashes:         1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
                          2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
                          3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: X3hHJ56t0fK0kwyeWeA0JnI7SNhkVIES9nSkg/ASXQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:33:fa:cd:c0:26:ed:29:19:9a:4b:50:b8:62:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
        Validity
            Not Before: Oct 15 01:00:31 2026 GMT
            Not After : Oct 16 01:00:31 2026 GMT
        Subject: CN=51810e22e0360c0cd4106ce4779a6aab84b14078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f3:e1:bd:6a:b1:1b:1e:6f:70:85:69:e5:38:
                    54:b1:20:55:7b:aa:7b:f6:14:08:1c:f2:57:09:65:
                    a5:8b:7e:54:13:d4:c7:84:12:46:00:82:6c:cf:a3:
                    bb:f8:46:12:4b:3e:81:20:3b:90:3c:6b:fe:db:39:
                    02:e3:dc:bd:aa:ef:88:4d:ec:04:af:69:11:12:c0:
                    45:36:fe:ad:b7:e5:f3:c2:f5:3d:38:1c:07:07:4c:
                    6b:81:7e:59:29:bd:18:f4:0e:34:3c:34:1d:fc:5a:
                    b7:6c:9b:89:20:0b:d8:b5:d3:d5:5b:ac:bf:47:5f:
                    b3:0d:57:c4:02:84:78:ee:d4:15:8c:f4:84:b0:55:
                    ec:3b:66:cd:28:db:8c:59:7e:14:c6:d2:bc:ff:57:
                    db:94:e1:7e:41:02:a0:c3:cf:d6:74:de:25:61:19:
                    30:50:02:7a:5e:52:1e:d3:38:aa:73:16:0e:18:8f:
                    f4:cc:a2:56:0a:84:82:ce:5f:b8:af:3d:bd:a9:3a:
                    3c:35:e9:2d:0e:d2:9e:00:4d:54:83:36:7e:e9:0e:
                    3d:87:03:fb:32:c3:4b:8a:2d:60:5e:bb:8a:55:ce:
                    9b:ae:2b:29:79:0d:b8:22:64:8f:1e:1d:b0:37:e3:
                    fc:36:82:bf:1c:01:8c:bd:6d:01:d5:8f:ef:f7:a4:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:81:0E:22:E0:36:0C:0C:D4:10:6C:E4:77:9A:6A:AB:84:B1:40:78
            X509v3 Authority Key Identifier:
                keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:1a:6d:78:36:63:56:6f:a1:6a:f0:2e:6a:2b:9e:ae:bb:
         d3:cc:06:94:e3:ec:2c:0e:f9:f2:9b:4b:16:84:5e:c4:8f:12:
         62:01:f5:85:b7:63:cc:61:b6:18:2f:84:6f:b6:79:08:21:65:
         82:15:f9:2e:91:8c:50:87:1e:c1:b5:d2:15:67:fc:ec:15:bd:
         04:dd:5f:84:fd:81:80:ac:12:a9:0c:12:c1:db:e1:a9:52:34:
         b3:9a:f2:a2:af:8e:99:7e:40:d5:e0:38:d7:2a:a5:6c:0b:ca:
         42:50:4e:1f:4c:62:5b:96:8e:ac:47:80:59:f0:bb:50:46:ef:
         1f:3a:0f:6e:06:77:2b:16:23:9d:cf:6e:e1:44:05:1d:70:43:
         0e:59:ea:2f:d6:a1:54:35:0d:45:92:dd:3f:d6:a0:d1:1a:14:
         d8:8f:cc:ec:17:6b:93:68:f9:2d:38:f2:d8:43:1d:73:13:b0:
         3f:47:c9:0d:cb:e7:0b:88:ec:17:a1:a1:64:32:1b:b2:07:34:
         80:eb:d6:21:5a:7a:a7:ef:b6:fe:d8:be:04:02:9b:e3:97:5b:
         10:d0:ab:fb:c2:36:9d:47:24:fd:86:7e:36:1e:db:e4:d7:c3:
         be:ab:8e:2d:24:3a:37:6d:7c:21:eb:f7:10:da:94:41:9d:56:
         46:15:e1:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9EzP6zcAm7SkZmktQuGK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz
YTVhNzcwHhcNMjYxMDE1MDEwMDMxWhcNMjYxMDE2MDEwMDMxWjAzMTEwLwYDVQQD
Eyg1MTgxMGUyMmUwMzYwYzBjZDQxMDZjZTQ3NzlhNmFhYjg0YjE0MDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fPhvWqxGx5vcIVp5ThUsSBVe6p7
9hQIHPJXCWWli35UE9THhBJGAIJsz6O7+EYSSz6BIDuQPGv+2zkC49y9qu+ITewE
r2kREsBFNv6tt+XzwvU9OBwHB0xrgX5ZKb0Y9A40PDQd/Fq3bJuJIAvYtdPVW6y/
R1+zDVfEAoR47tQVjPSEsFXsO2bNKNuMWX4UxtK8/1fblOF+QQKgw8/WdN4lYRkw
UAJ6XlIe0ziqcxYOGI/0zKJWCoSCzl+4rz29qTo8NektDtKeAE1UgzZ+6Q49hwP7
MsNLii1gXruKVc6brispeQ24ImSPHh2wN+P8NoK/HAGMvW0B1Y/v96T3rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGBDiLgNgwM1BBs5HeaaquEsUB4MB8GA1UdIwQY
MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt
ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj
LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMMabXg2
Y1ZvoWrwLmornq6708wGlOPsLA758ptLFoRexI8SYgH1hbdjzGG2GC+Eb7Z5CCFl
ghX5LpGMUIcewbXSFWf87BW9BN1fhP2BgKwSqQwSwdvhqVI0s5ryoq+OmX5A1eA4
1yqlbAvKQlBOH0xiW5aOrEeAWfC7UEbvHzoPbgZ3KxYjnc9u4UQFHXBDDlnqL9ah
VDUNRZLdP9ag0RoU2I/M7Bdrk2j5LTjy2EMdcxOwP0fJDcvnC4jsF6GhZDIbsgc0
gOvWIVp6p++2/ti+BAKb45dbENCr+8I2nUck/YZ+Nh7b5NfDvquOLSQ6N218Iev3
ENqUQZ1WRhXhZw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 04:21:55 2026 by rpki-client