Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File:                     5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier:          pQEJ91CmwBopIAagQIibA/h3yQSLihynuSinSjgN8yQ=
Subject key identifier:   39:32:02:6B:E4:D3:8B:08:7D:E2:19:D6:34:6F:69:8B:6F:B3:1B:30
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer:       /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial:       019CA9EB6ED64E7658BBEDA3C61B9A30E828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number:          0FE4
Signing time:             Sun 01 Mar 2026 15:01:44 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:44 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:44 +0000
Files and hashes:         1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: ILh38uJy9bAXTOE2xHtKOE1TPExyLdE3iUr3bTsOhwo=)
                          2: 5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa (hash: uDkJZLcHqBgj1LakSJJ7gsoFR9aK94n0OpJdt1tDHJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:6e:d6:4e:76:58:bb:ed:a3:c6:1b:9a:30:e8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e505d93497f19d2563066b409200969711f28c67
        Validity
            Not Before: Mar  1 15:01:44 2026 GMT
            Not After : Mar  2 15:01:44 2026 GMT
        Subject: CN=3932026be4d38b087de219d6346f698b6fb31b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:15:61:d7:b6:8b:c2:33:fb:ac:1e:6a:55:
                    73:59:89:42:53:83:c7:c5:88:4b:67:60:a6:a1:15:
                    07:5b:3e:f3:50:c5:7e:b0:00:33:ce:9a:09:f6:96:
                    e8:ca:ea:e5:df:2e:e3:51:ab:32:b5:af:d5:b6:e2:
                    0d:77:76:58:3a:5d:86:ae:4f:e6:3c:67:f8:a5:d7:
                    6a:c9:eb:eb:29:73:f6:dc:d1:75:93:56:6c:9e:3c:
                    d8:d8:a3:61:88:96:13:d4:c8:40:33:97:dc:c1:4f:
                    99:81:dc:94:6a:0c:7a:4b:16:cf:8b:8e:8c:81:86:
                    95:cd:ed:5b:5c:c7:f6:1a:7e:7b:37:07:3a:9d:52:
                    d0:b1:27:34:58:17:71:85:63:c3:bc:33:77:fe:ef:
                    a6:dd:cf:4d:14:bf:19:8f:b3:91:a2:7d:a1:a7:66:
                    4b:8b:c2:0f:91:42:a4:8b:27:32:a7:fd:f1:c1:51:
                    f9:c6:73:14:f4:88:36:9c:d0:8e:4c:8f:f8:27:54:
                    db:c1:92:8d:5c:69:39:c9:cd:a1:5d:b1:45:5a:c7:
                    77:b5:13:d8:89:0a:e8:3e:12:7a:34:6a:f5:98:a2:
                    76:6c:89:26:b7:92:2b:64:5d:b1:84:8d:21:e8:5d:
                    43:4c:44:15:94:79:2c:c9:aa:00:40:1b:51:38:ef:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:32:02:6B:E4:D3:8B:08:7D:E2:19:D6:34:6F:69:8B:6F:B3:1B:30
            X509v3 Authority Key Identifier:
                keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:9c:30:1d:79:7f:bf:92:1f:0c:c4:34:20:d9:58:62:24:
         36:da:b1:6e:27:ea:e7:c6:1e:37:17:53:ee:9f:d3:ad:e7:28:
         fb:e6:35:fb:7a:b6:0d:be:12:35:8b:72:c9:51:a3:96:aa:ca:
         ff:23:b8:48:3f:37:ed:f9:e2:49:16:dd:90:48:f9:64:9a:56:
         44:15:1b:2b:ed:94:53:35:73:4c:df:0b:17:da:15:64:2e:39:
         8a:62:cc:5f:9f:09:6b:f1:ca:d7:7f:e6:7c:9c:ac:94:36:55:
         d9:f8:10:8d:c9:03:f7:59:74:06:fd:d4:bb:5d:d2:fe:f1:64:
         94:3b:62:ba:9d:4a:ce:f6:bc:19:03:e5:31:40:95:df:1b:27:
         8a:69:6e:15:1e:d0:37:c5:ec:b7:42:50:89:b9:79:1b:82:7b:
         45:7c:8e:c5:97:b5:8d:b5:fe:86:0f:b7:5c:d7:a0:93:6a:96:
         e8:24:8b:54:42:cb:6c:0c:34:7e:a5:24:2c:83:7e:a7:a8:05:
         a7:c1:a3:57:b1:c3:83:e6:05:08:8f:81:89:cc:8c:14:8e:91:
         b0:84:66:a5:05:0a:4a:b7:b9:d8:9c:b8:40:2a:ae:26:09:a8:
         6c:ee:22:44:14:a5:a4:90:17:81:14:35:0b:28:6a:a0:03:d0:
         18:d2:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:13 2026 by rpki-client