Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File:                     5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier:          BlU/SN+8gcKtBVVWS3BzyDq9+nG3aCwL5SOC1LLA120=
Subject key identifier:   8C:2A:66:8E:FF:FA:3D:B5:97:38:0B:F6:26:08:B7:2A:35:3F:2C:BC
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer:       /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial:       01A1AAF0414C4C4BED1A651D5E89307EFC12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number:          186B
Signing time:             Thu 05 Nov 2026 09:00:34 +0000
Manifest this update:     Thu 05 Nov 2026 09:00:34 +0000
Manifest next update:     Fri 06 Nov 2026 09:00:34 +0000
Files and hashes:         1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: kEH+VRatxQjJA0ro5KD4+ZN+VkEtZlGN4dWMIe91NFY=)
                          2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
                          3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:f0:41:4c:4c:4b:ed:1a:65:1d:5e:89:30:7e:fc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
        Validity
            Not Before: Nov  5 09:00:34 2026 GMT
            Not After : Nov  6 09:00:34 2026 GMT
        Subject: CN=8c2a668efffa3db597380bf62608b72a353f2cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:f6:fb:57:a4:4d:80:e3:b4:f0:7b:6d:a2:
                    b3:04:8d:cc:ea:8b:f1:ae:5f:a1:31:29:3d:75:e7:
                    53:41:99:f6:5e:89:73:e5:d4:ea:89:6a:ec:41:aa:
                    55:a5:27:ec:03:75:fb:9e:c3:0f:19:72:b7:53:e0:
                    44:d2:21:4d:71:eb:51:c0:22:bf:b5:48:5a:23:5a:
                    d2:31:bb:1e:81:2e:46:4e:e1:1a:2c:bd:93:f5:f5:
                    13:04:20:74:b2:ad:8a:58:f4:da:a7:0e:2b:ca:ef:
                    f3:db:43:d0:19:40:01:f4:8f:37:a5:ad:dd:46:91:
                    df:bf:2b:cc:cc:14:66:a1:e7:6d:d6:0a:d2:1e:08:
                    a3:f0:69:9e:53:db:59:ee:41:ee:f1:c9:7d:f2:ee:
                    b3:4d:c9:92:27:b3:53:19:3e:9e:85:3c:1e:c7:20:
                    d4:6a:1d:75:02:62:60:36:21:82:fe:de:dd:c6:b3:
                    c0:89:a9:b3:15:89:be:91:17:13:4d:27:28:73:f3:
                    0a:2b:f0:58:b8:58:a6:23:49:e8:2a:96:3e:70:7d:
                    b1:e5:21:4b:7d:a6:5a:8e:6b:ee:77:94:b1:12:35:
                    63:4d:87:33:b2:eb:61:45:34:a2:0a:7d:61:e7:ee:
                    27:44:45:ee:7d:16:ad:a1:90:7d:0f:a7:8b:67:4e:
                    56:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:66:8E:FF:FA:3D:B5:97:38:0B:F6:26:08:B7:2A:35:3F:2C:BC
            X509v3 Authority Key Identifier:
                keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:be:e4:ac:ee:1c:19:65:1a:6c:9d:13:0c:74:35:cc:a2:
         0d:26:54:9d:12:67:db:2f:8f:f9:ef:5b:4e:9d:57:2a:96:2d:
         a2:74:a7:de:a2:5e:41:84:ff:6e:3e:f3:64:a7:41:a0:59:b0:
         e1:e1:d7:60:49:ae:4a:69:c3:93:48:ff:b6:ab:51:5d:fc:dc:
         99:6f:66:0d:da:d2:00:dd:45:ca:f0:06:0b:7f:b1:3e:35:5c:
         cd:2e:6d:b0:50:25:2c:f5:96:5f:f0:98:43:05:02:71:51:bc:
         b8:19:43:f3:0b:b4:13:76:92:70:7d:4c:37:30:1e:c6:6b:d5:
         7a:59:39:22:9e:ee:5e:58:4d:ec:28:80:68:89:4b:a2:d1:e8:
         2e:23:1e:a2:92:70:77:5d:ac:39:b4:6b:36:6b:5a:98:d5:a0:
         94:bd:2c:ee:f4:51:fd:f5:5d:f5:05:92:37:2e:6a:3c:d0:e0:
         7b:1b:83:ec:f3:c0:4a:15:8f:46:ae:61:b7:83:14:02:7f:20:
         6d:45:59:c9:d9:93:99:41:f0:d7:38:2c:08:62:03:fa:02:ef:
         5e:69:12:36:03:c4:b2:10:51:8a:df:cf:48:77:49:5c:f7:d2:
         4d:e9:1a:bd:06:24:3f:1c:11:60:8b:01:12:da:e8:39:c0:e6:
         bc:cc:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:06 2026 by rpki-client