Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          YCLpRet4Nxu0TP/Wn+PxBfMEvFmBPokOqVbyQDYTX7Y=
Subject key identifier:   38:CE:1E:D1:DE:FA:BC:8A:89:B4:00:3F:D8:F9:CA:F7:8E:E9:05:F9
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       01A0C6D8499A2457F4699BB6EF70691146F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          1545
Signing time:             Tue 22 Sep 2026 02:00:58 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:58 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:58 +0000
Files and hashes:         1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: 0gbnpPsd4lEgL7hnbbaGeYw1vkpoi2Uh2f9eFg5PPc4=)
                          3: CtJ8OGkCaahCczfwEJKIo0Vg19E.roa (hash: G04Zndcd1iRvLKPAv2hVCE6UogK1m2W2eJhOAaju7+8=)
                          4: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
                          5: _vpq-qi4EQKFfckyOrU1g_mLI6k.roa (hash: NEepCH4VA5uYtx4dkADmgFVyzmZ4nNQxuJCHt+PP3M8=)
                          6: axnm0HQRmG8rizfv82dyns0e2_8.roa (hash: aV50CPhaYK3yIWcd+/HLRX9TlneZUNpfM8fhreah7uM=)
                          7: f_xKmFrmjIA78qUIL0QMNJGgKEk.roa (hash: C5FX/w2liydb0eZpv86Rq1hmajGY3P2SktyNH3juuk4=)
                          8: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
                          9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:49:9a:24:57:f4:69:9b:b6:ef:70:69:11:46:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Sep 22 02:00:58 2026 GMT
            Not After : Sep 23 02:00:58 2026 GMT
        Subject: CN=38ce1ed1defabc8a89b4003fd8f9caf78ee905f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:84:cf:30:5e:0b:a1:2d:6b:90:47:d0:99:
                    12:a2:90:e6:28:db:01:3b:50:a5:9a:b7:9b:4b:36:
                    92:13:db:18:40:e8:a5:c3:26:dc:d1:44:af:c0:47:
                    d6:19:7a:0a:89:ef:f8:27:0c:bc:5e:3c:89:87:c6:
                    8a:83:09:58:4f:72:ae:b8:2a:d3:00:40:20:5b:65:
                    d9:a3:12:71:d6:6d:df:15:8e:01:a6:b8:74:e4:bc:
                    da:cc:ac:43:d7:cc:42:31:87:d3:b1:62:02:67:c3:
                    a3:49:c1:57:33:f6:59:ae:60:5c:62:12:f4:39:a1:
                    16:13:15:df:33:7c:be:6e:4d:17:d8:e1:83:c5:7c:
                    3a:de:99:ae:f8:c5:27:13:80:49:1c:2d:c1:76:a8:
                    89:2d:0f:8f:39:63:d0:8a:47:c9:ce:11:68:7e:05:
                    d2:c1:ce:e1:70:08:31:23:e5:7c:03:ca:65:1a:fc:
                    b2:86:40:9f:20:30:7a:24:f8:a2:06:21:00:ae:81:
                    2b:99:9f:ab:12:10:27:9d:28:bd:28:6e:a6:cc:0e:
                    b8:99:cb:ab:55:b8:6e:f4:b5:10:b7:ab:b1:30:87:
                    bf:2c:ab:54:1c:1e:36:81:fb:15:de:57:a6:cd:40:
                    fa:72:b7:9a:a9:01:16:d1:90:0f:f6:89:71:2b:66:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:1E:D1:DE:FA:BC:8A:89:B4:00:3F:D8:F9:CA:F7:8E:E9:05:F9
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:26:f4:f2:42:cd:f2:2c:d5:bb:73:33:fc:0c:3d:45:d1:af:
         65:14:8c:f3:a6:69:ab:9b:ff:0b:6f:87:73:3e:9d:05:10:34:
         4a:ae:49:b3:06:4c:26:9a:db:77:9f:ae:25:89:24:2f:e3:4f:
         2b:8e:de:f3:e5:e4:53:34:11:68:6b:d5:a2:b7:a4:f8:c2:3d:
         a5:c4:2c:4a:14:24:ee:2f:07:3c:8c:d2:a1:61:54:55:52:af:
         00:d6:5e:91:30:d7:c4:33:29:aa:1a:6c:b9:94:4b:6c:e8:55:
         43:84:25:60:57:be:c2:14:01:04:2e:cb:32:ec:1f:1a:21:b7:
         87:24:39:f2:85:ae:08:2b:5e:5b:56:38:17:35:d5:73:6d:64:
         a5:50:0d:9a:ba:8b:04:3f:68:99:9b:00:5d:61:17:66:4d:a6:
         50:9e:9b:d5:01:67:91:10:8f:2d:6e:d8:40:22:79:de:7f:87:
         be:9b:87:83:dd:5f:3a:2c:f8:2a:c1:6f:79:62:a0:0f:3e:5d:
         3b:85:9b:eb:2d:a6:f9:6d:12:23:a9:f3:dd:dc:21:0b:14:4d:
         49:2c:cb:78:ad:32:b5:25:21:88:2a:7f:a2:d6:a8:dc:bc:b4:
         a3:62:4e:0d:d4:e8:0d:f1:bd:ff:5f:37:bd:a2:3d:97:32:93:
         a6:e1:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:44:29 2026 by rpki-client