Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          6P3SN6+TwMPbi7/HZ1jmefzeXH5qMrRokceEXFbWghI=
Subject key identifier:   35:3C:5D:DE:0A:F8:C5:8B:1A:27:92:4B:4A:1A:67:F0:16:5A:19:F1
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       01A06DCB850672BF1C867707D172862C8AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          1A79
Signing time:             Fri 04 Sep 2026 19:00:49 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:49 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:49 +0000
Files and hashes:         1: 22npFef-j0M49cVlWvOM23fYAyU.roa (hash: 9BoQFEFFXQE63XppyCXHiu5uKpdTCmc2QeSL3Gkzz8I=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: U3MOXdJF7ymfbXl63h91Rza9oB/0d+K7L8YQ80wdB3I=)
                          3: 8oxtTnvpd2_ke4zwj7aMfBhyW4A.roa (hash: 7IjKBH0yCgpHTXLTsHrNCb/Cn+6s8o46F6a2US8IQaI=)
                          4: Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa (hash: heDfoYDNIQ7bB0XJ90BIyZD9NkiqghbSq/mIzF+Kcns=)
                          5: WIrRwzNj69OGrZGZ_TIAf1zyd4Y.roa (hash: RLknk8idVnWV0ZWfG3Uyrkx5h9Sqj0kpjXqaIlzLBtU=)
                          6: ZBv-tqzx_gaItXN6I7J1hMlcTgw.roa (hash: BjULVWcZIgFcGGgq3BGplnOKV+IjQ8KEIr+LuLjISXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:85:06:72:bf:1c:86:77:07:d1:72:86:2c:8a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Sep  4 19:00:49 2026 GMT
            Not After : Sep  5 19:00:49 2026 GMT
        Subject: CN=353c5dde0af8c58b1a27924b4a1a67f0165a19f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:7e:c2:3a:66:86:88:84:3e:1d:c1:7d:e6:
                    1a:c9:c3:91:10:ea:3f:1d:bb:c7:44:3d:fa:8a:bd:
                    c2:93:0d:7f:f7:12:9f:bc:58:9d:56:7b:61:c6:39:
                    51:a2:9c:3f:50:1d:2e:94:15:8b:40:51:57:fa:eb:
                    64:47:73:d5:a5:ee:ea:4d:d6:1d:72:f6:1f:26:dd:
                    1a:46:be:cd:01:45:a3:0f:2d:b6:99:87:71:81:1a:
                    39:e4:cd:48:b9:9e:63:b1:e8:20:2c:fe:7e:7f:4e:
                    48:dc:ac:2f:4b:44:52:b7:6a:3c:22:9d:22:09:86:
                    4f:6c:8c:e5:d5:0c:45:c7:ce:78:4f:c9:43:ff:36:
                    a0:2a:bc:22:24:a0:9e:ff:2c:63:b5:bd:8e:78:d4:
                    ac:de:10:7e:06:3a:3a:93:6d:8c:a5:ba:db:74:d6:
                    d7:b2:9b:27:b6:cc:95:1e:b6:12:95:92:b9:10:36:
                    e8:5f:2f:7b:3f:4d:62:38:47:f7:e2:17:77:b0:61:
                    8b:75:05:58:34:5b:5c:a1:22:56:fd:41:02:ee:40:
                    62:92:9d:1a:ac:93:5e:92:4b:82:a9:00:3f:68:19:
                    22:82:9b:7f:bc:f5:fb:d1:65:df:5e:c2:93:cf:a5:
                    6c:69:e3:27:75:0f:60:e8:f5:34:d2:cb:c0:64:c9:
                    4d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3C:5D:DE:0A:F8:C5:8B:1A:27:92:4B:4A:1A:67:F0:16:5A:19:F1
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:9e:6b:4a:20:12:9f:2d:46:86:f9:f0:e8:3e:a7:a1:a9:
         58:99:eb:31:74:14:d7:c4:de:97:60:b1:8e:92:23:82:b5:64:
         6c:6b:44:ae:25:68:7d:e7:f4:21:69:53:fb:37:2f:a2:58:a1:
         b4:74:5f:4d:9d:b5:10:bf:a4:eb:24:7c:44:b7:cd:f4:f2:c2:
         2f:5c:89:0f:c5:91:e8:f3:ae:da:6b:ba:77:57:80:34:f4:e3:
         04:f4:1b:8f:75:3d:01:af:32:d3:7f:85:62:bf:66:0d:0b:95:
         a6:58:bf:7b:09:80:cb:82:97:79:1e:a3:51:20:f2:55:76:09:
         27:bb:57:43:be:32:5f:fc:58:7e:95:23:60:a6:93:07:15:84:
         d3:71:72:41:0d:a9:5e:b2:e6:54:90:93:45:7e:09:b0:65:78:
         41:60:09:19:a3:27:d7:9d:dc:84:8d:de:6d:c1:ce:17:e1:e7:
         3a:d1:8f:60:6c:72:6e:30:25:29:f5:56:43:52:40:71:12:97:
         bf:66:d8:f2:1b:46:5e:30:8f:e1:fd:33:cd:fd:82:31:0f:db:
         87:9c:4a:9c:54:16:d5:05:ef:9c:7d:bd:a5:73:bd:f2:b2:d0:
         4f:76:a3:d9:5e:f0:3a:ac:29:91:4b:c3:49:d5:ec:6a:36:d9:
         52:57:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:41:20 2026 by rpki-client