Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          YKwvOdxKHNjOKMct5+sbpT1iYD/kHimk0ndETcLn1j0=
Subject key identifier:   D1:10:DD:E0:EC:29:76:BF:79:A1:23:15:4A:AE:FA:E0:0D:3E:F8:BE
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       01A15D439DC55EFDC01A467F20BD3B57F188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          1AF5
Signing time:             Wed 21 Oct 2026 07:01:14 +0000
Manifest this update:     Wed 21 Oct 2026 07:01:14 +0000
Manifest next update:     Thu 22 Oct 2026 07:01:14 +0000
Files and hashes:         1: 22npFef-j0M49cVlWvOM23fYAyU.roa (hash: 9BoQFEFFXQE63XppyCXHiu5uKpdTCmc2QeSL3Gkzz8I=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: StFH3Vtms2G5UpxqTh0KCsLd/BsKsK1C8J7HCVIwSwY=)
                          3: 8oxtTnvpd2_ke4zwj7aMfBhyW4A.roa (hash: 7IjKBH0yCgpHTXLTsHrNCb/Cn+6s8o46F6a2US8IQaI=)
                          4: Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa (hash: heDfoYDNIQ7bB0XJ90BIyZD9NkiqghbSq/mIzF+Kcns=)
                          5: WIrRwzNj69OGrZGZ_TIAf1zyd4Y.roa (hash: RLknk8idVnWV0ZWfG3Uyrkx5h9Sqj0kpjXqaIlzLBtU=)
                          6: ZBv-tqzx_gaItXN6I7J1hMlcTgw.roa (hash: BjULVWcZIgFcGGgq3BGplnOKV+IjQ8KEIr+LuLjISXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:43:9d:c5:5e:fd:c0:1a:46:7f:20:bd:3b:57:f1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Oct 21 07:01:14 2026 GMT
            Not After : Oct 22 07:01:14 2026 GMT
        Subject: CN=d110dde0ec2976bf79a123154aaefae00d3ef8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:83:53:9b:0f:13:4b:d0:b6:fc:e8:50:3f:
                    54:f5:9d:c2:df:01:6c:09:f5:32:71:57:92:2a:ad:
                    e0:1f:70:86:c4:9d:23:55:07:68:0b:eb:6d:55:39:
                    7b:86:a9:4c:74:1f:57:03:e5:38:32:11:ba:8b:b7:
                    61:4b:1f:c8:e7:4b:85:7c:94:81:cc:02:09:7a:14:
                    63:3a:2c:e4:75:13:25:6b:df:5d:76:fe:44:73:20:
                    f7:74:a0:f9:9c:2e:cf:de:cc:33:46:eb:d2:2a:f9:
                    d2:ee:f9:88:4f:a7:11:9a:58:dc:8b:fb:ed:7d:ed:
                    ed:41:42:1e:0b:26:97:7a:d8:fe:6a:50:3b:1c:e2:
                    06:f7:10:28:1e:ea:fa:2c:22:a5:6d:47:f9:92:92:
                    1c:ab:db:bf:3d:89:7d:b7:98:53:9d:3b:2f:f9:d7:
                    97:e6:95:2f:e1:b2:fd:ab:ae:2c:09:49:d4:12:d3:
                    f8:00:79:93:18:da:ad:5b:f3:5a:55:1c:03:af:08:
                    88:85:52:76:f0:87:04:54:27:c6:16:80:ab:bd:ed:
                    f6:98:93:7f:99:5a:90:78:ff:94:15:7a:88:92:8c:
                    04:9b:7c:3d:1d:32:5b:d0:0b:19:67:fb:dd:1b:fb:
                    68:87:fd:59:99:25:df:b4:05:8c:58:0a:2b:5d:26:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:10:DD:E0:EC:29:76:BF:79:A1:23:15:4A:AE:FA:E0:0D:3E:F8:BE
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:45:66:e7:83:03:4d:ac:59:80:49:fc:17:ab:1c:8f:95:eb:
         23:45:a2:c1:34:83:fe:32:7a:d2:f5:28:b3:f9:27:dd:4e:26:
         af:17:d7:f1:68:32:e5:e6:0d:f7:4f:83:6d:c7:e1:87:9b:40:
         4b:20:7b:69:e2:7c:24:3f:2c:20:5d:ed:99:98:5d:27:96:a5:
         f2:32:5b:4e:19:72:56:f1:e3:a8:be:9d:f6:f4:9c:18:99:94:
         09:51:3d:2b:eb:37:6f:d8:54:42:77:7a:5e:5e:b0:18:9f:b0:
         5c:db:48:01:fb:5f:97:46:59:c0:1a:9a:b4:e1:5d:2c:a9:aa:
         77:a7:0d:94:13:9e:0e:7c:90:6c:97:13:aa:17:08:53:80:31:
         54:3d:08:f9:27:db:db:40:b9:ba:7c:c3:b0:9a:56:d1:d3:56:
         ee:2a:6d:ec:4e:56:5f:4f:5d:af:9b:37:fc:5e:6e:5f:2e:00:
         df:9c:f7:c3:23:6f:4f:b6:43:be:5c:0e:f4:4a:61:69:50:2a:
         6f:82:6a:8e:79:bd:ac:34:a8:4a:33:35:88:ad:e2:6a:9e:6b:
         3f:1e:11:64:c6:4f:95:33:5f:7d:39:b3:6d:1d:f7:73:c0:4b:
         d5:41:2c:d3:3d:b2:78:35:f2:af:ce:e5:8c:4a:4c:2b:9f:10:
         2a:f5:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:56:55 2026 by rpki-client