Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          p2xPjfubgYFWkS+ccN50KuzqCKfDjF14B8QSIRcKlCw=
Subject key identifier:   A7:DD:80:FB:55:F4:ED:CD:C7:D6:89:21:BA:A6:07:4D:E3:5C:EF:DE
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       01A11485A1BBD679E703A3634A761B528836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          1AAC
Signing time:             Wed 07 Oct 2026 04:01:04 +0000
Manifest this update:     Wed 07 Oct 2026 04:01:04 +0000
Manifest next update:     Thu 08 Oct 2026 04:01:04 +0000
Files and hashes:         1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
                          2: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: ZwSe04/vQ2oMPoiHgV0T7B44R7NfY71s0HN75q6WOQo=)
                          3: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
                          4: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
                          5: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
                          6: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
                          7: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
                          8: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
                          9: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
                          10: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
                          11: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
                          12: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
                          13: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
                          14: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
                          15: V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa (hash: jzw1vz6ZEXyxdGOPFQhYOp4v00XuXiS4bMqLV6Nev1o=)
                          16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
                          17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
                          18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
                          19: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (hash: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=)
                          20: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
                          21: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
                          22: rrzmrim7bHJDiCrYhA8mru04a40.roa (hash: ofVbPhI7aV97rdzoC5yVpmL3qOizHqUQvemgYAVNMho=)
                          23: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:85:a1:bb:d6:79:e7:03:a3:63:4a:76:1b:52:88:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Oct  7 04:01:04 2026 GMT
            Not After : Oct  8 04:01:04 2026 GMT
        Subject: CN=a7dd80fb55f4edcdc7d68921baa6074de35cefde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:ca:07:9d:1b:76:8a:4e:1e:f6:47:12:ec:
                    d9:32:3c:80:4a:2e:8f:d6:cf:66:5f:10:3c:32:c0:
                    1a:37:c3:51:e8:1d:69:7e:85:43:b4:0f:70:3d:ac:
                    60:02:0c:ea:ca:34:fb:a0:3e:ce:7a:44:f9:87:96:
                    29:f7:42:df:13:b8:9e:44:92:5c:fa:d2:b6:67:36:
                    c1:98:4e:02:b6:15:47:0f:d0:1d:61:b0:d8:f3:f1:
                    1e:44:29:82:2a:dc:6c:cf:7a:5a:44:e5:d7:07:30:
                    f8:5e:4c:05:38:33:33:d4:48:15:0b:80:78:dd:92:
                    76:3c:7d:8b:a7:ab:ea:a2:65:ce:a8:a7:82:ec:ac:
                    d2:fb:57:bb:aa:e2:f2:cd:ad:f7:6c:52:ba:63:a8:
                    07:47:a9:0a:51:6a:2d:95:95:c4:87:9c:b2:b3:f2:
                    5d:7e:8f:0c:89:6a:c8:ec:96:f0:6c:2d:f8:de:65:
                    97:77:4e:13:8e:0c:73:10:d6:8d:1b:9b:2d:c2:80:
                    1b:70:99:a4:75:84:ab:19:27:76:4a:93:3f:01:56:
                    8d:59:98:9c:90:89:71:0c:6c:ea:71:2c:3e:a0:33:
                    0f:a5:e6:36:ee:1d:f0:fb:79:ad:3e:b9:11:54:df:
                    e3:84:82:e9:ff:c1:d8:ff:5e:cb:2d:19:f2:b5:10:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:80:FB:55:F4:ED:CD:C7:D6:89:21:BA:A6:07:4D:E3:5C:EF:DE
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:c3:5f:91:5f:de:e5:a9:bc:fc:c3:e7:2d:de:b2:f5:00:
         84:42:b9:c0:34:1e:13:5c:b3:c3:2d:c6:33:c3:b4:28:14:f4:
         a6:30:42:e0:49:3f:db:77:c6:29:73:f7:ca:79:fe:fa:0f:a8:
         ee:bd:6b:e8:d5:30:6d:40:bc:23:d0:90:b2:7e:7f:17:ea:6f:
         51:4d:20:ed:b9:69:5e:2d:35:5e:dd:f5:91:8d:ce:28:ca:53:
         4f:23:9a:ee:22:4d:95:0b:3f:a7:35:8b:87:ff:8c:f3:3a:bf:
         4a:ce:ea:ea:04:2f:e2:be:ea:12:43:ea:86:c0:e2:f3:0e:bc:
         ec:41:c6:00:35:94:05:20:c3:84:47:b7:63:ad:20:07:22:0b:
         c8:85:39:db:ed:63:fc:97:2b:31:bb:65:e2:8e:78:36:bd:9d:
         fe:6f:e2:72:3d:e6:f9:a8:9d:c1:15:df:04:ae:d0:a2:b4:dc:
         c0:5d:3a:ee:47:71:d1:a6:7e:76:0a:98:ab:ca:1f:5f:76:e2:
         49:db:28:90:f8:4b:55:58:ec:7f:5c:68:ef:56:a3:00:be:72:
         ae:83:70:4a:46:2e:1f:60:16:03:e1:41:05:78:09:c5:4f:eb:
         37:f4:f7:45:4b:52:5a:3e:6c:89:d6:1b:a1:aa:38:f4:b7:6d:
         72:ef:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:01:54 2026 by rpki-client