Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File:                     5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier:          s1pECy9Sk60elbSpgGZ3Kgfvs6E2TjGIpntNB+p9CeI=
Subject key identifier:   6D:3D:90:12:FD:D2:96:FF:EB:53:38:25:86:83:B5:78:30:62:95:03
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer:       /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial:       01A020F9D38458DD4AD4241A250EB3AB732F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number:          034F
Signing time:             Thu 20 Aug 2026 21:00:38 +0000
Manifest this update:     Thu 20 Aug 2026 21:00:38 +0000
Manifest next update:     Fri 21 Aug 2026 21:00:38 +0000
Files and hashes:         1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
                          2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
                          3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: akInxYYIPHpQb6nNy57zQyM/RuwgsF56HhDgHUsCyDE=)
                          4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:f9:d3:84:58:dd:4a:d4:24:1a:25:0e:b3:ab:73:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
        Validity
            Not Before: Aug 20 21:00:38 2026 GMT
            Not After : Aug 21 21:00:38 2026 GMT
        Subject: CN=6d3d9012fdd296ffeb5338258683b57830629503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:af:37:f2:0b:e4:2b:79:75:b8:2d:df:2a:
                    4f:24:03:c3:6c:32:06:4c:26:86:8e:16:e9:af:90:
                    e3:03:80:0b:cf:23:82:10:20:2c:aa:e7:82:16:b8:
                    52:67:be:5e:2d:85:21:cf:61:ca:98:d1:1c:ba:2a:
                    4f:fa:fd:98:da:c9:66:9d:2c:ae:73:4f:52:6a:ed:
                    4e:e5:fc:f3:c4:36:44:a7:bf:87:f4:43:9c:60:16:
                    27:e2:8a:60:7b:3c:94:bf:c2:b8:30:2e:83:0b:04:
                    44:63:df:84:c4:b2:4b:04:f0:38:f4:ba:11:7d:8e:
                    80:59:8c:10:03:de:ec:05:1f:d1:75:1b:6c:fb:87:
                    a2:27:aa:86:c9:af:06:ac:33:a6:1e:fc:9b:f8:ac:
                    85:ce:d1:fb:44:02:17:fd:37:6c:89:0d:f6:25:1a:
                    2e:f7:b8:64:18:fb:cb:db:81:87:28:3f:5c:c1:a2:
                    82:bc:2e:be:ca:6e:6e:6b:f4:06:32:2b:2d:ce:b0:
                    71:ff:fc:fd:ca:c9:fb:24:65:21:a3:74:06:70:37:
                    f8:13:59:8c:4e:2c:7c:9e:53:a7:4c:72:9b:4b:5a:
                    6a:4b:f2:30:dd:f9:ec:16:fd:67:1d:23:2e:21:60:
                    00:78:95:f0:69:e7:71:8b:ca:d8:fd:a5:bf:f8:d2:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:90:12:FD:D2:96:FF:EB:53:38:25:86:83:B5:78:30:62:95:03
            X509v3 Authority Key Identifier:
                keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:20:cb:ca:65:04:e9:83:f5:19:fe:94:b6:3a:3e:d5:54:27:
         d2:fe:b9:dd:8f:a1:c8:db:a7:ec:80:1f:2e:6e:fb:48:b0:d7:
         22:09:e3:97:61:bb:c8:c3:35:88:94:42:1b:3c:63:3b:3f:d9:
         9e:95:8f:b7:c9:cf:75:f2:20:35:84:79:ba:e0:64:e0:c6:1b:
         17:7a:cb:6c:86:2b:6e:9c:95:ac:02:c7:13:70:bf:2e:97:cf:
         1b:29:aa:d8:66:0d:4b:49:c4:cb:e8:63:7e:69:86:5a:1e:f2:
         af:32:83:5a:02:5c:6a:f2:cb:8a:bf:a1:a6:89:fc:b7:f3:93:
         75:c4:0f:fd:c7:7e:7b:3b:5a:87:0f:e9:f0:c4:63:b1:88:da:
         2b:0c:6b:a4:ad:d2:81:cd:7e:06:f2:40:e6:1d:fa:e3:76:2d:
         b3:28:7d:fb:6a:e6:ab:b7:cc:b4:8c:db:9d:31:75:f2:0b:cb:
         d3:71:3b:11:54:2d:42:52:31:78:f2:a8:a2:0f:38:8b:a4:7d:
         3d:ec:36:ce:b8:07:0c:70:8b:f1:c0:26:e9:82:65:cb:96:a6:
         8c:65:4f:7b:8c:e7:6d:33:1c:33:bb:a2:a6:87:58:17:af:e7:
         c3:f9:3a:fb:70:6d:3a:82:28:89:41:57:c3:d7:8d:f5:4f:e0:
         67:86:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:04 2026 by rpki-client