Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          wGYvwT2mhJY70O/KOKFur7+bOD/78D4Wyjby+4XU9p0=
Subject key identifier:   84:F8:6D:0F:03:C5:42:24:5E:63:46:AC:A7:1A:7D:BD:74:07:1F:49
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       01A0C8FCEC316B4E585B1EF99EE580113087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          149D
Signing time:             Tue 22 Sep 2026 12:00:13 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:13 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:13 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: mkOuaM0vhUdSNO82qguLpLbSGWpmipULLQQPGP3h/nM=)
                          2: MwjqyVMrj31F474MSeKkhNXzvoI.roa (hash: m7bqaTX59YwG3k1du3WuNAO3cJYKNz+DJfHgg5XKNsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fc:ec:31:6b:4e:58:5b:1e:f9:9e:e5:80:11:30:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Sep 22 12:00:13 2026 GMT
            Not After : Sep 23 12:00:13 2026 GMT
        Subject: CN=84f86d0f03c542245e6346aca71a7dbd74071f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:44:97:5b:10:cf:81:10:39:a7:fb:0b:b2:
                    84:99:f2:c9:dc:50:ff:ef:a9:a1:c8:12:ee:74:ea:
                    ed:3f:1b:12:98:b9:0b:93:7d:53:c7:64:64:bf:54:
                    37:73:ac:91:20:d1:3d:dc:57:b0:ea:0d:11:6f:50:
                    67:67:06:65:67:63:c5:9b:89:15:50:9f:59:89:66:
                    38:43:bf:d6:9a:03:6a:79:94:ed:eb:9d:8b:a6:71:
                    2f:0b:cf:1b:fa:cc:18:66:cd:16:28:e5:38:28:ae:
                    83:fa:69:b0:2f:66:7e:2f:e0:7d:a8:62:3b:c3:07:
                    aa:1a:f9:4b:18:08:ad:a5:b0:18:e2:c4:ff:b4:dc:
                    86:7a:96:36:01:41:87:14:d8:df:47:cb:94:87:39:
                    59:a4:4b:80:d9:4e:c7:54:f2:60:c1:f8:16:63:69:
                    bd:85:07:fe:b0:c6:cf:af:52:b4:e2:c0:22:2e:64:
                    c3:c0:cf:0a:e0:73:10:a7:c6:29:18:ef:f2:2d:dc:
                    d7:98:ba:02:2a:f0:b1:eb:6b:7f:15:14:e1:3c:23:
                    60:91:c9:9e:2d:9a:bb:71:f2:99:39:a3:48:f3:5a:
                    d2:a2:89:a4:47:0c:bc:0b:47:16:8c:be:1d:a4:8e:
                    55:c3:c5:92:22:8e:72:b3:f9:6d:94:fc:61:42:01:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F8:6D:0F:03:C5:42:24:5E:63:46:AC:A7:1A:7D:BD:74:07:1F:49
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:a2:b2:cd:99:ca:b5:5e:6e:0e:d6:d0:7c:d2:16:7f:28:
         b0:c2:5f:03:30:a4:87:82:5b:de:8a:0b:52:64:98:a0:64:b4:
         d3:32:a7:0f:3e:f0:1e:fb:66:ce:84:5c:57:74:b8:aa:c3:47:
         31:6b:08:11:10:d8:6b:f4:50:29:00:ed:17:76:5d:a2:9a:7a:
         1a:03:b4:df:b4:7d:c6:33:0d:7e:b1:d7:bb:67:80:a9:6c:54:
         1f:5e:82:c1:a0:ae:6a:ad:ef:1c:e2:72:84:69:1d:45:8a:21:
         ec:57:2f:cf:54:b8:ac:87:9d:89:fe:00:d6:46:2b:58:17:cf:
         bc:2a:58:a2:77:20:38:06:20:4a:aa:fc:fa:5d:df:31:7c:7b:
         f5:9f:ec:18:e9:c7:7b:1c:7c:fb:31:7e:5b:a3:34:f7:da:61:
         87:69:4b:b0:2d:c1:8e:6e:bd:10:db:f4:82:e3:37:cc:74:85:
         3e:4e:5d:fc:27:aa:74:75:fa:d2:94:69:3f:e2:2f:f9:c1:e3:
         ed:c1:66:4b:df:3e:a6:b9:31:f2:09:ae:33:60:d2:75:1b:a1:
         7d:ce:ab:fb:50:53:eb:b0:56:33:fb:3e:1c:c2:51:0b:e6:c2:
         76:e5:83:11:95:ec:a0:ec:98:d6:1d:3c:ff:b5:87:78:8d:da:
         a0:a7:42:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:52:59 2026 by rpki-client