Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File:                     5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier:          PO9kh9f4FK82DE3Or139+8NMVT5wBbBnfFreIF8R4Mk=
Subject key identifier:   D1:5D:58:49:4F:6D:99:AB:1A:E7:D5:CF:67:BD:71:C3:C8:FB:EE:85
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer:       /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial:       01A00213B7ACC1DC7CB2EF1358D360E21285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number:          078D
Signing time:             Fri 14 Aug 2026 21:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:41 +0000
Files and hashes:         1: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: F1mdEWxcaFzNpGDfNtXfHdlnr7o8wmm9ElXsX76zKto=)
                          2: y4_u6MP25DDbYftrjo0-BN4CqP0.roa (hash: P3A69WpiF0MyDiVo1cBJGQBqn5Zv2zHMeyZO0MmbAb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:b7:ac:c1:dc:7c:b2:ef:13:58:d3:60:e2:12:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
        Validity
            Not Before: Aug 14 21:00:41 2026 GMT
            Not After : Aug 15 21:00:41 2026 GMT
        Subject: CN=d15d58494f6d99ab1ae7d5cf67bd71c3c8fbee85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:93:ad:75:48:19:9e:f6:85:d2:e2:fa:b5:
                    21:8c:e5:df:62:de:67:82:09:72:5e:5a:65:5a:a3:
                    c3:3a:7a:ee:d0:a3:83:c1:f1:ec:4d:1b:a7:12:17:
                    6b:ee:4a:69:53:81:de:a4:12:cd:43:68:8b:3e:b6:
                    96:32:fa:72:03:0c:e3:26:cd:17:83:d5:9c:a4:9c:
                    e8:bf:a1:48:9d:8e:23:50:de:b0:eb:a9:29:e1:7a:
                    0b:69:98:99:8b:eb:7c:47:23:c0:03:a3:36:ab:6d:
                    fd:f4:27:a3:96:2b:9d:f8:87:fd:87:23:1d:f7:57:
                    25:98:14:f3:f5:26:90:f0:19:80:f3:0a:af:98:fd:
                    52:32:7c:75:17:b9:4d:7b:a5:a2:f1:2b:d2:b3:73:
                    b7:7f:9a:f1:17:b7:77:ae:5d:08:79:f0:76:ee:36:
                    28:ed:46:3d:80:c3:90:0c:02:f1:91:e8:31:d3:83:
                    c7:9d:e0:74:c8:58:9a:f3:47:b6:af:8b:e3:25:82:
                    71:70:04:1b:2f:b4:bb:a7:6e:17:bd:1d:9f:0f:6a:
                    8b:db:65:2f:d2:72:52:c3:ce:6b:f8:8d:1f:72:e8:
                    d2:b1:2c:d8:e8:f8:af:6e:a2:f8:f8:34:d7:b8:d5:
                    65:78:21:a0:74:92:1c:52:11:82:15:38:02:c2:37:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:58:49:4F:6D:99:AB:1A:E7:D5:CF:67:BD:71:C3:C8:FB:EE:85
            X509v3 Authority Key Identifier:
                keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:54:e0:dd:4e:41:7b:3b:2e:3f:a9:99:ce:9f:ef:85:a8:54:
         73:d5:cd:18:2d:e0:3f:07:35:83:20:50:9f:4a:18:eb:7c:52:
         ff:c3:71:3a:b7:08:13:7c:3e:cb:d7:1b:02:ac:94:0a:67:21:
         5d:16:68:b7:67:ea:d9:98:16:03:3b:9f:4b:29:1d:73:e9:69:
         a3:97:44:bb:8f:08:36:3e:1a:c3:9d:c9:6c:5b:99:66:cd:09:
         a9:14:77:89:36:e9:7a:41:96:d1:b0:fb:c1:3e:df:8b:13:e9:
         8f:78:3b:08:25:04:01:62:68:7c:10:e3:c5:17:a5:3e:52:39:
         b3:6f:7d:81:57:32:5f:b5:51:5d:9d:05:9e:d5:85:43:d8:b4:
         40:98:45:02:cb:80:66:1b:e6:73:70:0f:21:c2:48:91:d2:cb:
         2c:6e:9b:7b:04:15:e8:67:6b:0f:19:6e:f8:84:9c:08:4a:b9:
         fb:e1:76:ca:40:2f:aa:21:c5:17:00:8f:18:21:17:12:d7:d0:
         9e:e6:66:34:77:4a:88:e7:55:7f:b9:35:d3:58:9a:8a:d8:6f:
         73:d1:d3:e5:af:22:e3:ff:1d:fa:23:c9:fd:a1:bd:89:68:49:
         e9:31:c0:37:40:f6:b4:15:40:3a:fb:86:7b:fa:e6:14:73:e6:
         65:56:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:22 2026 by rpki-client