Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
File:                     5_iBQBq6zIjJQf33QPGrFTbwXbo.mft (raw, json)
Hash identifier:          6iV6by3EJhJleTm5ojjRBkmAsZnztxa7PFj4yP2qICw=
Subject key identifier:   BD:F5:D9:F2:88:9A:01:D3:82:CC:6D:D1:CB:36:59:3E:7C:0C:56:CA
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       01A104A4B23D11A5FC44E9FF65EC58BF4F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
Manifest number:          1A8D
Signing time:             Sun 04 Oct 2026 02:01:04 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:04 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:04 +0000
Files and hashes:         1: 1-Qt-mvUucZQjwB8U285sYZrYHhY.roa (hash: oTz2PzT1afjZiR5FRSLxm1w+VehAPUH7fAGIbljalfQ=)
                          2: 3jVe3oWfFjGA0bFkAickXDhiBTk.roa (hash: /B1hbyZvITPy4r435troyRlK46+NdXGVMqL2hC0atuM=)
                          3: 5_iBQBq6zIjJQf33QPGrFTbwXbo.crl (hash: x8TuBwaD38Wpdoe0mjaLhgnw6vWDEbKRWQpRoibR25Y=)
                          4: Aihm1qpAzPTqrcFPKmaVyaxgJyw.roa (hash: ASIC86ud/gxlcO2WNKgZea3FlMuZAabkWgmYMbXqS2I=)
                          5: AtVTliHD-CZYx0dPfB89NgsixUc.roa (hash: o1vczZuvSO50vGvwxxhNXET7cnV4aqFg73NN+nlrpAU=)
                          6: FSTJ8w92afiSz0qI6f5cSEytc7Q.roa (hash: fXpshaRrLltZbsPZ3N9EZgWimcdFJLJ1wWhFL1Fg174=)
                          7: FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa (hash: ZBw82sV7JoPLg3uztht/b0Wxlmt7VXvzqOWzOlA1JpA=)
                          8: IZCAUD82f3i2oA0GiMqBNWsoJwI.roa (hash: SbW567nXRMDWSIGCIjwxO7prJ7rI/ygbNehL8/xOQB8=)
                          9: J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa (hash: smwtAA/DVPMUrh76xjUL7N4+Ou7I5DIwApsogoGYqpM=)
                          10: TKEpPXUpLU5W_48ie-PShvubSmQ.roa (hash: bAD0eg778WJ8W8W3//5efjy9CNKIBzk/YvQ1TCKllow=)
                          11: WSeVM2QjU-Reiz76i_drEHhLMPQ.roa (hash: Tq0+teUFn9thhFb6g4y6nyECQZVPt+G+x4oqu/NwuvY=)
                          12: YYEwV6NICNrszp0tVRq1J0qfnGI.roa (hash: iz9tuV13CkeCtkZoxWE8s2oi5wxkmx44BjW1MshohqU=)
                          13: aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa (hash: WmqoSaafVJGk4mr4QTxo1ZyjpXHkEKbLAP8ZEUygZf4=)
                          14: aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa (hash: HR+6hF6C7zyPdJci+gTa+wdqzGllr0dCtu8rPBplNRc=)
                          15: aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa (hash: 2CuFc4vVlwTqLaWvwvMaSHaDQsKrWlR1Flh9/F4Ne6Q=)
                          16: bvJT889kwtQRI_EyLLJFUKRqVAo.roa (hash: jHzzWrrncqh6D7+g/0zcqR17m3gx8mFOPKNKX2W4EsA=)
                          17: d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa (hash: nerdIRaMGszG2WfY8kmlFia43UIoriRI54MHvrKiwq4=)
                          18: eY8EusladH4IXC1CHpY8aRyUD8U.roa (hash: 8OQXGxBuu4pTDdv8FmznuoTImi4gnvUuKmWDiou3mfQ=)
                          19: fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa (hash: HtwbY/FPzHHNV/4s4iZglcvSNHEEMqFZcHSp5PQBTNs=)
                          20: gH4Vot8lA2imDuEu0OJDp6f8wvk.roa (hash: udS35O/PINSgGsNbtd6Z+QIm1IwNKG0wDm45HGhIkFE=)
                          21: gR2JJPVeOzMGupRjbCt-uE56Zos.roa (hash: R2uhlPsxDFm4cfja3sJpfXpN7boeSANpTxmZjBct7Nk=)
                          22: hKRwWCL_6CoBmk8VsIrEXY1xai4.roa (hash: uqoBEgPcDkJFQkJhnCsNAf2Gfqg03lNWyYDwn89PoDU=)
                          23: iIdAzPtCqikbah21E-K0Mm8FQ_M.roa (hash: lyzsEh3CqWMd20FxkkU5rgZbDHljJ2MjfPiA4AST0rM=)
                          24: izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa (hash: IS6iJGB8DvxnqW49lmgjGOpqUU7oBgMo/SUW8Kywe3Q=)
                          25: jwGQmxKkvoMxt0zGNzmgobrPceA.roa (hash: Q9xMi0UBmOQ6J1V4+YgTpk7VffngMdEzFI533VU3vXQ=)
                          26: q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa (hash: p6FIe/ywSMryeTPTuLflH96Yj9QNG/X6CcvV232N/OA=)
                          27: sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa (hash: 8+R1Y8MlhUsE7oDGi1CtSy7SyzfeAd5bXtWsTvzi71I=)
                          28: shCVViOjhyXvYhJ9WfX4PMvRn7k.roa (hash: FDJ+fK4TSktfpWeR1yOgVytRac6CpX/nnvsFWazb0bE=)
                          29: uFn-JtrUy_-916rFpJODXLywoCs.roa (hash: lgxlXCpi2JKwf9CxVmQdcRMsZIfnt5rxVcM6Idk5XVc=)
                          30: uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa (hash: sUSljUPkGt2IJZimoVojQH+i2T6wSTV1gkUYlZq+bz4=)
                          31: za3m6PhE_hPH-pcVQtgtjootjOk.roa (hash: STZds7jNIKyzSG0k0Vxd1saxJCfI11wgP3wf9Rn3Hkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a4:b2:3d:11:a5:fc:44:e9:ff:65:ec:58:bf:4f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Oct  4 02:01:04 2026 GMT
            Not After : Oct  5 02:01:04 2026 GMT
        Subject: CN=bdf5d9f2889a01d382cc6dd1cb36593e7c0c56ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:18:99:d4:c8:f3:96:30:f9:25:f1:54:fa:
                    ee:bf:be:75:ea:59:c1:34:7a:b4:db:bf:21:e8:4c:
                    0c:81:e5:14:a1:3d:4c:5c:f7:a7:eb:8c:0c:f4:a3:
                    c2:63:c0:e3:0b:d9:23:9c:2a:80:46:06:a9:c4:44:
                    65:64:1c:ab:45:a3:3b:de:11:7a:fc:3f:2a:bf:1e:
                    eb:5a:64:3d:c1:dc:32:c0:d0:0f:99:7d:da:21:d7:
                    49:9b:f6:5b:07:d2:39:ad:bc:44:e0:6b:cf:73:21:
                    ce:95:e2:2f:28:5a:99:8d:44:dc:da:a6:3e:41:f5:
                    b1:c0:b2:fd:13:67:b5:0e:28:b3:0e:ee:c3:2c:83:
                    6c:92:be:b5:68:3a:19:3c:47:33:7b:2e:1d:99:0c:
                    0a:46:ce:0b:0a:a8:a8:bc:a0:d0:03:4d:03:ec:12:
                    a0:cf:0e:9f:3c:de:b1:7d:b4:24:a9:46:bd:d2:e9:
                    83:c4:f9:77:21:9f:ec:77:1d:c6:5e:e3:12:c6:33:
                    b6:3a:1c:1e:b5:24:ff:99:d7:43:bc:bb:8b:f7:89:
                    c3:64:a1:1e:82:b3:5f:fe:fc:25:2d:e0:ec:e9:49:
                    0d:f7:af:82:8e:42:b7:88:80:57:8f:92:c7:78:fb:
                    b8:14:c4:31:40:cd:32:0f:94:bf:26:68:58:8d:fe:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:D9:F2:88:9A:01:D3:82:CC:6D:D1:CB:36:59:3E:7C:0C:56:CA
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:3d:d6:90:a4:c7:39:23:e8:e7:0d:19:8a:55:b2:09:81:
         77:3d:73:46:bd:66:5f:cb:a2:63:e5:cb:8b:e5:54:41:fb:4c:
         12:08:5b:06:5e:44:27:e0:ab:a9:46:d9:db:91:1c:12:2c:69:
         f5:1b:60:ac:87:63:88:3f:28:9a:36:28:37:c8:66:3c:49:ff:
         f7:1a:1c:ce:f1:60:75:a3:0e:77:4c:ed:ed:12:fe:c4:97:f4:
         21:4a:3e:8f:50:2c:21:bd:dc:6f:3f:48:9b:65:d7:b6:70:87:
         7c:e0:5b:04:22:74:32:bb:fc:d4:b4:de:3f:d1:a6:4e:82:c2:
         29:94:68:ca:53:a2:6b:0b:24:92:00:b3:f7:1b:e2:ac:de:dd:
         6f:09:f2:2f:cf:9f:aa:30:12:38:f9:b6:5c:18:79:ea:18:77:
         18:64:b3:a0:a0:e1:e9:c0:0b:8d:be:af:d8:da:04:e8:5a:84:
         d7:c9:86:7e:ed:aa:7d:e3:62:19:ed:79:7a:eb:db:bd:d1:4c:
         0d:ba:71:e6:ea:be:ae:38:11:67:e9:0a:24:02:0b:9b:54:1a:
         62:c6:f8:f8:0c:b4:75:2d:92:fc:12:31:1b:82:60:7d:1a:14:
         2d:75:32:8b:83:3f:e4:03:eb:f7:7a:e7:1b:99:67:4c:ea:b2:
         c4:1b:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:39:13 2026 by rpki-client