Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
File:                     5_iBQBq6zIjJQf33QPGrFTbwXbo.mft (raw, json)
Hash identifier:          aF75ndI+f2KBFmsz6HgGFSRW22V6GlXLDaMzO+Ju64Q=
Subject key identifier:   73:1E:72:A4:15:EE:62:68:18:FD:D0:FD:72:50:FE:E6:6C:DC:46:8E
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       01A106931D4F9B52D1407B8D1C9E9D0D8F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
Manifest number:          1A8E
Signing time:             Sun 04 Oct 2026 11:01:06 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:06 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:06 +0000
Files and hashes:         1: 1-Qt-mvUucZQjwB8U285sYZrYHhY.roa (hash: oTz2PzT1afjZiR5FRSLxm1w+VehAPUH7fAGIbljalfQ=)
                          2: 3jVe3oWfFjGA0bFkAickXDhiBTk.roa (hash: /B1hbyZvITPy4r435troyRlK46+NdXGVMqL2hC0atuM=)
                          3: 5_iBQBq6zIjJQf33QPGrFTbwXbo.crl (hash: PWF3Hi+BUjBISa223YoA9Nr9vpuRz5Bn+tlKuvtn17s=)
                          4: Aihm1qpAzPTqrcFPKmaVyaxgJyw.roa (hash: ASIC86ud/gxlcO2WNKgZea3FlMuZAabkWgmYMbXqS2I=)
                          5: AtVTliHD-CZYx0dPfB89NgsixUc.roa (hash: o1vczZuvSO50vGvwxxhNXET7cnV4aqFg73NN+nlrpAU=)
                          6: FSTJ8w92afiSz0qI6f5cSEytc7Q.roa (hash: fXpshaRrLltZbsPZ3N9EZgWimcdFJLJ1wWhFL1Fg174=)
                          7: FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa (hash: ZBw82sV7JoPLg3uztht/b0Wxlmt7VXvzqOWzOlA1JpA=)
                          8: IZCAUD82f3i2oA0GiMqBNWsoJwI.roa (hash: SbW567nXRMDWSIGCIjwxO7prJ7rI/ygbNehL8/xOQB8=)
                          9: J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa (hash: smwtAA/DVPMUrh76xjUL7N4+Ou7I5DIwApsogoGYqpM=)
                          10: TKEpPXUpLU5W_48ie-PShvubSmQ.roa (hash: bAD0eg778WJ8W8W3//5efjy9CNKIBzk/YvQ1TCKllow=)
                          11: WSeVM2QjU-Reiz76i_drEHhLMPQ.roa (hash: Tq0+teUFn9thhFb6g4y6nyECQZVPt+G+x4oqu/NwuvY=)
                          12: YYEwV6NICNrszp0tVRq1J0qfnGI.roa (hash: iz9tuV13CkeCtkZoxWE8s2oi5wxkmx44BjW1MshohqU=)
                          13: aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa (hash: WmqoSaafVJGk4mr4QTxo1ZyjpXHkEKbLAP8ZEUygZf4=)
                          14: aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa (hash: HR+6hF6C7zyPdJci+gTa+wdqzGllr0dCtu8rPBplNRc=)
                          15: aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa (hash: 2CuFc4vVlwTqLaWvwvMaSHaDQsKrWlR1Flh9/F4Ne6Q=)
                          16: bvJT889kwtQRI_EyLLJFUKRqVAo.roa (hash: jHzzWrrncqh6D7+g/0zcqR17m3gx8mFOPKNKX2W4EsA=)
                          17: d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa (hash: nerdIRaMGszG2WfY8kmlFia43UIoriRI54MHvrKiwq4=)
                          18: eY8EusladH4IXC1CHpY8aRyUD8U.roa (hash: 8OQXGxBuu4pTDdv8FmznuoTImi4gnvUuKmWDiou3mfQ=)
                          19: fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa (hash: HtwbY/FPzHHNV/4s4iZglcvSNHEEMqFZcHSp5PQBTNs=)
                          20: gH4Vot8lA2imDuEu0OJDp6f8wvk.roa (hash: udS35O/PINSgGsNbtd6Z+QIm1IwNKG0wDm45HGhIkFE=)
                          21: gR2JJPVeOzMGupRjbCt-uE56Zos.roa (hash: R2uhlPsxDFm4cfja3sJpfXpN7boeSANpTxmZjBct7Nk=)
                          22: hKRwWCL_6CoBmk8VsIrEXY1xai4.roa (hash: uqoBEgPcDkJFQkJhnCsNAf2Gfqg03lNWyYDwn89PoDU=)
                          23: iIdAzPtCqikbah21E-K0Mm8FQ_M.roa (hash: lyzsEh3CqWMd20FxkkU5rgZbDHljJ2MjfPiA4AST0rM=)
                          24: izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa (hash: IS6iJGB8DvxnqW49lmgjGOpqUU7oBgMo/SUW8Kywe3Q=)
                          25: jwGQmxKkvoMxt0zGNzmgobrPceA.roa (hash: Q9xMi0UBmOQ6J1V4+YgTpk7VffngMdEzFI533VU3vXQ=)
                          26: q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa (hash: p6FIe/ywSMryeTPTuLflH96Yj9QNG/X6CcvV232N/OA=)
                          27: sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa (hash: 8+R1Y8MlhUsE7oDGi1CtSy7SyzfeAd5bXtWsTvzi71I=)
                          28: shCVViOjhyXvYhJ9WfX4PMvRn7k.roa (hash: FDJ+fK4TSktfpWeR1yOgVytRac6CpX/nnvsFWazb0bE=)
                          29: uFn-JtrUy_-916rFpJODXLywoCs.roa (hash: lgxlXCpi2JKwf9CxVmQdcRMsZIfnt5rxVcM6Idk5XVc=)
                          30: uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa (hash: sUSljUPkGt2IJZimoVojQH+i2T6wSTV1gkUYlZq+bz4=)
                          31: za3m6PhE_hPH-pcVQtgtjootjOk.roa (hash: STZds7jNIKyzSG0k0Vxd1saxJCfI11wgP3wf9Rn3Hkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:1d:4f:9b:52:d1:40:7b:8d:1c:9e:9d:0d:8f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Oct  4 11:01:06 2026 GMT
            Not After : Oct  5 11:01:06 2026 GMT
        Subject: CN=731e72a415ee626818fdd0fd7250fee66cdc468e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:ae:19:25:9f:7f:6d:51:7d:80:30:d3:ea:
                    88:31:97:31:0b:bd:8f:b3:5d:a9:03:b1:d9:fc:b3:
                    15:77:f8:50:ad:a6:f0:fe:bb:ba:2c:1f:99:3d:07:
                    23:6a:ca:b1:b2:f7:f8:c3:c0:ac:15:a3:86:e4:05:
                    67:5c:12:92:e3:1f:f3:6d:0d:4e:c1:13:4e:d6:0b:
                    f7:2b:7b:a2:c8:86:ff:bf:7a:b8:40:82:da:f1:2d:
                    64:b7:78:67:18:02:2f:ee:24:dd:96:16:68:a7:21:
                    7e:ea:e6:b2:27:da:16:db:8d:87:98:6e:e1:d6:ed:
                    11:2f:4a:e7:03:5e:dd:6c:95:d0:0c:5f:36:be:d4:
                    60:b7:25:2d:98:8e:ab:85:0a:5f:82:a5:01:28:6b:
                    fc:9b:db:05:5c:c3:25:71:ac:7a:71:52:be:60:f3:
                    65:8d:08:10:86:43:32:2a:34:74:21:d3:45:1f:50:
                    64:5d:3a:d8:68:3f:06:b9:68:f5:4f:2f:f2:e7:86:
                    2a:0e:f7:ea:bf:a0:b3:97:4a:90:e3:7f:b6:72:15:
                    b2:bf:86:cf:64:47:d4:3d:ca:aa:8f:de:a5:5b:87:
                    26:20:1e:6d:f3:58:a6:9a:ad:df:99:1a:92:20:77:
                    39:a3:48:44:7b:ea:8e:7a:6c:2e:39:49:8b:69:33:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1E:72:A4:15:EE:62:68:18:FD:D0:FD:72:50:FE:E6:6C:DC:46:8E
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:90:67:7e:af:8d:2f:da:21:1e:89:ab:6d:dc:ef:ea:5a:c0:
         30:25:8b:3f:cc:61:c7:14:0d:6f:1b:16:86:40:01:ef:77:ef:
         ac:16:2d:a8:22:44:59:17:d4:62:d3:07:e8:39:e5:1e:ac:4f:
         e7:20:45:1a:20:72:e1:16:8b:69:a1:43:57:4e:2f:1c:df:d1:
         d8:64:12:b1:ec:9a:7e:ac:00:bc:87:f2:8f:34:5a:e7:65:f2:
         2e:4c:86:3f:52:74:8c:5f:e0:6b:38:63:87:a3:59:06:f9:1b:
         d1:a1:27:37:5b:c7:02:f3:96:8a:2c:d6:c7:2e:31:1b:ad:a0:
         48:a2:5e:80:f1:af:14:bc:e4:16:9e:22:6e:dc:37:7f:e1:f4:
         8e:7a:67:c8:d0:62:f0:3d:ae:b7:aa:96:e7:eb:b8:ae:b0:2f:
         05:a0:da:e2:7e:1a:e1:32:e3:83:ec:0c:13:0d:d0:20:10:24:
         68:f8:94:52:76:7f:f8:0d:18:bf:a3:25:c1:6c:96:70:86:45:
         18:ad:70:7c:64:0d:ab:bd:b4:a0:39:26:36:d9:0e:f4:43:d6:
         88:99:02:eb:60:5f:f1:0f:d6:9c:10:08:35:f1:1e:ec:09:ef:
         5d:eb:b5:c2:41:4b:cf:cb:3e:f7:0b:4b:28:a2:73:99:fe:fd:
         56:41:2f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:59:35 2026 by rpki-client