Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          dbCZlbtsg+jKhaV5qzA6RVnEIwBiDd+UX7vYzeZt9Gk=
Subject key identifier:   E6:52:BD:39:D9:75:C7:84:17:43:DF:D2:44:E2:B0:DA:98:6C:DB:9A
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       01A143BA4E073945C807F65F61AEE5B4CB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          12C6
Signing time:             Fri 16 Oct 2026 08:00:45 +0000
Manifest this update:     Fri 16 Oct 2026 08:00:45 +0000
Manifest next update:     Sat 17 Oct 2026 08:00:45 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: ErFQi/l5cQe5q+o6jrrauk2Cxv9FYioyuzqD+QpEdOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:ba:4e:07:39:45:c8:07:f6:5f:61:ae:e5:b4:cb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Oct 16 08:00:45 2026 GMT
            Not After : Oct 17 08:00:45 2026 GMT
        Subject: CN=e652bd39d975c7841743dfd244e2b0da986cdb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:59:46:e8:08:84:ea:b6:54:d9:f6:8f:7e:
                    35:86:c2:61:ba:5e:dd:9a:a8:f9:94:cf:ba:19:57:
                    9c:03:f1:62:e4:8f:15:a4:ea:ac:83:26:b5:e7:9f:
                    fd:26:de:5f:f2:45:a4:a8:18:35:ea:89:3f:78:77:
                    20:ff:cb:c1:e4:65:06:1e:31:f3:e6:e8:14:1d:7e:
                    6d:8b:ca:db:9f:3f:f4:2e:c6:c5:6d:56:a9:7f:88:
                    5d:d7:bb:32:fd:01:14:4f:b7:87:96:95:ed:b7:a5:
                    ee:ab:62:d3:6a:83:85:56:c6:a4:e5:1f:11:1b:3b:
                    e0:0d:56:09:28:48:d0:c5:0a:99:0c:84:3f:92:0c:
                    6b:65:76:34:61:2f:bd:6a:b6:37:b5:5c:97:2b:4f:
                    f1:0a:29:1f:ca:9a:71:9b:99:9b:37:39:78:f7:25:
                    e3:98:4c:9c:8c:4a:b1:9e:bf:dd:6c:e5:14:59:9c:
                    e3:e0:97:4b:c6:00:a6:75:cb:07:ee:62:d6:a1:76:
                    82:79:54:11:9a:73:55:19:86:d0:02:f7:6f:af:5d:
                    ca:d2:08:8d:8a:5e:af:7d:c6:f0:73:eb:82:dd:31:
                    46:ed:22:2f:35:1e:5b:c0:0b:cc:13:17:5d:69:b3:
                    b3:a9:8c:0c:ff:ea:e5:57:31:b1:b5:42:b8:cb:6b:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:BD:39:D9:75:C7:84:17:43:DF:D2:44:E2:B0:DA:98:6C:DB:9A
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:43:eb:b4:9c:d5:b3:8f:a7:6a:a7:7d:e8:19:94:e7:98:7e:
         94:11:04:ab:73:1b:0a:2b:b7:3d:fd:de:38:6a:59:26:ca:74:
         b5:a1:12:8d:78:54:c8:fc:1e:12:96:1a:ec:18:b2:d1:32:ca:
         8d:c8:06:e6:e5:e6:38:96:6d:c9:34:e9:7c:7f:06:d7:40:eb:
         59:8e:73:67:de:e4:df:04:0c:b1:77:41:d2:65:22:cc:cf:5c:
         52:92:a9:ba:72:e8:c1:d9:39:c8:88:4c:94:7c:7e:cc:22:94:
         49:91:20:9c:1d:55:08:7b:69:ab:76:a5:ad:e5:16:d5:06:f2:
         12:2e:b4:54:60:5b:73:75:78:03:60:90:d5:0a:7a:e8:a4:8e:
         9c:71:d0:11:96:99:8b:08:71:a2:b4:1a:f1:1c:9e:ad:e6:95:
         b5:f6:28:08:26:03:26:a6:bd:66:fa:a0:81:e5:c2:f5:63:ce:
         43:8c:86:e2:21:b7:b6:21:27:f0:43:b9:2c:75:71:a0:6d:25:
         6c:3d:04:94:a7:b7:7d:00:92:80:5c:2d:91:f4:57:93:c2:89:
         4b:82:3f:23:33:c2:dc:7e:33:ef:8e:ef:ae:9c:5d:8e:91:a4:
         23:d8:97:9e:d0:a6:76:72:13:22:44:8c:50:ba:f8:13:0a:ab:
         67:17:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:23:39 2026 by rpki-client