Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          g54nWl9aG/8pcoHLIRUJCKbSQKKgZb+WD41KF2RDKvM=
Subject key identifier:   A6:4A:40:9E:74:C5:A5:C9:99:E7:67:0F:11:9D:3A:58:B1:D4:7A:F3
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       01A13D13CB2C12AE6BF4B9AF3CC6114FF661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          15E7
Signing time:             Thu 15 Oct 2026 01:01:09 +0000
Manifest this update:     Thu 15 Oct 2026 01:01:09 +0000
Manifest next update:     Fri 16 Oct 2026 01:01:09 +0000
Files and hashes:         1: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: rDZmw+PGAtSwan/TuiGZ7zFCW4A0hNFO6BLLALm5hb0=)
                          2: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (hash: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0=)
                          3: GJZc_gLiiRe7OqjNr9x1ky7xXpg.roa (hash: 8nJXVrKq22+Fo+U1/ucjOBB+qvYDFNRUhH11zvrhaPE=)
                          4: kqPwo-tGhdHXOEYZAA2rZ5T34g4.roa (hash: 4MUqRPaEDTzgXrU6Y0k0IEZ7T2M+taIszXucXEvAMGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:cb:2c:12:ae:6b:f4:b9:af:3c:c6:11:4f:f6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Oct 15 01:01:09 2026 GMT
            Not After : Oct 16 01:01:09 2026 GMT
        Subject: CN=a64a409e74c5a5c999e7670f119d3a58b1d47af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:de:c0:bf:52:37:07:58:12:b6:ad:20:12:
                    98:05:d3:c2:23:90:ee:14:d4:8b:49:c2:11:d0:f8:
                    6d:cd:ea:44:09:b6:b4:99:6b:a3:4e:1a:57:39:6a:
                    c8:64:af:43:ce:e1:16:3f:8f:f9:b9:c8:d3:b9:af:
                    5e:eb:1c:99:15:b4:e3:d0:39:6c:d5:02:52:2c:ae:
                    37:a1:af:85:9d:7e:c4:3b:f5:1c:db:f7:c1:2c:01:
                    e9:04:4b:74:5e:40:f4:d4:83:5c:24:df:c9:10:31:
                    ab:a7:4a:63:14:9c:15:c0:88:bb:f1:7e:53:42:a1:
                    85:8d:c4:c5:59:9b:d5:11:1c:de:39:54:ee:47:15:
                    1e:8e:ec:4d:24:b4:74:c8:c7:c9:3d:b1:65:01:7f:
                    2c:65:48:73:e3:e4:e6:a8:34:a0:cc:ad:d2:24:5b:
                    b4:b9:b8:d2:ce:09:aa:d8:65:d7:4f:3a:94:ce:76:
                    1a:d1:7c:7f:22:d5:b1:c3:b6:c8:61:f5:f0:3e:70:
                    a7:95:47:93:ec:5a:c4:57:f5:41:5c:5d:38:ce:0e:
                    48:fa:64:e9:ec:16:48:19:37:e6:32:10:fe:b6:8e:
                    de:98:89:d9:60:07:e9:92:75:94:e3:a9:60:fd:c9:
                    16:2a:43:a0:ce:18:fd:4c:64:41:eb:46:9e:4d:29:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:40:9E:74:C5:A5:C9:99:E7:67:0F:11:9D:3A:58:B1:D4:7A:F3
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:13:9b:34:48:a2:82:01:cd:dc:f1:ff:ea:ca:25:4f:f5:8e:
         ed:8a:94:f7:27:c4:23:77:a5:07:3b:71:c3:cc:8c:8e:f5:5e:
         55:1d:fc:e5:1e:f7:a6:f1:38:f2:1b:7a:6f:4f:a6:f8:6c:55:
         38:d0:2e:9d:85:69:20:66:f9:40:2a:53:39:ad:67:27:f9:c1:
         2f:e6:81:1a:12:02:7f:c2:2f:83:12:dc:64:00:99:c1:21:61:
         03:b6:26:56:02:29:76:36:b7:3f:39:35:58:6e:49:ce:94:28:
         53:e5:8a:20:ec:b9:3e:01:0d:a8:d4:33:a6:f1:77:27:7f:d4:
         f8:cf:62:4c:a0:c8:25:b3:86:d3:55:34:ea:78:d0:fb:1e:e6:
         41:a1:f1:de:34:f7:b2:97:ae:2e:c9:44:7a:9f:54:c4:d5:a1:
         ab:d5:da:2d:59:36:3f:41:66:4f:25:7c:db:16:2e:a7:91:80:
         b0:3d:7f:1b:74:7c:a1:f0:9b:ea:42:d9:a0:57:d0:7f:c4:62:
         eb:9c:99:11:48:ba:c5:bb:da:4e:92:84:c9:83:2a:92:cb:5a:
         1d:55:d1:b3:c2:b6:d9:50:38:d9:dd:30:06:da:c6:30:7f:25:
         0a:96:6b:a7:08:d4:4d:32:1d:1b:37:93:c0:3d:b1:9a:00:f5:
         78:cc:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:38 2026 by rpki-client