Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          qvUoLqUbr9t6gl8/YwShmW/ZUG9C1e3+ATIcxMsqMSg=
Subject key identifier:   DA:39:55:57:1A:3B:20:4B:AC:C9:43:32:A2:37:DD:88:A9:D7:A5:BD
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       01A1938D63395307D744908549E4B034A3C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          15AF
Signing time:             Sat 31 Oct 2026 20:01:19 +0000
Manifest this update:     Sat 31 Oct 2026 20:01:19 +0000
Manifest next update:     Sun 01 Nov 2026 20:01:19 +0000
Files and hashes:         1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: y9B2D8BDSvvwn4TbaODdCww5cw+krivaQlBiVwqBGWs=)
                          3: CtJ8OGkCaahCczfwEJKIo0Vg19E.roa (hash: G04Zndcd1iRvLKPAv2hVCE6UogK1m2W2eJhOAaju7+8=)
                          4: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
                          5: USEPBHpqlx_XhdJIjFaq2E1rxpo.roa (hash: IDc0jBtTqxBXwgVMv5r54C62fX+GgOwm0EOTKthoyUI=)
                          6: _vpq-qi4EQKFfckyOrU1g_mLI6k.roa (hash: NEepCH4VA5uYtx4dkADmgFVyzmZ4nNQxuJCHt+PP3M8=)
                          7: f_xKmFrmjIA78qUIL0QMNJGgKEk.roa (hash: C5FX/w2liydb0eZpv86Rq1hmajGY3P2SktyNH3juuk4=)
                          8: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
                          9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 17:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:8d:63:39:53:07:d7:44:90:85:49:e4:b0:34:a3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Oct 31 20:01:19 2026 GMT
            Not After : Nov  1 20:01:19 2026 GMT
        Subject: CN=da3955571a3b204bacc94332a237dd88a9d7a5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:15:74:f7:c3:55:a7:48:5f:51:09:54:0f:
                    f8:85:bf:1b:cb:cc:fd:23:80:e7:34:c8:de:a0:be:
                    9b:ed:bf:40:84:25:90:f0:98:b6:92:ba:e7:67:96:
                    b1:21:62:bd:60:bc:cd:40:9f:1b:93:83:73:3d:a8:
                    2a:4c:9c:2c:c9:79:54:0a:33:2f:73:84:2a:e8:77:
                    cc:b0:9f:10:21:f8:c1:65:ed:97:2f:5e:1a:58:b1:
                    00:57:20:ac:28:8c:c8:68:2c:45:34:26:36:fb:8a:
                    6e:d7:b9:a7:3a:84:a5:8e:43:6d:95:d0:7f:27:8e:
                    62:13:6b:b0:80:4e:96:d3:c1:7d:52:fb:92:2a:03:
                    db:a2:69:0e:c0:ab:1d:9d:b2:ef:bc:e9:1a:1c:83:
                    46:a1:f7:7d:5c:78:7c:5f:de:99:40:83:63:7b:a6:
                    71:6a:33:13:98:e6:66:8a:f6:2e:11:00:ee:f3:ab:
                    9b:c5:d9:20:00:34:f2:99:ab:47:f5:60:e0:a5:02:
                    da:59:50:db:f0:95:73:9f:45:e0:3a:e1:fa:56:43:
                    49:fe:c8:2f:25:ba:bc:4a:dc:3f:af:5f:3f:fe:7f:
                    42:9c:bd:22:6d:92:0c:db:af:df:b2:80:bc:74:35:
                    9a:ec:b6:62:d2:1f:3a:69:3a:ea:8a:68:76:c5:52:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:39:55:57:1A:3B:20:4B:AC:C9:43:32:A2:37:DD:88:A9:D7:A5:BD
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:41:98:66:f8:87:cc:18:a5:59:12:01:04:56:56:eb:7b:98:
         4d:5b:5f:39:4f:09:d3:44:90:fd:3e:2b:a5:56:e2:35:1c:5f:
         fe:17:1b:60:5e:b6:ae:85:46:d0:03:14:e4:41:da:43:de:4f:
         fd:d4:73:e9:00:9a:37:89:af:ef:a0:e5:75:0a:82:85:6c:55:
         f3:0b:0a:c2:92:40:8a:7c:6d:f6:60:50:c3:09:b1:fa:b3:14:
         92:4e:80:b7:3b:08:d5:b0:3a:4c:35:0f:cf:be:b8:8b:a3:08:
         d2:71:3c:5e:38:1d:58:80:8f:3b:76:bc:07:4f:df:d0:a7:1a:
         69:6c:53:74:b5:34:f7:d8:35:64:fb:1d:c5:dc:e3:03:32:51:
         51:77:4a:39:c0:a4:29:87:fc:e4:d4:0c:db:35:97:5f:6e:db:
         e2:87:d6:93:87:43:2b:b3:54:a5:b4:48:6c:52:cf:94:af:b5:
         65:fc:c5:69:8d:c8:70:db:ad:82:01:2e:be:a4:0f:00:bb:da:
         d5:2c:42:f5:b2:21:a4:de:89:a4:5f:b8:3e:54:3a:37:02:ea:
         ad:e5:be:02:5c:76:55:1a:a4:75:86:46:ea:f3:6a:25:b5:da:
         55:35:02:eb:75:c6:3f:cd:a7:3c:7c:8e:49:9c:0c:3a:54:96:
         39:12:3a:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGTjWM5UwfXRJCFSeSwNKPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjYxMDMxMjAwMTE5WhcNMjYxMTAxMjAwMTE5WjAzMTEwLwYDVQQD
EyhkYTM5NTU1NzFhM2IyMDRiYWNjOTQzMzJhMjM3ZGQ4OGE5ZDdhNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt94VdPfDVadIX1EJVA/4hb8by8z9
I4DnNMjeoL6b7b9AhCWQ8Ji2krrnZ5axIWK9YLzNQJ8bk4NzPagqTJwsyXlUCjMv
c4Qq6HfMsJ8QIfjBZe2XL14aWLEAVyCsKIzIaCxFNCY2+4pu17mnOoSljkNtldB/
J45iE2uwgE6W08F9UvuSKgPbomkOwKsdnbLvvOkaHINGofd9XHh8X96ZQINje6Zx
ajMTmOZmivYuEQDu86ubxdkgADTymatH9WDgpQLaWVDb8JVzn0XgOuH6VkNJ/sgv
Jbq8Stw/r18//n9CnL0ibZIM26/fsoC8dDWa7LZi0h86aTrqimh2xVLyVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo5VVcaOyBLrMlDMqI33Yip16W9MB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUGYZviH
zBilWRIBBFZW63uYTVtfOU8J00SQ/T4rpVbiNRxf/hcbYF62roVG0AMU5EHaQ95P
/dRz6QCaN4mv76DldQqChWxV8wsKwpJAinxt9mBQwwmx+rMUkk6AtzsI1bA6TDUP
z764i6MI0nE8XjgdWICPO3a8B0/f0KcaaWxTdLU099g1ZPsdxdzjAzJRUXdKOcCk
KYf85NQM2zWXX27b4ofWk4dDK7NUpbRIbFLPlK+1ZfzFaY3IcNutggEuvqQPALva
1SxC9bIhpN6JpF+4PlQ6NwLqreW+Alx2VRqkdYZG6vNqJbXaVTUC63XGP82nPHyO
SZwMOlSWORI6RA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:35 2026 by rpki-client