Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          xAlq41Tg5vieYb166EP6edwO/IQdIGsC2gWeW8UfET8=
Subject key identifier:   2E:AD:07:51:C5:F2:91:0A:8B:74:67:FC:80:9E:99:FA:98:26:7C:F3
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       01A08AFA8A39B992285913703DE3457E3F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          1526
Signing time:             Thu 10 Sep 2026 11:01:10 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:10 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:10 +0000
Files and hashes:         1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: bRFKwxgc9YQP4+IJ1DkedtlQj89dtMn9uk1E2fSXXOA=)
                          3: CtJ8OGkCaahCczfwEJKIo0Vg19E.roa (hash: G04Zndcd1iRvLKPAv2hVCE6UogK1m2W2eJhOAaju7+8=)
                          4: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
                          5: _vpq-qi4EQKFfckyOrU1g_mLI6k.roa (hash: NEepCH4VA5uYtx4dkADmgFVyzmZ4nNQxuJCHt+PP3M8=)
                          6: axnm0HQRmG8rizfv82dyns0e2_8.roa (hash: aV50CPhaYK3yIWcd+/HLRX9TlneZUNpfM8fhreah7uM=)
                          7: f_xKmFrmjIA78qUIL0QMNJGgKEk.roa (hash: C5FX/w2liydb0eZpv86Rq1hmajGY3P2SktyNH3juuk4=)
                          8: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
                          9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:8a:39:b9:92:28:59:13:70:3d:e3:45:7e:3f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Sep 10 11:01:10 2026 GMT
            Not After : Sep 11 11:01:10 2026 GMT
        Subject: CN=2ead0751c5f2910a8b7467fc809e99fa98267cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:e7:df:62:a8:be:57:3f:b5:2b:14:f2:12:
                    88:a8:93:6c:a3:74:68:21:80:42:18:01:3e:f4:14:
                    74:83:2f:be:38:e7:12:1c:ad:ff:c7:71:ef:94:ee:
                    9a:5e:86:1b:5d:31:a3:d4:6b:cf:74:84:c0:ca:33:
                    2d:0a:e4:41:f4:7b:f2:45:e7:43:d0:67:e8:55:b2:
                    11:6a:cd:c2:79:46:38:6e:48:b5:f2:44:9a:35:b7:
                    9f:3a:2c:ee:4e:73:c8:2a:25:c0:d3:19:60:75:c3:
                    9a:24:1d:ec:9d:cf:24:e9:14:9b:8e:75:64:f7:ea:
                    4c:24:dd:a4:08:d6:7d:e1:bc:67:3e:3d:54:52:87:
                    b4:24:79:c9:9d:85:d3:9c:1b:f1:a7:71:bf:7a:c2:
                    3e:56:f3:86:8f:53:c2:b3:3c:c5:7b:61:9c:a8:ea:
                    be:54:b8:f6:9c:37:c9:0a:ba:38:b1:10:d9:e2:6e:
                    69:81:87:ac:34:8f:7a:31:e8:e0:29:57:91:fd:65:
                    39:b2:73:70:fe:2c:bd:87:51:3a:78:7b:b7:4e:9b:
                    f9:39:8f:c1:1a:1d:8d:51:a4:ed:71:5a:eb:03:13:
                    f1:0a:30:ba:b5:56:8a:cd:4a:44:d0:ab:63:7f:68:
                    31:77:ed:dd:9b:37:39:f0:fa:ff:a5:1d:d3:b2:c7:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AD:07:51:C5:F2:91:0A:8B:74:67:FC:80:9E:99:FA:98:26:7C:F3
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:0d:58:a5:20:bd:01:d0:ab:b4:20:a6:53:19:be:d6:bd:
         bc:6e:bf:4a:af:60:9e:ab:ff:40:8d:bd:96:f3:85:e0:3b:54:
         ff:d4:01:07:75:de:ff:b9:8b:be:d8:95:b4:ff:6f:8c:1c:5f:
         3b:5b:e1:fd:79:ad:af:7a:ec:b7:e9:36:31:7d:9c:66:39:90:
         1a:de:11:54:a4:21:6a:de:8c:35:9d:58:9c:9b:a0:ba:3d:17:
         4d:f8:18:1d:67:d1:c0:86:cd:68:df:bc:a4:9c:3a:b3:26:c1:
         c6:05:3c:1f:38:76:86:40:d2:71:95:0f:81:05:78:1e:8a:e5:
         0a:db:60:9f:c3:72:df:35:e6:b3:0c:d3:af:68:74:50:e1:96:
         ba:ea:6f:a6:a1:99:98:0d:c8:0b:61:03:9c:c2:65:56:2b:e2:
         c7:bd:81:95:72:11:36:b6:14:7c:2a:37:9e:a0:41:2d:d2:37:
         be:13:ca:54:59:c3:3c:53:81:12:49:02:71:3c:bd:18:28:75:
         37:32:64:12:6b:43:70:39:a3:d5:ae:ce:02:3f:d2:62:75:31:
         d3:59:04:f8:29:af:56:da:e5:7e:1f:4b:29:b4:df:ce:2e:89:
         14:4f:56:db:20:f9:12:28:87:26:89:0d:bf:b0:f3:2c:57:df:
         bf:ae:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:52:32 2026 by rpki-client