Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          F5ym3bs+rqh3CG0Rx67QO2st6K4wWll3E9R2jBKhwxQ=
Subject key identifier:   F9:01:21:86:17:1C:DC:96:6F:10:E8:5A:5F:B7:04:BA:1F:71:6B:51
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       019D2996E875984648052DECA88C6AB6B836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          18C8
Signing time:             Thu 26 Mar 2026 10:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:48 +0000
Files and hashes:         1: 22npFef-j0M49cVlWvOM23fYAyU.roa (hash: 9BoQFEFFXQE63XppyCXHiu5uKpdTCmc2QeSL3Gkzz8I=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: X4+fTWX+/5vj8E9QkLDgQRprBk+ql2g38RaiBCOws3c=)
                          3: 8oxtTnvpd2_ke4zwj7aMfBhyW4A.roa (hash: 7IjKBH0yCgpHTXLTsHrNCb/Cn+6s8o46F6a2US8IQaI=)
                          4: Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa (hash: heDfoYDNIQ7bB0XJ90BIyZD9NkiqghbSq/mIzF+Kcns=)
                          5: WIrRwzNj69OGrZGZ_TIAf1zyd4Y.roa (hash: RLknk8idVnWV0ZWfG3Uyrkx5h9Sqj0kpjXqaIlzLBtU=)
                          6: ZBv-tqzx_gaItXN6I7J1hMlcTgw.roa (hash: BjULVWcZIgFcGGgq3BGplnOKV+IjQ8KEIr+LuLjISXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:e8:75:98:46:48:05:2d:ec:a8:8c:6a:b6:b8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Mar 26 10:00:48 2026 GMT
            Not After : Mar 27 10:00:48 2026 GMT
        Subject: CN=f9012186171cdc966f10e85a5fb704ba1f716b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:e7:ea:c2:73:eb:64:90:92:87:0b:5e:87:
                    b7:61:c0:8c:dc:d8:1c:bc:a2:49:b5:c5:4e:01:d4:
                    3c:70:92:c0:82:2c:15:ae:c3:f6:db:b8:62:59:61:
                    26:b1:d5:a1:a2:35:4b:59:2f:36:27:b1:2d:da:a8:
                    0c:cb:8d:52:46:ff:e2:a7:f2:79:2d:ff:92:5f:f7:
                    d0:fa:09:b2:ed:1c:3d:af:6b:4e:a4:86:5a:5c:34:
                    6d:74:65:6c:b3:39:c9:10:42:ab:6f:8c:04:e6:63:
                    4f:72:b6:14:7f:fa:52:3b:5d:55:9c:ee:7a:dd:80:
                    bf:61:9d:c9:32:85:8d:cc:96:9e:a3:21:82:ca:90:
                    56:ee:47:4b:90:0b:13:12:61:25:af:2b:f5:52:87:
                    66:a0:ef:ed:53:d3:77:60:69:ed:53:55:5d:3a:3f:
                    e2:e2:4d:09:5d:c8:47:1c:d6:f4:6d:10:d4:73:ad:
                    f5:9e:06:cb:9f:30:24:60:2c:60:ac:3e:ff:e6:b1:
                    28:a7:3b:51:80:5d:64:ca:83:40:86:32:98:bd:8a:
                    2b:b7:f7:fe:3b:58:24:5a:62:d2:3c:8b:13:02:43:
                    97:80:66:a6:f5:1a:ac:75:8e:21:a2:a0:57:c7:6c:
                    28:28:0d:0c:f8:08:43:60:af:cc:61:65:f9:16:b2:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:01:21:86:17:1C:DC:96:6F:10:E8:5A:5F:B7:04:BA:1F:71:6B:51
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e7:10:ac:dc:d9:77:50:22:0c:f6:ae:58:4a:ae:33:95:10:
         4b:0f:5e:d9:7c:8a:20:e9:0f:fa:e2:fc:f9:91:aa:6f:f6:c7:
         b2:11:dd:74:50:95:1a:c0:98:fe:84:6d:1f:87:fb:a2:52:18:
         5f:28:80:60:da:48:15:4a:03:31:c7:ff:ac:a4:f8:7a:b0:72:
         93:a2:90:2d:e8:49:43:04:cc:f7:9c:57:40:86:65:66:4a:57:
         43:64:ce:06:7b:fe:fb:07:bf:59:94:42:6b:5f:ff:44:a7:60:
         b7:3b:50:41:ef:50:e0:ae:83:7f:ac:d7:94:94:da:43:2e:3b:
         ce:ce:f2:09:84:8a:16:85:5f:44:ea:3c:06:f3:98:5c:b1:f9:
         f2:6e:72:1e:b8:da:b0:b4:ce:2f:4c:ba:58:7d:32:d0:f0:aa:
         f8:fd:92:85:46:e5:db:3d:b8:0f:32:3f:77:3d:02:fc:ee:ef:
         52:8e:13:fd:a3:cc:8d:22:57:9e:aa:5d:f9:43:17:36:70:9d:
         4c:84:63:70:49:2d:9b:8c:07:9a:bb:7d:70:22:e0:e5:98:bd:
         44:88:74:2d:da:60:1e:8e:2b:06:ed:93:e5:d4:18:60:6f:a0:
         d5:e8:38:c0:a3:fe:ff:1c:2f:0d:f7:54:b7:05:b6:9b:fb:fc:
         1f:f1:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:08 2026 by rpki-client