Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
File:                     5_iBQBq6zIjJQf33QPGrFTbwXbo.mft (raw, json)
Hash identifier:          T0p9/+r/RPWLjkEkntwCFx6hvb4F0M5NyuLL8+Uc49s=
Subject key identifier:   A5:2C:7C:92:51:2B:72:F0:7F:58:DB:42:39:3C:9A:0F:DB:94:7E:5E
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       019D25F15C141ADB41441C69AEFB6861E748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 17:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:07 +0000
Files and hashes:         1: 1-Qt-mvUucZQjwB8U285sYZrYHhY.roa (hash: oTz2PzT1afjZiR5FRSLxm1w+VehAPUH7fAGIbljalfQ=)
                          2: 3jVe3oWfFjGA0bFkAickXDhiBTk.roa (hash: /B1hbyZvITPy4r435troyRlK46+NdXGVMqL2hC0atuM=)
                          3: 5_iBQBq6zIjJQf33QPGrFTbwXbo.crl (hash: k+BwEbHvyHs/pWphUZHYGkylD7M4jfe7HZW3/exV6a8=)
                          4: Aihm1qpAzPTqrcFPKmaVyaxgJyw.roa (hash: ASIC86ud/gxlcO2WNKgZea3FlMuZAabkWgmYMbXqS2I=)
                          5: AtVTliHD-CZYx0dPfB89NgsixUc.roa (hash: o1vczZuvSO50vGvwxxhNXET7cnV4aqFg73NN+nlrpAU=)
                          6: FSTJ8w92afiSz0qI6f5cSEytc7Q.roa (hash: fXpshaRrLltZbsPZ3N9EZgWimcdFJLJ1wWhFL1Fg174=)
                          7: FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa (hash: ZBw82sV7JoPLg3uztht/b0Wxlmt7VXvzqOWzOlA1JpA=)
                          8: IZCAUD82f3i2oA0GiMqBNWsoJwI.roa (hash: SbW567nXRMDWSIGCIjwxO7prJ7rI/ygbNehL8/xOQB8=)
                          9: J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa (hash: smwtAA/DVPMUrh76xjUL7N4+Ou7I5DIwApsogoGYqpM=)
                          10: TKEpPXUpLU5W_48ie-PShvubSmQ.roa (hash: bAD0eg778WJ8W8W3//5efjy9CNKIBzk/YvQ1TCKllow=)
                          11: WSeVM2QjU-Reiz76i_drEHhLMPQ.roa (hash: Tq0+teUFn9thhFb6g4y6nyECQZVPt+G+x4oqu/NwuvY=)
                          12: YYEwV6NICNrszp0tVRq1J0qfnGI.roa (hash: iz9tuV13CkeCtkZoxWE8s2oi5wxkmx44BjW1MshohqU=)
                          13: aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa (hash: WmqoSaafVJGk4mr4QTxo1ZyjpXHkEKbLAP8ZEUygZf4=)
                          14: aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa (hash: HR+6hF6C7zyPdJci+gTa+wdqzGllr0dCtu8rPBplNRc=)
                          15: aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa (hash: 2CuFc4vVlwTqLaWvwvMaSHaDQsKrWlR1Flh9/F4Ne6Q=)
                          16: bvJT889kwtQRI_EyLLJFUKRqVAo.roa (hash: jHzzWrrncqh6D7+g/0zcqR17m3gx8mFOPKNKX2W4EsA=)
                          17: d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa (hash: nerdIRaMGszG2WfY8kmlFia43UIoriRI54MHvrKiwq4=)
                          18: eY8EusladH4IXC1CHpY8aRyUD8U.roa (hash: 8OQXGxBuu4pTDdv8FmznuoTImi4gnvUuKmWDiou3mfQ=)
                          19: fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa (hash: HtwbY/FPzHHNV/4s4iZglcvSNHEEMqFZcHSp5PQBTNs=)
                          20: gH4Vot8lA2imDuEu0OJDp6f8wvk.roa (hash: udS35O/PINSgGsNbtd6Z+QIm1IwNKG0wDm45HGhIkFE=)
                          21: gR2JJPVeOzMGupRjbCt-uE56Zos.roa (hash: R2uhlPsxDFm4cfja3sJpfXpN7boeSANpTxmZjBct7Nk=)
                          22: hKRwWCL_6CoBmk8VsIrEXY1xai4.roa (hash: uqoBEgPcDkJFQkJhnCsNAf2Gfqg03lNWyYDwn89PoDU=)
                          23: iIdAzPtCqikbah21E-K0Mm8FQ_M.roa (hash: lyzsEh3CqWMd20FxkkU5rgZbDHljJ2MjfPiA4AST0rM=)
                          24: izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa (hash: IS6iJGB8DvxnqW49lmgjGOpqUU7oBgMo/SUW8Kywe3Q=)
                          25: jwGQmxKkvoMxt0zGNzmgobrPceA.roa (hash: Q9xMi0UBmOQ6J1V4+YgTpk7VffngMdEzFI533VU3vXQ=)
                          26: q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa (hash: p6FIe/ywSMryeTPTuLflH96Yj9QNG/X6CcvV232N/OA=)
                          27: sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa (hash: 8+R1Y8MlhUsE7oDGi1CtSy7SyzfeAd5bXtWsTvzi71I=)
                          28: shCVViOjhyXvYhJ9WfX4PMvRn7k.roa (hash: FDJ+fK4TSktfpWeR1yOgVytRac6CpX/nnvsFWazb0bE=)
                          29: uFn-JtrUy_-916rFpJODXLywoCs.roa (hash: lgxlXCpi2JKwf9CxVmQdcRMsZIfnt5rxVcM6Idk5XVc=)
                          30: uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa (hash: sUSljUPkGt2IJZimoVojQH+i2T6wSTV1gkUYlZq+bz4=)
                          31: za3m6PhE_hPH-pcVQtgtjootjOk.roa (hash: STZds7jNIKyzSG0k0Vxd1saxJCfI11wgP3wf9Rn3Hkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:5c:14:1a:db:41:44:1c:69:ae:fb:68:61:e7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Mar 25 17:01:07 2026 GMT
            Not After : Mar 26 17:01:07 2026 GMT
        Subject: CN=a52c7c92512b72f07f58db42393c9a0fdb947e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:3e:9a:f2:20:46:2e:be:ec:c6:d0:d0:80:
                    12:08:54:db:35:16:d0:d9:96:45:cb:8f:f5:0b:50:
                    93:db:50:3c:87:43:03:b8:55:a8:ad:45:e0:c4:b0:
                    a6:4a:57:b8:0d:4a:08:62:3c:c9:9d:12:5f:6c:2a:
                    64:be:f4:7c:3e:c2:ec:c8:7c:de:27:7e:25:1b:89:
                    a4:e1:2b:5d:4d:cc:6f:07:fa:ab:f2:10:45:5d:a6:
                    fe:12:05:5b:f1:e5:34:16:bf:f0:fd:57:22:dc:f3:
                    cb:ce:44:9f:05:b6:47:78:b7:1b:e3:67:2d:bf:d3:
                    97:fa:7f:31:0b:68:07:b3:ce:42:39:51:d4:b3:47:
                    d7:32:d1:eb:ca:eb:57:a0:97:cd:f0:b1:6a:91:8a:
                    5f:97:0b:c0:d2:af:46:b4:6e:c4:70:f2:de:32:41:
                    77:65:31:3d:98:ce:b7:fc:de:f4:6f:0b:07:ea:43:
                    63:1e:6a:ae:b1:ef:ef:eb:c7:66:f0:18:a8:07:8d:
                    c0:84:33:10:07:d9:fa:25:f6:21:f1:02:b8:e0:cc:
                    2f:c6:ff:f4:42:7d:07:39:dd:28:c5:02:d7:90:f0:
                    9d:6e:31:55:88:7c:e7:47:8d:8d:07:26:f3:62:5a:
                    9f:5f:40:65:b2:13:80:a1:4e:0f:9b:d8:63:4c:67:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2C:7C:92:51:2B:72:F0:7F:58:DB:42:39:3C:9A:0F:DB:94:7E:5E
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:02:31:87:95:83:5a:7d:fc:c2:94:28:1c:91:91:93:8d:66:
         6e:30:04:7f:5b:98:f3:8f:50:bf:13:01:cd:ca:69:05:66:d4:
         95:7e:ed:5f:fc:6f:76:3c:8f:03:53:0c:39:21:b4:a5:3d:ea:
         7e:c7:32:b3:8d:ae:67:1f:29:65:50:4b:60:56:71:09:80:4b:
         fb:b3:48:2f:ff:c8:de:24:fa:93:b3:fe:38:5a:bd:dd:80:df:
         cc:76:e3:d8:ef:da:84:5b:11:21:d8:68:e4:75:9e:cb:dc:64:
         93:b3:aa:53:01:b3:59:91:9d:39:dc:7b:76:bf:8c:88:f5:ac:
         02:6a:72:e9:24:43:64:74:38:76:eb:68:13:f4:35:9c:68:0d:
         6b:06:f2:00:a1:b2:bc:8b:0b:27:89:fd:b7:10:3d:38:bb:9a:
         92:ac:eb:e4:f6:87:a8:63:60:cd:f3:c8:66:2a:0e:e0:9a:49:
         c3:4d:17:a6:74:55:64:ae:f7:dc:e8:3c:c2:80:ee:60:1f:b4:
         36:b5:c4:68:8e:eb:9a:fc:cd:6c:c6:31:e8:18:a7:84:eb:33:
         ff:cd:c3:e5:24:97:8c:fb:ce:b6:41:d3:5c:b9:c3:6e:4a:cd:
         7f:10:c0:71:10:bc:20:4f:c3:8f:4d:12:c7:d8:21:b1:af:74:
         e6:eb:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:52:41 2026 by rpki-client