Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
File:                     5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json)
Hash identifier:          DxRwJW9lOLsWxuyUDHek0vnWP8WCjw/fA1yLho61x8o=
Subject key identifier:   F7:5D:50:DF:3E:F8:9E:F6:9F:53:85:6D:34:A3:6D:26:23:A2:49:14
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       01A0CCA31AB3EAEE7C90BF5BF5021585C0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
Manifest number:          1A7E
Signing time:             Wed 23 Sep 2026 05:00:36 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:36 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:36 +0000
Files and hashes:         1: 1yFoGNscUr4CLW6dqLRm33BUYvg.roa (hash: JRIdLqy0jettzG16H9R0buawd/EdTcCwurGOVeJ4no4=)
                          2: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: qqIUgIo1/CCrtbbNoTRirPT3Ezdi/7ucVZ7wTUYCWls=)
                          3: 7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa (hash: q1b4P2s3t9bFP69gx0VvlkJ2k9wbhF00vIOXxyF0Vvc=)
                          4: 7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa (hash: v9zlg7kFGnsHSQNcetbSYedV3Coh51JEiDo9qlPpjd0=)
                          5: Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa (hash: UXNLfN4yk/bOhc93qSx+KAzobQ1bu0Nj3leNruG+aAI=)
                          6: RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa (hash: LRdALHDMlvzEn3Mzy4S60miqNChz9RLJWshvg3Evc1c=)
                          7: RSoSsFPa67XJSU_rYMFvnteNoQk.roa (hash: EJat0fz8NMFL7YZfeXLEntqwJOOPR75hReV0Lx+zuHc=)
                          8: RZbOGzmRLKUkDrECsvD-FTI72cc.roa (hash: Fab+2t5Dd13ANxnSLzfHbZtJxR4520ho/Mfi1jtgezI=)
                          9: WahD60c8L22Ycb_BALwXUk0StuA.roa (hash: EVO53sqtSZqWFofeupHa94Am0ZrXjRJrcXXcGrDKcaU=)
                          10: __bescsDyAwNYJKFrHMgdDKxm34.roa (hash: ACM4zhp6ticayTpOrFeCe1H0xbn/X4/ekQ3eaJIxNvI=)
                          11: aBBjIklmYlMWX-vmbHGnuwsWD2M.roa (hash: +tC+W98mtUX2QstLidBAPcpltrAwZl6PNr50mq8krSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:1a:b3:ea:ee:7c:90:bf:5b:f5:02:15:85:c0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Sep 23 05:00:36 2026 GMT
            Not After : Sep 24 05:00:36 2026 GMT
        Subject: CN=f75d50df3ef89ef69f53856d34a36d2623a24914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:ca:7f:4b:1c:fd:5f:cf:52:7e:3e:4a:49:
                    ae:9a:48:2c:f4:4d:95:80:35:28:40:d1:76:b6:79:
                    73:4c:3d:39:1a:d4:a0:e2:1f:c1:65:ed:12:09:a5:
                    23:7b:d1:69:ce:e0:c7:08:fa:89:9b:69:2f:9e:c3:
                    b4:7c:09:87:23:82:db:08:d8:ec:06:9a:81:ac:72:
                    48:52:6f:25:9b:66:7d:01:df:5a:12:2e:c1:57:db:
                    c9:b3:9c:d3:d1:a8:eb:f3:47:25:84:06:92:24:82:
                    be:28:e9:6a:2e:e9:2a:e4:28:5b:18:08:50:ce:97:
                    74:61:a3:74:56:58:0c:46:2d:a0:e7:c8:f6:6d:d1:
                    f0:1e:06:75:3d:14:96:4a:49:2f:4e:5e:04:2b:34:
                    2c:e9:2d:1f:da:15:0d:35:18:f0:fb:f1:93:d6:fb:
                    9d:f1:81:80:5a:ee:21:67:e5:f9:96:4c:53:97:ec:
                    8f:46:b1:d4:1a:66:13:a5:f9:03:28:3b:1d:bc:9e:
                    5c:09:ba:99:9a:aa:ff:9e:ac:e6:8d:9f:54:fa:37:
                    ee:32:de:ba:9c:f0:2e:3c:f8:cb:bb:71:a1:2d:76:
                    26:43:43:c4:2b:b9:7e:75:fe:70:ef:ff:6f:75:cc:
                    3a:15:04:fa:c7:3d:1f:10:11:99:f9:9f:71:60:9f:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:50:DF:3E:F8:9E:F6:9F:53:85:6D:34:A3:6D:26:23:A2:49:14
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:91:bc:ff:03:ba:7d:53:e8:0c:a2:14:ef:dd:d9:06:d7:d2:
         a2:e8:c3:dd:6a:78:9b:d3:eb:22:d3:42:33:09:ac:1f:7c:17:
         65:b1:7a:99:fc:49:ce:91:e4:d8:d1:be:21:7c:38:21:7e:21:
         0d:7e:57:24:b8:a3:ed:57:a8:d4:be:c8:b7:4e:7f:47:d5:19:
         46:af:8c:f8:f8:a1:d2:7b:f2:19:f7:ea:8a:23:20:55:f2:ab:
         4a:4d:4b:4c:b9:8e:08:32:51:38:c2:7e:4c:2c:1a:44:f5:15:
         42:85:c0:0e:d1:90:d1:0d:2a:78:0b:c8:75:13:bd:42:9b:ef:
         f5:e0:e9:d1:ad:36:85:71:3a:9f:20:66:0b:92:a9:cf:b2:a3:
         51:c6:61:b9:90:27:5e:14:2b:67:ac:59:39:12:79:d1:86:0d:
         df:6e:53:69:ae:84:78:79:75:1b:d5:41:d0:80:7e:5c:6d:bb:
         1d:e4:09:9c:22:42:89:dc:7c:bf:f9:08:67:b6:87:7d:bc:be:
         7d:ee:49:26:55:5f:79:89:67:c9:3b:53:9d:16:2d:d9:1d:f9:
         e7:b9:ea:a8:b8:d4:00:ab:af:32:b8:19:5b:1e:67:57:74:50:
         b2:e1:61:4f:d7:4e:3b:40:d3:70:d3:68:34:67:ed:65:74:18:
         92:7f:5b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMoxqz6u58kL9b9QIVhcDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh
MjI5NjIwHhcNMjYwOTIzMDUwMDM2WhcNMjYwOTI0MDUwMDM2WjAzMTEwLwYDVQQD
EyhmNzVkNTBkZjNlZjg5ZWY2OWY1Mzg1NmQzNGEzNmQyNjIzYTI0OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfnKf0sc/V/PUn4+Skmumkgs9E2V
gDUoQNF2tnlzTD05GtSg4h/BZe0SCaUje9FpzuDHCPqJm2kvnsO0fAmHI4LbCNjs
BpqBrHJIUm8lm2Z9Ad9aEi7BV9vJs5zT0ajr80clhAaSJIK+KOlqLukq5ChbGAhQ
zpd0YaN0VlgMRi2g58j2bdHwHgZ1PRSWSkkvTl4EKzQs6S0f2hUNNRjw+/GT1vud
8YGAWu4hZ+X5lkxTl+yPRrHUGmYTpfkDKDsdvJ5cCbqZmqr/nqzmjZ9U+jfuMt66
nPAuPPjLu3GhLXYmQ0PEK7l+df5w7/9vdcw6FQT6xz0fEBGZ+Z9xYJ9c3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPddUN8++J72n1OFbTSjbSYjokkUMB8GA1UdIwQY
MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt
ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli
LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZG8/wO6
fVPoDKIU793ZBtfSoujD3Wp4m9PrItNCMwmsH3wXZbF6mfxJzpHk2NG+IXw4IX4h
DX5XJLij7Veo1L7It05/R9UZRq+M+Pih0nvyGffqiiMgVfKrSk1LTLmOCDJROMJ+
TCwaRPUVQoXADtGQ0Q0qeAvIdRO9Qpvv9eDp0a02hXE6nyBmC5Kpz7KjUcZhuZAn
XhQrZ6xZORJ50YYN325Taa6EeHl1G9VB0IB+XG27HeQJnCJCidx8v/kIZ7aHfby+
fe5JJlVfeYlnyTtTnRYt2R3557nqqLjUAKuvMrgZWx5nV3RQsuFhT9dOO0DTcNNo
NGftZXQYkn9bgQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:27:58 2026 by rpki-client