Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          wPz0b7tGwXtg+vWT2SYrn/prlezZ1RGTRIWe6knGwr0=
Subject key identifier:   3E:E8:80:BA:58:19:52:2B:2B:2C:AC:C4:13:B3:49:39:5C:10:FA:BD
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       01A0D6150F6794A2358CAE76E25F227BD61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          05B9
Signing time:             Fri 25 Sep 2026 01:01:39 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:39 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:39 +0000
Files and hashes:         1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
                          2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
                          3: 5aspwc_EZRXz1DI0gfzYlq249Jw.roa (hash: z9a5ybEJbOBjedVWskB8FQIQDP7WVIXqlcDq4xwBtUE=)
                          4: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
                          5: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
                          6: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
                          7: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
                          8: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
                          9: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
                          10: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
                          11: X6gkbQD7XKjlpDCPmtrSBjhNhNY.roa (hash: J9AA0VeAPAZJB/+l+EvDES1QGP6dLWqo5ps91vAe5bc=)
                          12: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
                          13: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
                          14: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: o839ViA6DXOSMv53BcqbaX9NV54i3KoRIVnJUzUqJf0=)
                          15: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
                          16: lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa (hash: 0muOjArSKM5mL3HgrEoutlOx4J3NtUU/jA3sEiadzN8=)
                          17: oaPiDgiUp4N6eHimpviCBvIRiXs.roa (hash: gi5GPHcvQqzHHbSUnrSphPBhz1cqoAOg4ko/yRoF0WM=)
                          18: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (hash: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:0f:67:94:a2:35:8c:ae:76:e2:5f:22:7b:d6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Sep 25 01:01:39 2026 GMT
            Not After : Sep 26 01:01:39 2026 GMT
        Subject: CN=3ee880ba5819522b2b2cacc413b349395c10fabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:a0:1b:ce:a3:be:ac:e5:9e:a0:95:f9:82:
                    9a:b2:6a:18:b9:3c:7e:32:b5:3c:69:23:d4:da:16:
                    a0:0a:61:95:2f:8b:f1:47:a6:e9:4e:c2:0f:ad:00:
                    7c:f2:76:e2:aa:4f:56:f6:bf:ca:7c:03:0d:f0:97:
                    db:40:6a:84:64:d1:1c:a3:bf:53:92:e3:0a:80:c5:
                    eb:a9:e3:90:b0:53:b9:b4:0e:4a:85:25:11:b4:be:
                    83:32:66:84:8d:2d:f5:b0:52:39:95:c7:3f:d5:be:
                    cd:3e:a2:76:c4:51:b8:8d:ba:3a:96:de:e0:3c:f7:
                    8a:8a:4f:73:71:2b:de:86:6f:e2:37:09:90:5b:b5:
                    c4:72:3d:f5:52:03:9a:57:1a:86:30:1e:04:d4:83:
                    8a:d0:75:17:41:8f:b7:46:55:55:c7:9f:18:d1:45:
                    e1:62:40:8f:52:9d:0b:0d:d0:93:41:51:89:da:17:
                    1f:c6:50:47:b2:9a:07:e1:db:ce:45:ef:38:36:34:
                    7d:7d:96:a2:da:27:45:5a:52:b6:da:0d:53:29:7c:
                    82:d1:2c:b3:e4:9f:6b:8a:9f:a1:99:dd:06:07:a4:
                    6f:76:b7:e6:b3:7e:fc:95:90:1a:49:9b:be:07:af:
                    ad:4e:8c:f3:29:53:23:7f:e2:dc:14:0d:bb:3e:4f:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E8:80:BA:58:19:52:2B:2B:2C:AC:C4:13:B3:49:39:5C:10:FA:BD
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:72:41:48:f6:c2:1f:77:36:82:66:3b:ec:5a:34:81:32:aa:
         83:ac:00:90:da:ea:c9:d8:2d:d9:58:1b:6d:2d:e6:55:d0:32:
         1a:6c:e9:5a:52:9b:14:7e:5e:67:a7:70:41:65:e7:96:42:39:
         19:a2:11:94:7b:80:73:5a:d7:45:73:ef:59:11:4e:59:98:82:
         6e:91:48:4e:f5:d0:b1:d1:29:8d:c1:03:27:4d:e0:99:4a:23:
         aa:94:49:22:34:dd:87:d2:a8:5c:9e:e4:d0:e0:a8:be:77:83:
         41:77:97:28:34:b7:d3:81:a2:49:38:e4:94:7f:01:c3:d1:b4:
         0e:9d:d9:2b:06:af:a2:56:e5:eb:4c:7e:56:9e:f8:60:df:07:
         f9:71:6c:f7:47:a2:60:a7:78:5a:5d:1e:1c:6b:42:2b:57:6d:
         d5:de:fe:58:df:95:0e:8a:a9:68:c8:47:ab:e3:2c:53:22:bd:
         17:fa:ef:99:30:a1:14:46:76:a1:09:6d:5c:f2:83:36:7a:68:
         45:82:a3:21:ac:ab:a4:bf:dc:bc:c8:75:07:ab:55:6e:80:b4:
         ad:4f:74:f9:ba:00:9f:e5:65:ef:3f:f5:1b:b3:fb:89:e1:f5:
         24:d8:e4:82:a4:5b:ae:ac:c1:a2:c3:7c:63:12:a2:f4:ff:ed:
         48:35:bf:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFQ9nlKI1jK524l8ie9YfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjYwOTI1MDEwMTM5WhcNMjYwOTI2MDEwMTM5WjAzMTEwLwYDVQQD
EygzZWU4ODBiYTU4MTk1MjJiMmIyY2FjYzQxM2IzNDkzOTVjMTBmYWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuOgG86jvqzlnqCV+YKasmoYuTx+
MrU8aSPU2hagCmGVL4vxR6bpTsIPrQB88nbiqk9W9r/KfAMN8JfbQGqEZNEco79T
kuMKgMXrqeOQsFO5tA5KhSURtL6DMmaEjS31sFI5lcc/1b7NPqJ2xFG4jbo6lt7g
PPeKik9zcSvehm/iNwmQW7XEcj31UgOaVxqGMB4E1IOK0HUXQY+3RlVVx58Y0UXh
YkCPUp0LDdCTQVGJ2hcfxlBHspoH4dvORe84NjR9fZai2idFWlK22g1TKXyC0Syz
5J9rip+hmd0GB6Rvdrfms378lZAaSZu+B6+tTozzKVMjf+LcFA27Pk+L+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7ogLpYGVIrKyysxBOzSTlcEPq9MB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXJBSPbC
H3c2gmY77Fo0gTKqg6wAkNrqydgt2VgbbS3mVdAyGmzpWlKbFH5eZ6dwQWXnlkI5
GaIRlHuAc1rXRXPvWRFOWZiCbpFITvXQsdEpjcEDJ03gmUojqpRJIjTdh9KoXJ7k
0OCovneDQXeXKDS304GiSTjklH8Bw9G0Dp3ZKwavolbl60x+Vp74YN8H+XFs90ei
YKd4Wl0eHGtCK1dt1d7+WN+VDoqpaMhHq+MsUyK9F/rvmTChFEZ2oQltXPKDNnpo
RYKjIayrpL/cvMh1B6tVboC0rU90+boAn+Vl7z/1G7P7ieH1JNjkgqRbrqzBosN8
YxKi9P/tSDW/Lg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:59:45 2026 by rpki-client