Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          9kxLGX9rAvFU/OUZB4FBQ2VvFz1qVPTl36J5yavg2Lk=
Subject key identifier:   A7:BE:37:61:1A:0E:AF:F0:41:8C:78:66:DE:6E:A5:66:BE:62:5E:17
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       01A0DA28C392E29D09A8AD031705C061439A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          154F
Signing time:             Fri 25 Sep 2026 20:01:39 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:39 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:39 +0000
Files and hashes:         1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: ZIceNaeLfZUiJjeUuvGHYZ+JLobtgejcGll6I6XnQqY=)
                          3: CtJ8OGkCaahCczfwEJKIo0Vg19E.roa (hash: G04Zndcd1iRvLKPAv2hVCE6UogK1m2W2eJhOAaju7+8=)
                          4: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
                          5: _vpq-qi4EQKFfckyOrU1g_mLI6k.roa (hash: NEepCH4VA5uYtx4dkADmgFVyzmZ4nNQxuJCHt+PP3M8=)
                          6: axnm0HQRmG8rizfv82dyns0e2_8.roa (hash: aV50CPhaYK3yIWcd+/HLRX9TlneZUNpfM8fhreah7uM=)
                          7: f_xKmFrmjIA78qUIL0QMNJGgKEk.roa (hash: C5FX/w2liydb0eZpv86Rq1hmajGY3P2SktyNH3juuk4=)
                          8: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
                          9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:c3:92:e2:9d:09:a8:ad:03:17:05:c0:61:43:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Sep 25 20:01:39 2026 GMT
            Not After : Sep 26 20:01:39 2026 GMT
        Subject: CN=a7be37611a0eaff0418c7866de6ea566be625e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:02:fc:5e:8e:a4:77:50:e8:39:62:d5:60:
                    98:77:f6:05:e0:f9:9a:fd:99:83:ae:25:52:97:13:
                    fa:12:f9:9f:6e:90:39:a9:36:27:c1:f4:04:02:77:
                    98:de:03:bf:d0:c8:60:d2:b3:1b:25:af:71:2a:11:
                    b4:27:9e:d2:fe:8a:fd:1b:d1:61:e8:61:f0:47:de:
                    f2:ff:0c:45:07:68:b8:90:94:87:02:15:04:bb:1e:
                    4c:34:57:98:70:82:14:a8:28:70:ed:2c:e7:3d:7e:
                    58:4f:c7:cb:1d:a0:a1:f8:d8:c3:d6:21:71:00:83:
                    f3:f9:b1:b5:2e:64:9c:66:f8:38:ef:cf:12:8a:2e:
                    97:5c:10:da:28:d8:de:a8:1d:71:fb:73:25:fe:17:
                    13:32:2e:4e:68:1c:a4:69:5b:9f:6c:a3:d4:f8:b4:
                    50:0a:3c:62:26:bc:f2:5c:05:b7:79:a6:10:28:bb:
                    c7:ea:87:55:a2:1a:9c:71:db:76:3e:0a:70:5d:46:
                    b2:5e:d8:f3:9a:22:ee:7a:68:9e:ea:d2:f2:6e:8d:
                    07:70:50:53:f0:ab:bb:f0:8b:bc:cc:ce:79:1a:bc:
                    83:6d:92:f2:47:da:27:4f:99:6d:6e:f6:6c:cd:de:
                    85:7a:f1:3a:95:12:72:4f:e3:4e:bf:42:6b:c2:77:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:37:61:1A:0E:AF:F0:41:8C:78:66:DE:6E:A5:66:BE:62:5E:17
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:1a:66:6c:3f:0f:54:52:b8:4f:a5:4f:50:15:99:5b:39:
         c7:f4:20:c8:68:7a:94:55:9b:ff:0a:22:05:26:9f:56:b5:53:
         aa:7e:b0:7b:02:d8:3b:56:90:f4:1c:87:c3:54:93:3d:38:65:
         10:db:1c:26:4d:f6:84:28:5e:ab:b1:7c:5b:25:01:f3:29:e4:
         dd:2b:a1:08:97:74:2a:f2:45:89:d5:6f:f3:ac:bc:09:8c:d2:
         07:27:ee:05:de:d0:b8:21:ab:35:bc:fd:9b:1d:f5:98:61:20:
         fd:69:20:ab:c4:1a:48:97:53:20:be:35:36:5d:fa:1f:ec:e1:
         b0:e5:14:3c:f1:76:e9:28:0b:f6:b4:11:7a:98:74:fb:1b:3e:
         50:aa:52:cc:96:e6:66:12:8f:27:a1:cb:dd:fa:d1:66:f9:79:
         b5:92:61:34:de:fc:ec:55:10:ee:06:1c:97:26:24:e5:b1:2c:
         d4:f2:2f:61:bb:23:76:77:75:2f:cf:d9:d9:d3:58:b9:4c:17:
         24:7d:1e:a8:78:9d:8d:8d:9b:ae:8e:81:7a:89:a8:7b:c2:d0:
         79:0e:2d:cd:30:87:1b:98:1f:61:aa:de:bd:5b:77:2e:0e:be:
         ce:76:24:96:c2:45:84:1d:a5:5c:cc:a8:ab:3c:7f:85:36:61:
         90:c4:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:10:23 2026 by rpki-client