Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File:                     AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier:          AhdrkcTVdwZdIvrvQz8AtdgYABnN9Jv4S+klWF8UAwQ=
Subject key identifier:   6A:DA:9E:66:87:7F:58:76:F2:BA:1E:70:5A:5D:E2:7B:80:78:5D:2D
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer:       /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial:       019E1DFE44D5C0CCCDB9A896761D7DB106B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number:          0A4D
Signing time:             Tue 12 May 2026 21:01:03 +0000
Manifest this update:     Tue 12 May 2026 21:01:03 +0000
Manifest next update:     Wed 13 May 2026 21:01:03 +0000
Files and hashes:         1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: VKvd1C+Xyqunlkx+8ZRO+vYCIylmfDPfoyvQ4VOuSFE=)
                          2: MZejqw04W8XvDSTgyhF_vZtjtHk.roa (hash: y+X1OSPqc8Aw+l04NXTCLvm9a9sOckjKF5RYXVztnSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:44:d5:c0:cc:cd:b9:a8:96:76:1d:7d:b1:06:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
        Validity
            Not Before: May 12 21:01:03 2026 GMT
            Not After : May 13 21:01:03 2026 GMT
        Subject: CN=6ada9e66877f5876f2ba1e705a5de27b80785d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:a1:61:c2:61:f3:c1:bd:2e:b8:c4:76:ad:
                    51:78:be:67:24:3b:91:59:d0:96:77:a7:17:0f:38:
                    73:c6:f8:aa:f5:33:22:81:c0:2a:6c:3e:ed:7e:01:
                    b5:67:cf:e9:4a:51:c5:bf:85:d0:a2:79:c0:6e:cf:
                    ef:bb:75:a1:0c:01:1e:a8:b5:61:89:f5:48:3e:66:
                    4f:f2:ef:a1:7b:e1:9c:a1:e7:2e:17:20:7a:f5:a4:
                    64:d7:3c:a3:48:b5:ed:f4:f0:d7:60:bf:b7:5d:dc:
                    cc:9f:01:65:7e:4a:21:6b:32:95:e4:f1:89:a2:37:
                    d0:ce:1f:1c:72:cb:00:1f:15:21:71:e8:14:36:0f:
                    76:ea:b9:ce:94:7c:68:18:70:5d:be:97:9e:c8:42:
                    a6:ec:77:fa:8c:07:9e:1d:6a:05:d9:2e:ae:c5:ad:
                    0e:5a:77:53:ad:9d:d1:01:b9:c4:8d:01:6d:7a:dd:
                    51:06:4d:22:a5:f3:81:2c:c1:e1:88:d6:36:c3:a5:
                    aa:17:29:ad:9c:d4:0f:38:81:02:65:d7:b2:fe:a7:
                    6b:38:70:bc:0b:7e:fc:59:a0:35:3f:a3:4b:40:91:
                    c7:ba:b4:8b:fd:09:bb:ec:05:f3:24:09:b0:de:a4:
                    d6:79:1a:67:b2:7c:06:bf:86:5d:5f:a3:3c:eb:49:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:9E:66:87:7F:58:76:F2:BA:1E:70:5A:5D:E2:7B:80:78:5D:2D
            X509v3 Authority Key Identifier:
                keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e9:a8:16:d3:7c:48:b9:ec:6f:e0:86:fe:99:7d:fa:1a:d1:
         99:64:bf:8b:b7:ce:41:4c:1a:62:a1:88:b0:c6:72:04:8e:d7:
         85:c0:b3:b5:c4:eb:5f:61:95:23:e0:ff:97:20:20:a3:8a:ac:
         8e:41:97:ee:6e:65:f4:14:d8:31:8d:95:cd:a3:da:f7:a1:f3:
         fe:61:71:b0:2d:f9:71:46:aa:98:67:f5:50:05:82:d6:d9:fe:
         e5:12:9e:5a:d8:50:8e:84:d1:a7:ed:e0:5c:02:ad:d5:a7:cf:
         ee:2a:a0:bc:4d:4f:33:da:7f:b1:44:f7:68:14:05:54:ba:ed:
         b5:e0:32:93:15:1d:c3:8f:3b:ef:1e:2b:24:1b:54:7b:3c:16:
         88:28:3d:d3:4e:9f:ee:c9:c5:90:9c:8b:20:42:96:a7:ae:d6:
         f2:20:5f:bc:9c:b6:79:68:17:d8:27:be:22:b7:a1:e8:a4:38:
         89:42:80:c4:2e:32:8f:e3:ee:cf:7f:76:e5:76:1e:ac:31:ac:
         07:02:00:3f:05:82:68:13:e7:d2:e6:95:a4:7c:45:d8:ba:c6:
         58:88:68:c2:95:dd:66:7b:fd:b2:fc:94:1f:db:0f:12:ac:a3:
         bc:79:06:99:54:65:ec:09:1f:27:c0:2c:fd:8c:22:b1:ed:68:
         3f:17:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:30 2026 by rpki-client