Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File:                     AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier:          ERHxY4mdm3bRCc/ZPQhdmgdvmJK906vCPCH9bXmk3A8=
Subject key identifier:   95:89:7E:5E:1F:AC:77:A3:72:58:2C:43:8D:45:30:26:87:81:AC:0A
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer:       /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial:       01A0CB90C9B29A70E38F98C95E3A4523ED49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number:          110A
Signing time:             Wed 23 Sep 2026 00:00:58 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:58 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:58 +0000
Files and hashes:         1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: hzaM7vtsP2aw44uLS4+vLKSbo1cQNb9wfyKMtJWeZs8=)
                          2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:c9:b2:9a:70:e3:8f:98:c9:5e:3a:45:23:ed:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
        Validity
            Not Before: Sep 23 00:00:58 2026 GMT
            Not After : Sep 24 00:00:58 2026 GMT
        Subject: CN=95897e5e1fac77a372582c438d4530268781ac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:bf:81:d4:41:00:dd:68:fd:61:18:cb:12:
                    68:bd:4a:b4:d6:48:3b:8e:52:97:f0:1d:31:b3:8d:
                    71:f0:fd:3a:2a:b2:24:8e:f6:4c:d0:f2:4a:19:3f:
                    8e:93:6f:62:7b:af:d4:54:1b:46:19:8f:c6:d4:71:
                    14:81:bc:c4:1d:9a:aa:a1:34:de:3e:b8:03:26:6a:
                    6c:2a:64:74:6c:d3:b0:2a:dc:5b:2f:c0:e3:cc:ae:
                    6e:46:09:73:f3:3b:44:12:9c:4c:bf:0b:34:c5:df:
                    b9:13:aa:57:fe:6a:16:e7:8f:16:32:47:67:d5:ec:
                    09:ed:47:12:6d:68:e3:2d:05:dd:15:71:97:40:55:
                    70:ed:04:a8:04:3c:5e:00:59:08:f6:15:26:8b:a1:
                    ad:c3:8a:55:b9:62:d7:d7:86:53:3b:ac:10:fa:78:
                    7b:4a:be:9d:2e:cb:1b:f5:a7:87:3e:64:a1:05:f4:
                    79:74:9a:e9:7c:94:aa:c3:35:82:3c:22:c5:a4:19:
                    b4:6b:fe:2e:40:2f:9d:90:3d:43:1b:ab:dc:52:a4:
                    9b:47:d2:61:25:a6:e8:8e:7c:8c:4c:99:8c:40:50:
                    b7:e2:40:21:94:82:b7:70:83:7f:29:03:11:24:ee:
                    3b:2c:41:d6:02:d6:e2:f7:9c:f7:55:ff:fa:b2:db:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:7E:5E:1F:AC:77:A3:72:58:2C:43:8D:45:30:26:87:81:AC:0A
            X509v3 Authority Key Identifier:
                keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e2:e9:99:3e:ef:55:f3:70:95:86:aa:41:e2:a3:9e:11:b4:
         52:59:84:b3:76:61:4b:e3:d7:4d:5f:32:c4:70:6c:b9:f3:77:
         cb:66:35:57:cc:a5:2c:65:34:7b:c7:8c:24:2f:cd:c3:30:25:
         20:4a:a2:91:61:d5:58:5e:bf:7c:eb:06:6e:f2:93:e2:ae:04:
         a6:0a:a4:6d:9c:3b:86:73:4e:26:2a:c2:11:46:e8:4f:07:1f:
         55:9c:35:a2:44:1e:e0:ea:f6:f8:bf:29:94:35:34:d4:02:16:
         c1:4d:91:59:60:e3:46:96:89:a6:04:19:9f:83:22:49:21:ec:
         ff:ff:05:bd:cb:af:bd:7c:85:30:54:83:84:5d:8c:c5:57:ee:
         ed:c3:42:d4:93:ad:b4:40:e2:d8:e7:83:b0:50:34:1c:b0:af:
         60:5d:e3:a6:9c:3f:c0:f7:77:2a:43:38:39:6f:b9:f1:eb:ea:
         59:aa:6d:3b:78:11:a1:56:dd:80:c9:d8:a9:42:99:fa:60:40:
         56:32:d7:fa:fe:fd:cf:9f:4f:82:24:5f:f9:fc:08:e7:6c:4e:
         f7:00:3d:93:04:4c:1e:88:85:1d:ec:3f:4b:3f:27:30:11:24:
         aa:22:96:4e:63:c2:88:17:e1:15:c7:98:e8:62:c9:ba:77:c7:
         8b:8c:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:05:39 2026 by rpki-client