Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          Wz3Rk1+RVM4fkJvWlQmSAM12In3CGy4FmqvxaziQ+ZE=
Subject key identifier:   16:6A:E3:51:74:DB:28:91:D2:C0:A1:78:E6:D3:E8:C9:01:BD:A8:E1
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       019F946DE0A3A5EA303506BC120C0234FEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          1237
Signing time:             Fri 24 Jul 2026 14:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:56 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: LdDVX6e53X3eGz30yhu7w5iGiRR2Vb8uuUZLA2wNVsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:e0:a3:a5:ea:30:35:06:bc:12:0c:02:34:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Jul 24 14:00:56 2026 GMT
            Not After : Jul 25 14:00:56 2026 GMT
        Subject: CN=166ae35174db2891d2c0a178e6d3e8c901bda8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:e7:13:ad:6e:df:e8:ac:47:f2:26:c6:e7:
                    d1:3f:17:a8:e2:70:f5:fc:74:83:46:a7:f3:37:99:
                    1a:72:ec:8f:e5:1c:5b:01:05:e8:d7:92:4f:04:cd:
                    40:c6:41:4d:b5:0a:4c:f0:fa:35:00:c9:04:62:df:
                    1a:0e:dc:4e:d8:3e:e2:9c:6e:46:68:48:17:59:3c:
                    27:52:e3:c0:b0:e1:07:90:e6:a3:4d:a6:ce:81:a4:
                    8d:f7:e7:80:5c:2c:0b:e1:4a:6d:22:52:2f:c6:d6:
                    ab:d2:88:b3:08:04:68:e0:f0:c0:69:a6:bb:2a:f9:
                    64:1a:3e:75:a1:f9:67:18:7d:60:e9:a5:ae:2e:f6:
                    94:91:ff:93:1a:8c:57:a2:79:d9:24:ab:ec:26:6d:
                    63:3f:84:49:be:18:8d:f3:35:6c:ac:6f:5a:c1:f3:
                    dc:1f:88:cc:76:59:07:5b:28:7f:06:76:d5:1d:08:
                    18:c6:55:e2:4a:18:71:84:1d:83:a0:e9:3f:ab:85:
                    d9:40:8d:c4:2f:61:e9:38:38:bd:22:89:c1:d3:04:
                    91:a6:0c:46:8b:75:a9:df:d6:3b:f1:a7:81:ca:4c:
                    8a:31:4b:67:17:29:15:18:4c:8b:64:6b:75:c8:b7:
                    47:7c:25:94:f7:db:26:93:3d:55:7f:db:4c:8e:85:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6A:E3:51:74:DB:28:91:D2:C0:A1:78:E6:D3:E8:C9:01:BD:A8:E1
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:1b:f8:d5:20:8e:69:fb:91:39:13:4d:7d:88:0a:4b:af:
         1c:c8:38:c1:cc:8e:ce:38:05:6c:ea:3f:e1:c4:10:66:28:75:
         d4:29:8f:14:6d:18:08:20:8e:38:2b:bf:da:61:fa:cc:3a:7c:
         bb:b4:62:b0:40:b1:86:1b:23:82:40:87:87:04:28:61:da:f8:
         f8:b5:91:56:db:af:01:3e:1a:c9:3b:59:a0:35:d9:77:05:75:
         d5:b6:05:60:53:c2:80:f6:2f:71:16:80:f3:41:b7:43:61:be:
         d9:c7:94:78:d5:aa:00:10:0b:17:60:6b:54:9c:08:88:eb:f8:
         61:dc:be:65:2d:29:e9:18:67:b8:6c:89:ae:7a:39:ee:18:f7:
         56:f3:1a:df:8b:79:7b:d8:04:1b:1f:3d:13:97:39:68:bb:43:
         66:47:7e:e1:ba:da:41:22:ce:36:c3:85:d8:fa:b3:98:6d:4f:
         b4:0e:8d:9b:54:f0:e1:e7:bd:81:bd:aa:77:2d:c8:b2:f1:2e:
         3e:02:15:37:26:c9:fb:a8:05:24:f9:fb:4e:33:a4:d0:f9:87:
         bf:3b:69:e3:80:5a:9c:a6:49:d6:33:3e:d2:e8:e4:ae:63:ba:
         6c:d2:0c:ff:96:cf:dd:10:2d:6b:fe:09:f9:99:a5:a4:c8:23:
         a8:f9:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:53 2026 by rpki-client