Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          yr4P3C4ACSyAWw5p/cGt58ag+3bWMVXzMCAsKMt73qs=
Subject key identifier:   9D:8A:67:3D:32:3E:2A:80:2A:0E:9A:9E:CE:80:49:C7:84:8D:8D:CD
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       019D26967FC91A088F5057106DE93D1ABD3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          10F5
Signing time:             Wed 25 Mar 2026 20:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:30 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: D7K/q59dZqbALa2mjT4MF+wzSuIYMyDLZ+d0ZUZVtUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:7f:c9:1a:08:8f:50:57:10:6d:e9:3d:1a:bd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Mar 25 20:01:30 2026 GMT
            Not After : Mar 26 20:01:30 2026 GMT
        Subject: CN=9d8a673d323e2a802a0e9a9ece8049c7848d8dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:3c:54:1d:13:0c:92:57:fd:d3:cd:9f:d6:
                    b2:b9:eb:2c:68:8f:10:39:51:9a:49:92:24:9a:79:
                    31:fe:0d:f9:d9:64:14:11:ba:9d:fc:62:21:55:9b:
                    ae:66:8b:3e:8b:b3:15:e1:80:ac:ba:d4:d9:7e:4b:
                    45:76:57:c2:6b:a2:44:ca:8d:f9:38:32:2f:c2:42:
                    f1:22:32:f7:c9:26:99:e5:98:c0:2b:56:30:61:94:
                    03:61:be:7e:67:d1:ab:d2:d0:de:57:06:9f:75:be:
                    0a:12:ae:70:5c:44:e3:45:7b:05:29:83:89:d9:4b:
                    cd:95:67:43:15:99:87:2a:80:85:0c:88:e8:ba:23:
                    34:f8:78:72:72:63:43:7b:fc:43:a9:e2:b1:a2:ba:
                    d3:ad:76:01:5f:49:da:8a:5a:f8:64:49:c8:b0:e3:
                    c9:63:d6:f7:40:4c:91:be:15:22:dd:9f:92:a0:53:
                    cf:d3:cb:47:e8:1a:c8:b6:82:33:85:ab:1c:be:ff:
                    78:d7:2d:83:ab:ac:44:ba:f4:43:46:11:b1:d4:58:
                    60:18:1c:f3:93:03:bc:1a:32:55:52:12:9a:68:eb:
                    69:8b:0d:9e:96:65:f4:6d:be:52:21:5f:81:86:c9:
                    6b:59:64:92:bb:3f:18:3e:07:a9:3a:7a:ff:2d:80:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8A:67:3D:32:3E:2A:80:2A:0E:9A:9E:CE:80:49:C7:84:8D:8D:CD
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:41:f0:71:be:56:c0:a8:22:85:66:76:eb:55:9c:62:31:d1:
         f3:56:b6:7a:90:d6:e1:49:d0:ec:eb:f6:77:69:88:3c:93:63:
         b7:21:df:9e:1e:07:53:30:23:4b:5d:81:38:17:59:27:5d:21:
         25:f0:69:7d:14:78:7d:e9:45:46:08:c9:f3:53:38:72:97:05:
         92:93:1d:e0:a1:48:b1:e9:69:d1:3c:17:82:0a:40:f3:ab:e2:
         10:80:a1:47:42:60:f1:73:fd:a8:dd:c2:f4:08:cd:27:9e:e5:
         00:92:cd:6f:3d:a6:2f:d2:a9:db:39:e4:38:f5:3e:5f:df:d9:
         88:89:56:51:d0:e4:f9:8a:98:88:22:54:13:3f:39:6f:7c:ec:
         f0:13:c1:89:4d:6e:6c:a7:cf:71:03:ff:93:63:81:8b:38:a0:
         3a:d1:a3:c5:b3:31:b9:dc:8e:4c:0e:37:b5:af:7c:a6:f9:56:
         ff:9a:75:61:b7:b8:2b:0e:06:75:6e:fc:37:8b:0a:eb:3e:1b:
         54:22:80:00:a9:37:25:2c:ea:dc:84:4a:d2:e1:6c:9e:a1:3f:
         4e:4a:8f:12:41:a3:57:83:59:61:ab:09:8d:58:f1:af:00:e6:
         fc:f4:81:bc:cc:30:e3:44:28:23:65:6b:05:27:63:32:97:d3:
         56:08:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:03 2026 by rpki-client