Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          ghHyumU7jBQu+YKYtsbIk4mLUozE8sUET6THwt1RFGw=
Subject key identifier:   E9:AD:B9:E9:DE:3F:F6:88:77:79:3F:EA:84:38:2F:60:77:A4:BA:9E
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       019E1D907C9D0E8244533095508944149A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          1425
Signing time:             Tue 12 May 2026 19:01:08 +0000
Manifest this update:     Tue 12 May 2026 19:01:08 +0000
Manifest next update:     Wed 13 May 2026 19:01:08 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: GHq8BNLuLP/DyjYfYtzWsV11k49aEcEdwj+9U1a1Hew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:7c:9d:0e:82:44:53:30:95:50:89:44:14:9a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: May 12 19:01:08 2026 GMT
            Not After : May 13 19:01:08 2026 GMT
        Subject: CN=e9adb9e9de3ff68877793fea84382f6077a4ba9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:57:74:75:f3:44:35:01:fe:4b:28:c3:56:
                    27:69:b7:1e:01:e5:5c:bb:64:59:5a:91:be:1f:c4:
                    68:81:d6:da:e3:73:f6:5b:45:9e:de:1d:0d:4f:25:
                    4f:43:57:a9:45:03:77:ce:60:4f:2c:cf:30:60:cc:
                    b5:7f:7a:85:f2:cd:b6:78:c4:1b:e9:3c:48:d9:4d:
                    ff:c6:67:14:94:38:f0:7f:41:8e:e5:8d:36:71:42:
                    42:c6:e8:e4:4e:1e:3d:d5:74:83:40:81:bf:71:7e:
                    7a:87:da:6f:57:3f:15:06:85:4c:78:fe:28:0d:f9:
                    72:04:b5:d3:5a:e9:3f:3c:81:bd:ef:40:56:79:59:
                    b6:e0:75:94:2b:c6:7f:c6:35:76:09:69:98:ba:32:
                    b3:27:d0:e3:91:96:aa:c9:50:dd:a7:a9:f9:74:97:
                    5d:47:0c:37:98:bf:58:82:ff:94:48:e1:03:ac:ab:
                    22:98:b8:93:4e:9a:5e:f3:04:b0:ed:2b:e0:8d:1e:
                    c1:6b:18:44:2b:3d:f9:87:63:89:c3:3a:77:73:8f:
                    96:1a:cd:c1:9e:c5:d7:c7:f8:db:87:1e:6f:f3:28:
                    d3:15:8e:dd:c4:e6:b9:8d:82:80:38:87:98:50:0b:
                    84:d4:9d:e1:a7:69:81:ba:20:8f:ed:5b:b2:2a:f8:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AD:B9:E9:DE:3F:F6:88:77:79:3F:EA:84:38:2F:60:77:A4:BA:9E
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8f:9e:81:bf:26:83:c6:e2:b4:b1:a8:aa:bd:4f:8f:ab:15:
         39:bf:83:f3:13:bf:1d:a5:02:be:bb:ae:59:ab:8e:0f:b0:b5:
         b5:9d:47:a7:81:b0:73:7b:4d:30:a6:28:44:f1:d0:09:7d:97:
         2a:6b:63:ed:1b:66:63:38:cd:e5:bc:eb:19:06:a7:15:f2:7e:
         d9:65:63:85:0d:67:eb:01:35:bf:1b:ae:d2:4d:24:56:ec:24:
         ed:df:f1:cc:3b:38:fe:e7:1b:20:9d:06:21:30:f1:01:8d:41:
         15:36:58:79:ad:c2:fa:70:ee:ea:78:ef:44:f2:1b:20:c0:b0:
         36:3e:e3:3a:1b:86:04:32:2f:95:f1:9c:5d:e7:f1:5d:0e:18:
         7e:48:34:66:f0:8b:c2:b9:e2:ee:93:f0:0e:2d:a2:ef:91:75:
         23:0f:4e:6c:0d:71:94:87:c6:34:93:56:05:df:8b:25:d4:5a:
         ba:7a:25:cd:68:b3:e5:0d:b0:4f:5d:47:69:44:0b:f3:24:74:
         92:24:66:d5:da:47:f2:8d:6b:69:62:43:08:93:88:bf:50:03:
         ca:db:2b:89:90:62:f8:d1:17:f7:cb:1d:90:df:78:17:93:ea:
         cc:ba:c2:f4:e9:ee:c7:28:33:5d:29:11:66:70:e2:cf:e6:a5:
         b3:31:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:35 2026 by rpki-client