Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          cac3x5VMc6JoLQNEeF1J8f3h6NphkR5CeIle0A4T68c=
Subject key identifier:   D6:30:6E:22:B1:4E:84:07:63:95:EF:31:2C:98:D0:55:5D:30:27:4F
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       019F905A5C36165737B0FF927097B42848FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          14E5
Signing time:             Thu 23 Jul 2026 19:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:08 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: oa6VfbE6TJ0cBVjJj1dtc1Cv3OhuAdwkbk0UfZzFomM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:5c:36:16:57:37:b0:ff:92:70:97:b4:28:48:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: Jul 23 19:01:08 2026 GMT
            Not After : Jul 24 19:01:08 2026 GMT
        Subject: CN=d6306e22b14e84076395ef312c98d0555d30274f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bf:02:b2:1e:be:83:27:2f:3b:47:ed:81:bf:
                    12:ae:1e:ca:84:ae:09:34:06:fe:09:4b:33:1d:fa:
                    a0:50:66:bd:37:e8:da:0f:9f:d8:0a:2c:b3:3f:a9:
                    5d:7a:e7:ca:80:bd:1b:d4:a6:6d:b7:b1:0d:2d:06:
                    c3:c7:29:7a:82:8d:a0:15:aa:40:38:ad:7e:6f:ac:
                    d5:e0:fe:b1:0a:63:06:22:8c:67:83:5a:49:7f:b0:
                    f9:70:28:02:d6:bd:5d:7a:ea:3c:65:59:8f:39:7e:
                    3e:42:6f:7a:02:39:67:d5:4c:f5:b3:b2:a9:c6:b3:
                    98:8a:43:5b:c9:c9:ab:10:45:45:ce:1c:3f:1b:d3:
                    b7:fc:82:c2:e7:50:5c:64:69:50:ce:ab:11:95:e7:
                    f0:68:8d:79:50:4b:d3:a5:d3:84:55:0a:36:a6:bc:
                    d5:d0:f5:de:a1:bb:02:62:79:15:1f:85:05:1c:87:
                    ed:66:32:7c:ec:81:93:3d:fd:ad:ea:d8:79:b6:1b:
                    78:dd:9c:52:56:64:b1:96:3d:03:c6:0f:32:53:fb:
                    32:bc:72:7c:09:4f:6c:c0:98:a6:7e:13:46:a8:bb:
                    02:61:5b:62:66:65:5c:cd:e5:2c:ce:10:a8:16:47:
                    33:12:4f:0a:dc:cf:16:88:0a:2f:16:40:c8:e6:d1:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:6E:22:B1:4E:84:07:63:95:EF:31:2C:98:D0:55:5D:30:27:4F
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8b:62:16:5b:d0:43:c8:1d:a5:6b:7b:f8:aa:30:9b:f3:ac:
         82:bf:7a:5f:43:94:c8:2e:96:f8:54:d9:1c:69:e5:6c:a5:49:
         91:00:aa:8a:c5:e3:40:51:0b:f0:77:5b:df:49:3e:85:cf:5e:
         7e:d6:a0:50:bc:27:06:f5:2b:ea:07:ac:bc:be:c6:4c:40:7c:
         7f:1d:b5:58:b1:18:ff:46:78:b7:24:85:da:91:3b:e1:dd:b4:
         45:c6:e2:fe:bc:3a:42:86:7b:ac:9d:c0:f6:a2:9b:c9:0b:dd:
         28:b3:cb:e8:f7:3d:b9:8e:f0:02:99:80:04:41:21:ad:56:60:
         2e:f1:fb:1d:98:31:dc:30:9c:0c:ac:28:c7:a8:db:f8:5a:cf:
         6e:10:cd:7c:69:c6:55:20:8b:ac:c4:a0:fb:43:54:70:54:99:
         47:4f:4c:28:93:a9:f1:c6:f1:69:7c:f3:f0:94:6f:c6:75:18:
         73:b5:be:8e:f0:a5:9c:87:33:17:86:1c:6c:dd:2e:2e:ea:ca:
         9a:f7:1c:16:33:e2:3d:89:e7:bd:4e:51:00:64:3a:53:d5:0a:
         c9:66:48:5e:99:a0:95:57:1c:87:56:fd:15:a6:17:67:27:2a:
         ba:3e:3c:b1:51:b0:c8:98:3a:1f:e9:31:2e:ac:84:67:7c:c3:
         e2:17:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:26 2026 by rpki-client