Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File:                     aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier:          zlX4M8F1V2TotlRd0nboXbtQjdGvyIpzb2SeRqwibkI=
Subject key identifier:   6A:13:1D:C0:60:E0:6F:19:A5:D3:63:A3:75:42:9A:F7:65:5C:23:A2
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer:       /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial:       019E1EA2A7DA41216A7F9D56B2624FE121E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number:          011F
Signing time:             Wed 13 May 2026 00:00:36 +0000
Manifest this update:     Wed 13 May 2026 00:00:36 +0000
Manifest next update:     Thu 14 May 2026 00:00:36 +0000
Files and hashes:         1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
                          2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: WsL6oOqNdMQAag4qFuCGJiJpdVqNXeRzhoR5cmaH2wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:a7:da:41:21:6a:7f:9d:56:b2:62:4f:e1:21:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
        Validity
            Not Before: May 13 00:00:36 2026 GMT
            Not After : May 14 00:00:36 2026 GMT
        Subject: CN=6a131dc060e06f19a5d363a375429af7655c23a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:8b:1d:eb:bb:50:d6:f4:67:f8:be:af:5d:
                    b2:0d:6c:cc:81:cb:72:06:83:8f:d4:0f:7b:7b:18:
                    97:04:dd:5b:42:a4:2c:9a:07:32:3f:21:fb:49:5d:
                    72:5b:dc:1e:f3:af:5a:c3:78:cd:e8:42:4e:fb:21:
                    82:70:e2:fc:f8:df:09:32:e4:82:d2:38:5e:ac:41:
                    aa:a0:5c:c6:0a:ac:8d:cf:81:77:70:b4:4d:cd:8d:
                    c1:46:e2:cb:a4:8a:8b:84:fa:8b:50:84:b4:f2:fb:
                    10:09:81:8f:69:1d:2d:5c:00:7f:7d:2e:11:8c:da:
                    36:06:34:b1:2c:90:17:da:1f:02:05:da:32:77:11:
                    bf:31:5d:b4:ae:d8:7b:ec:e7:07:09:58:bd:fa:65:
                    d9:36:74:d6:1c:44:43:32:56:f3:b6:bc:06:5d:78:
                    b8:5b:a0:70:35:6a:f9:c4:2b:da:89:8e:9a:07:65:
                    72:d1:e0:33:09:38:53:b5:e5:e6:f5:6f:87:06:cd:
                    79:c1:1f:24:ce:d2:c3:13:cf:b1:f6:e5:e3:c2:cc:
                    bb:0c:c0:13:a1:fb:87:ff:38:b3:20:e1:52:35:1e:
                    2f:21:02:ca:3e:b3:41:31:3d:fe:6f:48:62:f3:3b:
                    7d:1d:bd:32:6d:58:e3:ed:e9:af:d0:03:2d:bc:91:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:1D:C0:60:E0:6F:19:A5:D3:63:A3:75:42:9A:F7:65:5C:23:A2
            X509v3 Authority Key Identifier:
                keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e7:26:94:bf:2f:5e:b4:a0:45:12:59:37:ca:66:98:de:e8:
         4b:3d:9c:06:95:a6:b6:09:9a:57:07:d2:c2:6a:45:94:f3:96:
         5f:c5:32:3d:5f:61:7c:35:5c:cd:26:a5:59:8d:a6:ac:b3:91:
         31:11:33:12:0c:cd:0c:7f:e7:f5:cd:c6:75:89:f1:6a:da:75:
         dc:e0:74:89:a9:1f:fb:f7:cb:a0:63:1d:6d:28:00:2e:9e:ea:
         bc:20:c6:38:bd:3d:d2:fc:37:8c:11:65:ee:73:3f:7d:ca:0c:
         6e:8f:ec:ac:4d:46:8f:14:91:01:45:9b:3a:2e:ee:69:66:32:
         2e:c8:06:e1:fd:ba:5f:e5:e3:5b:69:c3:33:e8:13:82:43:00:
         d2:18:36:94:af:49:6f:a5:dd:b2:d7:1c:81:ed:89:4c:42:78:
         8c:70:0b:f8:c9:53:21:6e:5c:18:5b:12:2c:a9:b6:2a:e5:37:
         b4:d6:ed:12:3d:ec:15:f3:2f:5c:05:7d:f0:19:0e:a2:1b:47:
         dd:3b:ce:05:38:0c:03:7c:93:ee:2c:36:17:ad:b3:bc:43:7f:
         92:d7:0e:32:9e:1c:45:ee:61:f7:65:5d:85:c0:d0:05:42:35:
         88:d9:6c:05:00:37:ac:f7:1b:79:03:c0:b3:d0:d6:dc:86:97:
         e4:1a:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:15 2026 by rpki-client