Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File:                     A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier:          gB1g9YfTHwcsiOCjGTvp/SWQ2if6NQGnXmFpyqB9hWk=
Subject key identifier:   37:98:9A:3C:7E:48:D1:F8:2F:61:B1:DA:E5:22:E2:5D:2A:58:19:2D
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer:       /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial:       019E1F116C6F71D4D48F1C9C87B2B807E13F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number:          0515
Signing time:             Wed 13 May 2026 02:01:35 +0000
Manifest this update:     Wed 13 May 2026 02:01:35 +0000
Manifest next update:     Thu 14 May 2026 02:01:35 +0000
Files and hashes:         1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
                          2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: KHptkXpW1GISAGjnYso4SCKBVko5JUYZU6m/QN+zk7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:6c:6f:71:d4:d4:8f:1c:9c:87:b2:b8:07:e1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
        Validity
            Not Before: May 13 02:01:35 2026 GMT
            Not After : May 14 02:01:35 2026 GMT
        Subject: CN=37989a3c7e48d1f82f61b1dae522e25d2a58192d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:90:69:9a:c2:cf:c9:b4:5e:85:2b:f4:ba:
                    0b:14:bc:c9:b4:2a:ca:8e:5e:be:cd:88:00:71:9a:
                    31:07:6b:73:8b:4b:01:ff:60:b4:cd:05:67:a3:fc:
                    9b:db:21:f6:15:2b:c1:6a:ba:8c:da:b4:19:7a:0d:
                    b2:ea:8b:a7:a4:b6:de:f3:e8:38:01:aa:dd:02:d4:
                    90:59:07:ee:67:9c:49:7d:f8:41:7a:b0:0e:24:43:
                    c3:4e:ec:0e:da:05:cd:df:5e:98:99:53:48:69:7b:
                    d4:be:5b:89:69:64:c5:26:2c:cd:d5:2c:4a:c3:0a:
                    c1:a2:91:9b:1f:54:e1:be:a6:66:2f:b8:3c:cb:76:
                    27:7b:31:c8:e7:7e:f7:be:7d:df:97:a4:d7:3c:6c:
                    61:6c:6b:fe:29:55:72:a8:7d:e3:9d:c4:9c:1f:07:
                    15:01:6f:20:0a:d9:b6:5d:1a:0f:c8:cb:64:af:fc:
                    2e:bd:0e:57:18:29:4d:0e:a3:6c:d7:b7:dd:b5:eb:
                    65:2e:99:ba:56:a2:b6:b0:b4:83:75:84:5c:fb:1a:
                    38:96:3d:74:f0:91:32:b1:79:cf:57:91:34:0c:dd:
                    b8:bf:a7:38:05:ff:2e:0d:f1:aa:61:c1:19:8d:55:
                    3b:3f:e0:f1:aa:c1:29:c8:e1:65:d9:47:18:03:64:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:98:9A:3C:7E:48:D1:F8:2F:61:B1:DA:E5:22:E2:5D:2A:58:19:2D
            X509v3 Authority Key Identifier:
                keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:5d:79:82:26:db:86:dd:a9:b2:e6:79:56:4b:bc:2c:bd:
         fb:2a:ff:cf:ba:d8:f1:00:43:ec:88:ce:21:d6:11:2d:27:1d:
         49:42:3b:41:09:1c:e0:30:74:f5:ef:4f:fb:0b:a0:83:2c:06:
         68:b2:27:7f:e3:fd:ce:ac:50:c2:53:b7:2d:1f:fc:b7:a6:f2:
         72:32:04:59:84:20:8e:9e:ad:86:d3:11:db:aa:e7:a4:97:dc:
         66:6a:59:c4:f9:fe:61:53:46:32:c0:2e:33:36:cd:00:e5:83:
         69:70:47:7a:ac:e7:70:ef:2a:e9:83:b8:ec:d5:37:dd:a9:58:
         c3:f6:45:6c:3a:e4:6a:4d:9f:53:d7:a9:91:ab:28:e9:d8:1f:
         41:c9:28:8b:f5:41:ce:44:39:1f:c3:3e:a0:4e:f7:12:34:37:
         05:26:26:06:68:70:6c:eb:49:fe:a8:0e:c4:0b:41:e1:c6:51:
         1b:9d:89:9c:9c:b1:94:dd:56:c2:e2:e0:4e:0e:56:ab:e5:32:
         1c:7d:d7:e6:0e:84:3d:bb:32:f1:39:aa:45:aa:fb:49:99:90:
         6a:49:19:ee:94:bd:96:d6:ef:08:26:c9:cf:6e:1b:e8:37:16:
         29:5e:ce:ac:38:fe:d1:71:00:82:26:a8:94:5c:6a:28:4b:2e:
         69:20:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:47 2026 by rpki-client