Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File:                     AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier:          /1f+EgSNB5PUwMMd/bz0Gh9Di3p7q2/zgdJP9V0HXAY=
Subject key identifier:   CB:CF:AD:00:46:8A:57:9B:D3:C9:3F:CD:7F:6F:05:42:F0:3D:BD:0F
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer:       /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial:       01A0CD10EB2F551ACBAF9D546A1D1E9D9988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number:          0879
Signing time:             Wed 23 Sep 2026 07:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:33 +0000
Files and hashes:         1: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: 9P3cr3rxHBfaYcWfoM1XvN9fzPExtuv3lFH6fqsoYlE=)
                          2: udpWdNCKkK0P1iH1tzGr-xFImUs.roa (hash: Sd5grDbeFgiY7osermhXdAvSR4ijwDBASIa5MD4eRp8=)
                          3: zJwEmTnW7QATFaFp9sYIGCKazMQ.roa (hash: +aACYW5m9yGHFrPOwMLE83hHp9dZjYoXg/esUcp2bds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:10:eb:2f:55:1a:cb:af:9d:54:6a:1d:1e:9d:99:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
        Validity
            Not Before: Sep 23 07:00:33 2026 GMT
            Not After : Sep 24 07:00:33 2026 GMT
        Subject: CN=cbcfad00468a579bd3c93fcd7f6f0542f03dbd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c9:f4:23:8c:e6:d7:92:b2:97:6b:3c:e5:6f:
                    ac:32:4e:79:2b:2d:fa:12:f9:10:a9:de:e3:2e:ad:
                    51:b1:d5:5c:6a:d3:07:b8:63:c0:f2:43:7e:ed:80:
                    65:00:5e:8a:02:75:cc:fa:d2:63:a7:83:2d:c2:cf:
                    35:19:e1:37:f3:e6:11:2e:ee:6b:f5:44:d9:32:54:
                    32:94:ef:bc:65:50:ab:ef:8f:01:f7:84:ef:5b:b7:
                    69:e6:1b:39:17:02:e3:93:90:aa:9d:77:4d:e5:85:
                    8a:23:64:b9:1d:26:52:78:ac:a6:b2:cb:a8:d8:c0:
                    06:c7:d1:28:c2:3e:de:28:2b:8d:e8:d3:31:8e:04:
                    ae:77:2e:e8:95:4e:db:fd:11:e5:a5:dc:df:7d:9b:
                    13:2e:3b:1f:bc:80:7b:b8:a9:39:f0:83:e1:5b:09:
                    13:33:6a:ff:f6:3d:0d:32:88:5c:85:d5:dc:fa:c7:
                    f4:36:e4:77:c2:90:4e:48:ee:fe:e2:79:52:7f:e9:
                    18:5b:d3:9a:61:aa:16:dc:da:a6:78:ec:27:a6:bb:
                    c2:84:36:33:69:61:32:1a:51:45:5e:ac:ae:00:30:
                    23:1e:c8:ce:47:84:1a:f0:6c:4e:87:bd:e5:5b:fe:
                    7e:2c:12:94:5c:9f:dc:9a:66:2d:01:17:52:de:aa:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:AD:00:46:8A:57:9B:D3:C9:3F:CD:7F:6F:05:42:F0:3D:BD:0F
            X509v3 Authority Key Identifier:
                keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:0c:eb:ad:65:25:7a:1a:8b:a6:e8:2c:c5:65:83:b2:8b:
         eb:6d:d6:a8:25:40:db:3d:c3:34:44:e8:6d:73:b6:58:d0:21:
         e3:57:a4:58:b9:45:42:fa:49:4c:46:a9:83:95:1e:1c:11:27:
         8c:4a:15:e3:fd:36:10:5b:1e:5a:92:6d:3a:20:6d:3c:0d:3f:
         16:ad:f9:47:4d:d9:6f:bc:a4:62:95:3a:47:a6:1c:ce:be:d1:
         ba:97:49:38:af:c2:b4:7f:86:f3:96:ca:61:4a:6f:3a:aa:f4:
         3a:7d:0b:bf:27:1d:17:0c:f4:30:af:22:be:c2:d8:a1:49:a0:
         a6:07:46:47:cd:41:ba:06:af:ea:89:03:0d:04:0f:99:ed:e2:
         46:88:e1:e6:bf:5e:7a:1c:60:df:d7:0b:fb:16:b4:6a:d0:11:
         e1:55:ba:b7:db:b3:26:01:89:99:15:b6:7e:f2:97:16:47:73:
         47:a5:6f:71:a0:e6:a6:44:4f:80:05:f7:95:09:e5:bb:1d:b8:
         e4:a1:88:6f:02:09:72:e7:c7:39:e1:31:fc:15:5d:8d:35:3e:
         d3:4c:b1:74:d0:3a:7f:32:d0:b9:4b:27:f9:e7:41:90:cb:3d:
         fd:df:c0:30:3b:c0:23:e3:20:c9:99:84:dd:8b:16:a8:52:1a:
         ce:69:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:23:29 2026 by rpki-client