Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          aundi3v8wYCdUHOiaIzQkUUSTcFYqYqxtwmv8SlMcVg=
Subject key identifier:   17:91:CB:84:E1:E6:70:FD:86:EF:CC:D4:2D:2A:52:AD:55:F6:4D:51
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       019E1D90C0D854EDD5F7CFB57F088B635975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          0BBF
Signing time:             Tue 12 May 2026 19:01:26 +0000
Manifest this update:     Tue 12 May 2026 19:01:26 +0000
Manifest next update:     Wed 13 May 2026 19:01:26 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: dpLxxFgvSpLhViahkOl+X2OZgk4wI9q9SpgWRh4pQMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:c0:d8:54:ed:d5:f7:cf:b5:7f:08:8b:63:59:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: May 12 19:01:26 2026 GMT
            Not After : May 13 19:01:26 2026 GMT
        Subject: CN=1791cb84e1e670fd86efccd42d2a52ad55f64d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:6f:34:99:9c:03:43:d9:0c:ff:1e:18:0b:
                    97:71:d2:cd:92:b1:e9:70:71:65:c7:a3:8f:41:88:
                    ad:06:bf:37:b0:ec:07:7c:09:72:ca:0f:9e:ad:bd:
                    38:9f:88:77:2c:5e:b0:9d:00:74:a1:38:28:5d:74:
                    7c:96:bd:dc:3f:e5:f4:66:bf:41:0a:53:7a:fd:d5:
                    ee:56:76:a7:a7:09:07:1d:3a:83:19:d6:e8:04:5e:
                    d5:ce:a9:40:fc:eb:17:4c:b7:48:34:70:31:9f:d4:
                    8e:0f:6e:a3:f6:f6:61:c4:fe:c3:b5:74:a1:24:86:
                    f2:e6:4b:56:d1:19:bf:85:02:37:90:c0:18:53:42:
                    71:83:e5:96:40:ec:9b:cc:c8:09:d5:e0:f4:8c:f8:
                    25:2e:f4:18:d0:db:36:9a:67:a7:98:b2:16:f1:ab:
                    ce:23:5d:3a:7f:52:9d:42:e6:48:c0:2e:9f:0d:55:
                    54:80:19:b9:fe:74:75:d2:b7:0d:3b:c6:68:e9:1e:
                    fe:a0:16:e6:69:1b:bc:2d:19:f3:4d:f6:d6:74:78:
                    d6:a5:7f:42:7e:a8:bb:d1:8d:5a:9c:76:7f:86:8f:
                    32:83:2b:1d:48:0a:d9:60:78:83:a3:a8:f0:f0:d8:
                    4f:62:73:c8:75:2a:37:10:3e:10:32:f1:c2:ee:ef:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:91:CB:84:E1:E6:70:FD:86:EF:CC:D4:2D:2A:52:AD:55:F6:4D:51
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8d:e7:ff:76:cd:28:d1:e8:f5:ec:d6:85:98:68:43:09:11:
         7f:81:f4:9d:d8:4d:13:38:09:3c:f0:c7:4a:13:69:12:1b:00:
         14:e4:a9:85:08:ef:89:ac:9a:b8:c0:00:89:b5:a2:9d:c2:1d:
         cf:b3:7b:52:eb:dc:47:4d:10:92:f3:14:2c:dc:5e:7f:15:20:
         da:c1:01:d0:96:89:46:2a:5c:67:72:a7:fa:16:3c:fc:76:9c:
         fa:c9:d7:ab:fa:d8:0d:72:2e:14:da:78:eb:ee:a3:34:d0:cd:
         6e:d9:85:7c:88:59:2f:54:31:85:e5:a5:45:df:a1:8c:1a:e8:
         60:fa:4e:ff:d1:59:f6:08:b6:d7:1d:0b:3c:ad:3b:33:26:a0:
         22:a1:37:99:d3:6b:38:cd:2d:7e:c1:69:6f:a0:a3:e5:f2:af:
         f2:d3:ba:e7:42:c5:f8:50:b1:49:42:8b:a6:36:c4:74:b7:9e:
         8e:71:15:c8:e5:44:ee:66:c9:5c:1d:e3:e5:e8:cd:45:92:44:
         8c:06:45:53:84:c4:cc:25:16:ac:eb:4c:2b:98:6c:d6:12:6a:
         72:ab:be:ea:a6:84:79:3a:3b:13:43:56:1f:4e:6b:42:49:2b:
         cc:69:3d:31:13:70:7e:9d:9f:68:7c:97:63:cb:91:2e:12:67:
         49:d3:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:29 2026 by rpki-client