Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File:                     aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier:          Q/7hKv/vqFSfdFrxMmVoDWf6cFmMqTjoolMUgfcH3Cg=
Subject key identifier:   67:66:27:8C:CE:53:2C:FD:F5:A9:23:9A:93:06:0D:CF:89:95:A0:D3
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer:       /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial:       019E1E6C5D0A408AC5079A23D48ECC856CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number:          07F4
Signing time:             Tue 12 May 2026 23:01:18 +0000
Manifest this update:     Tue 12 May 2026 23:01:18 +0000
Manifest next update:     Wed 13 May 2026 23:01:18 +0000
Files and hashes:         1: 0eAROzpm6uCvXC9n0Dz62lsi3LU.roa (hash: Ei3iDDLRtSjFP0M+gyfY2FSts+TJaqWB4uuLlvSNAQw=)
                          2: I-sXuwtEcITmgnvZanC5hRWQbdA.roa (hash: dw1mUItwtqi8VkSL6GcnsYfa7bo73GyWptZqIgXTIXU=)
                          3: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: 4tJC+QWMIA1q77dgZPXFeaihNr1JxUTGQjW3q/vKyuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:5d:0a:40:8a:c5:07:9a:23:d4:8e:cc:85:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
        Validity
            Not Before: May 12 23:01:18 2026 GMT
            Not After : May 13 23:01:18 2026 GMT
        Subject: CN=6766278cce532cfdf5a9239a93060dcf8995a0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:13:62:b3:f7:f5:c9:d4:93:a0:a5:cb:0c:
                    2f:58:2a:51:46:79:af:4d:d4:ef:38:21:4e:64:c2:
                    8a:c2:20:bb:14:a5:d6:54:a4:7a:26:85:d6:d4:76:
                    d8:97:50:cf:6f:d6:a9:7d:dc:83:97:3a:96:85:a4:
                    bc:46:b4:9b:61:a3:b8:23:20:13:d2:ba:01:a1:84:
                    72:f3:99:41:3e:bf:68:fa:6a:56:4b:0a:21:8f:3f:
                    55:f5:9c:95:7b:92:16:33:6b:d0:74:c0:fa:17:1c:
                    0a:a0:1d:6b:13:8f:47:9f:15:72:ff:98:5a:c8:de:
                    6c:cb:05:b6:73:8f:64:4e:a6:e4:88:dd:37:21:d3:
                    65:4b:8d:9f:68:49:5d:a8:ac:d9:68:29:d4:f1:32:
                    4e:6e:03:8c:f1:74:fe:62:26:e7:2b:f6:ef:1f:3c:
                    4f:13:f3:b9:25:59:b9:79:f7:66:72:03:56:3b:8f:
                    4b:42:49:19:d0:9e:43:e0:18:8a:83:35:06:d5:17:
                    11:4a:18:ba:90:b3:95:cf:ff:51:75:ea:10:6c:6d:
                    a7:38:ac:31:b6:76:6e:e7:60:dd:f9:5e:02:48:68:
                    73:c3:b3:7d:7e:96:cb:d8:32:5e:e6:8b:e0:af:fd:
                    ed:ed:63:2f:0b:d0:22:eb:13:e6:02:d7:de:24:4a:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:27:8C:CE:53:2C:FD:F5:A9:23:9A:93:06:0D:CF:89:95:A0:D3
            X509v3 Authority Key Identifier:
                keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f2:9b:78:25:ad:36:e5:4f:86:be:bf:2d:2c:bc:d9:66:2e:
         f1:a8:11:48:3f:60:5a:0f:21:07:48:9c:65:db:0c:43:f6:88:
         9f:a2:a1:0e:08:c8:1b:15:c3:f1:90:82:19:d7:e9:49:f3:de:
         f9:f0:b9:3b:2b:aa:a7:5d:70:ac:29:62:38:b8:f3:31:76:23:
         ba:b4:ab:6d:18:20:46:8a:64:f8:f3:fe:2c:1e:ac:f8:29:a3:
         12:97:2d:0d:d7:56:c0:72:61:b1:47:c3:f6:e3:08:7f:6c:dc:
         aa:36:3b:78:a4:21:83:d1:50:2f:b0:36:52:fb:96:fe:21:ca:
         29:57:f5:f8:9f:46:80:e1:38:fe:5e:13:1c:cd:7f:d9:05:1a:
         f7:7d:4f:a0:36:6c:28:a6:7c:b0:80:7c:16:70:bf:16:2b:1c:
         c5:fc:26:ab:78:72:92:a8:de:89:5e:b0:db:f0:94:16:4e:68:
         21:34:89:7e:a4:7f:78:ec:b9:6a:a9:e4:07:85:c9:62:13:80:
         fe:4a:6b:93:33:4d:26:d6:e9:cd:79:d6:0e:45:08:3a:f2:5a:
         8a:fc:2b:e3:59:a7:dd:53:ce:db:92:8f:0c:59:ef:c4:63:d6:
         d4:87:e2:bf:2b:b6:0a:0e:4f:bc:20:4e:69:2c:22:ad:d0:d7:
         36:61:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:37 2026 by rpki-client