Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File:                     A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier:          rV+sU15+20NBD4yVbgIVeem4nAkVBiT2sutBJxX9kLU=
Subject key identifier:   A5:23:34:8F:45:69:6D:1D:1A:04:8F:FE:E5:66:88:04:1A:FD:FA:1A
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer:       /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial:       019E1E356A1084A3E9EE6AD62250F4649ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 22:01:17 +0000
Manifest this update:     Tue 12 May 2026 22:01:17 +0000
Manifest next update:     Wed 13 May 2026 22:01:17 +0000
Files and hashes:         1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: RrDCzI7m76zsSxzMc6EUC1g0MhjKVbViWtkzUMASJ0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:6a:10:84:a3:e9:ee:6a:d6:22:50:f4:64:9a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
        Validity
            Not Before: May 12 22:01:17 2026 GMT
            Not After : May 13 22:01:17 2026 GMT
        Subject: CN=a523348f45696d1d1a048ffee56688041afdfa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:53:20:4d:4d:fa:0c:e5:f9:26:df:ad:02:
                    5c:68:fc:e3:78:bc:5c:da:86:f3:fe:2c:54:f5:39:
                    f7:d8:3c:9d:92:b5:a4:eb:f6:93:f4:6d:c0:7c:28:
                    a1:af:b0:b1:af:30:79:de:25:b1:21:5c:ec:3d:74:
                    0e:a2:1f:eb:7d:0a:67:36:03:74:71:24:5e:7a:1a:
                    77:8d:33:56:44:26:11:61:ac:0c:5b:26:0a:58:cb:
                    a9:27:d0:39:2a:10:43:40:15:63:bc:3e:59:aa:fb:
                    7c:53:fa:71:1e:b0:5d:00:77:b2:97:db:9f:a6:9c:
                    45:aa:02:ea:7f:9b:b9:ac:fb:a6:08:5b:98:14:a5:
                    ae:36:6b:40:7b:d2:23:18:41:95:11:b3:67:13:07:
                    6f:be:99:53:05:4a:7d:b6:26:8e:28:f0:39:56:51:
                    89:30:1b:88:39:38:bf:77:ad:2d:bc:d9:e2:f1:b7:
                    34:32:83:3e:1c:a1:ee:22:ac:c9:1a:cd:12:65:6c:
                    98:e8:c6:c7:f1:7c:45:60:e3:a4:61:4a:97:e5:07:
                    03:c6:cc:e4:95:f6:75:68:99:38:7c:5f:96:39:70:
                    53:cb:a6:8e:40:2e:b9:28:42:f4:2a:3f:e2:8a:8e:
                    74:90:f7:31:93:ba:c3:4b:56:00:af:a2:f4:12:98:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:23:34:8F:45:69:6D:1D:1A:04:8F:FE:E5:66:88:04:1A:FD:FA:1A
            X509v3 Authority Key Identifier:
                keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:23:67:c0:66:f0:d7:9e:a7:f7:51:a9:c7:20:f9:5d:8f:26:
         22:0e:6c:41:38:b1:f2:24:88:b4:01:a7:93:4a:3d:3a:aa:a3:
         7a:17:90:ed:9e:c7:de:0c:37:05:03:a3:63:b6:ac:4f:44:51:
         f9:2a:c8:a1:ed:ca:45:5d:0a:1a:a0:d9:a2:4e:ab:7c:cd:0f:
         e8:4b:03:22:e3:46:f6:d5:4a:66:ce:5f:d4:c4:7f:18:51:e4:
         02:67:95:9d:40:e1:34:a1:ef:66:4d:b6:05:e1:fc:41:a7:51:
         31:8d:a5:4a:e5:6b:34:f9:95:82:eb:20:92:c8:01:9f:22:48:
         8f:28:0d:9c:89:6b:53:c8:1f:e9:aa:4d:0b:f6:7f:d9:69:8f:
         9d:0e:e9:e2:36:57:f4:04:76:dd:f5:3c:a8:dc:10:23:62:5f:
         e0:03:30:b8:34:c2:ab:54:a1:8b:bc:1b:e9:5d:79:47:d9:83:
         23:f8:e3:8f:2a:c4:9d:7c:ad:f0:d1:e0:36:ab:85:31:f8:58:
         80:46:67:69:fb:57:1d:14:1b:02:37:c3:38:5c:c9:dd:f8:b0:
         e7:60:6e:5a:ab:34:aa:e8:b2:5d:cd:ae:c2:87:49:ed:46:a6:
         b1:a6:35:98:1a:94:28:04:51:fa:ff:a0:e6:9e:e1:a4:52:33:
         1d:54:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:00 2026 by rpki-client