Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          INDwoxFRUP/uLQPSlAkIxusmv+wNkz0BrrsUx3R4+dI=
Subject key identifier:   76:12:34:28:29:67:7A:F1:86:DF:E1:05:A6:57:03:A3:D2:88:85:47
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       01A0D502158A1AE93C4A1C65619E19D0A892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          19FD
Signing time:             Thu 24 Sep 2026 20:01:18 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:18 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:18 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: XbCfp6vU5+8rT8pPc3MW0N5AZyvqyYX7kT2crT/bsWs=)
                          2: dVy69fLGMOo8FwSSN3UwAlS882A.roa (hash: NDJLf7dSrw0PZVg4660IJDVpEuw7OX76mS1bdnbf9Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:15:8a:1a:e9:3c:4a:1c:65:61:9e:19:d0:a8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Sep 24 20:01:18 2026 GMT
            Not After : Sep 25 20:01:18 2026 GMT
        Subject: CN=7612342829677af186dfe105a65703a3d2888547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:af:7e:0f:bc:9e:9e:e5:f3:16:4d:4f:4e:
                    4c:cf:46:1c:70:0a:15:30:13:03:96:28:d8:ea:3b:
                    0f:ca:80:80:bf:15:26:b4:23:e2:2f:00:9b:fa:93:
                    1c:af:e6:6c:6f:96:83:37:1e:af:b6:e3:8e:97:d4:
                    f8:41:33:e1:28:e5:fc:af:f1:5e:64:ae:2f:55:d7:
                    7a:8c:ba:7c:44:ba:eb:e0:87:04:80:e3:c7:b5:7f:
                    7d:3f:48:e2:2f:e2:1d:79:e9:2c:67:8a:e3:65:e0:
                    97:f0:5a:b1:de:f6:92:cb:b3:bd:7c:d4:29:38:74:
                    2c:fe:e4:14:cb:f4:ae:7a:14:97:da:d7:6a:6d:4c:
                    b3:92:f3:6b:74:06:cd:51:a8:81:6c:d5:33:5a:a3:
                    c3:44:5f:81:e3:70:a5:47:37:43:96:1a:49:ea:cb:
                    a1:d2:4c:57:0b:f8:d9:48:91:f5:91:85:cb:c3:a3:
                    94:a8:cb:6d:c2:f9:c2:a1:87:95:97:b1:29:be:8c:
                    10:6f:54:5c:1a:c7:10:3d:ea:8b:65:67:0e:90:a7:
                    12:ef:95:04:bd:d9:f5:16:db:d6:c1:87:a1:3f:bb:
                    52:3b:ef:17:ac:02:66:68:f6:c9:be:cd:b2:55:9b:
                    54:6d:43:04:79:ed:11:89:d3:14:f9:45:79:be:ec:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:12:34:28:29:67:7A:F1:86:DF:E1:05:A6:57:03:A3:D2:88:85:47
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:25:77:a2:87:44:88:20:c4:5d:89:71:b8:4e:fb:81:9c:23:
         ae:f8:cb:4a:18:b9:64:c6:02:59:fa:da:1a:a4:d6:f5:17:d5:
         7f:d9:73:9e:b2:3c:35:81:c8:a0:83:ec:9c:af:47:cd:f4:a4:
         2a:93:31:10:5a:5b:88:fe:3f:fb:fb:84:d7:ad:23:3b:9a:ef:
         67:fd:25:0b:cb:f4:d2:d0:93:db:de:b6:b1:29:ac:ff:65:84:
         97:43:ba:57:4d:3c:19:ad:25:83:c8:1f:74:f6:46:d9:b3:82:
         fe:98:a5:ba:7d:13:81:f8:f3:74:91:44:94:bb:c1:7a:27:74:
         cc:94:e2:48:7b:24:3f:55:63:4e:73:5d:36:47:7f:bc:28:11:
         7e:aa:94:2f:f6:56:f9:f7:8a:9e:fa:09:75:6a:64:e6:a9:16:
         0e:4d:65:06:97:5e:1b:0d:49:d2:ca:a4:62:fd:b6:7e:ec:25:
         36:cf:cd:50:af:ea:e0:55:a4:e5:2f:e2:a5:5a:e8:a4:21:5a:
         df:b1:70:e7:59:56:a6:5c:11:aa:2a:20:8e:c0:81:0f:2d:44:
         f8:39:19:93:7b:cf:d2:2c:4c:ee:80:1c:3d:71:f8:d3:b0:c1:
         38:e6:6b:2c:34:86:54:5a:d0:78:39:05:bd:bf:c6:04:cd:f8:
         3a:6a:5f:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAhWKGuk8ShxlYZ4Z0KiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzM3MjEwZWQ4YTU2Y2UwZWRkNDU3NGJmNzM2YjYzMjQ1
ZTU4MjMwHhcNMjYwOTI0MjAwMTE4WhcNMjYwOTI1MjAwMTE4WjAzMTEwLwYDVQQD
Eyg3NjEyMzQyODI5Njc3YWYxODZkZmUxMDVhNjU3MDNhM2QyODg4NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Kvfg+8np7l8xZNT05Mz0YccAoV
MBMDlijY6jsPyoCAvxUmtCPiLwCb+pMcr+Zsb5aDNx6vtuOOl9T4QTPhKOX8r/Fe
ZK4vVdd6jLp8RLrr4IcEgOPHtX99P0jiL+IdeeksZ4rjZeCX8Fqx3vaSy7O9fNQp
OHQs/uQUy/SuehSX2tdqbUyzkvNrdAbNUaiBbNUzWqPDRF+B43ClRzdDlhpJ6suh
0kxXC/jZSJH1kYXLw6OUqMttwvnCoYeVl7EpvowQb1RcGscQPeqLZWcOkKcS75UE
vdn1FtvWwYehP7tSO+8XrAJmaPbJvs2yVZtUbUMEee0RidMU+UV5vuykRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYSNCgpZ3rxht/hBaZXA6PSiIVHMB8GA1UdIwQY
MBaAFALDchDtilbODt1FdL9za2MkXlgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEt
YzFmMGVhZWVkOGNlLzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEtYzFmMGVhZWVkOGNl
LzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSV3oodE
iCDEXYlxuE77gZwjrvjLShi5ZMYCWfraGqTW9RfVf9lznrI8NYHIoIPsnK9HzfSk
KpMxEFpbiP4/+/uE160jO5rvZ/0lC8v00tCT2962sSms/2WEl0O6V008Ga0lg8gf
dPZG2bOC/pilun0TgfjzdJFElLvBeid0zJTiSHskP1VjTnNdNkd/vCgRfqqUL/ZW
+feKnvoJdWpk5qkWDk1lBpdeGw1J0sqkYv22fuwlNs/NUK/q4FWk5S/ipVropCFa
37Fw51lWplwRqiogjsCBDy1E+DkZk3vP0ixM7oAcPXH407DBOOZrLDSGVFrQeDkF
vb/GBM34OmpfmA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:13:56 2026 by rpki-client