Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File:                     AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier:          +Mhr8pUCAGQWXnIYPPdwaZ10Vw7FJfuR2qYSeyIspuM=
Subject key identifier:   F7:C6:A5:EA:E7:5A:DB:2C:6D:97:87:DF:0C:7A:C3:AF:01:D0:65:2D
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer:       /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial:       01A0CF36788AF7DDE5104017C6F999E227FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number:          1A6F
Signing time:             Wed 23 Sep 2026 17:00:48 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:48 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:48 +0000
Files and hashes:         1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: zB/3jTmWpMDfKFQRrWs9L/yyShclQ3De+ELSd5X+umo=)
                          2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:78:8a:f7:dd:e5:10:40:17:c6:f9:99:e2:27:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
        Validity
            Not Before: Sep 23 17:00:48 2026 GMT
            Not After : Sep 24 17:00:48 2026 GMT
        Subject: CN=f7c6a5eae75adb2c6d9787df0c7ac3af01d0652d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:68:d9:c4:8c:2f:4b:85:20:9d:27:49:9a:
                    55:92:bf:df:e1:80:ea:56:de:7b:c6:2e:f9:d6:6d:
                    99:84:03:14:d3:3d:22:19:4a:08:85:19:1d:a6:3e:
                    e0:0a:3e:15:7a:67:c3:b4:a9:b3:53:b4:f5:43:20:
                    69:a0:52:66:57:81:41:95:ad:85:94:12:d6:67:a7:
                    2e:0a:a7:72:f8:9f:77:d3:8b:f2:5a:e7:e0:e2:35:
                    43:30:e4:b5:f9:7a:97:9c:7b:06:f7:1b:db:14:e7:
                    2b:44:51:34:a8:65:1b:f1:a2:ee:1a:58:d1:77:a9:
                    c4:09:44:36:37:70:11:7d:64:87:fe:97:f7:5c:53:
                    3e:ad:92:69:55:17:49:ca:c6:0e:16:df:b9:5b:d8:
                    e5:80:fc:d9:d4:84:ce:69:89:56:af:06:7b:1c:49:
                    ee:2d:1a:5a:94:27:ba:fb:7e:84:0e:8a:ee:97:24:
                    01:27:8e:14:86:b8:c5:de:23:c6:ef:e2:9b:74:1b:
                    43:08:6b:11:29:f7:09:0d:6d:7f:71:4a:ce:ef:70:
                    72:90:44:3f:72:5a:23:35:4a:e6:63:2d:3c:a1:a2:
                    ba:32:6b:57:ce:3b:d8:85:50:0f:50:9f:a6:58:a3:
                    ee:59:2f:ec:49:cc:d4:cb:7a:b9:81:3a:38:98:3d:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C6:A5:EA:E7:5A:DB:2C:6D:97:87:DF:0C:7A:C3:AF:01:D0:65:2D
            X509v3 Authority Key Identifier:
                keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d6:b6:ca:da:aa:5e:28:c2:67:5c:67:31:13:35:63:96:2d:
         cb:04:27:37:19:1f:bb:2a:4b:59:61:ee:f2:a1:a6:08:57:b4:
         a4:bf:48:74:7f:b9:4c:61:5b:34:f5:2b:cf:97:3a:a0:50:9e:
         ad:d3:83:e4:49:33:b4:fc:5b:71:e4:2f:a0:21:aa:cc:2f:56:
         9f:16:10:77:31:67:33:cc:7e:4c:e3:54:e0:df:39:27:ac:37:
         1d:f9:03:ca:03:f8:af:a6:fc:51:56:ae:62:37:2b:84:e0:6d:
         26:66:69:53:67:9b:96:a2:e3:c2:7b:15:98:d3:5e:c7:5a:c5:
         80:4e:25:13:17:37:d5:95:06:68:20:84:1d:98:eb:2f:e2:83:
         a2:65:2d:6e:cf:88:17:3d:f6:39:0a:c1:99:df:9d:ef:93:34:
         3a:3c:bd:65:c5:ff:2c:90:05:63:b0:dc:a4:35:f8:07:9f:6e:
         61:1e:c5:4b:79:89:be:d5:e1:7c:0c:f8:06:5d:0c:2d:6c:b1:
         89:b9:0f:22:d1:af:91:4d:5d:7b:cf:cf:e1:5e:68:31:24:55:
         25:a4:19:8a:ad:ea:13:bc:8b:e8:56:6c:74:b5:9b:fb:18:e7:
         f7:f5:3f:54:a2:3e:a1:5a:40:9c:ac:ba:fb:3d:ef:6a:b9:30:
         40:f7:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:11 2026 by rpki-client