Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File:                     ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier:          Z3OxNG/eJDvmpTQbJb5tCweNrjg94TyR7TlpUkwLOcs=
Subject key identifier:   C9:0A:11:03:B2:CF:F8:59:F5:7F:A8:CD:03:7F:38:D1:B7:85:E1:66
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer:       /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial:       019E216DF9DF3FB2976F7A6D28E76483147C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number:          0416
Signing time:             Wed 13 May 2026 13:01:55 +0000
Manifest this update:     Wed 13 May 2026 13:01:55 +0000
Manifest next update:     Thu 14 May 2026 13:01:55 +0000
Files and hashes:         1: E2O5g-3u7QFDSnqyhGOqtBMannc.roa (hash: LyXDleKJ3gZrrfu8ZQu1gqPieNpy6nIwJ9/Oz5vq8aE=)
                          2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: 6dZP7heIOXAJe2TCZvDB/vzLvMwVd6DRsuzeN+rqsm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:f9:df:3f:b2:97:6f:7a:6d:28:e7:64:83:14:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
        Validity
            Not Before: May 13 13:01:55 2026 GMT
            Not After : May 14 13:01:55 2026 GMT
        Subject: CN=c90a1103b2cff859f57fa8cd037f38d1b785e166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:0d:90:4a:09:bd:32:cb:e8:1f:eb:0c:f3:
                    0e:c9:22:eb:cb:95:12:83:27:10:5a:ad:c2:93:e9:
                    f5:1f:eb:05:01:ee:8f:f5:4b:37:d3:4f:54:63:c0:
                    c5:0d:63:aa:75:0f:5f:4c:4e:fc:b3:26:31:1d:98:
                    c5:a6:c1:9f:e0:ee:bf:44:0c:2a:0c:2d:53:0a:91:
                    18:fb:9e:0c:91:78:45:14:42:32:b5:dc:fc:12:54:
                    5a:54:99:4e:44:d4:bf:be:45:54:24:1f:f5:ff:a1:
                    32:c3:02:cd:fe:09:17:b0:dd:ff:50:fd:bf:cb:85:
                    22:3a:31:f4:03:6c:d8:26:61:cf:db:af:69:96:d1:
                    92:7a:56:78:42:65:a6:4d:f3:1a:72:95:4c:53:cf:
                    65:34:00:9c:d3:8b:0c:bb:31:20:bd:98:fb:23:eb:
                    d1:bf:07:cf:48:13:f9:8a:f6:e7:e7:7a:37:84:4e:
                    b0:5c:a5:9a:3c:c9:53:d8:49:c4:14:b1:04:a7:08:
                    5e:7a:b7:f8:56:a3:8e:5d:f4:fd:bc:c4:21:a5:ed:
                    73:93:bb:cb:3a:cb:9e:aa:f6:d4:31:1a:7b:bd:c3:
                    48:c7:03:72:81:bb:54:21:44:dc:ec:ef:ab:a1:7a:
                    d4:ba:31:aa:b7:5c:7a:a3:07:13:17:94:26:11:4e:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0A:11:03:B2:CF:F8:59:F5:7F:A8:CD:03:7F:38:D1:B7:85:E1:66
            X509v3 Authority Key Identifier:
                keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:b7:4c:f5:b4:00:ac:6b:ce:7a:e5:12:42:ce:e6:b2:e2:
         8d:e3:73:c2:fa:a6:05:71:32:57:b2:4c:91:76:ae:d2:56:95:
         20:ba:ac:67:14:48:ee:40:3c:a8:42:6f:92:8f:16:3a:90:b0:
         e6:ea:7f:8a:c4:98:d7:12:f6:da:8d:55:8f:0e:11:32:7d:ee:
         82:13:d9:0a:ad:b5:27:ca:57:44:8d:ee:f2:39:15:c7:ae:bc:
         e8:d2:85:b0:00:49:97:b2:05:7a:f2:1e:25:5e:de:8b:79:bb:
         1b:21:f8:59:d1:3b:67:2f:b2:96:bd:dd:51:39:0a:a7:5c:dc:
         95:b3:2e:2f:07:71:d9:81:12:8f:4b:b2:99:b6:15:bf:15:d7:
         b5:4f:72:f7:70:38:f0:36:14:a4:f3:f5:01:4e:31:68:0a:71:
         d0:3a:33:85:4a:85:d5:4a:94:cf:94:f4:5c:9a:08:83:97:06:
         88:dc:76:66:57:32:0e:ff:5e:74:6b:12:47:38:4f:c3:e6:4f:
         37:6b:20:33:31:e2:f0:65:49:14:3e:81:eb:d1:f7:fe:f0:0c:
         a0:fc:a0:16:0f:9d:ab:6c:4e:f4:40:3c:1d:51:a9:77:79:36:
         ce:e0:3e:05:58:a4:ab:10:69:e1:a1:cc:84:5e:b9:7b:c7:d1:
         9c:cd:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:40 2026 by rpki-client