Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          PNKz1ROZSFQGTf6A0sv7fQJlMPMDqpGN3lGah5BV+8g=
Subject key identifier:   4A:F9:B0:11:00:C9:5B:0C:60:E2:84:CD:FB:7F:23:AD:4F:4E:EF:E1
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       019F90C7CE89239C2032D289896AAF431EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          129E
Signing time:             Thu 23 Jul 2026 21:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:41 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:41 +0000
Files and hashes:         1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: aKR+3pBdC93KHjr/t2mPbm5tRxAdLrZwxWw9O/2mtOw=)
                          2: ZcMDnxFKg86WG985x8gSYpkiw0w.roa (hash: NWzoV3X+tjCKZ4ahSvdzMzLxfudtWlBZs1TQLyd53h4=)
                          3: lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa (hash: DS6+mQyyS1WgqS8CIrjWgik6/BiJxSFGFw65yEtb7os=)
                          4: sADfRLRIwEm-KVdFT8jWlHL8oSg.roa (hash: EZEYubhTSXGqlxWAm0J4OXdKM/7Z+1zdS/2lIIhyTjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:ce:89:23:9c:20:32:d2:89:89:6a:af:43:1e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Jul 23 21:00:41 2026 GMT
            Not After : Jul 24 21:00:41 2026 GMT
        Subject: CN=4af9b01100c95b0c60e284cdfb7f23ad4f4eefe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:8f:14:ef:3f:0c:8d:39:7c:ff:32:09:e6:
                    90:fe:b6:e7:47:d0:6a:1c:31:2d:6e:0e:2b:38:ff:
                    68:a5:2b:b7:48:3b:5e:bc:f0:f8:79:05:e7:71:ab:
                    44:bb:5d:13:30:81:7a:fd:f8:cf:7b:b1:1c:74:c9:
                    d9:23:b6:25:73:38:90:d5:07:0c:ae:64:ab:22:40:
                    74:f8:3c:ee:76:ad:32:ca:e6:bb:27:30:70:b0:6b:
                    5b:9d:80:03:a4:59:f8:99:3c:31:34:e1:71:c2:2a:
                    1b:32:2b:97:0a:f5:3a:75:9b:1f:b8:c9:12:f7:9d:
                    ff:eb:20:ea:e2:87:8e:54:63:45:2a:1b:46:c4:0f:
                    d8:e9:dc:8b:f6:e1:f9:a5:2c:b2:10:6f:9a:3f:e5:
                    5a:7f:a8:c7:ba:75:4e:69:fe:b4:8a:9b:95:83:77:
                    3b:eb:98:1c:04:bf:e8:73:ad:40:c9:b0:37:0e:0e:
                    fc:37:4d:d4:b4:a1:97:b4:fe:55:17:f0:3c:f1:4b:
                    29:da:b2:03:47:c9:77:15:20:ea:e7:1c:3d:f5:cb:
                    ed:74:48:94:10:72:7f:7d:5b:17:6e:f5:78:2f:8e:
                    4f:29:e0:8c:44:ab:fb:70:be:3b:86:5c:12:1d:1f:
                    9b:66:93:33:4a:1a:34:03:6a:33:ec:db:e2:34:db:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:B0:11:00:C9:5B:0C:60:E2:84:CD:FB:7F:23:AD:4F:4E:EF:E1
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:25:24:85:f3:fc:4b:06:f2:6f:c9:4f:cc:21:19:62:9e:8d:
         df:b8:3c:23:58:18:48:18:fd:c7:42:66:51:a6:44:72:31:73:
         36:65:55:a2:ce:3f:1e:8a:9e:9c:04:ad:44:38:f6:1a:8a:59:
         37:4f:96:b4:d7:15:99:a8:fd:69:d6:f1:d8:c5:21:3d:c0:1c:
         c7:ad:eb:1a:a9:be:c3:a7:52:1d:88:9b:9f:85:a2:79:4b:5f:
         b6:e4:f5:83:55:a3:03:ea:ff:57:b0:3c:da:29:b8:15:50:08:
         4d:e5:cf:5f:ec:78:5e:b2:26:09:18:5d:44:b8:6d:a0:af:4b:
         e7:22:0b:0e:1a:32:40:f5:86:2f:fd:8a:31:b6:9e:31:9c:c1:
         f7:28:a7:5e:8f:cb:51:5e:5c:03:8a:f4:23:a9:76:59:93:30:
         2a:29:55:9e:5c:54:14:9a:8a:a8:99:c2:ef:8b:69:e2:d5:ed:
         0e:a3:f2:c7:75:91:c6:3d:18:17:0a:b8:da:4d:02:31:d9:05:
         3c:cd:25:bb:bd:45:ef:10:5d:e1:d8:ba:ec:db:8e:bf:2c:a3:
         e3:2d:dc:4d:d3:62:f4:11:40:dd:a8:26:c3:75:18:1d:b3:09:
         f7:3a:88:cd:bf:1d:c0:87:97:41:0a:f9:d1:48:4c:ef:e6:cd:
         0c:7d:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:17 2026 by rpki-client