Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          T5LXPWfC/5jvG5IOhddma57zBtBAb/HgQChQNMJMFQM=
Subject key identifier:   BA:95:52:39:7D:3C:7C:35:6B:CF:68:97:C2:D6:54:01:CB:AC:10:E9
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       019CAB33FF10140B0B829E9EF365B42C5A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          0983
Signing time:             Sun 01 Mar 2026 21:00:37 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:37 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:37 +0000
Files and hashes:         1: EliSXZrgR1c36J3q5HEwgdzaHX0.roa (hash: FZup8urDRjoh+LhoPd+RJukJeWSAFbFgyU+lJveq7KY=)
                          2: Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa (hash: L1aIopxOUtbBLkdUuaCRDC0ncbpwnY8QrLA/wvRFK5A=)
                          3: akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa (hash: nhX5fVxRS3e4icCOygzdch8SpwXkUN5wlZ7uTW93Gsk=)
                          4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: KcW0tXejMvNbJkXP2k1vJIMqke+nya5nmA/yfrEml3s=)
                          5: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
                          6: kIDgGMW1uXNaj9KusJXcTTlIh7c.roa (hash: PwAEtgyKC+fUUIGh92oSv3jyXm09MobuWsRtDnHhYsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:ff:10:14:0b:0b:82:9e:9e:f3:65:b4:2c:5a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Mar  1 21:00:37 2026 GMT
            Not After : Mar  2 21:00:37 2026 GMT
        Subject: CN=ba9552397d3c7c356bcf6897c2d65401cbac10e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:b7:7d:4e:09:9e:1f:cc:31:27:fa:a4:c7:
                    c7:86:1c:90:ea:69:6d:6f:f1:b2:40:1d:3d:59:3e:
                    9f:3e:8b:cd:82:b4:49:56:bc:53:86:e3:9b:41:5e:
                    45:07:50:7e:8b:82:18:40:02:0a:36:2b:f0:9c:fe:
                    74:d4:ef:3c:56:70:d4:e3:11:d7:24:23:84:7f:36:
                    00:18:db:9f:0b:2e:3f:a6:99:04:1c:42:1a:83:ec:
                    e6:a9:db:e3:15:ee:0f:1d:17:90:6d:87:2a:db:7a:
                    c0:01:a7:0d:4f:98:0a:3c:6a:78:85:f1:11:c0:cf:
                    06:af:93:60:48:20:ce:ae:ee:2d:08:db:f5:01:83:
                    f5:05:86:3a:a5:4c:7a:44:af:4b:6d:b3:7c:83:1a:
                    36:48:23:aa:d1:3b:62:5d:f5:6b:44:37:ad:d9:5d:
                    69:1a:d4:d8:3a:9f:37:42:1c:06:27:1f:44:c3:4c:
                    0d:20:dd:e4:40:4c:cc:bb:f9:20:0f:b0:5b:49:96:
                    93:29:2d:1b:4d:77:11:d1:30:7e:ed:0e:4d:2a:16:
                    2e:26:03:28:c0:e2:27:5c:45:ba:f3:e9:52:0b:26:
                    d0:22:c5:05:00:19:fe:a0:18:48:48:be:7b:f9:f6:
                    33:1b:b3:2d:85:94:6e:ac:76:03:c6:09:ed:52:04:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:95:52:39:7D:3C:7C:35:6B:CF:68:97:C2:D6:54:01:CB:AC:10:E9
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8f:e9:c3:6d:dc:66:43:59:a1:82:11:0f:4a:d0:32:03:1b:
         c8:ab:21:15:0c:db:65:38:33:bd:85:d7:eb:b1:78:0e:30:37:
         7d:80:14:e5:fe:64:b3:08:bc:79:48:a9:cc:30:9d:9f:d2:58:
         83:fd:e5:bf:93:2c:36:36:c5:43:bd:f7:67:c1:d3:1d:f7:df:
         d7:a0:01:5f:4f:3d:e7:fb:8d:bd:bc:7e:6d:22:c2:df:54:93:
         1f:25:f7:58:f2:ce:7d:35:bd:dd:6a:a6:25:a0:e1:f9:c3:6e:
         9d:da:b1:e4:fc:5a:9b:2d:d9:fb:19:e1:a6:08:c3:49:12:ac:
         4f:e0:65:c0:23:c1:c1:05:11:38:8d:d3:5e:37:77:07:38:fc:
         80:8c:8c:d1:db:70:3d:a7:ca:69:fc:06:ea:36:ac:aa:e0:61:
         2d:d0:3c:0e:b5:39:29:51:de:e9:12:8a:4d:5d:7e:82:e4:ab:
         8b:d9:49:1b:5d:4d:24:a1:50:de:71:e2:10:82:86:41:ce:bf:
         1d:35:b5:92:5e:34:28:52:b7:ee:37:53:da:d9:22:01:2e:ad:
         fc:40:f5:71:3b:23:c9:45:fd:18:8c:a1:6c:ef:09:40:fe:4e:
         c0:21:7c:70:67:f7:bb:b1:48:bf:e5:98:6d:f9:f8:02:e9:74:
         a1:b2:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:31 2026 by rpki-client