Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File:                     AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier:          kuFkKhnTMnS2QioSqcNLCa5u8WFzcXlIhPPmV2Zs7oM=
Subject key identifier:   1C:15:C0:81:BA:43:B5:9C:A4:7F:76:97:22:20:00:0C:A4:18:C6:98
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer:       /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial:       019EBE7EAD193DBBF416D006BE042238FBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number:          158E
Signing time:             Sat 13 Jun 2026 01:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:33 +0000
Files and hashes:         1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: vLAa/LKUX75TxwQ1t4AMW9O9/RbIutepQ2Hnj3GV5zQ=)
                          2: oko0jjQVhM1g4SJmXa1zHjF9DLY.roa (hash: OdA2/Wk2XJh4HpZKtiKeyh0J3e1XxtYP056tIDnTkI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:ad:19:3d:bb:f4:16:d0:06:be:04:22:38:fb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
        Validity
            Not Before: Jun 13 01:00:33 2026 GMT
            Not After : Jun 14 01:00:33 2026 GMT
        Subject: CN=1c15c081ba43b59ca47f76972220000ca418c698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d6:6d:82:78:07:e7:b9:15:b2:32:a7:1c:49:
                    5a:40:87:e5:f0:2c:2e:3d:3e:7d:8f:07:87:97:a1:
                    d0:c6:e4:c9:8b:28:00:06:bb:c2:7c:8c:55:ad:c4:
                    3f:4c:84:64:0b:4d:99:a6:55:f9:63:81:02:94:08:
                    b7:99:2c:1e:ee:db:97:05:bf:0e:c9:8e:4b:40:9b:
                    c9:30:7f:4f:7c:24:3f:8c:d2:a8:21:33:18:67:7a:
                    5f:69:f9:f4:a9:85:5c:14:0e:5c:47:55:be:45:0f:
                    68:c6:c2:04:91:92:ce:d0:93:97:fa:f0:e3:8c:fc:
                    fe:9e:73:e0:90:18:2d:c2:6b:1d:f0:1e:24:cb:3a:
                    73:e3:4a:81:49:17:32:a2:54:c6:a4:08:f7:1a:25:
                    f4:63:44:9c:80:37:07:1d:bf:ba:3d:ed:11:08:07:
                    09:c1:76:93:2d:02:e7:f0:6a:58:56:bf:68:a1:05:
                    11:ef:f7:4e:ef:7d:5a:2a:d4:ef:e9:ae:d9:4c:a1:
                    43:02:ea:15:b1:f6:c9:32:99:3b:95:15:1f:36:38:
                    4a:31:32:c6:fd:6b:83:fb:bc:de:e0:33:da:fa:60:
                    ac:db:05:ea:32:74:e3:17:9d:7b:04:47:90:de:34:
                    e5:bf:fe:31:22:bb:24:9a:1e:45:a9:92:48:db:80:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:15:C0:81:BA:43:B5:9C:A4:7F:76:97:22:20:00:0C:A4:18:C6:98
            X509v3 Authority Key Identifier:
                keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:8b:97:9f:b3:d0:8d:2d:88:52:0f:63:c5:22:50:e0:f5:
         3e:3c:89:f3:9c:94:3e:51:8e:ed:87:ec:5e:23:ab:5a:3e:1d:
         ba:a0:15:b3:fd:47:1c:91:ac:5d:18:df:68:5f:c3:ed:aa:e9:
         9f:b2:33:d9:a6:96:13:7c:05:27:f6:d3:ba:57:f1:dd:be:6c:
         e5:5c:2e:5c:af:99:d4:29:b3:10:fe:26:1f:4b:50:cf:55:70:
         58:c9:70:a5:99:52:e0:18:f2:0c:3e:15:98:2f:f5:ac:8b:30:
         96:ad:d5:23:71:ee:76:00:7a:82:d3:3f:e0:17:78:2e:ef:0c:
         26:34:62:5a:e7:5a:79:ea:68:73:89:b6:3d:e1:c8:c7:8a:b8:
         65:c4:6f:19:a6:b4:a2:0c:7b:90:0a:15:89:6c:e8:12:af:b7:
         9e:2a:e8:20:79:4c:46:0d:2b:b6:d8:3d:fc:8f:4f:b2:ef:b6:
         c4:4d:4d:7b:bc:3a:14:5c:14:2f:7a:57:ed:41:13:1a:a9:f9:
         54:b9:59:ec:ab:fd:79:87:b1:d5:ea:1c:ec:33:a6:83:5e:5a:
         7d:ee:ba:0c:66:00:19:52:fa:1d:ea:0e:53:1e:cc:ba:5b:5d:
         68:53:99:33:b1:2d:16:b1:24:52:f8:eb:a9:56:5d:70:c1:43:
         b1:c4:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:18 2026 by rpki-client