Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File:                     A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier:          bbXMxd+AiebU3U3pBx+BBKP/cb+ca8TngvGs9BXTSYE=
Subject key identifier:   54:6E:27:8C:E5:2E:1A:F8:FC:9D:A6:04:AD:6D:85:8B:B7:E3:5C:BC
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer:       /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial:       019EC1B751D2940E052B2B6A8E9B2110B37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number:          09C6
Signing time:             Sat 13 Jun 2026 16:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:17 +0000
Files and hashes:         1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: VaJrXuu4+V5kWpgLCEcnaJSC7nQiBH0gKWoQru+oK7k=)
                          2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
                          3: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (hash: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:51:d2:94:0e:05:2b:2b:6a:8e:9b:21:10:b3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
        Validity
            Not Before: Jun 13 16:01:17 2026 GMT
            Not After : Jun 14 16:01:17 2026 GMT
        Subject: CN=546e278ce52e1af8fc9da604ad6d858bb7e35cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:e6:62:93:54:dd:6d:13:f4:d4:eb:e3:8d:
                    80:c9:57:ad:67:5c:e1:e0:a0:24:b9:60:87:80:87:
                    62:c0:f1:0d:97:02:19:4c:15:0a:48:a7:df:76:53:
                    1b:21:be:11:9b:32:be:4a:c9:b9:f3:18:21:fe:2b:
                    d1:3a:c5:43:20:4b:7a:66:d8:5a:fd:2d:18:9a:ec:
                    6a:8d:ab:74:9c:b5:e6:5f:97:44:3b:83:3c:47:84:
                    69:10:63:7e:d1:67:4a:5b:c0:e9:d1:66:c5:17:c0:
                    07:33:d7:68:57:1d:6a:76:06:75:d1:07:0e:e4:22:
                    e5:51:a8:e3:17:ac:2c:c0:a8:70:64:7a:b8:cb:70:
                    8b:1a:b7:9d:e2:79:79:d1:79:67:24:a1:2e:0c:4a:
                    3e:2a:36:83:87:d6:17:a5:d3:ac:52:ad:fc:3e:d0:
                    ee:43:05:f2:d7:e1:76:4d:ac:10:c8:50:a2:ad:f3:
                    76:7e:91:42:24:74:3e:d0:ed:2e:bd:28:5f:0f:64:
                    a0:10:d7:f7:77:46:9d:8f:a9:5b:23:35:e7:2b:aa:
                    d8:c2:5b:ab:0c:77:19:2e:14:d0:98:00:87:73:f3:
                    58:b0:7e:21:bd:71:0c:2d:3e:ca:c4:5f:fd:2e:e4:
                    d0:27:31:26:02:89:17:95:17:a4:24:d9:39:02:42:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:27:8C:E5:2E:1A:F8:FC:9D:A6:04:AD:6D:85:8B:B7:E3:5C:BC
            X509v3 Authority Key Identifier:
                keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:21:13:f3:5e:52:d6:84:0c:82:6d:aa:8d:e1:e9:bf:45:b0:
         9d:61:1f:c7:41:f0:23:54:e7:78:63:1d:8e:f8:17:07:a6:bb:
         6d:ac:fd:88:fe:07:e9:90:d7:e1:31:f1:8c:dd:61:d7:3a:fb:
         b4:3f:7b:63:13:0b:80:34:a3:b1:8a:4c:e8:67:66:84:53:83:
         54:17:f0:0e:e3:ba:9b:d1:88:34:7a:b9:07:4f:86:ef:06:65:
         79:c0:5c:08:03:bf:d5:df:60:b3:13:f1:e5:b5:0b:4a:49:18:
         0e:e6:58:22:95:7a:da:74:ae:b3:b8:b3:bc:dd:35:6b:12:58:
         e0:e5:41:13:00:18:cc:f7:ad:32:06:ad:61:d5:79:04:06:64:
         d6:d2:3c:24:66:f7:2f:b0:dc:f7:64:b4:04:ae:4b:71:98:4c:
         18:2f:0b:06:8f:6a:46:7d:8f:ed:08:43:a4:9c:2b:10:81:49:
         03:71:7d:9e:73:d7:08:d6:d7:df:63:cc:6b:f6:4f:df:02:83:
         e2:95:1d:88:b0:71:b8:06:7c:90:4e:d6:b7:3e:a3:10:b7:a9:
         17:61:9c:70:01:4e:8c:78:38:2b:20:5a:db:1a:1b:2b:ce:20:
         96:04:f8:5a:5d:11:40:d7:51:02:57:72:5b:ef:3a:ef:87:d6:
         5a:8c:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:31:58 2026 by rpki-client