Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File:                     AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier:          +Ax65GaXZvKdBVZxuFo9ggjs7myB4cJb2j2VMZh06JA=
Subject key identifier:   58:73:81:CE:19:2D:1D:B9:C5:2A:95:02:BE:1F:85:F2:89:6D:12:F3
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer:       /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial:       019EBEB65C35F868B62E49042A7392AF543B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number:          0B7A
Signing time:             Sat 13 Jun 2026 02:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:22 +0000
Files and hashes:         1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: 9bXs5TlDUVlqeHluiBAzEdI/LV6UBFRsuBnc+M86td0=)
                          2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:5c:35:f8:68:b6:2e:49:04:2a:73:92:af:54:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
        Validity
            Not Before: Jun 13 02:01:22 2026 GMT
            Not After : Jun 14 02:01:22 2026 GMT
        Subject: CN=587381ce192d1db9c52a9502be1f85f2896d12f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:5a:93:d8:53:55:e7:71:25:d0:d4:60:90:
                    75:13:8a:7e:d5:ed:d8:45:50:12:66:d6:ce:83:00:
                    80:fc:f0:dd:2d:cf:f3:0e:fb:53:c0:ae:86:4c:2c:
                    f7:76:36:93:8f:9d:fa:84:ee:a2:c2:7b:73:f5:85:
                    ff:3c:3e:52:11:bf:0d:99:ed:57:8d:b0:71:20:5c:
                    f7:fb:9e:05:4c:40:60:b0:05:97:02:e8:c8:e9:5a:
                    4d:38:6f:33:d3:5e:55:9e:62:0b:bc:6f:db:6c:0e:
                    6e:70:13:eb:a8:44:11:bb:9e:b3:5d:6d:d5:84:6a:
                    e0:e2:87:a7:75:2f:cd:f9:4d:53:da:7a:55:70:69:
                    66:df:31:7b:02:e9:75:25:af:04:d1:24:2c:63:c4:
                    ce:41:5f:d8:ab:75:ca:03:19:d4:33:0c:dc:c0:cd:
                    bb:7a:fa:0d:ae:ed:96:f8:de:e8:6d:3f:89:83:4b:
                    0a:35:ad:6d:f7:d2:a4:d0:4a:5c:95:49:27:fa:96:
                    97:dc:71:91:6b:f4:7c:b7:b3:65:9a:a5:5f:07:d8:
                    c8:3c:7f:b4:28:0d:2a:1f:96:a9:cb:23:e8:75:91:
                    06:85:8e:00:22:8b:3b:03:9e:4a:78:f1:17:86:30:
                    6b:57:bd:8f:aa:d4:30:68:1b:b1:2c:58:cd:58:c7:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:73:81:CE:19:2D:1D:B9:C5:2A:95:02:BE:1F:85:F2:89:6D:12:F3
            X509v3 Authority Key Identifier:
                keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:61:8d:9a:09:09:35:98:48:84:ce:9f:1b:05:e9:b2:77:
         95:ce:9a:04:e6:b7:e5:39:dc:ca:69:18:e5:73:af:ef:e0:da:
         e4:5e:de:6f:58:72:d4:f1:6f:c9:0b:6d:d0:60:a0:1a:7c:81:
         99:df:03:3b:e4:bb:ba:1a:c7:13:7b:a6:bf:03:2d:8c:47:78:
         54:1d:3a:e2:19:5c:ac:97:09:6a:a6:dd:9e:56:e7:2e:0a:6a:
         61:7b:9a:ea:19:53:4c:12:86:ec:c5:86:5e:77:7c:09:a7:47:
         91:06:ef:b7:2a:01:75:63:67:79:01:ef:41:7d:d6:32:c7:3e:
         3b:92:96:e9:12:96:4d:7e:e3:90:6c:fb:f9:26:53:ce:b2:3d:
         97:9f:e4:44:ae:46:16:46:fd:44:90:fd:13:c9:f6:75:c5:c9:
         2f:89:2e:7f:e2:52:fe:a1:6b:1e:9b:63:d2:2d:65:3b:dd:76:
         58:64:73:de:41:a0:7e:28:07:b5:a1:46:50:69:d5:39:ac:b7:
         02:0d:ab:38:50:f0:97:ef:5a:d9:16:39:09:7c:73:f6:61:ea:
         96:a6:4f:0a:63:00:81:f9:86:cb:0d:5a:d4:d9:93:3f:dd:fb:
         4c:6f:ce:f6:55:af:c8:dc:b4:d8:79:e0:74:0e:66:10:c0:f8:
         ab:7e:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:36 2026 by rpki-client