Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          96/WxalfTHu649G9arRbIsEKoztwfs5r3KeTQuIAyQw=
Subject key identifier:   53:54:D6:A5:EC:76:9A:FE:97:09:BA:83:D1:9D:72:00:B0:6B:FE:3E
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       019CACEB5A6BB162860CCDB77744CBE6D33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          10B6
Signing time:             Mon 02 Mar 2026 05:00:30 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:30 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:30 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: 32xgAu08rd48diF3mljas47BZlekdKlbcz9uE/WAn7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:5a:6b:b1:62:86:0c:cd:b7:77:44:cb:e6:d3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Mar  2 05:00:30 2026 GMT
            Not After : Mar  3 05:00:30 2026 GMT
        Subject: CN=5354d6a5ec769afe9709ba83d19d7200b06bfe3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:21:cb:6b:ff:fa:2e:ef:dc:ba:84:21:88:
                    44:fc:48:6c:b7:d3:4a:27:d5:d8:13:df:19:ed:d5:
                    63:ac:31:9f:2f:37:e9:95:b4:e5:54:34:7f:bd:1b:
                    85:45:d5:df:37:0e:a5:85:fa:10:ab:8d:51:fd:ea:
                    d5:80:16:a9:9c:9a:b0:fe:8a:b3:d5:ae:86:34:3b:
                    a4:40:4c:dd:af:af:14:b6:b3:5e:43:02:eb:21:4c:
                    71:44:45:04:1b:55:7f:c9:17:71:aa:64:91:da:f6:
                    ec:59:97:a4:b6:f4:60:9b:c4:a5:cf:42:8f:fc:09:
                    f6:3d:76:da:30:52:35:4a:91:fa:eb:7e:be:dc:c8:
                    4e:8f:f9:fe:11:00:c4:09:00:02:fa:80:0d:b4:a2:
                    70:10:9b:1e:a7:ae:4c:e9:ab:f2:91:d5:51:63:56:
                    ca:15:cc:ba:6d:ea:24:8b:48:a9:eb:61:22:19:29:
                    e0:b6:57:37:03:7f:7a:96:f4:57:2c:7a:d8:90:b1:
                    9e:5d:2a:6c:26:d3:47:2d:65:37:14:3e:65:59:9a:
                    c7:b4:64:df:b4:cc:5e:09:ea:ff:a2:6a:6d:55:0c:
                    ae:f2:05:5f:cb:b8:fc:2c:86:20:d5:42:ca:70:60:
                    32:0a:83:b2:47:58:d5:e5:f3:66:c3:c1:8f:b6:bf:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:54:D6:A5:EC:76:9A:FE:97:09:BA:83:D1:9D:72:00:B0:6B:FE:3E
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:8f:2f:07:49:7e:95:14:01:d5:73:28:19:b9:fb:2a:8e:
         ab:d8:84:9a:2c:9f:1f:10:f0:21:18:63:d3:8d:57:28:e0:42:
         c5:14:94:8f:6c:1c:d8:22:da:a6:ca:4e:f4:3e:66:48:55:13:
         5c:15:45:63:c0:9d:e6:e4:0b:a3:c3:87:9e:a8:54:43:4f:9e:
         a0:e9:89:e1:40:ca:5c:48:ef:ba:ef:39:69:03:2c:d7:ee:db:
         94:02:21:d6:b2:1c:16:f6:c2:d6:34:19:2e:ea:9e:7d:0f:76:
         39:2e:80:7e:57:b1:5b:85:dd:66:ad:53:3c:01:46:5b:34:9e:
         a9:ea:85:33:ee:b9:e3:4b:92:a6:15:2c:b7:92:ab:46:70:08:
         52:40:c6:c1:2d:d9:62:f1:d4:33:06:77:2c:d2:8e:a8:85:fe:
         bf:72:3e:81:7c:3e:24:11:6a:ac:08:f5:7a:58:7e:41:a5:d4:
         d7:9f:ca:dc:47:3a:96:7a:b7:ec:fd:4c:93:41:24:09:9b:b2:
         77:71:ac:33:47:15:6f:2f:7e:f3:96:9a:16:6e:dd:b6:c6:d8:
         83:9f:5e:85:81:c7:ad:93:ea:12:ba:fa:8c:a3:cb:ae:79:4d:
         ab:fc:3c:8f:65:25:ad:87:01:6d:8c:73:34:aa:2a:f9:c9:e7:
         54:d7:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:15 2026 by rpki-client