Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File:                     AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier:          WpZpEntZGpqGd4tNXhoj+4oRhG/QVbB1K1WvXVHS/h4=
Subject key identifier:   3C:A1:C7:F8:DD:C4:0E:72:0C:9B:33:49:74:F2:42:41:61:2B:CE:87
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer:       /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial:       01A0C9346AF98AB0411D8C84BBA529FB88F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number:          0B61
Signing time:             Tue 22 Sep 2026 13:00:50 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:50 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:50 +0000
Files and hashes:         1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
                          2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: p0oc/FgiR8JPQjPB6v4mqqWaA30l2tatCvYdEIC8VCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:6a:f9:8a:b0:41:1d:8c:84:bb:a5:29:fb:88:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
        Validity
            Not Before: Sep 22 13:00:50 2026 GMT
            Not After : Sep 23 13:00:50 2026 GMT
        Subject: CN=3ca1c7f8ddc40e720c9b334974f24241612bce87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:66:b7:6d:b4:6d:9a:b5:9f:c7:d8:9d:36:
                    4a:61:73:e2:00:82:2c:28:23:79:8b:7f:74:9a:bd:
                    43:e8:ea:49:82:c3:e8:ec:64:df:71:3f:6f:1d:ba:
                    b7:68:03:35:3b:4c:26:9d:4c:e0:34:cc:ef:13:1c:
                    d0:27:5f:84:77:3b:5c:1e:14:89:fe:22:cb:db:c7:
                    b4:eb:ab:0f:73:31:a4:ff:93:e3:c8:75:0c:da:42:
                    c1:43:36:45:ce:58:96:f1:f2:85:7c:9b:f3:b1:28:
                    aa:08:d3:0b:90:30:65:eb:66:dc:f4:ae:ac:b8:bd:
                    fd:b6:b3:33:30:43:83:37:65:d6:e3:f9:6c:13:1c:
                    84:d7:b3:bd:e6:58:2f:93:47:ac:ae:74:10:5b:34:
                    be:c5:1f:ac:14:48:49:78:ca:8f:d4:39:3d:16:d8:
                    63:0e:e9:ef:6f:b8:9b:68:8f:47:9f:bd:ad:34:40:
                    1d:58:40:a2:5b:b6:f3:c6:44:25:65:00:bc:19:05:
                    5c:83:08:15:ea:d6:db:8b:fa:54:07:89:e2:d8:62:
                    68:1c:6b:d8:be:bc:09:10:26:1f:00:e9:50:fd:59:
                    f3:b4:da:09:56:8a:aa:6c:59:1f:1d:e2:cc:98:55:
                    02:ac:1d:31:23:9a:09:fd:84:48:6c:84:9c:fb:41:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A1:C7:F8:DD:C4:0E:72:0C:9B:33:49:74:F2:42:41:61:2B:CE:87
            X509v3 Authority Key Identifier:
                keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:78:f3:b0:ea:7a:00:82:e1:14:3f:80:d9:e5:52:9b:fe:e1:
         a8:a8:23:a1:61:0d:26:10:23:74:05:9c:18:3a:da:1d:c2:bb:
         1e:ee:c7:a4:17:0f:76:35:17:fe:2b:33:b0:a2:66:3a:76:54:
         1a:15:a6:5e:19:ff:0b:70:a2:10:5d:ba:c9:2e:81:5b:ce:b3:
         fa:9c:21:fe:4f:90:44:e9:dc:98:9d:c8:c5:29:3d:a8:ff:5b:
         23:62:79:43:e1:5b:d7:4b:89:4f:5d:b0:ca:c9:79:d3:ff:44:
         5f:30:40:9d:6e:e9:11:42:73:e6:74:0d:a0:88:c2:d6:12:80:
         6f:4f:b2:61:aa:8a:84:7d:5f:a2:6a:84:eb:70:f7:78:33:b3:
         2f:6c:3d:cf:4a:60:32:d8:71:fc:4f:88:ad:0b:77:ca:22:10:
         7f:4f:60:9f:cd:ab:47:4e:1c:23:09:ea:91:b5:fd:f2:1f:2b:
         a1:ca:ad:61:a4:12:d4:82:4c:d9:c3:d6:56:e4:7d:5a:73:ee:
         28:6c:d7:13:bf:03:d8:2a:27:26:a6:80:05:2e:37:c6:f7:e4:
         6f:3b:23:05:fb:63:c7:bd:45:84:2b:a9:db:f9:39:ff:0e:3e:
         3a:d0:5d:36:7b:81:d9:c7:b8:37:32:32:b0:ba:f2:2a:75:06:
         07:bc:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:55:27 2026 by rpki-client