Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          a4LabBh7sCYDJ5TuzCHNi6k0rQc0aP4VVP7UnEoVUeA=
Subject key identifier:   69:7C:91:0D:87:D6:EC:B2:D8:83:FE:2C:40:81:4B:E6:A4:A4:DB:BF
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       019D9BBF259BB9D8BFC4881832954BD844FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          1789
Signing time:             Fri 17 Apr 2026 14:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:28 +0000
Files and hashes:         1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
                          2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: lH9F9UyBpqhgZNXOZ9/KpGIculXRqA7aX3fylsY4/jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:25:9b:b9:d8:bf:c4:88:18:32:95:4b:d8:44:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Apr 17 14:01:28 2026 GMT
            Not After : Apr 18 14:01:28 2026 GMT
        Subject: CN=697c910d87d6ecb2d883fe2c40814be6a4a4dbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:3c:ff:1d:de:2a:e1:51:92:65:f6:10:35:
                    a5:ac:ba:00:cc:4c:dc:16:9d:8a:5f:6a:8d:62:89:
                    15:31:1a:5d:24:44:7c:08:84:be:a3:ed:f1:12:85:
                    fa:11:cc:63:d8:b1:a0:49:02:9b:6d:66:3c:f5:28:
                    e5:2b:41:33:21:db:02:67:dc:dd:d9:7e:5c:57:c0:
                    84:23:d1:4e:9e:5b:a9:b9:aa:89:34:9a:ae:5d:0a:
                    0a:69:1b:d8:a0:98:8d:12:16:e2:7b:f9:de:1c:f2:
                    56:97:77:f5:7e:be:ee:3b:1e:b7:2d:99:62:17:7d:
                    2b:46:4b:28:cc:df:86:91:9b:38:b6:4b:c8:b5:7d:
                    1e:d5:b1:22:81:fd:cf:4c:1d:86:8d:c1:a5:fc:80:
                    5c:f1:37:9d:87:32:be:b4:e5:95:72:40:74:a0:6a:
                    6b:3a:22:c9:80:57:2a:52:1d:00:52:15:18:e5:9b:
                    88:e1:73:17:c2:10:1b:15:b9:d1:b5:3f:44:f4:8b:
                    97:ad:55:2a:d4:19:b5:f7:5b:c1:1b:ad:ca:39:57:
                    f1:06:cf:70:93:a8:15:ac:ff:79:1c:83:48:53:03:
                    4e:70:dd:6e:7b:81:46:71:08:0e:cc:20:d4:5f:70:
                    b5:86:6a:10:ea:19:d7:ce:81:e4:3e:3e:05:3d:88:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:91:0D:87:D6:EC:B2:D8:83:FE:2C:40:81:4B:E6:A4:A4:DB:BF
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:3f:c5:ca:03:46:d3:8c:93:8e:37:08:65:83:ef:a9:18:ce:
         fc:f1:7f:16:2d:52:55:73:be:af:4d:52:06:a0:f5:05:cf:a8:
         71:17:cd:6d:56:d8:9d:97:0d:27:81:a7:f4:d7:de:e6:8d:8b:
         78:b3:5e:cb:0b:9c:e1:53:67:d1:ad:fd:65:b4:b9:24:7e:9f:
         51:32:2d:2f:b5:64:bc:47:15:62:bf:3a:8d:3b:6e:9b:f4:85:
         2e:ee:54:e8:d6:fd:77:1a:20:19:60:75:96:12:ab:4c:73:68:
         05:db:c5:d1:84:c4:a8:c3:e5:a4:3a:85:ad:84:47:9d:10:05:
         f2:d3:88:d0:95:66:3e:e9:d4:e7:42:9d:c5:af:d9:50:de:d3:
         bc:8b:a5:3f:ff:6c:e1:82:ef:e2:61:65:d1:cf:83:6e:f3:ed:
         85:1c:d2:c1:d7:7f:b8:e9:d0:30:46:30:bb:b6:96:d0:c8:b9:
         84:c1:0f:2d:15:7b:ef:e6:b6:ce:e4:1c:bf:2d:98:44:7d:b8:
         06:4e:4b:53:cc:06:cc:fe:7e:fb:c8:6a:b4:85:6b:4f:3a:1e:
         62:64:95:84:36:1a:ab:d2:39:88:b4:3f:16:96:3d:f1:42:dc:
         43:55:a9:03:3d:5b:92:35:1e:a9:1f:2e:53:36:2a:3d:82:f3:
         90:f6:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:08 2026 by rpki-client