Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File:                     A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier:          UuA5Z72qSuR6vGZU4AR4sZWjqrak/Hc72oEhUjDoyB4=
Subject key identifier:   0C:46:EC:47:62:10:D6:96:1C:57:2F:96:51:F6:FE:96:96:11:4B:63
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer:       /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial:       019EBEEC4B1F9BC3E9BFE7D491DA9B9EA5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number:          155E
Signing time:             Sat 13 Jun 2026 03:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:17 +0000
Files and hashes:         1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: b9E4wXetjE7qzI5ksXLcpF+vQDG0zSweGdlgccLHfsg=)
                          2: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:4b:1f:9b:c3:e9:bf:e7:d4:91:da:9b:9e:a5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
        Validity
            Not Before: Jun 13 03:00:17 2026 GMT
            Not After : Jun 14 03:00:17 2026 GMT
        Subject: CN=0c46ec476210d6961c572f9651f6fe9696114b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:6f:1c:a3:9b:fb:0b:4b:7a:eb:94:be:a4:
                    ad:36:f8:f8:2f:0c:bc:1f:fc:42:e0:00:6b:46:d2:
                    c7:44:6c:10:d3:56:e1:3e:ee:17:cc:27:44:9d:fe:
                    dc:90:4b:f6:cd:cd:8d:bd:65:1e:66:d5:10:81:5d:
                    b1:b2:28:e3:c0:87:65:13:3c:56:4a:83:cf:a1:49:
                    84:75:18:51:db:ef:72:7b:33:1b:82:f7:05:67:13:
                    92:24:7c:b4:01:da:1e:e2:90:01:1a:ed:06:fd:1d:
                    95:0f:23:ed:0a:0b:7a:1e:c7:84:6b:17:ca:cc:3f:
                    81:5e:4c:82:d1:b8:86:b4:70:60:33:ae:9c:d9:4d:
                    dd:56:0c:34:10:13:54:0b:83:17:cc:d9:f9:c0:6a:
                    2c:b3:6f:0b:ed:e9:ae:0e:6c:6b:b6:24:b0:e3:99:
                    0f:a2:d5:56:d5:f9:93:12:b0:4a:4c:7b:76:c2:33:
                    73:9b:14:ce:c0:47:fe:43:89:fb:24:5d:05:6c:d6:
                    6a:ab:40:05:60:4a:58:5a:66:21:30:d1:51:c0:d5:
                    9e:11:d0:6d:8f:61:ba:45:96:c6:15:3f:b1:36:a9:
                    60:c5:ce:cf:2d:d0:89:48:9b:6e:3b:21:f4:3d:7a:
                    df:c6:fb:8c:c7:ab:0e:0d:3e:53:62:06:6f:12:b7:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:EC:47:62:10:D6:96:1C:57:2F:96:51:F6:FE:96:96:11:4B:63
            X509v3 Authority Key Identifier:
                keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:d6:41:67:37:ec:db:23:4c:f1:d6:80:5d:34:ff:60:05:
         2e:c0:b3:4a:63:bc:a3:86:86:2b:55:c9:ef:d4:83:5e:14:55:
         13:10:95:57:b1:20:13:94:da:2e:93:ba:f7:3b:94:cb:f2:16:
         10:2e:52:d1:b1:af:4d:c6:dd:19:46:f1:da:0e:e3:d8:06:f9:
         53:4e:fa:2a:63:fc:6f:9a:57:d9:33:ea:91:b9:5f:d3:9f:be:
         43:a3:61:6f:b6:a2:ad:48:e7:cd:26:a9:95:14:47:f0:35:35:
         20:9c:cd:ad:35:ee:31:06:a8:14:ab:72:8b:6c:bd:df:af:0d:
         51:8f:dc:d4:1a:ff:02:cd:72:35:fa:39:ec:70:04:84:54:2a:
         b9:28:7e:e0:74:62:56:86:51:a9:aa:6c:67:74:d2:23:4f:59:
         03:1e:e0:6f:a9:83:f2:dc:0f:4e:cc:58:98:74:12:8d:57:ad:
         c6:e6:b1:0e:3a:13:60:b7:82:78:d9:0d:55:b8:fa:d2:5d:f4:
         ce:01:72:f5:62:f5:f6:6e:03:08:e2:da:a6:4f:f3:ba:57:99:
         93:a3:2c:f7:d7:de:0a:40:77:93:3f:57:07:8f:ee:e7:4e:be:
         cf:8f:f0:11:b6:71:05:95:86:2b:40:b6:77:85:45:05:26:38:
         92:e0:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:27 2026 by rpki-client