Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
File:                     aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json)
Hash identifier:          J9RP/94AcDNlewm6WgPbk0dQbG0inHyH83/EwwTDtJo=
Subject key identifier:   DB:C3:66:43:46:FF:02:F6:69:48:67:92:68:2B:EA:FB:E1:61:CD:B8
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Certificate issuer:       /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial:       019CAA5842542C4BCDA722B086E5416697AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
Manifest number:          0956
Signing time:             Sun 01 Mar 2026 17:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:36 +0000
Files and hashes:         1: B37ZLKtj14cuD-pdJFeTxpgnlo4.roa (hash: RjHd8q/rrwWBUD1P2o4ZQ5H8oNxRkf+ZFtauIfVCi3Q=)
                          2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: oMnwTjTj3Vs6RckUHj4kAYn3Jck+zu4DL+U9TwQpGkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:42:54:2c:4b:cd:a7:22:b0:86:e5:41:66:97:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
        Validity
            Not Before: Mar  1 17:00:36 2026 GMT
            Not After : Mar  2 17:00:36 2026 GMT
        Subject: CN=dbc3664346ff02f669486792682beafbe161cdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:35:97:3f:92:48:84:20:e1:d7:27:32:9f:
                    be:76:d0:67:4e:01:d9:d1:ae:58:83:4e:38:35:0b:
                    57:bb:d9:58:72:d5:32:1b:1d:36:11:1f:4c:28:01:
                    20:9b:ed:f9:13:73:df:23:b3:42:94:26:5a:df:9e:
                    d8:5c:79:3f:20:f9:a9:40:34:89:33:ae:51:57:24:
                    ff:e9:48:b8:44:6f:31:80:28:51:b6:51:b6:01:e2:
                    85:5e:57:af:dd:81:34:fc:30:2c:91:cb:b6:8b:a9:
                    ca:7a:7b:e3:66:90:88:ed:39:40:e3:57:3e:57:50:
                    22:dc:3e:17:36:7b:7c:42:c0:35:80:63:68:42:f4:
                    7b:95:f0:6f:e8:a4:de:c7:9f:19:cf:f1:b0:06:f9:
                    b3:cc:07:0b:0d:65:ce:51:55:08:d6:90:ce:7d:36:
                    16:cf:aa:55:61:f7:a9:83:42:de:78:86:f2:0c:3e:
                    40:8f:3e:03:c6:77:6e:9b:89:93:f1:f8:cb:7e:97:
                    fa:13:a6:36:7f:3d:11:dd:d7:43:53:e1:8c:99:8f:
                    3c:ba:ab:d2:80:ff:09:13:2a:8b:c7:ac:1e:34:87:
                    db:9d:9d:ba:dd:8c:05:03:92:79:36:e8:47:23:72:
                    3b:ec:e6:91:7b:b5:fc:3d:70:47:20:15:66:62:15:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C3:66:43:46:FF:02:F6:69:48:67:92:68:2B:EA:FB:E1:61:CD:B8
            X509v3 Authority Key Identifier:
                keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:43:34:24:3a:62:04:30:1a:b4:85:c6:96:ce:9d:6d:aa:d7:
         01:f9:3a:2f:52:3f:be:f8:c9:4f:91:98:55:31:79:31:f2:83:
         f8:f7:d7:a9:77:9d:8f:bb:ea:c2:f8:00:fa:e3:37:64:2f:b7:
         ff:1d:87:cd:21:8b:69:0c:f8:d4:85:13:d8:43:f1:c6:46:6f:
         07:ea:3c:62:21:bb:21:52:c3:05:e4:74:18:7d:f5:8c:af:67:
         73:60:49:12:b2:70:48:ac:6b:b4:68:aa:a8:57:da:86:36:1d:
         4a:46:69:61:e5:40:8a:2b:d9:8b:40:90:4f:88:5c:1c:84:24:
         8d:91:87:af:e7:3c:4c:00:78:3b:7c:53:22:63:8d:27:57:35:
         93:a7:aa:c8:72:4e:25:57:6e:1f:ce:a6:5d:bd:2f:6d:f6:fb:
         4f:1f:36:3e:f6:9d:9a:f7:ee:91:e2:71:b0:77:bc:87:3f:18:
         31:a6:6e:29:c6:a9:b0:71:f6:fb:61:2f:49:4c:df:91:99:63:
         35:22:f3:06:27:a5:ff:08:4f:05:f2:22:b5:c6:06:44:f3:43:
         ab:ca:82:e8:5e:09:9a:64:4b:80:c8:79:c9:59:0c:44:b1:ce:
         b0:ae:8f:2f:31:1e:cb:25:db:5e:76:a2:83:70:47:ed:32:19:
         a6:aa:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:44 2026 by rpki-client