Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File:                     aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier:          Ln+F8xE/CIyVhPbuVDOhMONJZkyf545ZahJaKTyae6Q=
Subject key identifier:   80:A9:9F:A2:96:6D:9C:20:12:DD:5B:BB:FD:79:59:B9:37:1B:B1:F7
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer:       /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial:       019DA48B64B05BA877321AC96B37BFD8AB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number:          0268
Signing time:             Sun 19 Apr 2026 07:01:31 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:31 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:31 +0000
Files and hashes:         1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: iSkGCFnkeaiwaqaU/QUUu/uZhHns12sgAvV4Hhdq57A=)
                          2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:64:b0:5b:a8:77:32:1a:c9:6b:37:bf:d8:ab:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
        Validity
            Not Before: Apr 19 07:01:31 2026 GMT
            Not After : Apr 20 07:01:31 2026 GMT
        Subject: CN=80a99fa2966d9c2012dd5bbbfd7959b9371bb1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:97:66:da:ff:5c:7d:30:a2:7c:30:b9:1e:
                    cd:98:81:d5:fc:8f:58:44:e8:38:fb:df:34:85:d3:
                    c6:8a:97:c6:9f:64:58:2c:5d:bc:8c:a2:73:5e:47:
                    d6:05:e7:df:20:54:77:8d:38:5b:9c:36:4b:37:88:
                    d2:79:28:06:be:f8:8c:61:df:51:9b:e9:cf:76:20:
                    41:7b:f7:76:e5:5e:3d:d8:9f:7c:8c:fc:39:b5:ed:
                    13:f9:f6:ac:48:94:1a:cb:a0:14:a3:9e:5d:91:e1:
                    3d:eb:0a:87:36:22:3f:85:71:1e:a6:b9:e0:49:b6:
                    49:e3:b9:ba:ea:46:dc:0f:3d:bc:bb:8b:61:a7:a9:
                    a5:ee:4f:b5:22:ac:f4:da:f2:ce:7b:6c:d9:30:48:
                    73:d7:57:69:57:bb:a3:95:0a:24:30:f6:4f:80:0f:
                    cf:91:b9:07:9c:ba:96:89:c4:aa:9d:7c:51:57:ee:
                    b8:00:f9:04:b3:58:6f:0a:f3:66:7e:6f:a6:ac:9d:
                    11:e2:01:be:a4:96:be:e0:79:54:59:8b:70:65:9d:
                    28:62:a2:44:00:e2:bd:ec:ee:35:dd:5c:e9:b7:86:
                    25:b9:da:39:44:24:c4:d3:97:2d:e5:8b:82:dc:bf:
                    43:14:11:db:d9:85:d6:a0:3e:7f:7b:31:ef:05:72:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A9:9F:A2:96:6D:9C:20:12:DD:5B:BB:FD:79:59:B9:37:1B:B1:F7
            X509v3 Authority Key Identifier:
                keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:78:1b:c3:86:4c:60:54:4c:d8:6c:94:a6:fb:1c:83:94:be:
         67:a7:d6:c6:db:bf:36:62:ca:7c:3d:05:ba:f5:be:9e:08:b2:
         55:07:59:62:4e:70:8d:c9:ea:e8:9e:15:b3:22:45:bc:ba:0b:
         05:06:9c:4a:8e:11:b8:6a:71:b3:c9:39:44:a1:9c:69:67:f9:
         ff:ff:34:75:b8:3d:8f:f3:6a:5c:55:5b:5a:85:69:e0:f7:92:
         b3:32:ff:7d:76:70:da:be:dd:8d:aa:a8:a1:46:b5:0c:21:52:
         d7:c3:4f:5d:d9:e7:d0:82:0b:8e:ae:a4:08:a4:5b:62:c7:de:
         d7:21:08:96:db:ed:34:fb:62:e3:49:af:a6:48:71:25:20:11:
         8c:1b:c3:d6:4a:86:93:37:3b:a8:8b:60:e3:c4:db:95:0b:c8:
         92:6e:f1:fe:e4:8b:c9:85:cd:5a:22:89:af:66:ed:5b:f1:e7:
         e5:e9:e8:d5:b2:78:83:5f:30:54:67:c8:16:bd:0b:5c:1b:1e:
         b8:35:bd:e5:72:7e:56:f6:80:28:24:ef:31:ee:47:22:7d:a4:
         7b:08:d5:e1:11:b7:d9:b3:3c:c0:d1:59:ee:ee:86:65:b2:5e:
         8d:7d:96:d4:ed:93:77:37:9c:ca:a3:a2:90:54:05:8c:a3:7b:
         2d:a9:3d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:15 2026 by rpki-client