Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
File:                     A6vacUAmJIC3jTuudt3YxthopPI.mft (raw, json)
Hash identifier:          mUWd8o4Cn/OrZrTIcpq2qgX0tn1AxNuuAV1njmjbA0I=
Subject key identifier:   9C:F0:51:69:A8:06:92:FC:07:35:2A:98:24:20:99:F4:17:0E:39:27
Authority key identifier: 03:AB:DA:71:40:26:24:80:B7:8D:3B:AE:76:DD:D8:C6:D8:68:A4:F2
Certificate issuer:       /CN=03abda7140262480b78d3bae76ddd8c6d868a4f2
Certificate serial:       019FAA889A6CE5CD60BCD568A164D66617C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:46 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:46 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:46 +0000
Files and hashes:         1: A6vacUAmJIC3jTuudt3YxthopPI.crl (hash: onObMuuBCqgcMEIbz1sv61z5RIpjfbm82fCS2QBnQm0=)
                          2: oEM0wDUvGTK5fY0FNB38hG9027A.roa (hash: dvrFSBEksNe2CFDmHleIj839JX7ASGNbq/KlrLkVD4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:9a:6c:e5:cd:60:bc:d5:68:a1:64:d6:66:17:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03abda7140262480b78d3bae76ddd8c6d868a4f2
        Validity
            Not Before: Jul 28 21:01:46 2026 GMT
            Not After : Jul 29 21:01:46 2026 GMT
        Subject: CN=9cf05169a80692fc07352a98242099f4170e3927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:4f:53:e2:2c:0a:0b:54:c9:21:2e:01:4e:
                    0d:75:87:e9:e7:8b:5c:ec:51:32:b1:a6:17:03:e6:
                    25:5c:2b:e8:18:15:17:cc:6f:21:1d:9b:14:f1:7e:
                    0f:03:57:8f:9a:65:b8:ec:94:75:05:b6:50:d1:5d:
                    e7:33:2a:cb:e9:ed:12:fc:55:90:4f:d4:6b:9e:fd:
                    e1:a0:d7:f5:c2:3f:e3:50:1f:e3:0d:30:93:4c:63:
                    83:82:43:8d:2b:7c:a5:ff:8f:7f:3f:49:3e:ca:17:
                    08:b1:5a:ec:87:0d:0a:d2:11:2a:8d:43:8c:31:52:
                    76:1b:64:42:9e:32:70:24:d8:e4:05:23:75:37:99:
                    d1:94:f8:03:65:69:4c:ba:4b:71:ca:1d:a7:c7:22:
                    cf:ff:8a:35:c2:6f:17:1d:3d:e3:76:b3:3e:0c:cc:
                    f4:64:3b:de:1f:f9:af:37:ed:78:f7:dc:a2:a7:b3:
                    6d:15:7e:a6:4c:45:41:8a:55:cf:4b:5a:bb:6a:25:
                    a0:67:34:07:e5:bd:26:2e:a7:44:47:d0:c8:98:73:
                    82:98:06:7f:65:81:57:ef:83:ac:20:b1:1d:27:10:
                    0b:9d:e0:c3:4f:8b:2e:b1:86:04:9d:36:19:ef:5a:
                    08:5f:9c:b3:0e:89:0b:9a:db:43:ea:fe:f9:e8:e2:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F0:51:69:A8:06:92:FC:07:35:2A:98:24:20:99:F4:17:0E:39:27
            X509v3 Authority Key Identifier:
                keyid:03:AB:DA:71:40:26:24:80:B7:8D:3B:AE:76:DD:D8:C6:D8:68:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0a:59:56:b8:7a:df:1c:b8:9b:7b:ec:d1:23:f4:41:a5:85:
         0a:9d:35:84:7c:f1:7c:e2:fe:d3:0a:8e:ac:4c:7f:16:78:93:
         d9:76:ad:d7:12:5b:19:b3:92:72:77:00:4c:34:93:d1:05:75:
         43:0a:62:58:00:78:81:28:52:f4:e6:1b:74:c3:7d:53:07:02:
         42:17:bd:62:f0:0f:18:fa:d1:bf:38:2e:5d:61:ab:28:99:bd:
         5e:29:ef:44:e1:66:6b:6d:29:45:4b:41:9c:2f:b9:ad:57:9d:
         f4:92:71:12:21:bd:4e:29:0f:32:8a:f3:4f:55:d6:9f:a6:ba:
         f0:b6:94:d4:63:f9:61:cc:48:4b:03:c3:ab:71:9a:a5:61:23:
         0f:04:c7:e0:7b:d6:1c:03:5f:8c:9b:65:47:0f:34:88:4d:a8:
         11:1b:59:4c:6b:6d:ec:9a:e6:fc:b9:0a:c1:5a:3a:28:36:2a:
         55:99:2b:ea:07:49:e6:93:44:37:f2:4c:dc:20:46:c8:d8:4f:
         d0:be:5d:65:a0:93:2a:6b:45:06:6d:a1:aa:db:12:61:a2:e1:
         02:0b:06:89:49:6a:42:35:ca:30:8b:2f:ba:34:cc:de:83:71:
         6a:da:fc:66:1f:73:25:22:7a:61:b4:2b:a3:21:fa:08:88:cb:
         78:7d:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:09 2026 by rpki-client