Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          9RcaUTBIVYdKNYPnYke7J47Tvjxz/D2ADVMuDr2+2dk=
Subject key identifier:   34:98:DA:6A:27:D3:8B:69:27:92:AD:8B:E7:F7:A7:1A:12:D4:5F:37
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       01A0C3A03106C96D4038C7F3BBABF0284F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          19F4
Signing time:             Mon 21 Sep 2026 11:00:50 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:50 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:50 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: k+ZuzHaEiD5hiPGzj/B6mYBlN0rME3V2beLXA6TDzrc=)
                          2: dVy69fLGMOo8FwSSN3UwAlS882A.roa (hash: NDJLf7dSrw0PZVg4660IJDVpEuw7OX76mS1bdnbf9Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:a0:31:06:c9:6d:40:38:c7:f3:bb:ab:f0:28:4f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Sep 21 11:00:50 2026 GMT
            Not After : Sep 22 11:00:50 2026 GMT
        Subject: CN=3498da6a27d38b692792ad8be7f7a71a12d45f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:78:45:61:4e:5a:23:c1:b4:51:17:08:99:
                    07:b0:b1:25:88:a2:2a:ee:09:f2:ce:6d:a8:00:6e:
                    60:21:51:3a:90:11:af:fa:c4:9f:e0:16:38:86:0c:
                    4a:67:d9:a8:8a:7b:75:01:88:44:f0:e7:21:f6:49:
                    67:f8:9a:af:89:da:07:23:28:4e:b3:c5:ca:5c:d7:
                    f8:b2:0f:c1:a5:37:97:ae:ba:dc:ca:01:37:a9:9f:
                    a1:4d:73:e4:1e:2f:04:3b:ac:45:3f:1d:21:f1:2b:
                    62:b4:cb:6a:38:00:d9:61:4c:29:62:e2:61:af:28:
                    f3:ef:99:88:65:b1:14:15:73:f2:88:26:1c:fc:25:
                    b2:cd:12:df:b6:b0:02:4b:18:7d:bf:fd:41:dc:61:
                    3b:fb:7e:73:6a:30:1c:d1:29:ed:ec:45:99:f7:7d:
                    6d:70:42:a5:2d:86:1f:77:97:24:12:d0:30:4c:e7:
                    70:b0:9a:70:88:53:a3:a8:bd:43:b0:8e:b9:ef:89:
                    68:55:4a:1c:ae:65:26:02:ba:b2:a4:a2:e1:94:d1:
                    e5:60:9f:f6:d2:93:e6:29:03:6c:f1:c5:1b:56:d2:
                    b7:09:86:74:a0:ac:82:07:3c:1a:92:c3:2d:cd:21:
                    c1:07:41:e8:2b:a9:bd:d3:17:f4:08:97:24:71:55:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:98:DA:6A:27:D3:8B:69:27:92:AD:8B:E7:F7:A7:1A:12:D4:5F:37
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7f:6f:fb:ee:12:14:b1:a1:8d:b7:91:e1:47:7e:0f:54:9d:
         46:8e:fe:95:90:a5:39:19:fd:ee:6a:92:a1:0a:13:b4:0b:dc:
         02:88:54:3b:65:bf:f8:09:a3:09:69:e6:c9:a4:c4:e1:d3:19:
         fb:02:ee:7e:1f:e0:9e:a7:4d:23:f0:39:cd:60:27:8d:b5:4f:
         7f:a0:12:42:97:36:5d:43:19:a2:9e:c6:74:e6:24:27:a3:c5:
         a8:fa:f7:15:01:17:7f:2d:4c:16:41:ef:3c:92:15:b9:7c:4f:
         31:b1:9a:6a:82:fc:4f:3b:fd:3c:20:52:06:fe:5f:7c:ea:6c:
         b1:02:c2:10:73:6b:0b:9a:7a:b5:10:5f:cf:d9:da:26:28:d6:
         db:c3:78:48:7b:10:2a:ee:2c:6f:55:1b:d8:bf:50:fe:a4:7a:
         b7:91:d6:0e:85:13:40:6c:de:ac:a4:8b:52:12:1b:ba:a6:8c:
         d7:91:3c:58:c3:8b:2b:84:85:f0:14:ff:1f:eb:17:7c:b0:4b:
         bd:a1:75:61:30:b2:c7:99:d5:85:90:12:d2:82:70:3d:c2:c1:
         c2:bf:6d:8e:cd:8e:d5:33:61:29:6b:76:d3:e3:aa:9b:29:6b:
         0d:df:0a:7f:37:46:aa:80:78:ae:8c:ca:cb:e9:74:2b:8c:92:
         97:07:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:55:20 2026 by rpki-client