Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          CiqGFJfT+i6ZWE3Cb2wwf5O5f3f1TppPXGON+4a4kZ0=
Subject key identifier:   0A:AA:58:7D:D6:20:50:EE:8E:1A:AF:D8:34:FF:2A:C6:A5:DD:E9:D4
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       019EBD34C948360CF9A42FBAF3B5F55A1E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          0BA1
Signing time:             Fri 12 Jun 2026 19:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:13 +0000
Files and hashes:         1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: ZL1eNwsAXJ/13hsmnhyZj/hriYA48OtrhSVJOikj+KQ=)
                          2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
                          3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
                          4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
                          5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:34:c9:48:36:0c:f9:a4:2f:ba:f3:b5:f5:5a:1e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Jun 12 19:00:13 2026 GMT
            Not After : Jun 13 19:00:13 2026 GMT
        Subject: CN=0aaa587dd62050ee8e1aafd834ff2ac6a5dde9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:21:91:f0:4c:f6:4b:23:f7:cb:18:76:16:
                    fd:c8:f7:80:10:ec:d3:db:7b:4c:af:fc:93:1e:d7:
                    96:b7:3e:a3:26:ab:14:ea:59:a1:2e:d8:95:17:02:
                    d4:c3:53:ae:3b:34:7a:5b:01:eb:d9:d2:40:76:f1:
                    b2:d7:13:aa:d7:ad:3b:f9:62:c1:99:77:12:9d:93:
                    51:72:22:27:ee:67:46:25:28:94:59:71:ce:f7:47:
                    ad:2c:0e:21:20:a2:af:30:a0:63:71:a5:11:1d:30:
                    65:e6:14:13:c5:7d:de:75:ec:6f:03:b0:2b:d3:9e:
                    05:fe:bd:94:9e:ca:d6:7f:a5:02:e6:71:44:f4:ce:
                    0f:86:e7:8e:b4:a1:3b:3e:0f:1a:5f:bd:33:7b:69:
                    8f:1b:e2:ee:22:38:47:b6:59:8a:d4:fd:d3:59:ee:
                    3b:27:47:70:0f:2f:48:92:07:49:86:70:bc:a4:67:
                    75:23:31:c4:6e:2b:f5:a1:ee:b1:85:58:72:cd:60:
                    a2:31:cc:ba:b2:c6:d6:5e:e4:e6:98:7a:f7:a1:e4:
                    e0:a1:6b:e3:bd:14:86:d7:b5:a5:a6:b0:8e:a0:17:
                    36:e5:9e:d4:b3:e0:ec:a1:50:ba:3d:69:66:bc:c9:
                    26:a6:6f:96:cb:2b:27:bb:68:39:84:4c:eb:ea:9a:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:58:7D:D6:20:50:EE:8E:1A:AF:D8:34:FF:2A:C6:A5:DD:E9:D4
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:db:3a:9b:ea:5a:8d:d4:7c:e8:50:86:9a:3d:ca:4f:a7:ae:
         b3:71:f0:db:9a:82:d6:ab:85:a2:59:0a:25:2f:57:a2:11:30:
         98:39:42:f8:de:44:a9:ab:23:58:94:45:da:ec:e6:40:64:40:
         a6:a2:89:47:e0:6d:4a:eb:01:de:23:e2:56:54:3f:bf:db:8c:
         c3:3a:03:23:5b:76:ec:35:84:d6:dd:4a:2f:d2:da:34:7d:ee:
         5c:7a:cc:51:81:ab:57:e1:37:ae:f3:f2:9a:92:fe:87:d5:1c:
         38:e6:96:d4:88:0a:45:5a:97:34:64:b7:4a:78:ab:8d:6d:41:
         f5:c4:1a:70:ae:21:f4:68:87:c1:5b:f8:93:74:63:c3:7f:79:
         5b:c0:a4:e1:78:e5:0e:65:ec:f9:54:10:7b:80:6e:3e:16:eb:
         fe:98:f6:c9:4c:14:30:7b:50:61:31:05:7c:cc:68:b1:df:14:
         72:58:c2:09:62:e8:85:16:45:78:e6:ab:0c:bc:0f:db:ce:15:
         3a:9e:0c:c7:8b:ee:66:2e:a2:8d:b0:11:ee:2a:ce:d0:59:ea:
         2b:ae:eb:eb:e1:69:bc:8e:4a:ea:4f:3e:2d:5e:dd:b2:c2:dd:
         3c:30:35:4e:96:9d:bc:ea:fb:5c:87:a7:1f:45:0a:00:15:52:
         b6:81:29:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:19 2026 by rpki-client