Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File:                     AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier:          g2hgyJhLbpCCsjnvHH8R+vBlJ8lUtpTtBcEypoCuwFc=
Subject key identifier:   3D:E7:11:FD:DC:08:8B:EC:51:0B:27:91:48:39:7D:F2:F4:55:8D:11
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer:       /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial:       01A0D192C4657A99F65E7816D71FCD436655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number:          030F
Signing time:             Thu 24 Sep 2026 04:00:51 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:51 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:51 +0000
Files and hashes:         1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: AA3FUqKa+NGQCKllz95RUrnt1VUkMWQvyEwB2Gg/Z6Y=)
                          2: EorLfiIdTLqramNOmKdv9GCOB38.asa (hash: DJtU7WzPtfml3v/eu+a/l4hvtaitE70F0oGlmKAGZGY=)
                          3: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:c4:65:7a:99:f6:5e:78:16:d7:1f:cd:43:66:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
        Validity
            Not Before: Sep 24 04:00:51 2026 GMT
            Not After : Sep 25 04:00:51 2026 GMT
        Subject: CN=3de711fddc088bec510b279148397df2f4558d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:5b:f1:11:66:5a:2b:1e:b2:4b:31:d8:72:
                    0c:b9:66:64:91:e2:d5:bc:0a:08:ca:aa:ec:f4:f6:
                    28:96:9a:ed:f1:98:1a:d0:e6:e3:ac:a9:0b:aa:f7:
                    76:7c:c4:d5:0a:6c:cc:5c:ef:6e:da:78:8e:cb:13:
                    21:2a:ce:39:bd:e7:3f:23:03:5e:a3:56:f4:1a:a9:
                    0b:a9:ac:69:87:31:0c:47:fb:10:7c:de:e2:8a:77:
                    ae:56:bc:af:28:7e:5f:3b:27:e7:a4:99:54:0f:1e:
                    e8:ed:ad:30:73:a9:52:99:b8:09:53:20:30:c5:3b:
                    51:1c:d3:c5:78:9a:a1:81:94:32:00:23:5c:ab:97:
                    92:c1:db:2f:be:f4:be:35:ab:87:19:79:c3:25:9f:
                    3d:b8:c3:d4:a7:0d:00:d3:d7:a4:f1:8a:3d:29:f8:
                    aa:98:e9:34:68:1b:9f:34:98:86:72:20:53:e9:6b:
                    15:75:bd:2e:92:36:45:8f:d8:fa:04:b4:c8:d5:39:
                    f4:a3:ef:70:ca:a6:95:d7:01:b5:48:49:c4:0c:a6:
                    e2:d3:c1:91:ae:70:b7:49:c0:26:fb:ac:5a:49:64:
                    36:b5:ed:84:6d:fe:b9:a5:1d:81:85:e5:9d:1f:b5:
                    ee:36:51:a5:e0:c3:1c:61:b6:7e:57:c2:05:df:e1:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:11:FD:DC:08:8B:EC:51:0B:27:91:48:39:7D:F2:F4:55:8D:11
            X509v3 Authority Key Identifier:
                keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:18:41:05:a4:95:66:52:d6:6d:80:d3:53:c4:86:4c:52:
         c9:89:59:97:cc:40:0f:b6:f0:51:fe:d9:a9:df:37:8f:51:10:
         90:c2:cd:66:e5:e1:fb:a4:1b:0c:87:7b:8b:3c:63:cd:f8:94:
         2b:77:c8:58:4b:bc:70:69:05:f0:d9:ce:5c:45:8a:7a:eb:a6:
         c8:7c:d5:a7:91:b8:b4:27:82:10:11:78:12:8d:fc:ce:4d:89:
         1e:6b:63:a2:57:c0:7a:ec:ac:db:70:7c:49:91:64:f2:f4:f9:
         f5:09:07:95:c9:63:ac:c8:b9:68:af:72:d1:15:62:33:11:51:
         0d:a1:fc:b8:bc:c6:71:72:a9:96:3d:5d:94:49:fa:20:97:a3:
         2c:07:f4:c9:d3:2b:b5:71:27:31:d1:02:db:62:58:c8:6c:d2:
         27:41:65:16:df:96:1f:48:6e:52:80:33:41:8e:c9:b8:59:9d:
         a6:77:89:62:c4:be:d1:d3:1b:a3:1c:c7:19:d5:33:99:1d:df:
         cc:e2:10:e2:95:a4:08:5f:b9:a9:40:e9:19:f2:69:73:88:4f:
         22:d4:3d:77:15:71:2c:72:9e:60:b9:9b:d4:15:a8:7e:9f:ec:
         ec:0a:35:67:fd:6f:b0:86:68:01:49:31:8d:94:d7:00:f2:da:
         98:c2:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:19:33 2026 by rpki-client