Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File:                     ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier:          FbN62+NslEzYhcAKiMHk5XRTIxVdIeqmA9xcnje/v48=
Subject key identifier:   AE:34:98:38:B9:62:91:D4:FE:C2:68:B3:4B:6D:01:FB:F0:DC:99:B0
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer:       /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial:       019EC111EC26198E442E56D9C1B8FEF9B624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number:          0E25
Signing time:             Sat 13 Jun 2026 13:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:37 +0000
Files and hashes:         1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: 8hPLFXCvfJBRbGGfWBKylpI6g1w9bP7aPrVpI7cbi4I=)
                          2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:ec:26:19:8e:44:2e:56:d9:c1:b8:fe:f9:b6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
        Validity
            Not Before: Jun 13 13:00:37 2026 GMT
            Not After : Jun 14 13:00:37 2026 GMT
        Subject: CN=ae349838b96291d4fec268b34b6d01fbf0dc99b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:54:a5:01:8a:dc:17:36:dd:9a:34:85:42:
                    65:65:b1:71:16:45:9a:37:df:af:40:22:95:d8:c8:
                    68:f3:aa:ce:d3:4c:b0:92:8f:b2:7c:cb:0e:c7:a4:
                    84:55:48:e7:6a:cc:71:34:d5:d8:21:57:85:17:93:
                    7c:0d:fa:46:21:e3:78:e1:6c:13:aa:26:97:9e:98:
                    66:16:57:67:72:57:d9:43:3b:a6:b6:ee:93:3e:fc:
                    9c:03:b5:4f:7c:47:55:3c:62:64:ba:2a:7d:10:28:
                    85:81:17:3c:85:f2:de:df:66:81:47:61:a3:75:f2:
                    dd:68:e7:64:d9:50:88:db:e9:77:2b:03:26:24:19:
                    a3:17:0d:ae:c5:41:5e:a0:96:90:7a:c0:30:47:5e:
                    09:5a:1d:d8:73:75:f1:fa:d6:bd:03:33:be:81:b4:
                    06:16:36:a9:09:82:cb:b9:22:23:4d:03:4a:af:ea:
                    7c:4c:3b:76:54:9c:5b:ca:2e:fc:91:00:00:4f:6e:
                    38:23:db:7e:b6:bc:f4:33:b0:f5:90:8b:64:5a:8b:
                    b6:cb:07:e7:7a:3e:3a:f8:00:ca:d9:66:fb:a0:6d:
                    7a:f4:e7:31:63:21:92:72:e6:8c:28:cf:0d:ab:68:
                    f4:c5:53:aa:7a:f2:88:5f:77:f9:93:43:fd:fb:c1:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:34:98:38:B9:62:91:D4:FE:C2:68:B3:4B:6D:01:FB:F0:DC:99:B0
            X509v3 Authority Key Identifier:
                keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:d8:ed:55:10:38:7a:8b:1e:32:f9:2d:ae:7b:a0:fb:f6:
         e2:f9:7b:d3:23:b6:e6:b9:0a:0d:b5:aa:89:17:aa:87:55:bf:
         7e:1a:1c:fe:8a:68:ac:f6:b1:63:3f:f5:b6:d4:89:84:7a:61:
         39:fe:c0:15:26:e5:17:b2:3e:a4:85:42:bf:c0:7c:55:c3:38:
         bf:7c:60:40:92:1f:80:cc:1f:53:96:9c:37:8f:a5:92:43:82:
         12:8c:67:6e:86:86:67:11:72:2f:60:18:f5:33:d5:c4:f0:11:
         be:fd:21:4f:a5:e1:0f:40:a2:3b:db:9b:4c:49:14:88:1f:ed:
         45:95:0a:09:a8:4a:79:24:7e:c2:28:ac:ed:52:c1:25:7b:81:
         18:d9:45:f2:99:d0:84:aa:73:9f:ab:ce:cb:88:91:4c:be:af:
         7b:94:a2:db:f9:c9:3a:c1:17:d4:76:3b:d0:3a:1c:60:42:f4:
         5c:85:5f:a4:f8:89:ae:95:86:6c:85:ac:38:9a:ac:ad:4e:84:
         64:17:0c:8c:41:2d:2e:55:51:0b:fd:7b:43:77:25:12:c3:b4:
         47:a3:39:13:ed:e7:94:c9:3d:80:74:4b:12:95:97:90:c3:8d:
         df:4a:8f:d9:3f:95:31:d5:8d:b2:f0:40:b7:31:cf:32:43:79:
         9c:a4:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:40 2026 by rpki-client