Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
File:                     ahjtHt_p75yYdyAyDp28ketQWa0.mft (raw, json)
Hash identifier:          KBkTHuU8Ju+Os8Vr4o8iimicgQeX5FSzYx/TJV9sl/k=
Subject key identifier:   79:80:B4:7D:AF:9D:2E:43:CC:C7:F0:0C:6D:A3:74:F7:28:60:FB:B1
Authority key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Certificate issuer:       /CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Certificate serial:       019D9A071F3F9A39E2F6B3998169ABCA5F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
Manifest number:          92
Signing time:             Fri 17 Apr 2026 06:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:51 +0000
Files and hashes:         1: ahjtHt_p75yYdyAyDp28ketQWa0.crl (hash: efHn4YkAJQq520K7sd0bicbMtLwkIxeH12F2i1UBlAo=)
                          2: cVgf6zYHcxsLW9bXFfBT2wbbXtY.asa (hash: e9U9Ggfq0Q0bxFuYqJQPA4Kvtu4sRsMsGLECB9T3Dnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:1f:3f:9a:39:e2:f6:b3:99:81:69:ab:ca:5f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
        Validity
            Not Before: Apr 17 06:00:51 2026 GMT
            Not After : Apr 18 06:00:51 2026 GMT
        Subject: CN=7980b47daf9d2e43ccc7f00c6da374f72860fbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:c3:81:d2:3f:dd:e8:6c:81:6f:60:a6:85:
                    79:49:0b:b0:d9:d7:da:87:2d:4c:93:72:5b:8f:17:
                    36:48:35:d6:b6:60:d1:6f:ff:a6:a8:e9:eb:28:c1:
                    ff:d4:98:17:bc:c0:54:b9:91:07:f3:2a:47:0a:ef:
                    eb:d7:47:90:a0:1d:fc:f5:5f:c7:7c:cd:3b:cd:f7:
                    b7:43:41:a6:9c:b5:70:0b:1d:21:d9:54:84:74:a1:
                    a2:f1:89:8f:26:98:f4:3e:82:f1:17:1b:8d:1a:7d:
                    7c:81:f6:75:3c:ba:61:e1:79:52:dc:4d:cb:1d:21:
                    72:23:fc:2a:56:96:8c:71:87:71:62:4a:5f:2e:50:
                    ca:0e:95:ec:99:40:c5:cf:9b:3b:1a:2a:75:e6:00:
                    df:b5:9f:a9:ef:1c:f0:96:d7:70:a1:d1:97:68:9d:
                    a2:ca:2f:25:32:41:10:f9:4d:30:c2:57:8b:35:db:
                    14:f6:6e:11:f7:d4:30:d0:2e:1c:02:4e:e3:2c:34:
                    b0:5a:71:28:71:1a:d8:02:f0:51:07:95:1e:c1:74:
                    fd:e5:90:53:a2:d4:03:3b:34:8b:57:51:77:f2:f0:
                    bc:e2:75:06:37:d3:8c:dc:df:e0:48:c7:30:d9:54:
                    61:45:b3:68:05:39:02:0a:6c:cb:4c:79:38:3b:ae:
                    9a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:80:B4:7D:AF:9D:2E:43:CC:C7:F0:0C:6D:A3:74:F7:28:60:FB:B1
            X509v3 Authority Key Identifier:
                keyid:6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:d9:19:d0:d5:f3:eb:47:bc:ac:32:60:9e:3c:50:5f:c1:
         ac:52:0f:69:e9:90:e1:63:a1:9b:d5:ef:d3:4e:12:d1:82:a2:
         d8:63:70:e0:63:92:1d:3b:0a:83:e7:59:75:f1:02:7a:dd:06:
         02:56:d4:8e:5f:41:be:09:7b:90:93:d8:42:88:92:87:dd:33:
         21:9b:4a:fc:ad:38:6d:ac:e7:bf:32:c3:9a:23:0e:2c:51:74:
         8f:e7:7e:98:f8:20:14:41:50:31:9b:ef:df:d8:bd:d1:80:3b:
         c9:9a:34:e8:1b:99:24:53:65:6b:01:d9:22:5d:5e:f6:55:f1:
         b7:d6:e3:58:a1:f3:f6:51:71:80:fa:6c:e9:10:22:e4:04:bb:
         23:94:b7:d0:3a:e4:61:fe:c4:2f:95:df:34:ec:10:0c:ea:bf:
         96:28:84:ed:35:cb:30:90:84:a1:bf:c7:39:65:72:e3:77:34:
         cb:76:32:ec:05:71:43:c8:3b:51:84:c3:b1:16:ed:74:d9:a0:
         c0:35:74:14:58:ee:9b:88:ef:ac:a2:ad:98:a7:c9:3f:a4:28:
         ed:d9:64:07:10:e4:1c:76:59:6c:48:a4:77:a7:2f:5b:eb:1f:
         d3:24:49:f3:b6:2b:e2:e6:12:2e:c7:fd:5a:18:b7:9d:64:f2:
         bf:55:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:07 2026 by rpki-client