Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File:                     AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier:          5lwXnrYeG/oPYrCRf8uORluKhvZfJ37litNMOrtk4s0=
Subject key identifier:   AF:94:BC:41:88:3D:A8:0F:8E:FD:D2:FC:09:D8:98:3D:E9:47:5C:D0
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer:       /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial:       019EBE47D9953B70D952AA5B178FB0957799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number:          0E4E
Signing time:             Sat 13 Jun 2026 00:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:40 +0000
Files and hashes:         1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: e0WldE0/sWOaUkrw9Bzdz9QG66aGs0WtXvGtv1F2vFo=)
                          2: WuVnfkB6n82FOg4W-IcUzY3Fe0M.roa (hash: DZE6yI97kbfPPegu/0turhmXzDIWBsKrThF8bRlEJlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:d9:95:3b:70:d9:52:aa:5b:17:8f:b0:95:77:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
        Validity
            Not Before: Jun 13 00:00:40 2026 GMT
            Not After : Jun 14 00:00:40 2026 GMT
        Subject: CN=af94bc41883da80f8efdd2fc09d8983de9475cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:ef:82:8c:db:59:a4:87:ac:47:a6:98:68:
                    bc:c7:6a:21:2c:f8:83:96:ec:95:26:dc:62:cd:7d:
                    7f:9a:b0:e9:61:34:8c:82:8d:0a:82:6b:ad:76:7f:
                    70:83:98:6b:96:44:1b:ba:c1:bc:7a:56:10:1c:d1:
                    aa:d0:b4:67:ee:9f:67:f4:22:be:b0:c9:e0:f3:47:
                    2e:f8:2f:08:93:1f:b4:76:8b:99:4b:0e:21:22:dc:
                    44:a7:40:2b:f5:3b:62:e9:59:eb:45:77:5a:22:93:
                    a8:dc:7c:ca:14:9c:a5:d8:44:dd:e6:00:e2:1e:f5:
                    55:a5:31:2e:fd:57:80:dc:59:9d:41:f9:00:cb:4b:
                    a3:d4:62:e3:d7:d1:79:4e:59:76:39:02:97:e6:b5:
                    8a:de:72:13:e7:a5:eb:4c:a9:d7:bc:07:b2:57:a2:
                    ff:95:48:ba:f3:5b:89:e0:68:75:b7:c2:f9:88:85:
                    76:30:87:47:8b:26:ca:33:92:74:5e:07:65:67:1c:
                    d1:1a:9c:98:d2:bc:39:ff:d1:35:3b:40:ed:12:f4:
                    bd:f7:05:c5:86:e1:fe:27:21:21:51:c1:e2:02:a6:
                    6a:f4:89:40:1f:89:ee:a7:5a:d6:17:fc:ce:0e:54:
                    8e:f6:bd:ae:a0:77:b7:f8:f0:b5:60:7b:4b:54:f4:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:94:BC:41:88:3D:A8:0F:8E:FD:D2:FC:09:D8:98:3D:E9:47:5C:D0
            X509v3 Authority Key Identifier:
                keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:81:d1:6e:1e:c2:ca:d7:c2:c6:bf:88:c8:ae:bd:8a:a3:4a:
         72:57:4c:1b:68:a0:92:14:35:27:af:73:ac:98:d3:93:58:6d:
         4b:10:8d:2e:68:3d:1b:92:d2:46:16:49:2b:89:9f:59:83:9e:
         b5:a2:a4:82:3e:0b:bc:00:cc:72:1a:f8:e8:36:8b:94:52:90:
         c0:1e:a3:35:ee:b0:63:e1:a4:68:a4:8e:7e:9a:cb:21:81:db:
         01:e6:7b:26:f8:71:d0:f9:1e:7e:a1:45:b1:e8:7d:d9:3e:f1:
         35:e0:74:b3:91:c2:79:e2:7a:e8:8f:9c:a6:e2:bd:1c:d0:c3:
         33:ca:d7:be:4b:e7:5f:99:85:76:31:69:1a:32:25:72:f0:b9:
         39:24:91:1f:e8:c3:6b:66:89:98:d8:c3:0f:48:ac:9c:6a:a2:
         64:83:d1:58:b2:9e:1f:22:e9:38:f1:fa:07:e5:a9:12:e2:53:
         e7:06:d7:d2:c8:88:7f:fe:56:a7:75:d8:31:56:1b:c6:38:2b:
         55:4b:4d:cb:cc:43:27:66:3c:1a:e8:16:e6:0f:94:bd:e6:51:
         96:59:ca:b7:9f:e9:bc:bd:68:82:64:a2:a7:69:dd:4b:bb:cc:
         b5:31:d8:88:ed:8b:0c:dc:19:74:08:14:7b:58:44:8b:99:43:
         65:ae:28:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:05 2026 by rpki-client