Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          65AI58tTO52ax8C799vX1su/HeLjNrdo3sd+fgw7JNA=
Subject key identifier:   D4:9E:E4:18:5C:77:28:8B:37:BB:BB:F3:73:B7:F8:DB:8A:4B:21:EF
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       019EBE7F99A4B87265F17871860799296035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          10E3
Signing time:             Sat 13 Jun 2026 01:01:33 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:33 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:33 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: pbsOcTOXFBMwKaMCmRjC02Nr6NzTdm7QaWgvNtdUhZQ=)
                          2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:99:a4:b8:72:65:f1:78:71:86:07:99:29:60:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: Jun 13 01:01:33 2026 GMT
            Not After : Jun 14 01:01:33 2026 GMT
        Subject: CN=d49ee4185c77288b37bbbbf373b7f8db8a4b21ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5c:06:4a:83:88:ee:fe:52:5b:9d:6c:09:3b:
                    cb:fd:b1:00:9b:50:45:aa:6c:51:0b:3d:78:e6:f6:
                    eb:65:e7:3f:7f:ef:ea:96:a4:24:71:12:36:b5:0a:
                    5e:63:59:58:92:ac:fd:b4:6d:73:05:6e:eb:e4:11:
                    23:68:31:5e:f3:98:03:a3:f3:d2:03:7b:1c:4b:98:
                    3c:d4:92:21:9c:91:19:6f:b5:c1:4c:1a:d4:b5:28:
                    8f:89:c5:5e:af:f8:58:1b:62:73:92:d1:ae:e2:bb:
                    b3:fc:ea:ca:8e:24:d2:ad:7c:89:97:b5:5d:59:e0:
                    b1:ad:8e:04:14:54:0e:16:7a:d9:31:de:f3:81:73:
                    de:d9:e6:62:9b:5c:ab:07:01:4a:6f:c0:0f:22:e0:
                    2c:68:03:e4:03:67:08:61:32:13:28:1c:77:de:ea:
                    b4:d6:16:2f:86:7f:37:89:8f:21:8a:a9:c5:b5:38:
                    fb:10:01:ea:e1:53:29:e2:66:0d:67:c1:8e:24:f9:
                    f9:27:e1:00:6c:ac:06:36:d1:73:c5:f7:01:60:76:
                    b8:a1:b3:08:0b:ee:77:ce:d4:b8:6d:30:91:a8:a7:
                    24:eb:67:a7:fa:35:2f:21:d9:b4:fc:7f:47:bc:46:
                    b0:cd:ec:3e:9d:55:3b:76:99:87:8d:8a:4f:37:3c:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:E4:18:5C:77:28:8B:37:BB:BB:F3:73:B7:F8:DB:8A:4B:21:EF
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:2b:26:e6:07:f9:dc:c6:64:38:ae:7c:a7:63:54:c0:41:
         ac:ab:11:a1:f3:1b:c4:27:cb:04:f0:5e:54:0b:b0:41:3e:b0:
         de:6c:58:2f:2f:10:ef:1d:7c:6e:97:74:3a:e0:e4:97:94:bb:
         de:a7:38:7c:8c:21:37:d7:bb:fd:38:4a:85:4f:8d:e8:ef:46:
         96:d8:df:b4:9c:a5:cc:bc:f1:ed:b0:11:1a:76:57:ff:89:c1:
         3d:3d:b2:80:47:81:a9:95:23:71:f8:a1:19:64:1b:f1:3a:06:
         59:0f:95:37:e2:b7:8a:d2:6a:a1:35:78:52:4d:9f:5b:1c:60:
         79:6b:2b:37:23:c9:ec:6b:77:c2:5a:51:9f:7f:35:0d:c8:6b:
         8a:06:30:2e:d2:90:f5:57:14:c5:f6:6d:43:40:63:01:ce:4c:
         f2:41:27:08:e3:1f:3b:c1:09:3f:06:ea:60:cf:59:73:4e:32:
         bf:8d:a7:b9:1e:10:d6:ad:c3:78:2b:07:19:b4:8a:88:e4:0f:
         2c:ea:6e:dd:d9:23:c1:2c:29:52:c6:c9:f1:61:a4:04:01:45:
         7b:60:08:f5:d4:c8:02:b0:7e:6f:bd:92:34:94:9a:b0:43:2a:
         33:3d:0c:b8:e2:aa:98:d4:19:4f:e3:ef:13:01:7e:c9:e0:7c:
         13:dd:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:34 2026 by rpki-client