Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File:                     aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier:          zVjIote3xe/ePpvYZLDUC7yM+Nd7Rv2y526EBp3m4mQ=
Subject key identifier:   0F:5D:DC:94:5A:A8:CC:B5:6B:80:81:2B:95:2F:F9:8F:3F:9F:6B:64
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer:       /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial:       01A0C2C45928806CC6C7F6F2C7AA4C43B0C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number:          054A
Signing time:             Mon 21 Sep 2026 07:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:42 +0000
Files and hashes:         1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: u1bsz5O347HMYR883K3SArzp2fFxTvHXSOHrtV6tiqM=)
                          2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:59:28:80:6c:c6:c7:f6:f2:c7:aa:4c:43:b0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
        Validity
            Not Before: Sep 21 07:00:42 2026 GMT
            Not After : Sep 22 07:00:42 2026 GMT
        Subject: CN=0f5ddc945aa8ccb56b80812b952ff98f3f9f6b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:09:07:d1:d9:31:f7:31:34:d4:9e:d3:db:
                    89:23:ae:d7:03:65:bc:a9:0d:40:aa:59:30:3e:03:
                    80:c8:e8:ad:64:0d:5b:ca:04:09:22:be:de:5b:fe:
                    62:5c:d2:2c:14:bc:5c:76:b1:f2:1b:dd:bc:09:7a:
                    d8:c9:fe:75:6d:35:35:44:94:2e:d6:07:98:35:bd:
                    ca:ae:d4:47:4d:01:f2:56:9f:78:41:22:75:a0:3e:
                    e8:00:d2:f5:12:c7:a0:d1:42:48:7a:c6:f0:2e:01:
                    84:11:1b:63:69:f6:03:5b:0b:1a:7c:7e:9d:59:e0:
                    af:20:5b:de:3f:71:64:49:3c:72:ee:98:15:b3:ff:
                    ae:0d:5a:11:e0:23:e4:e5:21:d4:54:b2:eb:70:b7:
                    6c:d9:19:79:f1:02:9d:44:22:28:43:66:02:2c:77:
                    a2:04:e6:57:54:ff:c5:4f:6f:36:90:03:88:93:cd:
                    73:67:80:43:8e:29:5d:86:31:66:14:d5:fb:5e:5a:
                    1b:a3:95:f9:b8:00:ab:08:91:13:c5:85:9b:b9:b0:
                    ec:aa:7f:b8:01:9b:50:49:9f:4b:ee:39:46:be:46:
                    a6:95:b6:e7:aa:03:7a:2f:29:b8:20:e4:be:99:dc:
                    84:76:de:82:86:fe:68:86:21:df:2c:c7:b4:53:61:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5D:DC:94:5A:A8:CC:B5:6B:80:81:2B:95:2F:F9:8F:3F:9F:6B:64
            X509v3 Authority Key Identifier:
                keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:f6:41:56:6e:e2:2a:cf:19:e2:ab:40:14:91:82:29:28:
         de:65:d8:04:2c:6f:0d:fb:3f:85:8d:54:ea:ac:c9:ad:a5:38:
         cb:87:7b:7d:08:4d:4e:a7:16:6e:e0:1b:03:e2:86:7d:0c:aa:
         7d:b2:54:62:6f:cb:a6:cb:01:84:70:60:15:d4:9e:56:17:d3:
         f8:f1:b6:0a:9d:aa:f8:9c:04:a9:6f:77:c7:1b:84:dd:9b:ef:
         cb:1a:2d:df:83:00:e0:91:11:74:50:18:3a:22:42:b6:6c:75:
         83:f4:21:2b:44:97:38:0d:14:e2:f7:8c:4b:04:6a:6c:87:68:
         99:8b:8f:7d:f2:ec:ad:fc:05:5c:52:76:95:f1:8c:de:17:80:
         ca:c8:1d:9c:a8:7b:d6:9b:41:e0:65:e0:88:07:56:89:ee:16:
         14:4b:08:81:06:51:f7:a8:84:5c:d5:4d:e3:b4:9c:21:1e:ef:
         8b:30:a3:21:be:ae:0e:13:da:99:95:29:a7:fb:f6:ce:50:e6:
         1b:0c:ac:66:7e:b0:c1:ae:99:a5:bb:e1:41:8c:d9:d6:11:e6:
         8b:c5:8d:52:01:69:92:e8:f7:93:ed:95:7a:3c:1e:82:b2:36:
         53:19:25:a7:11:d4:84:8d:20:97:db:96:7b:a6:40:a4:0a:e2:
         bd:18:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:21 2026 by rpki-client