Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          HgTEvQjwSKuHvLaeBVPUOZcIedDxtrFmFolyDE0DI4E=
Subject key identifier:   18:B6:C3:13:12:86:73:A7:62:9A:05:8B:3F:FC:20:EA:91:D2:46:6B
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       01A0C1E82072E152E63D70769F829077880E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          133C
Signing time:             Mon 21 Sep 2026 03:00:10 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:10 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:10 +0000
Files and hashes:         1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: hkZvZvE2+q59Ghz5jSemV4rTi/0O6hOounj1KoEJXgA=)
                          2: ZcMDnxFKg86WG985x8gSYpkiw0w.roa (hash: NWzoV3X+tjCKZ4ahSvdzMzLxfudtWlBZs1TQLyd53h4=)
                          3: lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa (hash: DS6+mQyyS1WgqS8CIrjWgik6/BiJxSFGFw65yEtb7os=)
                          4: sADfRLRIwEm-KVdFT8jWlHL8oSg.roa (hash: EZEYubhTSXGqlxWAm0J4OXdKM/7Z+1zdS/2lIIhyTjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:20:72:e1:52:e6:3d:70:76:9f:82:90:77:88:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Sep 21 03:00:10 2026 GMT
            Not After : Sep 22 03:00:10 2026 GMT
        Subject: CN=18b6c313128673a7629a058b3ffc20ea91d2466b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:59:88:b2:77:6d:1b:b9:c6:99:f1:f6:0e:
                    79:47:c4:58:b1:a8:6b:65:db:c2:84:6d:dd:50:26:
                    ea:6f:d8:0d:4b:6c:8c:e4:55:26:b1:df:63:1b:66:
                    98:bd:83:0c:99:1f:04:ea:e3:93:9e:aa:5f:4a:e8:
                    9b:ea:33:83:21:2b:42:55:6b:a8:a1:ef:47:79:71:
                    27:b4:15:0c:49:5c:c4:9e:a1:a9:f4:9d:eb:7e:7d:
                    24:b3:10:94:de:ea:b5:9b:2f:ae:ac:ff:44:71:9d:
                    04:af:04:f2:09:15:bd:bb:fd:86:b4:94:aa:69:e9:
                    a5:ce:02:ab:ea:c0:a1:2b:33:bb:ea:b7:16:7e:15:
                    0e:b0:fb:11:05:57:79:b1:95:3a:3b:5e:2f:7d:fc:
                    c6:da:73:a2:f6:1e:da:d9:fa:7a:f2:87:74:d4:b2:
                    a2:8b:ad:a3:b6:2b:43:01:a2:c3:3a:b2:c7:b4:b4:
                    19:e1:18:ea:6f:a5:22:2d:63:67:e4:3c:45:e4:63:
                    9c:63:ba:3e:a5:eb:b0:af:1a:88:be:6a:af:dc:df:
                    93:2d:e9:a6:ca:69:f7:8d:5f:8f:35:e0:7c:47:e5:
                    70:fa:54:91:3d:72:db:9a:c1:73:8a:c2:e5:73:74:
                    21:0e:2c:db:aa:23:13:ef:0b:1a:8d:c5:3a:12:ee:
                    b0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:C3:13:12:86:73:A7:62:9A:05:8B:3F:FC:20:EA:91:D2:46:6B
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:57:7b:39:b9:ea:7d:79:b7:2e:a6:13:f8:0b:84:34:6c:47:
         5b:bf:45:41:6a:fc:d4:b9:49:93:13:14:af:cd:aa:a9:20:d0:
         95:3f:25:ff:ea:30:c4:56:fd:01:7c:67:98:16:e7:cf:9b:a0:
         7b:3c:1d:59:22:d7:cc:39:05:e5:fe:51:d7:ce:ca:d6:01:ae:
         42:ac:87:1f:18:ed:45:0c:7f:22:c4:9b:02:a1:1c:ae:79:5e:
         de:af:47:39:20:45:df:7e:b9:18:be:e5:90:27:2c:5c:30:be:
         1b:78:67:e0:69:d9:2c:b1:48:eb:8f:87:a8:4a:f7:64:91:6d:
         f7:25:3d:b9:b1:d3:bc:9b:5c:28:82:b2:9f:e2:1b:fc:e7:13:
         4f:39:f7:4a:ea:54:38:da:02:d7:82:df:8d:69:cb:a5:4e:d2:
         04:a9:7a:21:c7:ca:b4:c4:88:5a:ba:ff:c8:86:54:7e:98:10:
         66:e3:65:0f:3a:e3:5a:30:38:82:0d:d9:8b:5a:43:48:7d:44:
         cd:26:9b:e3:4e:34:56:5d:0e:74:0e:17:86:c7:3e:29:e4:55:
         89:10:76:33:d8:b3:4c:6e:78:48:d0:9e:54:af:e4:62:b6:be:
         ef:96:db:aa:0c:48:86:e8:fd:7c:a2:57:32:6f:c7:65:63:47:
         fd:8b:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:46:57 2026 by rpki-client