Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File:                     Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier:          N/KucR+2xRP33D3zGOEmzOpmDMs6vdtHYWEBfSnMXKQ=
Subject key identifier:   DC:F4:23:45:99:C5:45:78:3E:51:2F:70:EE:08:9B:A9:9E:A4:6A:E9
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer:       /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial:       019E2A02711FE37C876CC8E3233F5B4EF553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number:          0118
Signing time:             Fri 15 May 2026 05:01:03 +0000
Manifest this update:     Fri 15 May 2026 05:01:03 +0000
Manifest next update:     Sat 16 May 2026 05:01:03 +0000
Files and hashes:         1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
                          2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: v62ekIa/3CyISMNDAIJDTpXm+FK10fzWjO7o4jdq2FM=)
                          3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:71:1f:e3:7c:87:6c:c8:e3:23:3f:5b:4e:f5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
        Validity
            Not Before: May 15 05:01:03 2026 GMT
            Not After : May 16 05:01:03 2026 GMT
        Subject: CN=dcf4234599c545783e512f70ee089ba99ea46ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:0d:75:19:ed:ce:12:9b:cc:d2:9c:17:36:
                    61:25:6e:66:68:5a:4e:39:d5:34:5a:23:48:70:24:
                    8c:90:67:27:51:b3:db:df:74:53:91:66:83:53:83:
                    e6:74:db:cd:1e:65:f0:8e:07:84:22:bc:6a:09:e1:
                    78:23:23:b3:08:21:4d:0b:61:63:d3:b6:d8:2a:6f:
                    de:4f:cb:81:b8:be:2e:a2:26:17:bf:0a:7d:3e:66:
                    97:94:51:e2:e2:3a:fb:c5:7c:c6:0a:14:4a:4b:27:
                    8d:42:c1:30:32:08:d4:d7:86:b0:d0:18:d8:aa:a8:
                    a2:46:9f:c2:e2:eb:97:c6:20:c5:5d:53:89:f4:d0:
                    21:63:eb:c6:51:7f:ad:08:75:62:2c:5c:9c:56:0e:
                    63:f3:25:56:e2:2a:cf:67:9e:4b:87:25:ca:42:2c:
                    97:17:90:3d:23:44:68:29:6e:2c:61:f1:e8:8c:16:
                    e2:27:ef:91:87:e6:a4:fe:e6:b5:d4:d0:2f:ba:f7:
                    72:34:ad:f6:14:ce:b6:d2:8e:1f:a0:be:fe:32:ca:
                    29:8f:0a:ed:57:b6:e2:67:2d:29:0c:e6:2c:55:33:
                    62:0b:0f:01:45:7a:4d:0d:81:76:ca:42:bf:e7:c1:
                    0b:95:1f:4a:32:c5:b1:d1:28:63:54:56:b4:6c:d2:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:23:45:99:C5:45:78:3E:51:2F:70:EE:08:9B:A9:9E:A4:6A:E9
            X509v3 Authority Key Identifier:
                keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:b1:f6:4f:f5:6d:ae:e5:31:82:cc:59:ab:9d:b4:b8:da:
         9b:72:6e:b0:64:bf:a2:04:28:ae:ad:d8:c6:c0:c7:6d:33:9a:
         b9:2f:aa:8c:b0:0c:bf:64:5b:aa:bd:32:e7:a6:7c:8a:4f:a9:
         ed:43:c9:b9:cb:7c:01:e1:6e:a7:4e:29:ab:a8:86:c6:39:a4:
         40:6e:1a:df:5a:26:65:74:d2:23:b0:b0:4c:be:c0:49:ad:1c:
         67:89:cc:d5:87:9e:0b:72:36:cb:d7:6b:e9:4f:df:96:c7:43:
         f3:10:79:ba:0d:51:41:87:75:96:4a:73:09:bc:1c:4c:7a:77:
         6a:cf:27:ad:2f:a6:e3:9e:f4:56:9a:90:f7:ed:a9:5a:b6:e5:
         c3:0c:d7:aa:b8:aa:48:63:e0:8c:f7:8d:6d:8c:7e:17:77:a2:
         ca:6b:ca:be:e6:8e:1a:17:15:00:13:75:ed:77:e9:ee:8a:30:
         50:73:b6:af:5e:ea:d4:3f:6f:1b:c0:41:56:b8:1f:bb:5a:51:
         3a:5e:a1:72:a6:7e:04:61:71:9a:28:4e:4f:7d:16:79:ce:9e:
         36:dc:47:f5:86:3f:84:34:75:56:bc:34:ed:47:b1:55:9f:9a:
         5e:6c:f6:f7:58:9e:88:ad:b2:a5:15:a7:50:10:33:a7:66:e5:
         d1:43:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:33 2026 by rpki-client