Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File:                     A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier:          ay/jGnclQV7Iw88SELZ0y5xf2r8kbwY2cctk+fyqCg4=
Subject key identifier:   31:D2:FA:C9:25:80:4B:CD:8B:BC:39:6F:28:68:BA:67:AE:F8:AC:5A
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer:       /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial:       019E2FCDB18CB636D90CE0175082CBC98CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number:          05F3
Signing time:             Sat 16 May 2026 08:01:09 +0000
Manifest this update:     Sat 16 May 2026 08:01:09 +0000
Manifest next update:     Sun 17 May 2026 08:01:09 +0000
Files and hashes:         1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: IRU+2Z6ElHFbdkRIlP0aVwyWuoDU5Mo7zr5C1QbUgC8=)
                          2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:b1:8c:b6:36:d9:0c:e0:17:50:82:cb:c9:8c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
        Validity
            Not Before: May 16 08:01:09 2026 GMT
            Not After : May 17 08:01:09 2026 GMT
        Subject: CN=31d2fac925804bcd8bbc396f2868ba67aef8ac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:05:68:72:9c:1a:57:40:ed:0f:50:ec:94:ac:
                    de:8f:93:92:42:64:3d:59:f8:2f:35:3f:21:6a:f2:
                    38:1e:cb:55:6b:be:2b:71:81:73:e7:d0:ad:09:6d:
                    f1:9c:a8:d1:6a:a1:9b:f9:6c:f1:fd:aa:e1:c2:ce:
                    eb:e8:e2:72:fa:9f:34:c5:41:17:ad:22:51:7e:86:
                    23:8b:c1:b0:c2:95:8a:bb:d5:cc:44:c1:cb:25:42:
                    8c:8d:95:23:6e:a1:05:ef:80:a9:f4:9f:2b:78:a5:
                    d3:ff:10:20:7c:ec:11:eb:b7:02:26:64:94:82:99:
                    65:9c:a7:c4:40:6b:39:bc:f5:1c:e8:4e:5e:da:94:
                    05:0e:bf:e6:2c:f6:09:6e:00:41:28:25:90:f3:91:
                    3e:0e:20:65:5a:f1:02:b1:55:0c:02:53:27:7e:06:
                    5a:5c:02:5f:b5:61:bc:d7:fb:de:a0:dd:6d:9d:07:
                    7a:88:b3:af:e3:af:83:b9:1d:df:8a:0f:db:59:83:
                    a6:61:8d:60:61:ff:b6:71:4a:0a:71:f5:c4:38:79:
                    28:f5:c3:c5:30:c5:ad:f4:fa:ed:50:d1:36:f2:bb:
                    68:8a:38:31:a1:4f:31:59:f1:4f:a9:8b:5b:4b:b8:
                    fa:06:6e:d5:ea:1e:e0:09:d4:7a:cb:97:1c:b0:2d:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D2:FA:C9:25:80:4B:CD:8B:BC:39:6F:28:68:BA:67:AE:F8:AC:5A
            X509v3 Authority Key Identifier:
                keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:a3:db:ed:e0:49:f5:f6:0b:ac:27:74:cb:57:a5:19:08:
         1d:e4:83:b4:44:9a:a9:fe:25:00:ed:4f:b7:5c:e1:1a:0f:5f:
         97:8d:48:83:52:09:3a:04:94:34:da:33:ce:1e:97:d0:e4:2b:
         bc:35:b7:a1:48:79:2b:10:24:c8:d1:e2:41:24:73:11:a9:22:
         9d:4b:74:8d:1f:fd:1d:40:0d:da:42:ac:5e:7d:88:b9:48:3c:
         b4:6f:41:48:77:72:8a:2e:c5:9b:48:97:2a:6f:b2:a1:ba:fe:
         a3:a3:8d:df:39:f8:f2:9e:ef:11:3a:60:8b:4d:81:70:3b:57:
         fd:9b:4e:9f:33:36:33:b3:b9:b6:e8:d3:1a:7f:09:de:a6:0f:
         cd:be:88:1e:f0:93:3a:5b:65:16:26:b9:82:72:e5:aa:85:55:
         d3:64:a1:77:f3:1b:58:02:06:03:74:52:2c:f8:6a:7f:d6:b7:
         14:03:e5:ab:0c:46:56:24:a4:db:a2:69:b3:80:77:c6:fe:50:
         18:7d:32:79:51:e8:a2:bf:4c:c5:21:c2:b3:d6:c9:86:ff:87:
         be:d8:9a:18:de:3a:7d:00:5c:71:8b:fc:67:d0:ba:a6:d3:4a:
         cf:71:86:f8:16:ff:cf:e0:98:63:fd:65:50:20:28:64:b4:80:
         22:a3:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:22 2026 by rpki-client