Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File:                     pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier:          OWMhtc2AlZA1mX1O1oqflLtEpKF1nCQKgMEnqxX74HM=
Subject key identifier:   45:E5:93:F4:E3:5C:B5:E6:02:E4:D1:39:63:ED:F1:F6:46:B8:02:0F
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer:       /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial:       019E89B5C5D8931419B5A924C69F41B77AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number:          01A0
Signing time:             Tue 02 Jun 2026 19:00:51 +0000
Manifest this update:     Tue 02 Jun 2026 19:00:51 +0000
Manifest next update:     Wed 03 Jun 2026 19:00:51 +0000
Files and hashes:         1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
                          2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: Eqf/LGLxTc4fk+VQIuzC7yljk+Q7W619WvX4HFHnGYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:89:b5:c5:d8:93:14:19:b5:a9:24:c6:9f:41:b7:7a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
        Validity
            Not Before: Jun  2 19:00:51 2026 GMT
            Not After : Jun  3 19:00:51 2026 GMT
        Subject: CN=45e593f4e35cb5e602e4d13963edf1f646b8020f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:d9:08:88:c2:e1:30:1d:9b:b8:21:8f:a1:
                    aa:9e:0a:c7:d8:cf:4c:25:e9:0f:91:85:77:ce:dd:
                    70:fe:39:a8:61:77:26:12:23:b3:6c:ca:ba:03:44:
                    6d:8b:41:e7:0f:86:d0:73:5a:46:d6:4b:2b:de:bf:
                    50:6e:aa:01:8e:0a:06:66:6c:ff:0f:df:d3:a3:c7:
                    bb:8c:96:55:81:af:8e:a5:dc:15:a6:c1:3c:6b:39:
                    0c:83:ca:8e:7a:f9:29:88:ee:41:dd:3f:e8:2f:af:
                    93:fe:8f:e4:82:19:3a:31:55:46:f9:8e:14:a9:22:
                    22:af:2b:a7:2d:b3:43:f4:aa:19:f0:4d:9a:93:8d:
                    d7:4d:43:d0:19:3b:18:2a:a6:d0:86:0e:75:62:3a:
                    50:f4:7d:47:d6:b3:d8:ed:f8:c7:ff:e3:4e:38:05:
                    60:df:fc:9d:aa:0a:38:76:44:3a:cf:80:98:e3:9b:
                    69:71:59:2f:f1:9a:35:83:08:45:b5:52:4a:e5:e3:
                    02:ed:e2:c9:ad:c0:bf:98:b9:85:3c:e2:47:d8:25:
                    cf:48:0a:63:5d:5d:78:57:de:91:4f:70:ad:dd:77:
                    b5:66:0f:72:44:64:c1:36:30:d4:84:6d:f8:3b:0f:
                    2a:3f:2c:b6:e2:89:34:45:ab:e2:9c:a0:b2:b2:35:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E5:93:F4:E3:5C:B5:E6:02:E4:D1:39:63:ED:F1:F6:46:B8:02:0F
            X509v3 Authority Key Identifier:
                keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:03:bd:29:22:31:57:5f:de:da:66:c0:d5:c4:24:2d:40:
         2a:f0:1d:83:37:d7:d2:53:c6:1b:7a:9e:ff:53:5d:57:28:c4:
         5c:fc:d2:42:99:be:d5:5e:10:40:11:f2:54:c8:49:58:a1:ce:
         59:92:42:23:bf:eb:f1:f8:d6:f6:97:21:41:69:4e:3f:47:c0:
         e2:0d:b7:0e:e8:72:4a:26:85:96:4a:74:5c:24:a5:8c:68:21:
         a8:06:97:6d:6a:f4:58:6f:89:0a:06:d1:d0:0a:66:3e:d8:63:
         1e:79:e6:17:a4:2a:8f:f9:c7:df:5c:b1:e8:45:43:d1:57:d3:
         af:c0:6c:2d:85:92:eb:93:fb:2a:d5:7d:c3:e7:e0:c3:c2:ef:
         9f:26:7d:99:a2:fc:7b:8b:54:8e:41:13:dc:c3:a6:01:2d:bf:
         fe:7e:39:0b:3a:94:ff:a1:a5:d0:04:88:54:ef:db:c3:78:5f:
         2c:ea:ba:68:45:5e:ad:17:ae:28:31:ac:f0:64:85:f8:77:3a:
         95:aa:58:c4:ce:a1:38:68:6f:bb:79:36:67:45:d6:24:aa:88:
         e9:9d:7d:8c:79:a6:5e:df:62:85:12:1c:6c:10:25:9c:c8:60:
         c3:5c:00:ce:62:7a:ec:5e:d5:36:06:2c:6e:ed:9b:ea:3e:4a:
         a3:1f:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:40:50 2026 by rpki-client