Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
File:                     Ane1_sq3Pj5N0YapraBl-uio3hw.mft (raw, json)
Hash identifier:          2jqiRLed5vOmTYT+ELefH2oztTwasJQGE25koMe9hmk=
Subject key identifier:   A8:96:F0:FC:35:21:49:1E:73:6B:1F:7D:85:19:56:22:D5:16:0E:B9
Authority key identifier: 02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
Certificate issuer:       /CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Certificate serial:       019F1A1F1E77732F4DA2328E1F11223F00CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
Manifest number:          0384
Signing time:             Tue 30 Jun 2026 20:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:14 +0000
Files and hashes:         1: 4kQOoXdir4FPvZ9bCLqrsgJ56Io.roa (hash: v4oKtc8cLQM/OZEKI6njCV3tcg79uTMtDOJd0UU6hQA=)
                          2: Ane1_sq3Pj5N0YapraBl-uio3hw.crl (hash: sgPr8+t/rIMT0+dDENO9WgDLM8uSuk0ZbWrP2fBhdNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:1e:77:73:2f:4d:a2:32:8e:1f:11:22:3f:00:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
        Validity
            Not Before: Jun 30 20:01:14 2026 GMT
            Not After : Jul  1 20:01:14 2026 GMT
        Subject: CN=a896f0fc3521491e736b1f7d85195622d5160eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:75:07:c7:7b:f5:c3:6c:31:80:6c:aa:b5:bb:
                    cb:69:c7:7d:22:e0:b5:62:b7:d9:04:30:6c:3c:77:
                    16:ad:9c:f4:cc:d9:28:ce:74:9f:79:09:97:43:01:
                    c6:58:b0:dd:85:49:66:0b:0e:1e:ea:90:fb:da:94:
                    1f:fb:0f:67:14:c7:2b:58:f0:77:e0:a1:3a:52:e0:
                    2a:a4:6a:dc:76:e3:c7:c7:55:58:58:b0:19:ae:00:
                    76:b6:7d:ff:75:0b:b7:65:b8:86:6f:f7:cb:5a:0a:
                    0b:4e:01:bb:5d:de:53:6f:9c:72:02:32:86:24:fa:
                    8a:80:d1:23:f3:eb:a8:de:66:18:dd:0e:d7:e8:1d:
                    af:4b:c9:97:41:7b:a8:5d:6f:e7:84:1e:b1:92:13:
                    94:9c:8e:90:10:b3:3c:98:42:77:c3:19:06:aa:bd:
                    7e:16:9a:18:73:ac:a7:f0:3b:1f:78:9f:aa:b0:ee:
                    df:bd:7b:93:ea:29:7a:77:19:8b:0d:2f:b3:aa:c3:
                    36:12:d7:31:c8:c3:94:22:37:e4:3c:b8:31:01:08:
                    42:2a:aa:9f:9f:1b:57:ac:7d:f2:00:47:3b:6b:19:
                    32:62:f0:1d:01:b0:8c:f1:07:ec:3d:a6:69:85:ba:
                    58:76:60:f1:a1:33:08:3f:1c:6b:fc:c6:f0:ef:f0:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:96:F0:FC:35:21:49:1E:73:6B:1F:7D:85:19:56:22:D5:16:0E:B9
            X509v3 Authority Key Identifier:
                keyid:02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:1c:28:a0:a9:b5:0a:dc:f0:24:45:bf:46:0f:5c:6b:2f:
         a2:22:17:9e:61:5e:84:f7:68:9f:bc:4b:a5:ae:28:18:80:98:
         6e:ac:c7:f3:62:28:7c:63:1b:bb:81:a4:a0:67:b1:7f:76:82:
         23:9e:f4:f0:dc:76:4d:61:62:8b:ff:ad:ae:17:0e:51:bf:e0:
         08:c9:29:e3:f4:aa:47:8d:9e:e0:24:5c:58:42:00:02:15:a9:
         14:da:85:a7:4c:48:d4:47:17:8a:ab:83:39:61:eb:3d:e9:25:
         fe:d8:f0:28:19:0e:1b:7e:49:cb:a8:f4:25:e3:35:d2:bd:5e:
         62:a7:ef:0a:85:fb:86:74:b3:0e:65:ec:68:14:c2:67:ac:17:
         bd:71:8c:31:eb:3c:d1:40:60:a7:39:f0:ec:8a:72:5c:ad:45:
         02:30:e8:de:6b:42:fa:e8:b0:7c:f6:72:87:b8:9d:a0:c6:1f:
         de:c3:5c:9f:e6:ee:a3:43:bc:bb:7f:6b:ed:96:8a:1b:f5:c3:
         03:b1:a6:95:3d:ca:e9:4a:70:ba:93:df:f1:1c:0e:b9:37:58:
         a8:5b:74:c4:ac:d4:e1:42:cd:a6:3f:b9:44:0a:ff:5b:ec:56:
         ec:9b:5b:b3:db:aa:2a:0e:af:20:dc:31:c5:8b:1d:c1:12:01:
         36:2c:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:19 2026 by rpki-client