Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File:                     mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier:          kO+3tM+/xLT0js2TaStrOzgLYTD1Ho9uZMrzQeeB5do=
Subject key identifier:   45:19:4A:B5:94:69:DC:D6:49:6F:DA:6D:A5:3F:73:BF:44:6F:4B:08
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer:       /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial:       01A03939A0ED24110C6B78E4370D8A0A265B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number:          01AF
Signing time:             Tue 25 Aug 2026 14:01:12 +0000
Manifest this update:     Tue 25 Aug 2026 14:01:12 +0000
Manifest next update:     Wed 26 Aug 2026 14:01:12 +0000
Files and hashes:         1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: ahNXYeWTXkqLis1CnWZw9Ua681y6igQ3nuRmr2mQx+c=)
                          2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:39:a0:ed:24:11:0c:6b:78:e4:37:0d:8a:0a:26:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
        Validity
            Not Before: Aug 25 14:01:12 2026 GMT
            Not After : Aug 26 14:01:12 2026 GMT
        Subject: CN=45194ab59469dcd6496fda6da53f73bf446f4b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7d:41:a4:61:c6:6d:0c:49:40:97:11:22:50:
                    7c:13:99:80:43:eb:64:aa:10:8f:cd:93:f9:e1:7f:
                    1f:ee:e5:3a:af:12:e6:f7:ac:2d:6e:55:45:b8:82:
                    7c:19:b3:fa:cf:1f:e3:4c:fc:65:c1:aa:a8:38:53:
                    83:12:d3:18:a8:d8:7d:55:87:b0:db:0d:ea:89:b6:
                    43:cb:1a:58:10:cc:cc:c8:4f:48:6a:c9:40:66:32:
                    99:db:00:ad:62:28:03:e1:7f:37:06:78:0e:07:2d:
                    f0:61:c8:3b:27:e5:17:5e:46:ec:cd:6e:2f:c4:8b:
                    68:7b:ec:68:fc:f2:e0:52:68:cd:32:7b:31:32:21:
                    74:66:60:a3:78:c3:8c:01:81:4c:18:2f:f6:08:63:
                    ae:9a:cc:ed:94:95:4b:4f:04:63:ed:72:d1:41:0c:
                    ea:74:6c:b3:5e:13:14:60:58:06:ed:c0:11:41:bf:
                    d8:27:c1:4a:3e:54:c6:26:8f:17:ce:96:11:4c:fe:
                    0c:0e:05:93:b5:70:10:c9:5b:8f:5d:34:85:4e:7e:
                    6a:58:56:45:1c:3b:ad:4c:89:79:25:24:01:37:44:
                    47:41:85:be:b3:91:7a:20:c6:fe:b7:ac:02:a2:2d:
                    18:c0:6e:86:44:22:0c:4b:a3:29:3a:aa:07:fd:a1:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:19:4A:B5:94:69:DC:D6:49:6F:DA:6D:A5:3F:73:BF:44:6F:4B:08
            X509v3 Authority Key Identifier:
                keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:00:7a:f7:ef:ea:65:07:54:68:1f:21:a7:25:59:f7:b8:
         47:1d:0a:36:3b:53:e8:11:77:27:9f:39:45:d6:30:96:62:ce:
         47:ef:66:5e:db:9e:f1:a4:f0:a0:88:4b:fa:82:d6:a3:e7:99:
         7d:04:f1:9f:18:47:aa:64:19:96:31:9f:60:49:d7:e4:b0:2a:
         52:c7:05:80:6d:4f:98:6e:48:ac:3a:d8:05:b4:1a:d7:5f:19:
         c2:f2:ba:5b:68:46:27:54:f9:87:8e:da:a8:34:88:02:61:09:
         71:73:22:f4:04:1a:88:e6:a8:96:7c:07:4d:c0:bc:1f:8a:76:
         a7:ff:05:53:6b:a3:5b:c3:44:64:13:3d:9e:24:c1:34:0b:e4:
         22:86:af:8c:4e:62:e5:28:05:80:4b:5c:44:6e:22:bb:b7:ae:
         8e:4b:59:bc:05:71:4d:09:0c:66:1f:46:dd:af:3e:ec:00:8e:
         2d:78:d5:44:b8:ce:76:10:61:b2:cb:33:58:20:7c:59:30:52:
         4c:75:bf:11:44:7d:13:ba:a8:88:47:4c:96:3f:f4:4d:82:4e:
         87:ac:87:41:d6:56:49:7d:37:1c:4b:e5:9d:28:cd:8f:66:54:
         81:bd:50:c3:b3:ac:b8:24:37:55:7f:7a:c7:b6:cb:96:29:23:
         b0:0d:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:38:24 2026 by rpki-client