Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          Cc1g1IbOkTyNvMmjPI3Dnig15Dmsf/Dz2n4pEkHecxA=
Subject key identifier:   6E:85:8B:C1:7D:52:87:75:15:E5:AB:D4:11:E9:48:1F:6B:EF:A8:98
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       019CC9E3B0E3A334981BC80F657614A2EEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          10C5
Signing time:             Sat 07 Mar 2026 20:01:08 +0000
Manifest this update:     Sat 07 Mar 2026 20:01:08 +0000
Manifest next update:     Sun 08 Mar 2026 20:01:08 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: KfU8TnIsJXi9Tm7ciTeo69gsV+9C6WfNPFoIuJbxs1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:e3:b0:e3:a3:34:98:1b:c8:0f:65:76:14:a2:ee:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Mar  7 20:01:08 2026 GMT
            Not After : Mar  8 20:01:08 2026 GMT
        Subject: CN=6e858bc17d52877515e5abd411e9481f6befa898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:ae:cd:a9:dd:91:0e:eb:69:bb:86:dd:f4:
                    7e:02:45:c8:55:d0:68:0b:19:23:e4:d0:31:0f:a6:
                    8f:6d:f1:cd:fc:fe:90:77:c8:84:15:8c:65:fd:e4:
                    e5:ac:a8:64:0c:e3:8d:bd:b1:cb:75:d0:ab:15:fe:
                    f4:fb:63:79:7f:b8:da:a9:2e:c7:9b:b0:9c:f2:cf:
                    4d:18:8c:4f:61:14:b2:6b:40:6f:c3:3b:b7:b6:f6:
                    a1:96:de:5e:a6:1d:6b:bd:28:f1:bd:b7:96:15:78:
                    7b:0e:76:cb:f0:6e:ff:c9:44:06:1b:b1:ce:a7:e6:
                    ec:ef:49:12:1a:9a:84:58:99:1a:0c:17:a3:96:78:
                    23:c1:42:32:be:14:84:ef:1d:0c:32:0a:dd:f5:a2:
                    67:68:53:d4:82:9e:26:04:a7:60:70:b7:61:04:e7:
                    ba:28:cc:2d:49:56:74:82:2d:6a:cd:38:24:70:7d:
                    38:df:d8:3d:cb:a1:0b:0b:ec:ae:d4:b2:44:6d:60:
                    b9:15:af:b4:18:2e:94:b2:17:37:b8:b4:10:2d:ca:
                    84:7b:25:ef:a4:70:b4:76:9e:ed:40:bb:48:e1:5c:
                    1a:05:50:e8:ad:25:9d:13:77:8d:9a:36:3e:f5:3d:
                    b8:bd:fb:1f:83:7d:72:90:ca:fa:03:e8:71:9f:2d:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:8B:C1:7D:52:87:75:15:E5:AB:D4:11:E9:48:1F:6B:EF:A8:98
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e9:c4:2a:f3:0e:9b:df:30:1d:62:25:8e:fc:12:9a:f7:ae:
         ac:54:99:0a:5d:38:33:3f:f6:1d:0e:8f:7d:54:ba:1e:85:2f:
         f1:0c:a0:b7:10:c9:3a:97:8d:1e:99:ed:7d:ba:19:24:c2:68:
         d9:f7:b6:2f:b3:41:ad:dc:1b:41:b7:1b:7d:ec:1c:fb:31:89:
         79:24:6f:f7:44:78:5a:b8:2f:6b:1f:51:a7:e8:7d:17:e0:40:
         9c:cb:bd:6b:41:7d:7c:55:e1:60:d3:b8:9a:ee:13:31:bf:17:
         d1:0e:67:4a:20:a0:01:12:58:60:46:77:a9:4e:50:f2:58:2b:
         f4:ea:35:ab:be:64:51:be:9c:93:d9:33:b2:f8:2f:ea:c0:80:
         29:0c:0b:47:70:7d:4c:2a:5d:1f:a3:a8:3c:46:b3:06:3f:0f:
         4c:b0:96:a6:3f:52:db:82:25:79:92:a1:7c:6a:e5:24:c8:fd:
         13:51:e3:50:6c:99:94:c7:5b:fa:3e:ea:30:9a:53:b3:ea:02:
         fe:d1:48:57:c7:a3:c0:5c:73:76:9f:e1:8c:79:ab:42:5a:79:
         dd:90:42:b0:d7:d8:62:6b:9c:d6:78:d5:fe:1d:f1:7a:60:76:
         6f:8c:7d:28:c5:51:15:e8:d5:d7:25:f7:28:00:ce:01:af:6e:
         33:2d:1c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJ47DjozSYG8gPZXYUou61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGIzZTZhN2M4NzgzZmM4YTU3MTlmYmQ5ZjM3YjMyYzhj
N2M1Y2EwHhcNMjYwMzA3MjAwMTA4WhcNMjYwMzA4MjAwMTA4WjAzMTEwLwYDVQQD
Eyg2ZTg1OGJjMTdkNTI4Nzc1MTVlNWFiZDQxMWU5NDgxZjZiZWZhODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfGuzandkQ7rabuG3fR+AkXIVdBo
Cxkj5NAxD6aPbfHN/P6Qd8iEFYxl/eTlrKhkDOONvbHLddCrFf70+2N5f7jaqS7H
m7Cc8s9NGIxPYRSya0Bvwzu3tvahlt5eph1rvSjxvbeWFXh7DnbL8G7/yUQGG7HO
p+bs70kSGpqEWJkaDBejlngjwUIyvhSE7x0MMgrd9aJnaFPUgp4mBKdgcLdhBOe6
KMwtSVZ0gi1qzTgkcH0439g9y6ELC+yu1LJEbWC5Fa+0GC6Ushc3uLQQLcqEeyXv
pHC0dp7tQLtI4VwaBVDorSWdE3eNmjY+9T24vfsfg31ykMr6A+hxny2lywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6Fi8F9Uod1FeWr1BHpSB9r76iYMB8GA1UdIwQY
MBaAFGtLPmp8h4P8ilcZ+9nzezLIx8XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmIt
NDMzMmM5NTdhMjJmLzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmItNDMzMmM5NTdhMjJm
LzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANenEKvMO
m98wHWIljvwSmveurFSZCl04Mz/2HQ6PfVS6HoUv8QygtxDJOpeNHpntfboZJMJo
2fe2L7NBrdwbQbcbfewc+zGJeSRv90R4Wrgvax9Rp+h9F+BAnMu9a0F9fFXhYNO4
mu4TMb8X0Q5nSiCgARJYYEZ3qU5Q8lgr9Oo1q75kUb6ck9kzsvgv6sCAKQwLR3B9
TCpdH6OoPEazBj8PTLCWpj9S24IleZKhfGrlJMj9E1HjUGyZlMdb+j7qMJpTs+oC
/tFIV8ejwFxzdp/hjHmrQlp53ZBCsNfYYmuc1njV/h3xemB2b4x9KMVRFejV1yX3
KADOAa9uMy0c6A==
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:45:16 2026 by rpki-client