Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          i5QuT5eInL35VJMLjXyfsp2uvUAQXY3zeWqfKtYNmUk=
Subject key identifier:   8A:47:36:41:BE:A7:CC:09:58:16:66:83:07:33:38:4D:37:30:17:86
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       01A0005C2A68AA9D8A151EFB26A6B86CC73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          151F
Signing time:             Fri 14 Aug 2026 13:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:35 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: CtMGOTBX9stTp53ogftbJVQuSrGGEpJV0gTxBR7fnpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:2a:68:aa:9d:8a:15:1e:fb:26:a6:b8:6c:c7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: Aug 14 13:00:35 2026 GMT
            Not After : Aug 15 13:00:35 2026 GMT
        Subject: CN=8a473641bea7cc09581666830733384d37301786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:b6:7b:16:04:2d:52:c3:b0:1f:cb:55:dd:
                    f4:88:0e:f4:93:3c:50:03:ac:52:e5:c9:05:89:7d:
                    cc:6f:83:09:34:ca:15:7d:cc:74:f1:c3:ae:a3:88:
                    d4:99:bd:b9:54:5b:3f:80:25:21:77:62:2b:e8:c8:
                    6e:44:7d:b3:9f:a0:cc:08:c8:9a:d7:d2:56:78:7e:
                    af:d1:af:86:41:01:56:08:80:04:5c:c7:5e:da:ed:
                    36:30:0b:f7:bf:35:1a:0e:24:28:5c:7f:cb:a0:bd:
                    fd:53:3f:a2:0a:e5:94:83:d1:b8:95:89:31:19:f3:
                    0f:66:68:6a:f4:60:42:8f:be:6f:5c:63:db:a0:4d:
                    48:af:d1:d8:49:ef:25:0b:7d:0c:3a:44:32:c3:35:
                    85:c9:5b:25:04:2e:b6:15:4d:89:ed:48:60:86:fc:
                    ed:8d:09:a1:20:52:8a:43:b0:0b:8a:2c:5b:7f:68:
                    20:3c:1f:e2:67:ec:9d:ca:83:d0:95:6d:b3:a1:8d:
                    ec:04:1e:c1:f7:68:46:67:a4:ae:df:fd:ad:76:a3:
                    0c:da:4f:6c:d1:af:e1:85:49:9c:49:fc:01:d6:df:
                    4a:fb:1a:95:37:d0:d2:92:f3:78:7e:6f:f1:30:71:
                    0e:84:cf:d0:5b:9b:88:7f:5f:4b:7d:6e:89:3e:45:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:36:41:BE:A7:CC:09:58:16:66:83:07:33:38:4D:37:30:17:86
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:86:de:0e:96:8c:0c:0a:4b:3f:99:f2:86:14:56:1c:56:65:
         89:e1:08:e9:8a:5c:96:7e:30:f7:a1:05:8d:fb:0f:1c:84:9c:
         94:d1:0a:2c:8b:3b:bd:3b:eb:16:34:30:51:61:53:14:0a:20:
         9d:e4:02:d7:fa:ea:ad:f2:2a:ec:d1:70:53:84:25:13:8e:80:
         f2:f0:57:23:29:21:39:9c:61:77:62:3a:7f:8c:33:ab:b6:5f:
         1c:19:a8:9b:26:8d:18:7d:e9:f5:54:b2:c1:e0:8c:9a:47:d6:
         d4:d4:4a:85:91:af:75:80:64:01:67:0a:5a:18:29:a6:88:96:
         b6:85:b8:f8:ad:46:63:87:9c:a7:81:d8:97:0f:47:72:17:d1:
         10:9d:21:86:18:e5:c7:b7:23:57:6c:41:f7:7c:8e:79:fe:0c:
         2a:ab:92:54:21:22:4a:6d:77:01:b2:19:07:b1:c2:1d:12:07:
         28:b4:2b:ff:14:95:9b:21:30:3d:a8:1b:8a:f6:72:63:60:27:
         31:08:f5:fd:4f:16:0b:f9:7d:71:06:57:d3:5a:2c:75:c2:3e:
         54:39:99:4f:dd:df:22:94:7c:1b:b5:32:f3:a3:77:5a:c3:23:
         c8:83:7f:46:95:db:a4:a7:47:c1:87:71:e9:bf:67:a4:db:0f:
         b5:b3:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:25 2026 by rpki-client