Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File:                     aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier:          0Bo+5oIV/ko6DWtVyuJBpJFF16WGF0Wms78GNsg5muc=
Subject key identifier:   53:43:3C:6E:12:6B:1F:33:99:38:A0:2F:6C:A4:78:53:54:E2:B5:77
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer:       /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial:       01A08E696C19821E53EECAB68F1D219B66A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number:          0262
Signing time:             Fri 11 Sep 2026 03:01:08 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:08 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:08 +0000
Files and hashes:         1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
                          2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: FbL6MjO9JsAU+pGcgmx7dI1CTe6Z4IDl1dkCAB0Gjng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:6c:19:82:1e:53:ee:ca:b6:8f:1d:21:9b:66:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
        Validity
            Not Before: Sep 11 03:01:08 2026 GMT
            Not After : Sep 12 03:01:08 2026 GMT
        Subject: CN=53433c6e126b1f339938a02f6ca4785354e2b577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:2f:14:42:33:24:9f:90:97:e3:30:e3:c5:
                    f1:1b:2d:33:eb:da:08:17:c4:bc:b9:24:b2:6e:53:
                    5f:a2:31:47:7d:a3:22:86:e7:7e:c8:52:af:e2:2c:
                    1f:3f:3c:d6:97:52:47:33:29:31:92:85:20:15:32:
                    5a:0a:0a:93:f5:b8:7f:73:27:07:51:f3:c4:4e:d8:
                    a7:ab:bd:bf:a4:46:03:68:db:2a:23:b0:e8:64:7c:
                    52:1e:95:44:41:61:24:0e:36:03:e6:c7:b4:b3:62:
                    06:3d:58:15:61:f3:30:e0:38:25:6c:8c:d7:00:98:
                    68:bc:0a:d9:88:3e:e2:eb:6a:a1:64:ba:e3:55:77:
                    7e:63:41:84:93:78:bc:3c:c1:e1:f4:94:9b:ff:03:
                    29:fb:d6:8a:4d:60:ad:64:96:8e:d7:cf:92:e5:6d:
                    5c:d4:f2:18:0e:2e:96:e2:5f:3e:6a:5c:ba:68:04:
                    ed:4f:03:ad:b9:63:75:5e:a9:51:72:4b:02:03:1f:
                    68:5a:a2:12:57:7f:45:61:21:5f:af:27:54:3a:2d:
                    90:b9:b9:16:ef:ed:79:19:a3:3b:51:f6:da:f6:b7:
                    b5:73:a7:ee:61:8e:cf:5a:7d:b3:fe:05:e1:f4:94:
                    b2:14:e1:19:79:47:20:2d:3c:b2:8b:12:3e:c0:3f:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:43:3C:6E:12:6B:1F:33:99:38:A0:2F:6C:A4:78:53:54:E2:B5:77
            X509v3 Authority Key Identifier:
                keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:a0:a8:6f:55:38:d2:47:27:6c:91:34:24:19:95:8c:f1:
         11:73:b0:86:dc:36:17:f6:df:08:5d:7b:ea:05:b0:22:a6:a9:
         f2:8a:8f:e9:88:0b:3a:bc:84:b0:7b:c4:c5:05:ee:94:67:74:
         d5:4f:b0:0a:c1:70:d5:d5:b8:32:21:74:2b:91:b0:e0:b2:9f:
         40:11:40:66:5e:0d:73:07:fe:7f:71:3d:fc:05:a7:c8:3b:a0:
         3b:d1:d5:b2:92:d7:f5:9d:a1:d1:c4:16:ae:f2:2e:cc:c9:fd:
         04:2b:53:69:14:58:a1:af:26:01:a4:98:a5:7d:da:9b:4b:c9:
         eb:61:4f:b7:26:fe:3d:3a:34:66:71:23:44:69:2c:36:b9:54:
         ca:2f:a6:da:fd:e9:33:aa:58:53:a0:52:07:55:c0:f5:10:b9:
         11:e1:07:d7:74:9f:33:8e:5f:d3:86:06:fd:b3:14:2a:f6:3c:
         dc:03:4f:c2:b6:17:2c:f3:19:3d:c2:e3:6b:4f:6b:45:c8:13:
         80:80:db:a3:cb:29:b0:44:fd:19:6a:15:d0:96:f9:22:c6:39:
         75:6b:15:dd:18:28:52:26:af:77:76:93:6a:7a:5f:57:c6:20:
         ed:f9:ca:79:95:bc:e0:da:9d:c5:6b:71:79:ce:90:50:5f:62:
         a3:58:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:59:15 2026 by rpki-client