Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File:                     au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier:          UyaW9FOP67OvTX1qc9yjKkDF93p9WzQ4US9W+abAD0o=
Subject key identifier:   03:23:90:A4:44:34:03:13:73:77:E7:F8:98:FA:09:CD:A9:87:5E:DC
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer:       /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial:       01A08C0CAD4F3736A229CFC05183229066BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number:          0260
Signing time:             Thu 10 Sep 2026 16:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:36 +0000
Files and hashes:         1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: k/pgeNBL92XF1dCYKH9m62WhkN/jJ7FWmglJJKh/VMY=)
                          2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:ad:4f:37:36:a2:29:cf:c0:51:83:22:90:66:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
        Validity
            Not Before: Sep 10 16:00:36 2026 GMT
            Not After : Sep 11 16:00:36 2026 GMT
        Subject: CN=032390a4443403137377e7f898fa09cda9875edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:0e:5e:1c:ab:9c:ba:c6:ef:d2:a2:e7:eb:
                    93:71:cc:62:48:9c:4c:9e:50:af:b1:53:4f:dc:a3:
                    73:b7:dd:9b:87:ac:3e:6b:30:f9:a1:96:e2:3f:c8:
                    b4:4a:26:36:fb:5d:3e:ff:6b:24:12:63:ef:91:20:
                    ea:b4:aa:f5:89:d8:c7:52:44:f0:8d:ad:06:f3:f8:
                    8b:0d:63:e3:ed:42:3b:77:f7:f4:e3:68:bd:62:06:
                    64:b6:34:04:1c:0f:e0:0a:1d:5c:16:94:ae:f5:f5:
                    40:76:3e:82:8d:bb:e4:9f:49:54:80:ad:fc:40:de:
                    c3:27:a5:fb:71:b7:f1:2b:d4:32:8a:c4:ae:dd:32:
                    f4:4c:b0:c5:e0:85:01:0a:4a:b8:08:ae:3c:9b:e2:
                    bd:7d:98:5e:87:28:ec:5a:e5:e2:ef:eb:eb:68:85:
                    26:a2:b7:86:3d:c9:41:6e:df:cd:1e:5d:6d:7f:6a:
                    db:38:14:94:fc:74:76:f2:00:7b:f0:80:14:fc:89:
                    72:8d:fe:83:66:da:e4:06:41:28:88:44:85:1d:32:
                    d0:d3:a5:8a:a0:b8:b7:55:de:ab:44:ba:fe:5c:2e:
                    3c:de:d0:3b:02:5f:37:76:85:ad:a4:44:06:0f:3c:
                    c3:20:29:24:94:a1:01:2f:80:90:93:f6:60:9b:35:
                    7c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:23:90:A4:44:34:03:13:73:77:E7:F8:98:FA:09:CD:A9:87:5E:DC
            X509v3 Authority Key Identifier:
                keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:6f:7a:bc:89:a6:27:fa:14:db:9d:7e:90:84:4c:df:15:
         f4:d4:58:f1:e0:53:0f:ff:9b:bc:1f:a3:4c:a8:a6:6d:c9:7a:
         d0:1c:e0:1c:82:9c:e0:81:66:35:f6:8b:8e:67:55:bb:aa:8b:
         c8:51:37:ec:c2:4e:4e:5f:e8:aa:41:56:25:6b:e0:82:c2:aa:
         8f:98:e3:3e:c0:6e:e4:d9:a4:7e:ad:ef:8d:15:d7:f7:a5:2b:
         f0:dd:fa:16:af:e5:5c:20:05:90:a5:02:bf:3e:77:02:e2:23:
         34:06:d4:4a:b9:36:fb:27:33:0b:11:fc:56:af:d2:62:fb:e3:
         ee:c8:5d:e9:85:02:b6:96:a3:74:43:35:ae:5a:d9:79:b4:6c:
         f0:40:29:ba:96:da:d4:23:96:58:bb:9f:48:e6:74:47:5f:f2:
         75:0b:3c:18:ec:38:4b:75:f3:06:74:19:17:52:12:b1:2a:7f:
         70:d8:b9:ce:db:88:fc:0c:99:1d:e2:bf:ce:fa:04:45:08:3e:
         a8:96:df:0d:0a:de:f1:9d:02:3b:d4:e7:9a:c5:f8:5a:c8:3f:
         a9:40:f2:c5:4a:2f:1f:f9:12:4f:a9:2c:8e:77:55:e8:73:a6:
         92:28:8f:2f:e1:38:9b:d4:c6:f9:28:94:cc:6e:29:b8:97:bd:
         d5:50:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:51:29 2026 by rpki-client