Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
File:                     aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json)
Hash identifier:          ZO5r66DBiRjrXK/bYzF07F3ZzZRNQkykLHxKFUowtVg=
Subject key identifier:   5D:3F:3D:AC:47:F0:CE:CC:01:57:32:03:CD:65:54:B3:27:E3:AA:A8
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Certificate issuer:       /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial:       01A0E32B5AFF534E16586DA708E02888E472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
Manifest number:          02B3
Signing time:             Sun 27 Sep 2026 14:01:04 +0000
Manifest this update:     Sun 27 Sep 2026 14:01:04 +0000
Manifest next update:     Mon 28 Sep 2026 14:01:04 +0000
Files and hashes:         1: T4UuZXBeaCSXXhb6vNH7Vy75_hg.asa (hash: hJkbS7Ns7tr/dUI7yRHtcG/eXbm7a0GJDdxjVlyXMNM=)
                          2: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: o/aFf8ta8x0gvAot3XompeWzqku/mEIoACff4wzjFiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:2b:5a:ff:53:4e:16:58:6d:a7:08:e0:28:88:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
        Validity
            Not Before: Sep 27 14:01:04 2026 GMT
            Not After : Sep 28 14:01:04 2026 GMT
        Subject: CN=5d3f3dac47f0cecc01573203cd6554b327e3aaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:cd:66:59:30:59:c5:ee:4d:a3:6a:ff:c8:
                    b8:11:f4:da:4d:a8:37:e0:c9:3b:2a:1c:0d:f8:e5:
                    9d:27:c6:73:32:48:96:1f:7f:f3:f2:43:03:db:c8:
                    36:b1:04:9e:e1:83:6e:b0:69:f9:5e:83:4f:a3:8f:
                    bf:f1:11:e9:18:88:69:7a:e5:0e:1d:75:68:c3:c8:
                    6b:39:9c:37:74:37:46:1f:b7:b6:53:e1:86:88:02:
                    f6:0a:13:7f:83:18:f9:df:ad:1b:13:90:28:a4:d3:
                    93:74:90:50:fe:53:d4:ee:fd:a8:db:d0:bd:5b:fe:
                    ff:21:a3:c9:c2:64:cd:51:09:cd:86:17:4f:0a:e2:
                    da:0f:b3:be:7a:cb:f6:54:b7:7e:6b:11:62:70:90:
                    a4:27:33:b3:1e:b3:29:1f:cb:22:78:6f:44:18:26:
                    ad:d5:c5:cb:74:5d:85:9f:e5:1e:3d:18:cf:56:61:
                    59:5a:4a:2b:97:75:4a:14:90:bc:8d:15:f4:10:7a:
                    25:8e:6d:47:1c:f1:72:2d:39:cc:b0:f6:bf:c4:d2:
                    3c:eb:f2:aa:e0:86:ee:6d:68:17:a0:bd:b1:39:ec:
                    41:ed:d4:3c:3c:54:b7:b0:b0:95:76:c4:ea:9d:f4:
                    0d:22:8d:0b:31:1c:0f:73:13:f4:6a:38:bc:5d:80:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3F:3D:AC:47:F0:CE:CC:01:57:32:03:CD:65:54:B3:27:E3:AA:A8
            X509v3 Authority Key Identifier:
                keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3f:fb:8a:1a:86:37:5d:c0:49:98:a1:7d:0a:ca:b9:25:ca:
         be:13:17:66:34:6f:31:4d:60:b7:93:a0:2a:a7:0a:81:2a:e4:
         23:24:9b:88:bc:cc:6f:dc:f7:f8:a7:59:08:8e:a2:39:29:53:
         5f:2a:d0:a2:af:09:fe:0b:29:12:76:1f:be:fc:b0:28:ec:b4:
         0e:ba:99:01:58:39:b9:1b:76:13:3c:73:2f:73:23:03:ca:ee:
         20:94:02:6b:c6:35:d7:c2:4e:63:8e:e2:f3:f9:01:d8:8d:3d:
         3a:86:fc:1f:07:af:e7:02:05:4c:3a:6d:aa:a7:72:54:46:f9:
         18:a7:d2:9b:ce:cb:1b:ba:02:30:91:4b:7d:f8:a3:cd:e0:bc:
         15:89:54:e6:a3:ac:10:57:3d:09:5c:18:4e:b4:25:f5:6a:4d:
         7c:59:19:85:f2:42:c8:e2:6c:3d:0e:9b:6d:31:99:58:fd:6f:
         59:87:35:36:ff:50:01:a7:cd:4c:96:f5:dd:9e:f4:8d:b0:f1:
         7c:dd:bd:23:a7:5d:dc:38:35:00:f1:d4:9f:fd:e0:e7:c0:49:
         2f:ef:a4:f6:f6:5e:86:28:4b:dd:39:2b:1e:ab:1d:81:be:a9:
         94:31:3c:b2:96:1c:b2:90:e5:23:6f:1f:f1:02:42:76:3c:0d:
         0f:26:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:54:46 2026 by rpki-client