Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          FN+DLrfyPuTbQAXxBa4IkVAHg/SMRkC3vECozvadfPQ=
Subject key identifier:   2C:EF:69:26:F0:C0:0B:48:55:6D:BD:18:AA:32:68:CA:3D:EC:38:D5
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       019E30E1004D80870290D2273704CB598D81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          0BC9
Signing time:             Sat 16 May 2026 13:01:52 +0000
Manifest this update:     Sat 16 May 2026 13:01:52 +0000
Manifest next update:     Sun 17 May 2026 13:01:52 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: MJUPbuFC5FisddCyxOsNIDoyu8jUUs5n/C3XQJAEaaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e1:00:4d:80:87:02:90:d2:27:37:04:cb:59:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: May 16 13:01:52 2026 GMT
            Not After : May 17 13:01:52 2026 GMT
        Subject: CN=2cef6926f0c00b48556dbd18aa3268ca3dec38d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:28:9d:ee:29:f5:29:30:9e:1d:30:bc:fc:
                    9a:a4:9e:eb:77:c3:a9:95:ea:07:33:09:0d:78:32:
                    c4:55:bf:25:3c:72:c3:c5:7c:f6:10:eb:22:34:74:
                    3b:24:56:cd:1c:45:75:8a:3a:f9:0f:bc:30:51:96:
                    4c:6f:25:c5:53:9a:21:ff:6d:bb:e7:43:04:4f:27:
                    77:18:e1:63:08:03:52:33:8d:59:98:90:eb:b9:45:
                    77:67:e2:82:5b:13:db:c8:c6:c4:b3:0e:f8:5e:b8:
                    c5:47:12:fb:7e:3d:4d:07:74:df:28:c5:df:a6:d2:
                    ea:85:71:ee:d7:43:22:bd:0e:76:18:a0:43:af:9c:
                    49:01:af:4d:03:64:11:6f:8f:38:f6:a6:6d:02:c3:
                    4f:8c:ea:4e:84:f2:c4:1e:21:ec:f8:87:ae:47:42:
                    b1:91:5c:0b:25:b4:d6:70:55:ab:78:d6:d4:5c:c1:
                    06:ef:06:20:9b:2c:34:c6:5f:57:bf:4f:f5:61:db:
                    c5:d6:e4:e4:99:7b:75:c1:96:bd:77:7f:df:7a:1a:
                    3b:d6:11:5f:49:22:a0:76:f0:1e:77:05:1a:90:33:
                    e3:bb:be:cf:55:b5:0c:40:7f:9a:a7:3e:d0:5b:0b:
                    e5:30:d1:1f:fc:7c:d4:b0:2d:6d:2b:0d:89:f5:d5:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:69:26:F0:C0:0B:48:55:6D:BD:18:AA:32:68:CA:3D:EC:38:D5
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:90:c0:6d:69:4a:c7:14:66:28:35:cb:17:27:92:dc:49:61:
         82:4c:88:8b:bc:cf:c6:22:79:1b:e2:a0:26:e5:9c:cb:1e:59:
         c8:1a:e3:ab:ef:61:9b:83:1e:57:a2:02:e6:60:ec:b3:73:19:
         af:6a:0e:3d:1d:90:d3:42:0b:9c:09:04:04:8e:29:a4:e8:49:
         60:b0:30:c7:96:d9:e8:61:8d:89:5d:f7:07:b4:32:11:a9:ad:
         ee:cf:cf:14:26:b4:bc:96:5d:89:8d:e1:dc:f1:45:99:b7:64:
         c6:4e:a5:e5:15:8c:c6:58:52:82:cc:d7:97:ed:7c:d3:d0:57:
         d3:4a:2a:32:af:6b:f9:26:03:aa:b1:39:b6:ec:73:22:b9:aa:
         c0:d3:d0:e1:58:15:93:d4:44:d8:f6:57:99:e8:92:0e:a7:a8:
         a0:c6:b0:21:07:63:72:9b:b5:2a:f5:88:80:16:2d:da:70:7e:
         29:f9:65:7a:da:6b:bf:da:39:1c:6f:14:ff:64:89:9e:eb:ec:
         43:de:2d:b4:d3:5c:a0:2b:a0:ec:b9:56:c9:05:97:3b:63:63:
         0e:3c:f2:a0:00:e7:78:e7:90:c0:98:78:d4:66:c0:0a:61:aa:
         0a:32:03:3b:98:4d:79:0a:62:ae:09:1a:42:63:9e:19:6d:62:
         08:b1:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:48 2026 by rpki-client