Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File:                     AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier:          TtOjrx86BCSNKbgrHXe4sGLJC4cU3TOmccZ5X/ucjd0=
Subject key identifier:   83:DB:44:74:86:2F:BB:8C:C0:AB:A7:F8:37:C5:62:C8:62:C0:B3:C8
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer:       /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial:       019EBAA2E22D47C6CD55F4284298B9951FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number:          03A0
Signing time:             Fri 12 Jun 2026 07:01:37 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:37 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:37 +0000
Files and hashes:         1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: YplDGSL86Ok1Zjsql1pEMn3p2c08hhaLIEv1cs1a/ZY=)
                          2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:e2:2d:47:c6:cd:55:f4:28:42:98:b9:95:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
        Validity
            Not Before: Jun 12 07:01:37 2026 GMT
            Not After : Jun 13 07:01:37 2026 GMT
        Subject: CN=83db4474862fbb8cc0aba7f837c562c862c0b3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:aa:ea:e4:17:15:4e:fc:e2:24:08:72:43:
                    9b:f8:a7:bc:09:a2:bf:ac:06:b4:6e:da:29:8b:91:
                    8f:3a:6c:cd:c4:05:e8:89:eb:f0:20:3e:65:62:09:
                    d8:42:f5:29:bc:cf:99:95:d2:bc:ce:b8:cc:6a:04:
                    cf:b0:2d:43:b8:45:5a:cf:8c:1a:a9:5a:6d:03:ce:
                    c7:d0:64:c9:2b:82:f3:a2:73:d9:23:a6:30:18:6e:
                    0d:90:6b:3f:5d:1b:06:7c:bb:fd:4a:cc:47:fa:31:
                    cb:b0:d4:21:80:38:b3:a3:7c:23:9b:fe:ce:69:17:
                    c4:23:e9:f1:10:95:e3:cc:64:26:e1:03:b7:b5:a3:
                    56:f4:a0:9c:5b:8b:7e:95:db:a3:5b:97:c8:26:bf:
                    6c:eb:a1:7b:32:e1:74:7d:30:78:ea:34:26:8c:18:
                    60:0c:a4:48:ba:48:96:7d:0a:9a:bc:da:23:b4:5c:
                    e9:45:37:f4:7a:58:d0:d5:0e:5f:0d:af:81:ef:75:
                    57:ee:5b:05:1e:c6:e3:71:14:c1:9e:62:b8:cd:45:
                    20:6a:ee:a8:d9:4d:d6:d3:ad:d4:fa:d1:44:b8:63:
                    ca:7d:5d:26:3a:6e:70:65:d5:bd:c1:c1:3f:c3:92:
                    51:8a:cb:60:ef:b0:d4:8c:23:13:16:99:52:bb:b3:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:44:74:86:2F:BB:8C:C0:AB:A7:F8:37:C5:62:C8:62:C0:B3:C8
            X509v3 Authority Key Identifier:
                keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:ab:bb:63:ae:8c:81:86:90:05:c0:42:69:d6:a2:de:36:
         8e:60:15:e3:fe:20:64:29:2a:69:76:86:ce:03:c5:07:ac:c7:
         e4:5f:62:9a:c4:ef:4e:a7:dd:4c:d4:e6:93:60:c6:5d:95:9f:
         45:11:6f:c8:bd:a0:90:81:e9:94:69:89:c1:26:59:9e:26:2b:
         a0:2e:98:1f:8b:35:8b:fb:58:eb:f9:c6:2d:84:49:3f:fe:8e:
         c0:72:e5:8f:33:12:ab:58:2d:c3:c8:55:36:f3:1f:25:07:94:
         23:e5:30:5c:e9:70:dd:06:2a:e6:73:7a:4a:78:4f:3e:42:92:
         be:0b:7b:09:cb:5c:d0:ea:e7:62:3e:a3:16:94:ab:eb:6a:86:
         f0:1f:60:61:02:76:fe:eb:c2:2d:e6:ef:88:a7:bf:67:0d:2e:
         aa:c1:7d:2e:61:8a:26:a5:d2:c4:f4:79:b4:23:73:7e:34:41:
         78:39:30:59:fe:30:7d:4c:5f:cd:67:b9:6c:6c:c8:8b:59:87:
         d4:36:4f:ae:05:4c:1c:56:84:e3:24:f4:12:9f:14:eb:be:f4:
         31:a0:ed:9d:16:ba:2b:74:eb:b4:ed:36:29:ca:f9:a3:dc:0f:
         0e:0c:0f:76:80:5a:c9:e0:89:ca:ee:c4:f6:18:e5:97:f0:fe:
         57:23:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:51:17 2026 by rpki-client