Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
File:                     AsuO-6_rIeMi11P9cjYghkhPkps.mft (raw, json)
Hash identifier:          WWaZBFJQdxlOo+adoCq1vKvvbs50lmxNT464rfLvBqM=
Subject key identifier:   09:71:B0:0F:4B:99:0A:AE:84:94:F2:CE:B6:F5:80:87:55:C5:E3:0C
Authority key identifier: 02:CB:8E:FB:AF:EB:21:E3:22:D7:53:FD:72:36:20:86:48:4F:92:9B
Certificate issuer:       /CN=02cb8efbafeb21e322d753fd72362086484f929b
Certificate serial:       01A175829A76677D9532796F57DECBFA5AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
Manifest number:          80
Signing time:             Mon 26 Oct 2026 00:00:55 +0000
Manifest this update:     Mon 26 Oct 2026 00:00:55 +0000
Manifest next update:     Tue 27 Oct 2026 00:00:55 +0000
Files and hashes:         1: 2u60Uo74AxJ11UUuctV2OGQc0ZE.roa (hash: Vit2+XrBImMYaenWXBqa8hfnQViB75dhJdFUDZSO/+s=)
                          2: AsuO-6_rIeMi11P9cjYghkhPkps.crl (hash: /uEJ1YSp2EzNzmNy3OoKZBCjrS5Td5rMQDeSxTHSYVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:82:9a:76:67:7d:95:32:79:6f:57:de:cb:fa:5a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02cb8efbafeb21e322d753fd72362086484f929b
        Validity
            Not Before: Oct 26 00:00:55 2026 GMT
            Not After : Oct 27 00:00:55 2026 GMT
        Subject: CN=0971b00f4b990aae8494f2ceb6f5808755c5e30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:3a:7a:85:18:62:e7:5b:d9:83:cc:16:cc:
                    a4:f2:6d:f6:8c:ca:49:45:05:05:69:72:f4:99:49:
                    b5:d0:9e:2f:95:05:01:71:b4:1b:37:df:f8:79:5a:
                    e9:4e:7d:1a:c1:92:fd:a3:52:75:1b:54:54:2d:68:
                    8e:ea:ce:93:36:37:ab:13:85:4c:41:d4:81:ba:b5:
                    db:3d:ab:82:0d:7e:98:ff:63:d6:2f:95:44:1d:f2:
                    78:f6:a6:df:09:82:da:77:42:58:81:8c:97:91:74:
                    d6:4d:e7:a5:af:bb:e4:43:70:f7:64:43:df:ea:cc:
                    ea:a2:bf:4b:e0:2b:17:f3:a8:28:b6:b5:a3:d3:2f:
                    72:1e:8f:b9:f6:de:03:93:60:0e:93:1c:93:b0:0c:
                    01:d4:90:fb:85:1e:65:e0:30:38:b2:4e:8b:b0:f0:
                    2f:7c:5b:2e:0e:d2:81:98:0b:5d:36:54:ad:13:cd:
                    21:b3:11:a1:0e:3a:7a:d2:0d:de:10:ac:24:e1:e0:
                    91:67:c3:39:ee:fa:4d:24:e4:59:e3:14:a8:39:2c:
                    fc:84:05:3f:1c:60:68:b1:79:74:0b:be:dd:ad:32:
                    00:95:5e:eb:37:46:14:5e:71:c2:e8:e7:36:0b:a2:
                    0a:ee:bb:27:1a:fc:e0:56:f3:0d:ce:18:57:b1:b9:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:71:B0:0F:4B:99:0A:AE:84:94:F2:CE:B6:F5:80:87:55:C5:E3:0C
            X509v3 Authority Key Identifier:
                keyid:02:CB:8E:FB:AF:EB:21:E3:22:D7:53:FD:72:36:20:86:48:4F:92:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:75:ec:66:b7:6f:d3:ce:ac:b8:15:08:01:63:4c:cf:e0:69:
         04:f4:4b:54:0f:f8:96:71:55:8b:ae:0c:38:c7:12:c4:2d:c1:
         6f:4e:43:a7:c7:49:5a:51:49:44:76:99:c5:12:bb:a9:10:49:
         38:ff:f1:75:0d:56:75:e0:15:c3:66:4e:21:87:72:ca:ac:a2:
         17:c4:bf:1e:25:cf:26:70:2c:e0:27:c4:08:f8:f0:2d:0d:ea:
         2c:c6:2e:33:2f:34:b2:ab:ad:14:44:8f:60:9c:68:85:cf:b8:
         8c:7c:4e:1c:b3:b7:88:f9:df:cf:0c:2e:d3:b3:04:60:e2:7a:
         54:27:10:57:4b:ab:4b:db:0e:ed:45:df:e3:d8:1b:34:68:65:
         8e:09:b7:31:95:e3:96:a6:2d:84:d1:42:5f:b2:13:b2:78:9d:
         84:b2:df:30:42:0b:79:2f:35:58:c2:42:fd:ab:a5:2a:3f:97:
         f0:7d:ed:43:c5:2d:20:e7:f3:21:76:df:37:c1:62:bd:2e:56:
         68:62:c2:02:28:a1:16:c9:55:4e:64:a6:d3:db:e4:4d:bd:d8:
         0f:15:e0:b5:93:55:f2:7e:f6:33:5c:01:86:3a:5f:65:6e:e9:
         70:42:53:1a:a9:3a:da:28:81:40:cf:d0:d7:53:d0:1d:95:ca:
         c5:79:20:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:43 2026 by rpki-client