Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File:                     AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier:          HJX7KhiLwkh3INnNnMAur9vD04/pQsE9HapyGVq9QkY=
Subject key identifier:   26:78:BC:3D:33:BA:AC:0E:EA:3E:95:63:F9:A3:66:8C:8A:16:16:FD
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer:       /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial:       01A00025B531E5F13BF8952B3F76FC20764C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 12:01:06 +0000
Manifest this update:     Fri 14 Aug 2026 12:01:06 +0000
Manifest next update:     Sat 15 Aug 2026 12:01:06 +0000
Files and hashes:         1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: M71ItBf/WyTWL3xlbzMj+gHRYwJ7f8TVWl9f5mAug1o=)
                          2: mWE6kT69cqu-PW8JgJR1gCAZ64s.roa (hash: FJjpE6dQyURSUrQm7mC2IcezcL6cJcvz4TAfaMMJ8lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:b5:31:e5:f1:3b:f8:95:2b:3f:76:fc:20:76:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
        Validity
            Not Before: Aug 14 12:01:06 2026 GMT
            Not After : Aug 15 12:01:06 2026 GMT
        Subject: CN=2678bc3d33baac0eea3e9563f9a3668c8a1616fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:20:9c:15:03:c0:c7:05:d2:83:f4:b1:37:
                    d4:bb:4b:91:78:5d:b4:c9:ad:8c:0e:61:ee:b5:97:
                    7a:fb:31:ed:63:4d:ab:6a:b7:d9:f4:9d:d6:15:8f:
                    17:81:f0:6a:18:65:5e:17:26:51:52:c3:b1:31:41:
                    dd:63:ca:09:09:e9:6e:1d:d3:a2:bf:49:39:e4:44:
                    98:a6:9b:38:87:60:c8:e1:c9:57:ac:75:22:cb:64:
                    39:aa:9a:53:e7:97:82:a7:4d:37:b2:1c:b6:1c:45:
                    89:2c:20:a8:6d:5b:e6:d8:af:2c:3e:7b:c1:bf:d6:
                    b6:55:1e:d4:3b:25:e9:01:bd:31:7d:16:b7:b0:42:
                    33:40:3e:6f:4d:92:fb:f9:b2:14:ee:6a:11:35:da:
                    9b:f2:53:3b:87:f0:ba:fb:3c:16:a8:e9:85:b6:15:
                    a0:fb:fd:f5:b7:5d:27:d0:38:da:0f:7f:db:d7:03:
                    e8:f8:96:9d:38:82:74:d5:d4:a9:5b:e4:f1:cd:a7:
                    ee:da:ff:ed:3d:9c:56:93:26:b3:36:e1:f1:d2:81:
                    b0:de:cd:dd:fd:9e:22:51:da:35:78:68:bf:c0:39:
                    ed:01:02:27:e4:62:89:b0:88:00:61:dd:8e:68:0f:
                    4c:b1:d1:a7:05:8f:73:0d:12:87:d4:29:39:88:ac:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:BC:3D:33:BA:AC:0E:EA:3E:95:63:F9:A3:66:8C:8A:16:16:FD
            X509v3 Authority Key Identifier:
                keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:20:c0:8e:ae:91:3e:8a:82:7c:70:e0:af:44:0f:3c:51:93:
         e9:41:8a:c6:4d:76:94:cf:a9:7b:4a:ba:f0:e7:e2:68:59:e3:
         92:1b:9c:22:0c:1b:0b:cf:c3:29:3b:54:45:b3:d9:03:73:6e:
         7f:b5:a4:a1:e4:e4:29:40:3a:71:f3:1f:bc:c8:26:0c:01:c2:
         7a:d9:b4:ad:09:53:af:03:b9:54:35:f3:4e:28:b1:c7:87:da:
         84:b2:7d:e8:b0:76:f4:76:c6:73:27:eb:6d:1b:21:f1:ca:f7:
         d9:66:b8:2f:b5:6d:c9:bc:60:44:50:a2:04:12:93:45:ae:cb:
         39:ed:9a:3f:d5:91:6a:75:33:8f:4b:52:f2:6b:4e:d1:71:63:
         3c:5e:58:a4:c7:4e:6b:fa:5b:3c:f0:4a:89:0b:ff:a4:9c:e6:
         8b:93:5a:cf:50:d0:d7:cb:a4:46:5e:df:d1:1b:3e:6a:6d:74:
         a6:9c:d5:49:09:0d:c8:8e:fe:88:c0:9b:e2:6a:69:90:e8:5c:
         4f:f1:14:18:c1:bc:4c:16:de:3c:dd:dc:93:14:eb:36:6c:c2:
         71:3d:b4:ec:80:e1:86:ac:75:51:20:34:38:dd:2b:0a:2d:de:
         58:43:a5:0e:76:1b:cb:77:93:27:83:ca:88:92:34:76:19:36:
         c1:fb:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:14 2026 by rpki-client