Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
File:                     A6vacUAmJIC3jTuudt3YxthopPI.mft (raw, json)
Hash identifier:          qnUPqQiZK48/9sLuOLkAcCAYy30TqYUIznbdMNdA2sE=
Subject key identifier:   2B:97:C3:AB:9F:16:94:56:71:18:3E:6C:9F:2E:4F:6F:B7:06:B5:74
Authority key identifier: 03:AB:DA:71:40:26:24:80:B7:8D:3B:AE:76:DD:D8:C6:D8:68:A4:F2
Certificate issuer:       /CN=03abda7140262480b78d3bae76ddd8c6d868a4f2
Certificate serial:       019F9737DB89293C28A4A1A49343FFAF158E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
Manifest number:          43
Signing time:             Sat 25 Jul 2026 03:00:47 +0000
Manifest this update:     Sat 25 Jul 2026 03:00:47 +0000
Manifest next update:     Sun 26 Jul 2026 03:00:47 +0000
Files and hashes:         1: A6vacUAmJIC3jTuudt3YxthopPI.crl (hash: lmyLtZZsxZYwMFWjgGDgLUxgeWFX0fvrXWCaEBILpIM=)
                          2: oEM0wDUvGTK5fY0FNB38hG9027A.roa (hash: dvrFSBEksNe2CFDmHleIj839JX7ASGNbq/KlrLkVD4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:37:db:89:29:3c:28:a4:a1:a4:93:43:ff:af:15:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03abda7140262480b78d3bae76ddd8c6d868a4f2
        Validity
            Not Before: Jul 25 03:00:47 2026 GMT
            Not After : Jul 26 03:00:47 2026 GMT
        Subject: CN=2b97c3ab9f16945671183e6c9f2e4f6fb706b574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:1a:97:53:fe:a5:50:ce:ed:89:bc:74:78:
                    7c:33:cd:20:6a:82:ae:fa:f4:1e:c5:ca:50:2e:aa:
                    3d:6a:94:ca:b5:5c:bc:33:72:7e:74:8d:36:0b:78:
                    4a:6f:71:64:93:d9:1f:af:a4:19:2d:e1:70:4a:6a:
                    a3:c2:f9:b5:c8:b8:1a:85:2d:b4:45:f6:5f:a2:fb:
                    9a:51:da:74:46:17:db:1a:22:3a:11:1c:56:86:99:
                    f3:0f:31:ce:a4:5a:99:73:29:6d:82:34:ed:41:4e:
                    9c:ea:6b:9d:25:8d:9e:14:dc:49:da:9d:06:44:86:
                    a9:56:de:41:5a:be:3b:31:57:3e:04:4d:71:80:4f:
                    5c:ae:41:ed:de:40:53:2d:ab:33:46:6e:bc:c9:bf:
                    77:87:b7:19:18:81:4e:3a:88:34:c6:0d:46:73:1d:
                    dd:93:a1:04:6f:81:24:a5:3e:d8:45:b5:09:d1:4f:
                    c7:bb:d2:85:bd:ee:ce:08:a0:30:1a:46:01:58:48:
                    34:9f:7b:a1:36:3b:83:52:27:46:68:68:e5:24:1d:
                    38:23:8f:0b:3f:4f:4b:70:61:cf:b6:9d:f8:d2:cc:
                    3f:a8:62:ae:ed:b7:fa:a5:56:42:aa:22:ad:a5:1f:
                    1a:7c:12:3e:8d:1e:06:17:93:69:e6:b1:9b:5a:80:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:C3:AB:9F:16:94:56:71:18:3E:6C:9F:2E:4F:6F:B7:06:B5:74
            X509v3 Authority Key Identifier:
                keyid:03:AB:DA:71:40:26:24:80:B7:8D:3B:AE:76:DD:D8:C6:D8:68:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:6e:eb:17:6e:1a:47:44:a5:11:ee:21:5c:c2:fb:65:00:
         88:68:f2:25:1b:04:23:2b:25:94:9f:a4:30:03:9a:6f:70:94:
         f9:4e:95:48:3f:22:be:46:5f:4c:c5:ef:38:e7:c9:68:90:e7:
         3d:c0:0d:59:38:80:01:f3:ee:29:9e:e8:27:94:ee:80:20:13:
         31:df:7e:32:e1:db:cf:e8:1b:75:2e:34:4f:8f:78:07:a7:8c:
         5f:35:b4:e9:a5:35:63:e1:4f:a5:14:c9:79:1a:6d:06:12:4b:
         de:fa:38:e7:fe:20:1d:5b:3c:51:8d:a9:d3:2c:a2:da:6e:f6:
         d7:cc:c5:5c:75:3c:2b:f8:c3:fb:bb:10:05:32:90:0f:42:f6:
         f8:03:0a:b7:df:6d:27:f6:08:03:4c:0a:75:25:70:81:1f:22:
         4f:2b:50:60:19:74:18:86:ea:e9:fa:2e:1b:51:00:89:75:ae:
         66:e1:20:b8:ac:8f:9f:55:02:b9:be:5b:c5:56:5e:9a:1f:eb:
         e5:6d:f6:de:2f:39:57:9a:8c:8c:a9:f6:67:23:bb:13:2d:d1:
         3d:1c:e0:3d:fe:87:0c:c6:51:69:03:ee:db:7c:0d:9c:1f:4e:
         51:c3:24:e2:55:47:ef:32:1f:45:b1:64:03:aa:04:d2:10:3c:
         fb:33:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:22:41 2026 by rpki-client