Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File:                     au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier:          lGfwG6E+fEZFyp806Yice6It/DBzGx0VqqGAuBaDJyk=
Subject key identifier:   E8:88:BB:FD:DA:15:16:50:A3:D3:0F:7F:02:02:D2:7A:CB:E1:EE:5C
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer:       /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial:       019EBB7E15FB18A93F8264C58A56A48356E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number:          03D2
Signing time:             Fri 12 Jun 2026 11:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 11:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 11:01:02 +0000
Files and hashes:         1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
                          2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: lI2gzqx2NBaOur5lPi9Mw239/YaEqRTeTrB7upWBtXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:7e:15:fb:18:a9:3f:82:64:c5:8a:56:a4:83:56:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
        Validity
            Not Before: Jun 12 11:01:02 2026 GMT
            Not After : Jun 13 11:01:02 2026 GMT
        Subject: CN=e888bbfdda151650a3d30f7f0202d27acbe1ee5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:04:97:c2:c0:31:5a:80:49:af:7a:de:6b:
                    49:c2:19:4f:cc:53:85:6a:d9:a8:78:f8:ce:ff:6d:
                    4a:59:98:2a:b1:14:22:91:34:56:50:ef:c3:f9:11:
                    98:d1:f7:4b:f2:fd:18:bf:24:b6:b4:3c:ee:14:da:
                    09:51:5b:a6:97:31:e4:99:a4:97:ca:71:22:f2:ff:
                    71:da:ca:65:87:58:55:23:2d:25:7d:a4:94:be:f1:
                    26:ba:d5:3e:c7:69:98:ac:80:32:6d:da:51:a0:b5:
                    4f:66:c9:f3:30:7c:04:00:98:1c:9f:ee:b9:23:57:
                    d8:c4:bf:39:f1:14:24:58:5f:dd:ab:e1:60:5d:a4:
                    5b:b0:60:3e:4b:50:14:f5:37:e3:0b:a3:0e:0e:6f:
                    37:40:b9:ec:09:9f:b4:66:74:8e:92:81:5e:a7:44:
                    42:09:f2:69:29:fe:bb:96:c8:1d:dd:1a:a5:3d:f6:
                    81:5a:1a:ec:94:d8:e5:aa:9e:3d:62:8b:da:d5:ca:
                    f5:08:0f:f1:cb:9d:92:74:15:bc:60:74:1e:c5:f0:
                    62:14:db:bd:9f:c0:f4:23:b7:4a:54:68:84:7a:b8:
                    92:0c:54:25:37:08:f3:dd:9e:e4:41:41:a7:5d:66:
                    10:30:52:ef:7d:3d:3c:d1:5f:76:87:a1:dc:71:35:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:88:BB:FD:DA:15:16:50:A3:D3:0F:7F:02:02:D2:7A:CB:E1:EE:5C
            X509v3 Authority Key Identifier:
                keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2a:f1:68:ef:91:b2:4e:85:df:be:55:0e:76:d2:42:7c:29:
         a9:fa:89:d0:4e:dc:6b:0a:18:5e:14:c5:18:40:12:ca:1e:4d:
         92:ee:f0:45:f0:0a:69:bb:a7:e6:c2:87:c8:7d:17:56:97:7b:
         2e:ce:71:f0:dd:35:ec:53:08:40:35:01:f7:78:48:0c:f2:90:
         74:d4:74:12:85:f0:a9:77:5d:3e:57:69:ab:38:19:51:87:7f:
         57:f5:28:e4:af:cc:be:b4:5b:eb:5d:f1:f8:69:e4:ad:31:18:
         ad:f7:dd:f3:60:7c:67:ab:54:1f:78:f5:81:04:01:fb:e7:b8:
         b7:2e:30:e1:46:df:db:79:4b:21:57:2b:7d:17:c4:a7:40:7f:
         ab:dc:a3:2e:e8:12:2b:91:64:1a:0f:25:a8:5e:42:89:00:e4:
         78:d4:e8:00:4f:19:55:13:7c:1e:b2:45:6b:bb:a8:fc:a9:bf:
         c0:4a:8c:12:46:e2:9a:0a:fb:23:cc:aa:87:e0:87:0c:2e:ac:
         7e:28:56:41:90:2b:b4:7b:a9:5a:6a:97:8a:e7:36:0a:56:c0:
         af:d4:56:86:60:93:01:bb:51:22:32:b2:d8:54:de:5e:be:ff:
         16:bc:f3:01:30:ee:8c:7f:1e:6d:88:62:5c:5f:c3:f3:8a:ca:
         57:9b:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:45:11 2026 by rpki-client