Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File:                     Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier:          QBG/tQoPzQ0HhagyXlHpI9fxWR6sptGuIdGNyFC56Ag=
Subject key identifier:   BD:AC:2B:90:E5:56:66:07:EA:87:07:C8:A4:C3:23:32:32:B8:16:F3
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer:       /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial:       019EB8EAB5BA934C5CFB9099E57E40C53967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number:          0A1E
Signing time:             Thu 11 Jun 2026 23:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:50 +0000
Files and hashes:         1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: A7A/XLBM0b3d9WK9o9pLCy5tcFeT9yLAZrUxqdZ/+cI=)
                          2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
                          3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:b5:ba:93:4c:5c:fb:90:99:e5:7e:40:c5:39:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
        Validity
            Not Before: Jun 11 23:00:50 2026 GMT
            Not After : Jun 12 23:00:50 2026 GMT
        Subject: CN=bdac2b90e5566607ea8707c8a4c3233232b816f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:39:c0:af:02:eb:25:4a:2d:8b:8f:e9:64:
                    1d:ca:ad:54:9e:f8:ea:99:8a:6e:da:6d:ec:23:d4:
                    fa:3b:2e:d9:ce:5b:b0:1c:e9:6e:b1:f5:c5:25:4d:
                    b3:52:63:3e:5a:c7:45:63:72:ac:7c:57:25:19:a4:
                    d8:81:1d:9d:48:7f:0f:6d:fa:87:12:e0:8c:1e:91:
                    72:77:98:cb:7c:09:f4:c5:e8:31:44:01:71:de:81:
                    49:4f:58:b8:a7:32:ae:bb:f8:80:9b:d7:7f:e1:36:
                    c5:9b:96:07:70:4a:bd:02:5a:f3:3c:5e:92:1e:ad:
                    a9:1a:77:8d:6d:a3:db:4b:a4:90:11:18:2f:30:09:
                    a7:bb:eb:99:f9:4d:92:ed:84:01:9c:86:ad:28:cd:
                    f8:46:d3:7f:e1:42:a4:64:c6:60:a8:30:a5:94:00:
                    81:c0:32:f8:94:f9:a1:0c:ac:74:85:90:8f:79:f1:
                    80:d3:94:f9:9c:c8:e8:ff:80:62:d2:bd:51:7e:75:
                    7d:c6:f7:a5:5a:76:c3:d2:c6:11:e2:7f:4f:a7:15:
                    2d:a1:7a:ec:36:33:34:63:7d:41:cd:3d:1c:91:2b:
                    64:81:18:1a:09:0a:0e:97:09:93:0c:0a:f8:81:19:
                    a5:9e:d6:20:c4:9d:56:d3:fa:4c:44:63:e4:1d:e1:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:2B:90:E5:56:66:07:EA:87:07:C8:A4:C3:23:32:32:B8:16:F3
            X509v3 Authority Key Identifier:
                keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:b4:d6:d8:11:4c:4d:10:6b:6d:ee:30:9a:8c:7d:c9:1e:
         af:9f:ae:59:d4:e1:7b:95:b9:d2:7e:bb:2f:ee:b7:b8:db:b8:
         5b:20:bc:56:6a:10:8d:68:83:1c:46:ef:49:a5:04:e5:60:e3:
         5f:7d:78:c1:b0:86:94:76:25:51:07:32:b3:09:87:8c:89:63:
         2d:35:81:ae:cf:3b:f1:ac:4a:53:26:fb:a2:3f:9c:aa:ef:a4:
         0b:79:9c:55:44:e5:da:03:4e:8b:be:ce:1e:29:5f:9c:6d:6d:
         63:35:55:75:81:90:81:82:0a:0e:64:e9:cd:0f:4d:54:7c:35:
         c0:e8:24:84:bf:33:64:81:f1:11:72:44:12:74:24:cb:72:a4:
         0b:06:da:9a:3c:50:30:c6:fa:85:a3:e8:de:31:91:f8:bf:d3:
         48:bc:16:fc:3c:21:e9:f3:95:a5:ff:76:e4:1a:94:3a:0e:73:
         21:89:11:df:bd:4e:03:12:8f:88:7e:e3:7a:68:fe:bb:e1:7f:
         fd:47:26:a9:54:ab:16:9f:dc:25:a3:3b:f9:22:3a:d8:b7:69:
         12:4e:c1:18:e1:82:37:8a:60:f5:83:0f:54:3f:a2:a9:a5:7b:
         a0:00:46:33:01:9b:2b:99:d6:69:aa:e9:59:dd:a2:8f:15:f8:
         3e:b5:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:46:03 2026 by rpki-client