Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File:                     A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier:          BYuqqqGUc7plgajHhxA3XysQ1zqxrlI+xjqlcgfEyaY=
Subject key identifier:   CF:68:7B:F2:0A:B9:BE:77:A6:80:E7:75:01:3C:BA:F5:24:EF:8E:F8
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer:       /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial:       019E303BC7DBCB6746D30112F9A0E0987A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number:          0B43
Signing time:             Sat 16 May 2026 10:01:24 +0000
Manifest this update:     Sat 16 May 2026 10:01:24 +0000
Manifest next update:     Sun 17 May 2026 10:01:24 +0000
Files and hashes:         1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: lfD8lxcbKgbWlld+ncG+m9SloqN4QCqsC+s0Pm5pjXI=)
                          2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:c7:db:cb:67:46:d3:01:12:f9:a0:e0:98:7a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
        Validity
            Not Before: May 16 10:01:24 2026 GMT
            Not After : May 17 10:01:24 2026 GMT
        Subject: CN=cf687bf20ab9be77a680e775013cbaf524ef8ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:00:ca:39:93:ec:c8:db:bd:6d:06:9a:f1:
                    95:79:e9:d1:55:c4:c6:67:0c:bb:cf:b4:96:7c:d5:
                    8f:87:90:2c:53:bb:f1:49:64:50:74:02:7d:50:45:
                    e0:2c:28:80:ac:93:e2:6a:b1:91:6a:1c:64:62:1f:
                    d0:04:52:51:da:0c:00:cf:73:e0:48:83:81:ad:b1:
                    67:f0:83:16:9d:fa:db:6f:30:62:d7:38:24:d8:30:
                    dc:64:92:cd:ee:38:25:05:79:96:f0:32:46:46:1f:
                    71:65:04:44:7a:89:18:e3:6e:07:9b:3f:ae:e7:59:
                    37:f8:c2:8a:63:7f:59:84:c3:f9:11:6a:7a:39:09:
                    48:bd:c7:ae:dc:47:13:21:88:30:24:48:f3:2b:47:
                    d7:92:df:51:6a:d1:d8:71:3f:e5:f9:0c:c3:1f:38:
                    85:21:11:3d:24:a3:cd:46:d5:a7:01:36:1f:b1:5d:
                    9a:8b:11:c0:87:51:7b:ef:2b:e7:65:e9:40:9c:0a:
                    6d:b8:e0:24:6f:b9:87:4c:9f:f0:e6:c3:b8:1a:55:
                    e8:46:4b:f8:84:71:32:16:61:8f:f3:76:fc:a7:2e:
                    78:7c:62:99:9d:8a:dd:84:3f:a0:59:5a:65:9a:d2:
                    d4:cd:50:56:3f:b0:de:c5:59:86:ce:7a:1a:7e:bd:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:68:7B:F2:0A:B9:BE:77:A6:80:E7:75:01:3C:BA:F5:24:EF:8E:F8
            X509v3 Authority Key Identifier:
                keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:df:c6:02:a9:e1:db:b0:ab:6c:04:ee:93:9b:69:07:c7:
         b1:98:83:cd:74:43:ef:c9:b3:27:42:8b:b6:7f:d5:4b:23:b3:
         64:83:66:61:ea:74:68:42:6e:a9:d0:d0:16:9b:1f:14:59:7a:
         5c:1c:02:07:fa:f4:2c:f9:f1:7f:75:0f:39:fb:88:ba:e9:3c:
         62:1d:65:a5:17:58:12:bb:8e:0f:0f:88:12:91:28:4a:ee:7f:
         c4:ad:27:c8:5f:f1:f2:b8:4b:e8:ea:0e:89:61:62:24:99:fa:
         ce:2b:23:6f:16:71:1a:f9:75:00:f3:e5:7e:21:59:f5:02:df:
         23:29:9e:56:f2:a3:cd:fa:01:01:32:9f:ff:4f:6a:d1:e7:62:
         dc:82:93:2f:6c:af:24:85:28:9d:be:c1:25:84:fa:ae:70:02:
         36:b5:60:dc:56:b0:dd:9d:9e:80:5c:59:a9:bf:28:b1:85:cc:
         df:28:40:96:aa:39:e6:ff:3f:ac:de:20:c9:4b:5e:0e:6e:98:
         0a:6b:e8:4a:e3:8c:52:85:2f:86:f1:f2:bf:6d:f1:bf:91:31:
         90:5a:e1:de:5d:d6:5e:f0:87:73:24:b4:5f:ee:88:63:d6:d9:
         fd:ba:72:da:b4:49:76:d3:2d:20:1c:b3:c4:cd:51:fa:84:3c:
         b4:d3:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:20 2026 by rpki-client