Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File:                     AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier:          SXhC9KFkiQB0RZsWbKMtyLvrnbWyHsAdNrx9C7QygTc=
Subject key identifier:   C6:10:F2:45:9C:15:08:9B:3E:A6:AC:0E:13:0A:C8:1A:9F:A7:24:E2
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer:       /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial:       019EC4B7FA28BF21C6F69A58CDE6B9C8C564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number:          195E
Signing time:             Sun 14 Jun 2026 06:00:51 +0000
Manifest this update:     Sun 14 Jun 2026 06:00:51 +0000
Manifest next update:     Mon 15 Jun 2026 06:00:51 +0000
Files and hashes:         1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: 4nhw+DPjP4+Y7QhvH8QwW0xyNurwE1X6F5ebdAXHggs=)
                          2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:b7:fa:28:bf:21:c6:f6:9a:58:cd:e6:b9:c8:c5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
        Validity
            Not Before: Jun 14 06:00:51 2026 GMT
            Not After : Jun 15 06:00:51 2026 GMT
        Subject: CN=c610f2459c15089b3ea6ac0e130ac81a9fa724e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:ae:d7:30:45:3d:d8:23:68:72:32:c9:69:
                    6c:95:6d:4e:f7:ee:8f:0b:19:c8:4a:5d:4a:8c:83:
                    88:71:1c:38:53:cf:5a:84:16:a1:5d:6f:51:f2:5f:
                    fd:c0:ce:60:cb:b6:65:db:e6:1d:f6:9d:a1:d6:05:
                    92:ad:fd:c4:bf:b5:b6:53:cc:d2:a9:06:8b:ac:1f:
                    61:54:65:0a:39:5a:e6:8e:a3:9f:fa:f7:db:6a:43:
                    f5:5e:4a:77:5f:43:cc:a7:05:5b:9c:8b:ef:18:24:
                    76:4d:a6:a5:94:54:62:54:7c:5f:c3:63:b2:9e:54:
                    1e:0e:5a:7a:6d:83:f8:c3:32:f0:60:02:80:06:1b:
                    44:51:ad:9a:d7:80:09:21:58:fe:fb:f3:3e:a7:42:
                    ac:f5:3f:c9:88:5d:00:c4:e2:ef:ac:e9:43:40:b3:
                    31:eb:f4:2e:c4:7a:bb:05:b3:2a:12:3f:01:d3:0d:
                    6a:8e:24:ea:af:7b:c0:a0:9e:ab:e2:49:be:a9:d2:
                    51:8c:54:6d:8e:ea:d8:d5:b6:d5:fd:e7:6e:5b:1d:
                    55:d7:52:cd:7e:4c:63:dc:70:f7:f5:0f:7b:25:a0:
                    97:d9:f9:60:14:5c:84:79:f9:5e:f2:1b:0d:fa:e1:
                    d4:ff:03:e0:93:78:7b:78:90:85:1c:74:2d:3f:02:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:10:F2:45:9C:15:08:9B:3E:A6:AC:0E:13:0A:C8:1A:9F:A7:24:E2
            X509v3 Authority Key Identifier:
                keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:62:5e:a8:6c:39:cf:91:fb:9a:ed:bb:47:45:29:de:8f:36:
         a7:e8:4f:88:5f:7c:21:4f:02:a4:43:6e:29:27:d2:d1:c9:1a:
         02:09:c6:e0:f0:a3:93:13:78:eb:c7:ea:4f:a2:76:83:3d:a0:
         24:65:3b:ca:bb:14:f7:dc:ec:6a:b3:da:83:79:87:2a:0c:73:
         99:cd:7f:bc:8e:cb:36:24:c7:5c:96:36:2b:59:b2:4b:73:21:
         4b:80:8d:c2:40:0c:59:d9:da:e0:99:5b:a1:48:ea:06:cd:9e:
         f2:8e:a2:d8:8e:c9:f0:0c:36:93:57:a2:35:d8:d9:ff:24:70:
         5b:00:08:9e:cc:b4:54:48:63:38:de:d2:4e:b1:f3:b7:9b:10:
         5c:f1:ff:87:1a:04:bb:28:c0:f0:44:6e:d5:04:3d:b0:85:a0:
         39:39:7e:01:ea:e5:5f:08:8e:5a:69:f7:e6:ff:4c:25:13:3e:
         f8:bc:70:0d:62:37:fb:9b:70:59:dd:ce:58:67:19:c5:ef:90:
         bf:dc:b6:f0:39:83:e8:17:78:87:19:7b:61:fa:df:e9:d3:9c:
         89:f9:62:de:6e:e2:03:28:5a:57:00:40:70:96:8a:79:df:3e:
         80:77:97:a0:1d:77:a2:f8:5f:5d:60:0c:b4:ef:43:12:56:c2:
         63:a7:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:09:38 2026 by rpki-client