Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          lwRYevGFeVDJRp6Bd8Zt109giydvCRq7QKSrIxblh4c=
Subject key identifier:   26:30:7A:F9:76:FF:DB:48:8A:07:7F:50:DB:F4:D2:97:04:3E:C3:2F
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       019F17550056DF752F44EB174E0712150346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          1983
Signing time:             Tue 30 Jun 2026 07:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:14 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: bPko33g0kHbc73Fd7ZRXUscKSKz3Pr6B+3Ntqaz0Q8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:00:56:df:75:2f:44:eb:17:4e:07:12:15:03:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Jun 30 07:01:14 2026 GMT
            Not After : Jul  1 07:01:14 2026 GMT
        Subject: CN=26307af976ffdb488a077f50dbf4d297043ec32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:9f:68:ca:8e:19:4a:91:f1:a8:52:99:25:
                    72:93:29:7d:0c:34:68:ed:af:09:73:71:3d:c8:a2:
                    5a:ed:6e:5c:41:bd:3f:11:e6:83:03:1b:3e:9f:3d:
                    cb:33:17:5a:b4:56:79:28:85:7a:64:68:7d:fa:d1:
                    f4:c3:95:46:ac:2a:5c:f7:92:c5:23:e4:4f:40:57:
                    16:6b:f5:a5:13:50:eb:5d:e8:61:b3:78:f0:ef:29:
                    49:81:67:ec:ac:b2:85:b2:56:8a:ea:59:35:11:cc:
                    38:f7:6d:65:d9:92:a0:1b:75:ea:f6:48:b7:a0:98:
                    c9:c4:62:74:a4:eb:36:b9:22:c0:a3:e1:5e:c0:54:
                    ff:b9:d1:48:e9:95:a1:3b:37:ed:51:0d:8e:d0:f4:
                    7d:92:6c:11:ad:e9:d0:a8:e0:2d:c3:30:0f:50:d7:
                    33:8f:d5:8e:2e:09:af:02:8a:1a:cd:bd:5c:ba:a6:
                    5b:61:6a:fd:42:a6:ab:f4:01:d8:31:04:a2:b8:c6:
                    27:29:2d:0e:1c:d1:63:af:6a:1c:e5:71:8a:f7:a6:
                    67:70:64:11:a8:6e:7d:05:66:56:40:aa:34:4e:45:
                    98:7e:9f:e3:98:9f:ca:11:f4:b6:f4:76:1a:b1:d0:
                    e0:f3:8d:11:ce:18:a4:05:2b:c8:08:2c:ea:05:d9:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:7A:F9:76:FF:DB:48:8A:07:7F:50:DB:F4:D2:97:04:3E:C3:2F
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:20:15:b9:37:a9:19:ed:32:38:9c:78:af:2b:d9:37:82:c1:
         53:16:d4:64:e8:dd:67:43:30:49:aa:36:0c:70:c8:9a:ce:7e:
         56:9e:1b:24:47:1e:9f:3b:51:37:d4:e9:f7:2d:7d:7f:fa:91:
         4e:ef:36:1e:de:dd:8d:ac:07:d9:59:2c:94:b6:6b:d2:9e:50:
         6f:df:45:6b:07:e9:e8:e8:7f:78:f9:71:51:85:2b:17:39:76:
         29:e3:07:df:71:a4:c7:33:1d:10:2e:0f:c3:35:de:91:0f:83:
         f9:99:29:0b:51:fb:ca:f0:aa:b1:48:9f:e7:6e:28:86:2a:de:
         64:da:4b:6c:e9:d3:7a:87:98:d6:78:eb:6c:53:cf:f7:e6:78:
         25:59:58:08:34:bd:e9:47:84:6f:a8:0e:d0:a1:a0:d0:cc:89:
         bf:23:7f:7f:c6:d0:67:c8:68:53:b7:f6:81:87:87:d0:eb:95:
         57:31:7f:cc:ea:bf:25:96:ef:8f:ff:eb:04:a8:13:e5:4a:74:
         ff:4f:49:b8:14:5c:71:8b:c6:75:34:b4:91:db:13:82:c3:4c:
         75:bb:7f:f8:3b:11:15:b9:c4:da:b1:3a:b4:cf:68:f1:61:1b:
         6b:10:92:50:a7:2e:10:06:88:87:e6:70:86:eb:b3:83:8b:17:
         da:2f:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:53 2026 by rpki-client