Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          AWaT+Ia7SK3q61HItXsY+P6fX6fPr+fi1fgGEDM28sY=
Subject key identifier:   4C:EB:7E:60:5A:D1:07:C3:03:EB:6D:62:4F:C4:A9:57:C2:31:1E:C6
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       019E292652790982233DEE3F0EB9675FB98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          1636
Signing time:             Fri 15 May 2026 01:00:37 +0000
Manifest this update:     Fri 15 May 2026 01:00:37 +0000
Manifest next update:     Sat 16 May 2026 01:00:37 +0000
Files and hashes:         1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
                          2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: Z47w50U7FJv7ttfhPhHiLmOMEbuTqUMHSHtRuu5C1QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:52:79:09:82:23:3d:ee:3f:0e:b9:67:5f:b9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: May 15 01:00:37 2026 GMT
            Not After : May 16 01:00:37 2026 GMT
        Subject: CN=4ceb7e605ad107c303eb6d624fc4a957c2311ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:c2:a1:cd:de:ea:7f:a8:86:2f:b5:a7:c4:
                    c8:b8:0a:67:6b:63:7e:f3:d1:68:b1:a7:d3:09:9e:
                    93:21:25:18:25:73:f1:5c:a7:c1:de:d0:9b:88:e9:
                    82:85:d0:da:ae:ae:f5:50:09:a8:19:35:f4:a4:07:
                    bc:5e:ec:95:6a:4f:f6:e4:bb:52:e0:c7:3d:31:fe:
                    75:42:ac:4e:af:56:b4:2c:ea:98:c3:6a:af:2d:87:
                    57:af:f8:33:b8:91:ab:b3:78:01:7b:36:97:72:8e:
                    5e:02:87:91:db:e3:9e:b4:7b:18:cf:05:b5:cf:83:
                    0f:e3:0f:45:8e:07:b9:25:d5:30:cc:0c:2d:a3:5c:
                    e7:12:00:64:ca:23:20:df:58:30:18:76:3e:9b:2a:
                    64:56:f5:1d:15:9c:7d:3d:31:ad:24:44:55:ff:0a:
                    c2:21:79:a2:26:3d:43:b4:51:2c:71:68:16:af:7d:
                    5c:a8:b1:0a:a1:24:4f:50:9c:b5:da:49:f4:d1:cc:
                    c1:0a:a3:b4:f4:17:39:8d:8c:dc:d9:bb:6f:b5:47:
                    60:09:e5:9a:2a:9f:44:28:ad:6b:37:44:70:46:32:
                    10:ec:05:37:f8:bb:24:e2:fa:a3:9b:07:5f:e4:c1:
                    50:f5:45:c0:a0:6c:3a:85:12:d0:8c:05:96:9f:49:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EB:7E:60:5A:D1:07:C3:03:EB:6D:62:4F:C4:A9:57:C2:31:1E:C6
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d0:d7:eb:ed:73:fe:ab:e3:fb:17:74:58:b5:d4:6d:d2:06:
         ff:a9:38:57:f3:34:27:35:0a:c8:e3:c5:c1:34:18:0f:5d:84:
         0f:6d:c0:f7:2a:e3:eb:a0:1f:13:05:49:6f:f3:e4:a1:22:00:
         f0:3a:18:26:e6:da:6d:3f:b4:b3:0d:fa:7f:6e:d8:b9:1c:75:
         e7:35:94:38:23:c2:eb:1a:38:65:f5:f9:1c:27:61:d9:41:86:
         16:8e:29:a7:17:e3:c1:aa:da:67:44:f4:74:c2:5a:24:13:99:
         59:52:cd:50:c2:39:70:31:7f:8d:b9:98:14:c3:90:c3:7c:10:
         56:d7:c2:d2:71:db:51:9d:8d:48:3b:ff:78:c5:c2:68:3a:ef:
         2f:3b:33:58:c0:92:ab:04:29:56:b9:5c:21:36:4b:07:2e:ac:
         6e:65:e2:12:3b:84:f1:47:2c:b7:a4:cf:06:75:d7:3c:30:1c:
         f7:87:e7:ac:9a:b1:db:88:4d:16:5e:18:9f:26:b8:d2:95:ad:
         30:5d:25:e0:a2:43:06:51:34:eb:a5:54:27:4c:83:84:02:b8:
         a0:ff:44:f6:92:f3:cb:29:08:76:14:dc:1e:a2:1b:2f:b3:3d:
         ab:9f:35:f7:6f:e0:81:eb:25:a7:74:62:22:c8:fc:6b:4b:bd:
         42:d3:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:43 2026 by rpki-client