Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          unPaZcnjnsxKVHCzk82JGgyc1SblYzzZkYahC84qnkM=
Subject key identifier:   40:46:88:35:4D:42:18:09:EE:94:A7:AF:FE:A4:9F:52:50:F9:DC:58
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       01A0005C95C3798629863EB6628A08FB7DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          172A
Signing time:             Fri 14 Aug 2026 13:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:02 +0000
Files and hashes:         1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
                          2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: Z5mzW/5e310Gw3SjW4ZBB4kYw91xoqlYz+RQCiq8I00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:95:c3:79:86:29:86:3e:b6:62:8a:08:fb:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: Aug 14 13:01:02 2026 GMT
            Not After : Aug 15 13:01:02 2026 GMT
        Subject: CN=404688354d421809ee94a7affea49f5250f9dc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:a1:d3:c1:c2:ef:d9:5a:54:0d:28:d6:28:
                    06:b5:5f:5e:9b:04:25:09:5c:33:f1:03:2f:1b:43:
                    a3:e1:50:db:8a:2c:88:9e:1e:37:ed:33:a9:5a:0b:
                    d1:c3:66:9c:3c:43:2e:82:50:19:ed:7f:a5:bd:27:
                    37:d1:62:b0:36:62:78:b7:0c:a4:bc:04:8c:42:db:
                    d5:18:8e:c8:88:1d:d3:ea:6a:ea:ef:0a:91:9e:63:
                    96:72:3e:46:49:27:15:c4:8a:9b:ab:c5:89:ca:22:
                    35:44:2d:d9:0b:ff:de:fb:47:8e:9b:a3:a5:98:90:
                    f8:52:20:c9:9c:78:81:a3:2d:ad:2e:24:5a:c4:68:
                    2e:a0:d1:09:d9:90:fb:7a:d6:f2:8c:47:9d:f3:18:
                    b1:32:ed:c4:2c:cf:38:2a:ef:00:d7:85:87:31:59:
                    17:56:cb:d0:43:64:33:dc:29:e4:ae:e7:25:f1:9a:
                    be:e6:4d:36:39:de:79:4b:30:c9:5b:7d:e1:70:04:
                    a7:07:87:15:a0:e0:6e:e3:0f:e6:c5:1d:87:be:14:
                    5e:a3:4e:39:d8:81:74:84:a3:06:0b:25:9a:6a:7b:
                    b1:e1:27:f9:65:45:b8:bb:b5:3b:46:e0:1d:76:0a:
                    27:12:71:1b:57:a3:1c:b9:cf:e8:10:2e:58:fb:66:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:46:88:35:4D:42:18:09:EE:94:A7:AF:FE:A4:9F:52:50:F9:DC:58
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:93:19:0d:ce:2d:aa:ab:5e:9f:27:21:bd:ac:a9:76:1a:15:
         2b:b6:79:f1:d1:a6:7c:6f:80:99:9d:5d:3f:db:91:bb:cc:2f:
         48:0e:5c:d9:3d:89:32:cf:9f:4a:08:7c:9f:3d:0b:9c:0b:ec:
         8a:ec:35:d8:7c:62:90:f5:28:c3:f8:2a:47:a3:31:3b:03:40:
         a2:ae:d3:bd:96:00:00:c0:bb:01:48:50:2e:e7:06:31:41:47:
         41:cf:89:92:c9:23:5a:42:01:6a:25:21:08:cb:49:5a:9a:cc:
         63:dc:60:ed:06:09:37:bd:70:8c:5f:0b:ff:03:2b:79:9c:ee:
         c3:8c:70:e4:73:58:bc:7b:f4:bb:5f:ae:25:bf:2b:8e:6a:d4:
         0f:9a:fa:ee:e6:b9:4f:86:3f:72:cb:05:ed:83:64:6e:d8:46:
         73:7a:18:0f:b6:32:e5:b1:18:fc:ac:11:59:86:f9:c4:bf:53:
         6c:55:fd:cb:47:1b:db:f6:c5:9d:55:0e:f9:cf:4d:28:68:16:
         e0:e1:2a:53:9e:1a:c3:4d:bc:ce:33:8c:e1:cf:81:fd:c6:bb:
         23:e6:13:cb:0c:fb:e1:4a:36:bb:de:f4:a7:cc:3b:03:ad:1b:
         2c:ec:8e:49:9a:63:e1:2e:c1:65:3c:26:c2:1a:45:75:0a:85:
         02:d1:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:43 2026 by rpki-client