Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          irp8jgWy3Kp9CTkrzI7iW6JWs89/FhzhRUkKPc02hjU=
Subject key identifier:   3B:74:0C:F1:D1:88:72:FF:AD:11:40:4C:21:69:A4:E3:DB:16:FC:04
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       019F141CAE74E24EF03B9DDCF585FD7EF205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          0D2A
Signing time:             Mon 29 Jun 2026 16:00:51 +0000
Manifest this update:     Mon 29 Jun 2026 16:00:51 +0000
Manifest next update:     Tue 30 Jun 2026 16:00:51 +0000
Files and hashes:         1: 4WPjuQdcTYFuaKklmsOnpFVG_k8.roa (hash: RCXd7tm0HqyMJHrZAkQGbR+ZGjGMt/XtYWeMv5QHcoU=)
                          2: 8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa (hash: DGlt++jIzcEyf2YY8cq7I9ry7xE+xVwo5HjB9DimFnk=)
                          3: 8p85fx3JZBOcgAOHbw9s6_zsb-0.roa (hash: rvJEGF8dsaiOmCWCrtT6Pfn1uf3/SKAsnCTEKPBxvuI=)
                          4: _lawUkPbMS6rKq0eJzdtFnozaP0.roa (hash: 8VAyeac9InM+D4DkCVJjHuFb1ne2vlYSxpVOPX8DTlI=)
                          5: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: V/yZHNxk8AMTv25gTzdn8B8A2p9XJVfl7ZMJzuY16Wc=)
                          6: xzXaYpELPohXHyaBsryyzKsxpi8.roa (hash: Pac357tmTBXSGA3lzxCsfoP5+/cvABrR8JYDv2qCuqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:1c:ae:74:e2:4e:f0:3b:9d:dc:f5:85:fd:7e:f2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Jun 29 16:00:51 2026 GMT
            Not After : Jun 30 16:00:51 2026 GMT
        Subject: CN=3b740cf1d18872ffad11404c2169a4e3db16fc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:78:2e:e0:18:25:c2:ef:4b:04:66:1b:26:
                    9e:bd:a5:20:08:26:8d:f6:37:7e:4e:a8:50:d8:e3:
                    0f:da:4a:cb:8f:b1:52:5b:79:08:2b:ce:17:6b:f3:
                    d9:ef:a0:8e:26:07:bd:c4:91:08:3f:05:7e:44:f1:
                    96:2b:b6:56:2c:c9:96:0c:88:e4:ae:96:72:e0:55:
                    56:85:8b:9b:56:d8:d7:e0:8f:0a:1b:3a:2b:94:38:
                    97:48:d8:34:a5:48:42:12:d8:01:41:a6:62:83:b0:
                    16:7a:21:a4:8c:8a:d0:65:32:48:01:13:60:26:08:
                    b0:e6:e6:e1:be:d5:ae:f5:3b:cd:e9:46:9e:04:76:
                    f9:ba:28:70:22:61:f2:b0:20:d5:90:c5:18:4f:db:
                    3a:2e:c7:41:ec:b7:49:84:61:b5:ac:09:d5:40:92:
                    1f:71:86:7a:c6:87:81:0f:01:71:51:e8:ce:d7:0d:
                    2f:34:55:ba:ba:66:1c:b8:ab:bd:f0:02:1b:8a:6c:
                    04:ec:97:3a:77:6b:52:8b:24:0e:cb:ee:15:aa:82:
                    44:2f:30:7e:06:3e:bc:d9:e2:8d:79:2c:3f:89:b7:
                    c2:91:d8:1e:7f:38:8e:54:e4:df:d9:c8:cd:72:68:
                    4f:ed:ff:72:be:e9:05:0c:a2:ff:8d:b0:7b:95:7f:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:74:0C:F1:D1:88:72:FF:AD:11:40:4C:21:69:A4:E3:DB:16:FC:04
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:82:bb:d6:11:c8:1f:e3:c4:bf:ed:5e:a1:24:dc:c0:3e:
         a9:44:53:88:ae:58:27:4c:d6:94:4e:38:31:65:b9:73:57:07:
         50:84:91:c1:2e:d9:99:be:8e:bb:0c:05:36:ad:ca:6a:48:16:
         36:6f:fa:2d:4e:a4:8c:4e:0e:a6:cc:ff:3f:7e:70:f9:f6:9c:
         b5:f3:cb:88:79:28:d1:a3:15:38:1b:69:43:93:5d:a2:c2:c4:
         21:05:48:e7:11:d8:b6:35:3a:c8:b6:59:d1:14:6b:1b:10:48:
         91:c7:cc:72:e6:f1:32:93:39:f4:6c:0c:a2:04:49:8b:51:2c:
         a2:5d:e2:f5:a9:4b:a4:c0:a2:0c:87:89:9b:ac:42:22:60:34:
         eb:c2:29:2e:de:f9:a8:24:09:74:ce:ab:1e:fd:67:56:d2:d0:
         4e:4c:c7:b7:7f:99:29:f1:bc:6e:7b:67:5a:d9:84:63:80:78:
         c2:2b:be:3e:c3:58:8f:90:ed:0b:73:97:92:de:e5:ac:fd:b5:
         bb:27:c2:3e:33:bc:80:74:a3:29:25:7e:5e:ed:0a:5f:ca:20:
         df:a9:56:27:9c:e1:fe:63:bb:c8:a1:62:72:35:58:8d:86:cf:
         06:b8:5f:6d:a8:2f:7e:a5:57:a6:e1:fc:48:e5:e1:b8:85:5d:
         b7:6c:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:31:15 2026 by rpki-client