Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          j+IAd4C7rVS0CKzk5npKoZ9kDLdglzj/n5zImKo0gt4=
Subject key identifier:   AC:24:FC:94:E2:0D:E2:B5:B3:E0:E1:38:ED:02:28:69:1B:97:44:B5
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       019E30E089CF16BAA98045D67FD8A56E82A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          0F84
Signing time:             Sat 16 May 2026 13:01:22 +0000
Manifest this update:     Sat 16 May 2026 13:01:22 +0000
Manifest next update:     Sun 17 May 2026 13:01:22 +0000
Files and hashes:         1: 9pE-MzpxUWjMwN57topeGGEUf_Y.roa (hash: +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=)
                          2: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: F1O/JhIFHQlqjP3XOSW//mOz03ZD7z8DO/Ub4HDZp0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:89:cf:16:ba:a9:80:45:d6:7f:d8:a5:6e:82:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: May 16 13:01:22 2026 GMT
            Not After : May 17 13:01:22 2026 GMT
        Subject: CN=ac24fc94e20de2b5b3e0e138ed0228691b9744b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:6e:f8:7b:2a:1a:80:fc:b9:f9:dd:96:6f:
                    64:b0:54:82:4f:b4:60:24:f1:e8:61:14:8f:f3:e4:
                    0d:da:a1:a9:38:85:b4:5c:e2:ba:3a:fc:65:4c:aa:
                    81:83:c7:25:dd:c8:c0:49:ba:eb:45:3c:f7:34:45:
                    df:aa:e0:10:88:29:b0:f5:ee:1e:dd:07:77:0c:2c:
                    aa:30:60:73:18:39:a1:62:16:bb:4d:61:18:bc:dc:
                    7c:b2:1f:76:cc:76:b2:d5:79:30:30:90:53:8e:bb:
                    2b:ca:84:0b:d9:3b:75:0f:4d:48:73:85:6f:bb:2e:
                    b6:c8:b3:ee:d7:6f:14:98:13:d7:7b:d6:07:ca:f9:
                    e7:90:d3:08:2e:e3:8b:52:be:dd:3f:2c:09:0c:b1:
                    58:2e:99:ca:fe:10:10:c2:a4:e2:e2:be:1b:6c:8c:
                    b8:3c:72:07:6e:9c:3c:4b:31:6c:36:00:4f:41:c9:
                    5a:ff:3c:ac:83:26:54:82:07:72:86:2c:37:e8:cf:
                    9b:c0:bb:84:a6:f1:61:9c:0e:69:a9:71:d5:c1:d9:
                    26:62:7a:a9:3a:15:5d:09:cc:f5:49:df:22:a9:53:
                    35:1b:e1:f0:db:86:e5:a9:c5:7a:dd:84:28:35:1a:
                    62:6f:7f:32:c4:4c:8a:17:18:76:2f:5a:a0:c0:11:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:24:FC:94:E2:0D:E2:B5:B3:E0:E1:38:ED:02:28:69:1B:97:44:B5
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:31:f9:c0:86:d1:ca:83:24:a8:9a:06:28:fd:43:c7:ec:
         d7:ad:ed:bc:bf:4e:3b:a0:9e:1a:05:18:d3:e6:52:cc:9e:a9:
         71:46:a1:25:d3:4c:d2:b4:a1:83:a2:0d:08:ad:3a:e5:30:d3:
         83:fe:80:b4:54:78:a2:57:79:de:78:aa:e3:e2:be:ea:c2:39:
         ed:e4:1f:79:b8:d0:10:44:fe:78:ef:8d:bf:ed:76:bb:10:40:
         e7:a2:d1:b5:4c:3e:3d:31:c5:5c:ce:d7:e7:5f:a3:6a:d0:06:
         3b:31:33:80:8a:b7:00:46:54:49:5b:e3:45:6f:4e:0d:95:33:
         4d:3f:f7:cf:6f:f6:4d:c0:91:08:55:18:b4:fc:90:58:a4:6c:
         3c:af:4a:0e:50:9d:24:6c:a3:ba:dd:e2:f0:1f:6a:26:00:f2:
         9b:34:08:90:06:9c:e1:9b:8d:e0:5e:97:46:70:98:77:b1:0e:
         ec:23:8b:57:73:80:41:be:f4:d1:96:13:3a:06:24:78:5d:f4:
         f0:78:2c:6c:c2:55:d3:d2:ec:c9:44:5f:8f:5b:fd:59:46:f6:
         07:47:8a:ef:5d:04:4a:08:98:ff:da:79:48:31:2f:35:39:07:
         98:9f:8b:66:e9:95:b2:e7:3c:ce:3f:da:9b:5a:d2:9d:60:25:
         27:fd:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:23 2026 by rpki-client