Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          1TLTu6sOqNiG3L7F9PpvvOtABz9L2aeYAY78cTnVQL8=
Subject key identifier:   50:B7:1B:DB:72:BC:CA:32:D8:52:C1:E8:C5:17:9A:0F:0D:3A:16:66
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       01A13D812A062888392E4F263EB2B3E96E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          1119
Signing time:             Thu 15 Oct 2026 03:00:37 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:37 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:37 +0000
Files and hashes:         1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: GQZIsixD+OKzp5tk9C1wwRtgw92sHdvh3Hhta5h5rPk=)
                          2: FzlkTAFVrFiVAlrg5k9O8RgqTRo.roa (hash: di2JSUIti459RqFlcovjuYG5N7iQ8p7FOakkzalMmcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:2a:06:28:88:39:2e:4f:26:3e:b2:b3:e9:6e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Oct 15 03:00:37 2026 GMT
            Not After : Oct 16 03:00:37 2026 GMT
        Subject: CN=50b71bdb72bcca32d852c1e8c5179a0f0d3a1666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:1b:f3:cf:c1:a9:c8:89:12:b2:54:73:8f:
                    e0:35:7b:8b:23:c3:45:02:7a:e2:1c:36:6b:44:f0:
                    36:0d:9f:f5:52:fe:d5:37:d0:5d:04:76:11:94:4b:
                    2f:5f:e5:50:9e:85:01:d7:ff:f7:1c:d8:e6:d5:53:
                    7a:32:60:4b:05:3b:aa:3d:b9:1b:d2:7f:27:63:69:
                    a4:70:10:88:ae:1b:47:07:f1:aa:fc:06:ef:e8:c2:
                    68:ec:38:d6:e8:17:c2:ef:b3:d9:c5:a7:e4:5a:e9:
                    8b:bd:4a:33:1b:00:24:1c:c0:86:94:66:89:aa:29:
                    2a:47:ce:92:c9:b3:77:80:ed:83:fa:d2:df:55:73:
                    f7:d7:c4:bf:4e:0f:d3:34:e0:39:9f:27:b3:96:66:
                    92:44:d9:bc:24:d2:cd:b2:05:74:87:b0:0a:37:7a:
                    ea:af:b2:11:3a:dc:33:e8:04:fe:66:cc:3e:f8:b1:
                    a3:90:81:6c:3e:35:58:6c:ee:53:2f:be:8a:34:be:
                    85:18:19:2f:73:e8:06:d6:4a:39:9a:0d:56:3f:1b:
                    0f:e5:33:04:90:2c:a2:a5:63:f9:57:d2:fc:b8:93:
                    30:bc:03:e7:2c:60:05:0d:f4:2d:6e:10:9b:62:ff:
                    68:b7:e6:04:59:25:bd:47:be:e6:28:21:03:68:da:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:1B:DB:72:BC:CA:32:D8:52:C1:E8:C5:17:9A:0F:0D:3A:16:66
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:53:8d:75:cf:7a:83:70:b9:50:8d:45:be:a4:07:5e:83:b0:
         09:65:e2:57:85:b8:a4:9b:67:01:50:55:50:6e:13:d2:1e:28:
         27:2c:2f:42:6d:9c:86:1d:74:88:28:34:5a:64:1b:82:0e:63:
         3a:00:d6:3c:2a:f4:a3:eb:26:36:2d:b6:2e:18:a0:86:7a:5d:
         ce:c6:0b:d8:ef:9d:d1:cf:48:03:32:f3:93:83:81:b0:c1:10:
         28:bc:04:db:a6:23:2d:a3:49:b7:7d:1a:84:76:b9:1b:39:56:
         75:dd:6e:db:31:e8:b7:4f:f2:65:8c:69:9a:b9:0d:71:ad:5f:
         ff:00:ff:b3:3e:4d:f8:e7:a2:b0:17:c9:03:5e:3f:db:22:cc:
         d2:7e:6e:82:5c:7c:49:24:78:7f:e2:66:62:9d:f1:6f:2a:24:
         2c:dd:e7:75:b8:2a:22:4f:3e:a4:4e:32:79:5d:e7:e1:b2:3a:
         75:14:71:3d:0e:d8:dd:f2:97:23:9a:99:b0:8a:91:12:3a:52:
         76:0e:2c:37:e6:2a:11:58:a7:27:bf:57:24:90:06:54:bc:34:
         66:c4:6e:2c:c6:72:9e:56:91:e5:c8:b1:77:36:77:35:17:ec:
         06:87:75:d8:f2:ba:14:3a:46:21:e4:78:c2:a1:cd:0f:40:ff:
         f5:a7:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:55 2026 by rpki-client