Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
File:                     AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft (raw, json)
Hash identifier:          oxisLV7dwqy+fcPzHFZYbuZ0NmIS+ilsS3AAfJojDOo=
Subject key identifier:   65:7D:E1:C4:25:41:F0:58:E5:80:15:61:EA:CB:C0:BA:9B:A9:23:76
Authority key identifier: 00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
Certificate issuer:       /CN=0076aabf4a8b1633e174820517fc53c4d6480359
Certificate serial:       01A15108DF674A661D097E979262BA411673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
Manifest number:          0190
Signing time:             Sun 18 Oct 2026 22:01:38 +0000
Manifest this update:     Sun 18 Oct 2026 22:01:38 +0000
Manifest next update:     Mon 19 Oct 2026 22:01:38 +0000
Files and hashes:         1: AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl (hash: ZSdXBS1NDYvzDe2fogNHIBUZNxcfFa/GBYYXpTd4vx0=)
                          2: SqRQ1Xc9dweEF_ibwrDDRt-xn2c.asa (hash: jq8t/kB2zpTJt0t5OI4bI1d8zvcp3dpQzTeAyEeb/IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:08:df:67:4a:66:1d:09:7e:97:92:62:ba:41:16:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0076aabf4a8b1633e174820517fc53c4d6480359
        Validity
            Not Before: Oct 18 22:01:38 2026 GMT
            Not After : Oct 19 22:01:38 2026 GMT
        Subject: CN=657de1c42541f058e5801561eacbc0ba9ba92376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:1f:02:b4:09:ed:8d:d2:cd:76:c0:8d:c9:
                    d4:a0:3c:dc:73:49:f8:96:cf:9d:c6:30:4f:2f:8f:
                    45:18:cf:88:01:c7:95:15:6e:81:44:d7:58:50:53:
                    0f:df:e2:d3:2f:c5:40:45:b9:5b:eb:af:98:0b:bb:
                    08:85:12:2b:fd:b4:a1:32:46:46:6e:de:36:75:38:
                    21:98:82:6f:9c:9d:e9:d6:ae:20:f6:3d:2a:fa:a3:
                    f3:b6:46:f1:8d:f0:50:22:75:1a:bd:b5:f5:b6:04:
                    cc:5b:f1:66:55:7c:52:cb:6a:bd:98:5c:a2:2a:3d:
                    86:7b:9e:13:09:28:2e:c8:24:ec:f6:a6:80:4d:da:
                    07:13:1d:ae:84:b9:30:88:94:6f:9d:ac:cb:1c:e3:
                    17:38:83:54:a8:c7:4b:ea:aa:ff:91:52:83:0b:53:
                    09:4b:04:16:58:a7:4a:11:d5:10:ec:30:88:2d:26:
                    cb:b7:e8:d8:ff:5e:42:39:77:84:69:7e:06:59:5e:
                    ca:6e:f3:9f:59:de:8a:e1:6c:60:11:da:0e:00:7d:
                    29:15:ca:a4:da:3c:3d:26:3f:94:3e:f1:1b:0f:4e:
                    5f:29:5e:2c:9b:81:eb:78:40:0a:82:df:12:63:af:
                    8a:29:72:d0:38:e8:53:5f:d8:2a:03:8d:78:e8:2e:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:E1:C4:25:41:F0:58:E5:80:15:61:EA:CB:C0:BA:9B:A9:23:76
            X509v3 Authority Key Identifier:
                keyid:00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:00:43:64:8c:61:56:76:1e:18:40:50:90:93:6e:cd:a6:fd:
         72:16:47:ee:cd:c1:f9:26:cf:ec:12:9f:4a:df:92:97:bb:81:
         4d:e3:21:fe:12:1e:d8:bc:93:02:50:69:cc:f0:25:f1:c9:86:
         68:09:d2:c2:f6:c5:53:3a:e2:f7:e2:17:05:25:5f:4a:b7:03:
         a5:78:b7:24:53:ef:50:db:dd:5b:14:6d:cc:bd:16:66:83:57:
         69:2e:e6:10:45:1f:75:e0:f0:83:1a:14:db:51:f9:71:ab:41:
         7d:6c:b3:98:bf:45:b2:bb:37:55:f2:b1:b0:09:95:a8:25:57:
         2e:69:f0:8e:38:7e:af:3d:58:70:eb:53:65:47:d6:56:17:36:
         8b:a3:bd:b4:5f:b7:c8:e2:94:13:ba:75:1f:5f:f2:0f:2f:dc:
         bc:ef:9e:89:8a:95:00:9f:69:59:28:8c:46:23:fa:4f:76:f0:
         5e:91:db:d2:1d:b8:12:d2:ee:d7:be:47:09:da:7b:33:80:e9:
         01:96:1a:77:6f:c3:f3:7a:c2:b2:b4:a4:18:19:03:ff:a7:b0:
         ad:06:14:4b:b7:df:3e:69:cc:8e:ef:43:4b:ce:ce:02:c6:d8:
         11:5e:58:33:be:8d:79:5f:89:58:44:4f:da:b6:b3:3f:62:e0:
         8c:44:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:19:11 2026 by rpki-client