Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File:                     1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier:          BuJYeddMz2zLr9YQh/6tNlFEbLgTWVQXElBvpHtvXeY=
Subject key identifier:   A9:E2:DB:00:01:2A:13:12:3C:46:4B:E8:1F:AD:0D:1B:E9:64:27:C6
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer:       /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial:       01A0009351C541676EBCD8B1D99B23ACB6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 14:00:49 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:49 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:49 +0000
Files and hashes:         1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: 6i8QheqXhi6R8tEPoycosj6UBqGFtNbJU2dH3yvWYvM=)
                          2: AHnNibYpBfUdvSGboILQ1teAIw4.roa (hash: 42GSIkMZbcrmZ8XMph6d+mXrtH34NIs/JYMf8WUp4vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:51:c5:41:67:6e:bc:d8:b1:d9:9b:23:ac:b6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
        Validity
            Not Before: Aug 14 14:00:49 2026 GMT
            Not After : Aug 15 14:00:49 2026 GMT
        Subject: CN=a9e2db00012a13123c464be81fad0d1be96427c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:f9:24:57:d4:32:ae:56:7b:1a:04:82:14:
                    3d:4f:4d:a4:67:a4:dd:61:d3:28:6a:ee:0f:ed:69:
                    12:7c:0a:32:a8:76:2a:0a:2c:86:05:88:d9:ba:23:
                    69:fb:5a:79:ad:57:a7:7d:97:d3:c3:1d:8d:01:65:
                    f8:01:34:68:df:52:9e:d6:30:27:fc:12:78:00:00:
                    63:15:47:4d:43:35:8b:9f:11:93:a2:de:58:72:7d:
                    16:bc:6c:1b:a9:d6:24:1d:48:e6:71:16:fb:fd:d6:
                    34:07:01:b9:0a:c2:36:79:8e:63:07:0b:58:cd:d1:
                    54:78:c2:0a:49:d4:8d:0d:61:da:8f:47:33:4b:dc:
                    7b:12:a4:26:87:11:b4:1b:55:3c:ac:fc:c9:e2:b8:
                    9d:7d:55:e4:57:46:73:67:bd:71:99:22:73:76:59:
                    3e:a4:9a:61:2a:0f:9a:9a:4a:bf:5d:c9:8c:9f:28:
                    97:b8:45:2c:ef:43:4e:ad:f2:8f:39:18:fa:6a:d2:
                    a5:9c:9c:6e:af:85:a0:a3:06:c4:35:51:a1:10:6d:
                    63:b3:1b:54:cf:58:cc:fa:ec:a1:51:ce:22:dc:e9:
                    5d:31:e9:68:81:22:3a:0b:5a:9e:f0:1a:ab:ab:6e:
                    96:34:79:55:28:b1:0d:05:99:c0:64:0c:98:b8:1d:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E2:DB:00:01:2A:13:12:3C:46:4B:E8:1F:AD:0D:1B:E9:64:27:C6
            X509v3 Authority Key Identifier:
                keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:18:be:78:9b:a8:06:db:c2:93:81:ae:5e:ea:e8:3a:7f:
         e9:35:72:bd:79:51:64:09:7f:67:0e:70:1f:8a:36:1c:f5:1f:
         e7:1a:03:41:46:4c:a2:3b:73:fe:25:74:5c:6e:2d:67:d4:b5:
         21:80:a0:f6:e9:df:cc:92:79:68:5d:db:3d:0c:b4:1f:a8:aa:
         90:b0:1b:ff:25:d3:63:13:34:ad:ac:e1:02:dd:95:7b:67:59:
         44:df:b9:e9:07:a0:9d:1b:b9:e6:ae:d8:53:79:be:7f:c4:94:
         19:a0:bc:9b:28:11:f8:8b:a7:ae:d1:a9:28:4d:65:4f:a7:ab:
         d1:8f:de:89:ad:12:f8:5a:cf:29:ad:ea:17:38:e7:1f:63:5c:
         a5:5a:45:ed:fc:7c:61:b2:44:9e:7b:1f:cf:54:14:e6:ad:b7:
         9e:dc:38:fc:3a:33:c8:b4:7f:55:bf:d9:8e:03:ed:b2:23:e0:
         26:f4:b8:d7:08:f6:14:80:17:4d:e7:a2:db:3f:32:3e:b3:0a:
         83:08:3a:fb:25:15:65:5b:4f:c4:2a:dd:af:1a:6d:82:ad:b6:
         6b:cd:65:cc:e8:cf:b7:6b:7d:12:87:85:ee:61:9e:7a:09:48:
         90:f9:34:7b:2c:41:04:49:d8:23:e9:96:60:c3:8a:bd:39:96:
         f7:70:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:04 2026 by rpki-client