Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File:                     AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier:          ObFzN6HzBjjavne1HVd4EyJqSnJ9FFRHTo3nxb51+/Y=
Subject key identifier:   CC:5F:CD:5F:0C:EB:B8:AF:C7:7B:E5:E3:8B:60:41:41:68:B1:D9:A4
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer:       /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial:       019F190CEA4F26F6EA485C7C511F00F213D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number:          0ACF
Signing time:             Tue 30 Jun 2026 15:01:44 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:44 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:44 +0000
Files and hashes:         1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: tZVJ2zqUBj2KT9PzX7RoQCIJRPYJVSrd0aOESaTkbLU=)
                          2: MZejqw04W8XvDSTgyhF_vZtjtHk.roa (hash: y+X1OSPqc8Aw+l04NXTCLvm9a9sOckjKF5RYXVztnSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:ea:4f:26:f6:ea:48:5c:7c:51:1f:00:f2:13:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
        Validity
            Not Before: Jun 30 15:01:44 2026 GMT
            Not After : Jul  1 15:01:44 2026 GMT
        Subject: CN=cc5fcd5f0cebb8afc77be5e38b60414168b1d9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:4c:bf:97:86:0f:a9:c8:21:92:0b:53:93:
                    49:41:7e:b8:bc:5e:0e:dd:c8:ea:c4:b5:d6:1b:5d:
                    17:61:d4:5f:81:eb:90:63:38:d0:51:47:11:2a:15:
                    b2:c6:b1:fa:3c:11:6f:16:7c:d0:76:93:5f:cf:d8:
                    3c:2d:3b:85:6d:d8:28:2b:76:69:07:2d:7b:c5:b6:
                    f1:89:49:f7:67:0d:60:5c:6e:86:ef:17:91:75:0e:
                    84:e3:0e:4c:cb:d1:ee:4b:05:76:e0:3b:e2:87:f7:
                    f4:1c:49:a2:65:b5:dc:13:6b:82:73:ab:d3:eb:b5:
                    95:2b:bc:d7:5f:78:33:1f:6e:be:52:d0:6a:59:1f:
                    33:c9:1d:46:0b:09:18:fc:af:55:a3:39:a3:47:44:
                    70:66:8a:a4:e0:b4:f8:d2:36:f4:32:ea:5b:d9:3a:
                    93:12:75:f8:de:30:76:b6:a9:67:0f:e7:71:37:cc:
                    88:90:1d:f1:2b:db:96:62:0d:01:b3:73:5d:7d:0f:
                    9b:72:04:61:5a:7a:3d:84:70:e7:e5:b0:e9:8c:a3:
                    61:84:48:44:e6:3a:f8:48:80:0e:93:d4:79:c4:44:
                    3a:f4:e2:c3:89:e0:20:97:f9:8d:c2:f1:df:a7:53:
                    d0:f4:86:8b:69:ea:2b:3b:da:a6:9b:c9:8c:d9:a4:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:CD:5F:0C:EB:B8:AF:C7:7B:E5:E3:8B:60:41:41:68:B1:D9:A4
            X509v3 Authority Key Identifier:
                keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:fd:75:ab:15:7d:a2:4a:dd:81:17:1c:60:6c:48:c2:eb:
         b7:99:48:bc:86:21:29:b1:cb:6f:de:ca:ca:e3:f2:21:95:23:
         29:80:6b:96:b4:fd:5e:10:62:07:95:31:0c:d0:80:89:94:d2:
         93:d0:4a:5f:61:62:61:86:ff:53:e2:b6:da:5b:e9:b3:d0:e3:
         05:a6:d4:2a:e3:0e:db:cb:60:04:60:b2:65:65:78:b2:8e:cc:
         c3:68:b2:b5:77:69:d9:11:53:36:32:af:57:8e:88:df:8b:5f:
         0d:1d:fb:22:17:d1:14:76:4b:ae:04:04:ed:c2:df:e1:86:bd:
         b1:30:81:bc:a0:fd:6b:f9:8e:37:ff:1b:35:f2:44:06:5f:a8:
         94:b2:7b:ca:68:62:2f:c6:62:0a:13:f5:6d:66:08:dc:11:2c:
         15:7f:6d:fb:2b:1f:ea:5f:77:e5:c3:26:57:41:e4:65:d5:52:
         38:f7:f5:aa:53:bf:1a:84:55:11:9c:2e:e9:93:b3:36:15:63:
         26:d9:96:1c:49:08:44:79:a2:5d:c6:1a:54:1a:8c:1a:70:4f:
         ba:92:37:1c:44:f9:4f:6f:28:8e:8b:12:cd:9e:2a:3c:d1:f2:
         70:48:be:d8:27:22:9e:95:0b:e8:cf:2a:7d:9d:95:eb:08:ef:
         1c:4d:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:35 2026 by rpki-client