Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File:                     AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier:          u2y7C907MyWtFipDZ+HkpPG1mdCpeAv7WOMI39L3aoU=
Subject key identifier:   4C:AC:5D:12:3C:54:45:21:7B:CD:02:EB:13:F3:B9:72:7D:4B:01:B0
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer:       /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial:       019F1830954A875412333AC9FAED2813DEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number:          15BC
Signing time:             Tue 30 Jun 2026 11:01:04 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:04 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:04 +0000
Files and hashes:         1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: 9BVT6fSZEKw1of9OcADRHoxDDKYjl/aSTqnSxoMgG1M=)
                          2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:95:4a:87:54:12:33:3a:c9:fa:ed:28:13:de:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
        Validity
            Not Before: Jun 30 11:01:04 2026 GMT
            Not After : Jul  1 11:01:04 2026 GMT
        Subject: CN=4cac5d123c5445217bcd02eb13f3b9727d4b01b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:4e:0b:9d:27:01:17:61:ff:e7:d2:32:56:
                    25:e3:4c:41:99:60:11:67:5f:43:67:0b:c7:10:c5:
                    d3:b5:13:86:d6:36:0a:4e:eb:78:18:88:11:e4:c1:
                    c4:dc:0f:37:09:0c:3d:60:4b:56:70:fb:62:0d:cf:
                    6d:28:4b:78:39:3b:bb:a0:93:08:6c:aa:9a:58:9d:
                    47:55:20:8d:dd:b9:e1:32:bf:b0:f7:d0:22:03:9d:
                    e2:49:a9:07:d7:84:32:42:1f:42:1a:75:ff:5b:45:
                    27:26:65:90:17:10:12:07:a6:b6:44:54:db:f7:52:
                    6f:3b:c1:5c:0c:f1:77:24:b2:1a:fe:1b:5b:6f:93:
                    bd:c4:1c:71:98:46:f7:ca:3f:1a:5b:7e:4b:ec:f1:
                    f5:84:fe:89:1f:b1:af:e0:91:7d:23:45:ae:d2:59:
                    64:72:a8:b8:5d:0d:30:48:91:5c:d7:d9:e7:8e:ec:
                    da:0a:3b:2f:8a:a1:7f:67:09:9c:07:c2:f2:5f:86:
                    95:cf:df:c4:31:dc:a0:6b:87:c8:e6:55:1e:bf:e6:
                    ff:f6:25:fb:a6:47:77:af:8d:c7:f0:77:c4:0e:2e:
                    2b:16:37:eb:d2:0d:ad:2f:b2:5f:cf:70:62:ba:1e:
                    99:5f:88:6d:dd:a9:6e:ab:f7:cc:03:92:92:1b:c7:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AC:5D:12:3C:54:45:21:7B:CD:02:EB:13:F3:B9:72:7D:4B:01:B0
            X509v3 Authority Key Identifier:
                keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:62:60:34:bf:be:2e:5c:80:7d:f8:3b:a2:a7:32:47:98:
         b1:f6:ad:c8:ac:2a:5f:5f:bb:83:bd:01:96:f9:c6:44:67:d6:
         da:dd:8f:e1:cc:7f:ff:4f:7a:7b:56:01:24:b6:7c:00:da:fb:
         57:53:73:17:aa:a0:ee:f2:8a:f8:cc:6c:67:c5:8a:cc:44:20:
         c1:f0:43:9c:c7:cc:f4:c5:5f:e7:6d:87:83:33:b7:d9:a4:e6:
         ea:b5:6c:60:17:9e:1a:97:f9:e4:5a:84:aa:4e:ae:fd:78:9b:
         54:dc:9a:06:f1:a1:7e:ed:f8:95:4f:d3:4d:af:b1:2b:77:c0:
         f2:dd:5f:d3:2d:8b:4d:f0:43:e4:1c:ca:3e:ee:aa:2d:6f:2f:
         a9:12:7b:9b:47:81:c1:8e:35:2d:bf:4e:5b:2c:f1:fa:8a:05:
         08:eb:81:c8:8e:fc:1d:e4:c8:78:db:16:61:59:32:60:91:c5:
         6f:40:fb:29:e1:37:db:12:a5:52:f7:2b:62:25:ec:67:7e:70:
         94:63:ab:b0:69:07:07:32:40:9c:36:88:fd:6f:23:e6:86:42:
         52:c6:9a:bf:8a:ab:66:2d:64:85:20:a2:f2:5e:5d:de:b5:27:
         d1:18:ba:ab:c0:39:f6:d8:5f:b9:cd:a7:f4:66:4a:5d:b0:8d:
         d1:0d:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:46 2026 by rpki-client