Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File:                     AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier:          27jB4Qb1eBBlAg8NtRpcw0q3yKxzT2sO04Rs7KgUCxI=
Subject key identifier:   AE:E2:C0:03:AA:62:3F:46:90:BE:93:74:BA:0D:21:3F:A8:3C:97:07
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer:       /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial:       019E30725FA184D573011F859835D95209F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number:          1544
Signing time:             Sat 16 May 2026 11:01:02 +0000
Manifest this update:     Sat 16 May 2026 11:01:02 +0000
Manifest next update:     Sun 17 May 2026 11:01:02 +0000
Files and hashes:         1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: rpVbXzKmM8J8SGGYrsh+NjgUKzAgllubVDEvEJAKOw8=)
                          2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:5f:a1:84:d5:73:01:1f:85:98:35:d9:52:09:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
        Validity
            Not Before: May 16 11:01:02 2026 GMT
            Not After : May 17 11:01:02 2026 GMT
        Subject: CN=aee2c003aa623f4690be9374ba0d213fa83c9707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:4b:9c:14:94:d6:62:2b:c8:d3:9b:1f:34:
                    06:c2:0a:9a:d2:ec:e7:68:a5:5d:49:74:4d:30:93:
                    44:df:92:0f:94:e6:4b:c1:44:30:e0:95:5a:b8:1e:
                    b5:31:7e:e9:fa:7b:c6:80:6b:0a:3a:a6:e5:da:bd:
                    4c:78:d8:84:e7:6f:f9:6f:84:fc:9f:73:80:d2:f1:
                    96:b2:47:1e:8f:97:81:7e:24:ad:29:77:62:35:e7:
                    e4:a3:44:a4:de:94:a4:3c:de:a9:d0:fd:ee:da:35:
                    6f:56:78:94:16:3e:85:ef:5f:62:e1:80:7d:86:11:
                    b5:0f:78:d6:cb:65:cc:5e:50:31:89:af:21:24:29:
                    77:74:01:6a:9b:94:7f:c2:79:e3:11:7d:02:1a:d9:
                    99:55:a4:57:66:bf:f8:9f:01:b2:59:ac:42:c0:dd:
                    28:8b:b8:f4:87:a5:3c:f9:bb:f7:87:5b:39:c8:7f:
                    0a:c9:a1:0d:1a:be:61:4d:54:59:f6:a5:5d:d9:0a:
                    a9:74:0e:17:df:24:a1:6a:d0:b3:1e:2f:35:02:3c:
                    ae:d9:2c:cb:cb:f5:55:c3:d4:ff:d3:ba:c6:50:0c:
                    b6:fa:d9:be:ef:db:6f:81:4b:7a:27:da:69:3c:bc:
                    c5:75:ff:ec:02:d2:ed:73:f5:8e:e9:93:3f:8f:75:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E2:C0:03:AA:62:3F:46:90:BE:93:74:BA:0D:21:3F:A8:3C:97:07
            X509v3 Authority Key Identifier:
                keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:9f:92:a1:8e:ba:72:db:14:1b:d7:45:d6:ef:b0:cd:9d:
         e2:f5:d6:2e:00:b3:15:f6:91:ef:5c:6d:52:d8:e5:b9:45:f8:
         de:65:3e:66:5c:5e:4a:35:0c:8a:e7:f1:4e:bb:65:80:a5:8f:
         8e:bc:49:f0:33:1d:0d:66:cb:31:5d:ef:47:87:47:0e:af:8c:
         9c:74:81:1b:f7:b5:c8:a7:74:8e:7e:29:ea:2d:09:d5:0e:2c:
         4f:49:c4:33:84:28:f6:dd:a9:33:57:23:54:3d:ee:19:28:2a:
         46:d7:55:c2:fe:9a:58:4e:20:9f:50:f1:30:b2:76:57:32:17:
         d8:09:50:90:6b:df:c2:b7:4e:5b:15:30:9d:3c:30:c4:62:0f:
         96:f6:f8:e2:40:11:24:79:70:19:7d:0d:e9:39:b0:1e:a3:69:
         84:aa:02:5b:a1:be:bb:b4:d1:7f:a9:b4:28:0a:ca:e3:f6:f2:
         25:d9:f8:1a:0c:d8:48:9c:3d:b1:43:fa:b5:06:c6:c9:e4:f9:
         15:9a:22:15:3c:77:3c:d1:8b:d7:98:ac:54:fa:9f:37:27:e8:
         ba:39:ea:d6:39:76:66:f2:fd:bb:84:d7:e2:3d:34:81:7e:9e:
         c2:37:94:3e:be:ec:94:c0:ea:a6:cc:a0:c3:f0:08:53:34:e7:
         c8:cd:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:32 2026 by rpki-client