Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File:                     AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier:          J3ldGj9i1LYtw/LC1sGC0FaRJRB2cWyaBCF6i2kDdeA=
Subject key identifier:   32:04:F7:4E:13:89:01:AF:B6:10:EC:32:FE:51:20:8A:30:46:27:4A
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer:       /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial:       01A001DDA9186454DAFE6B37991CFDF67ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number:          1635
Signing time:             Fri 14 Aug 2026 20:01:38 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:38 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:38 +0000
Files and hashes:         1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: Ps3XNm668ETScuLoby3nn4y4DJrQtZKkLnqGke90EkU=)
                          2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:a9:18:64:54:da:fe:6b:37:99:1c:fd:f6:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
        Validity
            Not Before: Aug 14 20:01:38 2026 GMT
            Not After : Aug 15 20:01:38 2026 GMT
        Subject: CN=3204f74e138901afb610ec32fe51208a3046274a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:6e:66:8c:88:4a:4a:80:ec:1f:0a:1b:99:
                    e9:4b:7f:9d:59:a4:c4:88:0d:fd:c2:97:69:95:ce:
                    cb:27:ab:57:ee:6f:64:33:ae:54:4e:cd:99:ac:42:
                    f7:5a:2f:ad:1a:2f:49:fd:e5:6d:34:ce:f0:6f:c2:
                    30:e0:9b:6a:e9:b1:6a:8f:fc:27:e9:f1:50:0b:34:
                    47:72:ad:50:d9:c1:d2:4c:e1:47:0e:e7:81:49:27:
                    3e:55:34:66:68:03:79:d2:76:45:e2:23:da:05:d5:
                    d6:e1:c9:7d:a3:1b:00:c6:39:67:7e:2d:e6:48:b4:
                    86:a1:88:1e:37:5c:9b:06:99:d8:df:af:99:3a:9b:
                    ba:97:e3:26:bb:a8:0a:53:d1:6d:0e:4b:b0:2f:ec:
                    e4:b2:84:71:f9:9d:e7:d8:e2:48:bb:7d:a5:f7:09:
                    ef:09:c7:25:62:8e:49:61:7b:d0:04:0f:a3:09:dc:
                    c1:a9:c6:28:8c:f2:2f:dc:e0:56:5f:bb:00:d3:48:
                    0b:d3:23:c4:cc:b6:68:03:86:60:0b:7b:86:4b:65:
                    60:41:29:6e:48:ed:12:a1:c3:23:d9:bc:db:ce:ab:
                    48:ce:5f:57:c1:f9:01:15:cd:b9:10:61:98:c2:67:
                    33:4e:5e:7e:04:f8:15:75:46:5d:3e:a4:40:92:b6:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:F7:4E:13:89:01:AF:B6:10:EC:32:FE:51:20:8A:30:46:27:4A
            X509v3 Authority Key Identifier:
                keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:33:b9:58:b1:81:4e:fb:8d:d5:ee:ea:e5:e0:3b:75:ef:8e:
         e1:89:ec:87:22:61:b3:76:6a:44:57:e1:ec:db:bf:62:42:ad:
         63:3e:ea:e5:ba:db:03:d2:05:56:d3:65:ca:4a:93:12:f9:7d:
         3a:6e:d1:50:7a:ff:b1:e5:af:da:1e:60:e8:89:7b:18:88:0c:
         5a:de:04:b2:0d:a4:f1:6f:12:3e:9d:e4:0c:de:4a:79:19:65:
         97:49:d5:70:01:f0:e2:9f:32:f0:d6:c9:a2:3b:45:76:7d:47:
         53:af:17:ef:ec:57:2a:50:33:05:13:91:87:86:c7:52:6f:97:
         37:13:a6:78:c7:50:7a:68:5b:b6:75:f1:ca:62:69:0e:f2:73:
         98:70:ac:17:e5:1d:40:e5:26:6c:8c:e3:c4:29:d1:f5:e5:58:
         df:9e:46:bb:1a:e3:2f:9a:3c:7c:79:d3:03:0a:aa:a2:36:ff:
         d5:6f:4f:6a:53:7a:23:0b:76:f8:82:e8:e3:cb:a8:04:e4:54:
         e2:09:18:d0:12:3e:b5:7e:37:ad:97:10:66:c5:6b:9b:6a:cd:
         5d:8b:1f:1e:e6:ff:b4:50:fd:ab:b4:c7:f9:68:23:66:26:cb:
         ec:fc:e0:22:ed:bb:99:b0:6a:94:74:42:72:4e:eb:37:cc:5b:
         0f:86:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:48 2026 by rpki-client