Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File:                     AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier:          4svRcwN33ZCdylZ9NtYfSSstUnzKW6iTcODechjj8v4=
Subject key identifier:   FF:0A:67:D3:0D:A1:5A:80:F6:47:D5:85:3D:20:4E:AA:57:E7:5F:43
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer:       /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial:       019E2F972EA61188CF5FAD9DC8FB6FD245C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number:          190A
Signing time:             Sat 16 May 2026 07:01:37 +0000
Manifest this update:     Sat 16 May 2026 07:01:37 +0000
Manifest next update:     Sun 17 May 2026 07:01:37 +0000
Files and hashes:         1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: mlOEqIWaZjV4sAfbLTTWhkOm9CMO3upcdCD6aqna/jU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:2e:a6:11:88:cf:5f:ad:9d:c8:fb:6f:d2:45:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
        Validity
            Not Before: May 16 07:01:37 2026 GMT
            Not After : May 17 07:01:37 2026 GMT
        Subject: CN=ff0a67d30da15a80f647d5853d204eaa57e75f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:05:66:35:98:02:84:20:a4:8c:ad:d9:28:
                    af:04:f1:46:74:0f:f1:43:50:fb:e7:49:ed:87:e7:
                    0c:94:cf:16:19:96:51:af:89:4f:c2:1f:1c:0c:8b:
                    62:3c:5e:bb:48:f6:32:66:c1:a8:0e:e6:a7:2d:44:
                    b9:79:0f:29:be:05:fa:4a:1f:e1:32:d3:96:73:48:
                    6c:6c:2c:02:e4:db:fc:02:5a:50:c2:73:30:be:ad:
                    fe:1c:b4:30:8f:b0:aa:ad:2c:3b:73:6f:f7:bb:c4:
                    df:d0:bc:60:e2:9e:ba:52:e1:fb:db:b3:cd:cb:be:
                    f2:56:ab:bb:e9:18:e7:b3:ff:33:d5:47:dc:73:69:
                    70:6c:eb:f2:e3:ff:0c:4d:c1:05:2f:b8:f2:65:be:
                    3f:cb:57:e9:c3:df:5f:1c:23:3a:de:4e:3c:3d:4a:
                    38:f3:3e:7c:5c:46:52:79:16:ac:03:33:91:49:97:
                    e6:3c:a8:93:7f:ee:24:71:70:f3:ee:55:a5:70:ab:
                    e3:1b:10:27:e2:a9:c9:50:1e:f5:7c:01:a1:72:cd:
                    ab:bc:66:1c:bd:93:49:8a:fb:75:71:2e:75:32:44:
                    e1:d6:a6:fc:61:92:1f:82:23:af:7a:62:a6:c3:c9:
                    70:18:43:6e:ca:1e:60:6c:61:01:b7:6c:d8:c0:1d:
                    cc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0A:67:D3:0D:A1:5A:80:F6:47:D5:85:3D:20:4E:AA:57:E7:5F:43
            X509v3 Authority Key Identifier:
                keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:d2:74:4f:a0:a1:5d:75:f0:5b:76:bc:6c:9e:2b:6f:8c:
         0d:8f:a7:7e:0f:85:b3:ab:28:fa:90:e9:ca:88:29:50:f3:cf:
         fe:11:59:6a:27:e1:5a:bd:ec:3f:83:15:e6:18:6c:89:d8:c4:
         88:bd:eb:d2:b7:1a:83:b2:70:ab:55:46:ae:17:82:c2:f6:15:
         95:87:a7:53:7a:c0:42:d8:bd:89:ec:d4:51:59:4a:8f:49:ee:
         c3:09:2c:77:b5:e8:38:86:db:60:a5:b4:c6:f2:5e:bc:e2:98:
         ea:bf:86:10:b9:9a:2a:15:80:18:b6:1f:8e:75:76:22:9a:92:
         c5:79:a1:27:c6:d1:2a:af:07:7d:a7:96:4e:63:39:c1:21:51:
         a5:3e:d6:f0:7f:3e:66:ce:82:3b:2b:2d:dc:a4:f9:08:1d:e0:
         af:9f:14:9d:f1:ac:66:ac:ae:7c:3e:44:83:8a:8a:24:bd:f0:
         de:37:9c:36:4c:5d:6f:4e:c3:97:c1:85:18:78:fe:51:c0:9c:
         0a:79:ad:70:97:6b:f9:f2:a7:bc:09:f0:a6:8a:16:9a:68:10:
         99:93:32:0d:47:cd:3b:f7:76:c0:ea:1b:b0:17:41:8a:c9:40:
         27:ec:52:67:8b:19:83:68:f4:b3:78:5c:eb:a8:ee:04:08:8b:
         6b:e4:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:01 2026 by rpki-client