Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File:                     AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier:          77I4/PETwAn006NhinVBrE3NnDxd0r8PO0u2F52+vCs=
Subject key identifier:   EC:A7:FE:63:7E:BD:0F:7A:18:EB:F2:6D:DB:DE:0D:1B:00:93:8E:71
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer:       /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial:       01A1076ED9441E770D74C0210BD958B78429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number:          1354
Signing time:             Sun 04 Oct 2026 15:01:07 +0000
Manifest this update:     Sun 04 Oct 2026 15:01:07 +0000
Manifest next update:     Mon 05 Oct 2026 15:01:07 +0000
Files and hashes:         1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: wrltfzyLY7N1y4RCFhx54N9ilA1Ybec/H5xCRvEbOo4=)
                          2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
                          3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6e:d9:44:1e:77:0d:74:c0:21:0b:d9:58:b7:84:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
        Validity
            Not Before: Oct  4 15:01:07 2026 GMT
            Not After : Oct  5 15:01:07 2026 GMT
        Subject: CN=eca7fe637ebd0f7a18ebf26ddbde0d1b00938e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:1e:d1:39:52:5b:ad:a5:15:c8:80:9f:75:
                    43:e0:ee:c2:47:1c:c5:09:57:cc:61:13:7c:bc:3f:
                    62:bc:3e:c9:c4:a3:ed:29:54:1e:f3:65:ec:19:c5:
                    7c:d8:b8:ad:cb:63:29:a2:de:c5:12:dc:9e:e5:5b:
                    8e:b8:c1:eb:73:8d:d0:ea:1e:e1:26:9e:11:1d:b5:
                    b4:37:b4:37:25:55:b9:05:18:c5:96:f0:0c:2b:08:
                    fd:61:16:5e:b9:dc:9f:df:50:1f:dd:9c:cf:70:8a:
                    2a:52:dc:ad:ef:ef:1b:a6:e9:fc:76:0f:9e:95:89:
                    6a:36:37:a0:56:98:46:89:c3:01:59:83:69:df:41:
                    49:d6:20:be:40:be:8e:38:19:87:2d:04:a7:c4:a8:
                    74:15:2d:54:2a:da:8c:5d:b9:20:88:60:46:f8:ce:
                    b1:d5:00:62:a8:a6:f2:8f:60:d3:86:e0:32:c9:cb:
                    c5:71:24:e7:f9:11:9b:a3:48:e0:87:02:7c:42:82:
                    71:e3:a2:d6:70:bf:35:a5:c5:2e:ac:b9:9d:0d:5c:
                    d2:c1:4d:7b:f0:6a:d5:90:ed:0b:ed:0c:26:bb:68:
                    8b:f1:f2:ef:1e:81:d5:d9:99:63:d6:c3:bf:5b:57:
                    b4:68:ad:74:92:4d:2f:0f:b7:22:e6:8b:d0:bb:fd:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A7:FE:63:7E:BD:0F:7A:18:EB:F2:6D:DB:DE:0D:1B:00:93:8E:71
            X509v3 Authority Key Identifier:
                keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:4e:67:77:41:bf:5d:4b:99:07:fb:8c:45:4b:c1:ee:ed:3f:
         53:e4:5e:63:24:2a:85:10:c8:41:cf:f4:66:6d:d6:bc:d5:38:
         75:07:66:d8:bc:31:e2:a6:db:84:1d:b1:0c:62:cb:6c:89:71:
         2c:a3:37:f4:56:eb:55:6f:68:5b:bc:17:ba:45:ec:b4:cd:da:
         eb:78:78:c4:3a:ca:8b:c9:79:1c:7f:0d:fd:43:ae:aa:cb:e6:
         ad:2a:e7:cd:9b:c9:8d:1b:8d:a1:dd:5e:53:c6:01:06:39:d9:
         68:65:58:99:ce:69:09:d4:b8:ce:20:c6:6b:3a:b0:9f:9e:6c:
         63:ab:35:7d:9b:0f:6d:09:da:43:53:a6:25:cb:7f:25:33:b8:
         dd:1a:f1:e6:d6:fd:36:16:82:eb:93:e3:35:9d:7b:01:be:b7:
         42:64:e5:90:23:78:91:39:16:0e:6b:77:19:15:5d:65:d3:bb:
         8e:79:63:9c:c7:74:60:d7:d6:83:8e:d4:d4:fd:dd:28:6e:63:
         1e:53:2f:27:08:a9:f8:2c:78:ae:ea:f8:ad:17:c5:29:ee:73:
         8d:d1:4f:65:76:fe:de:80:e3:10:4d:46:6d:5d:43:5f:67:8f:
         bf:b5:c9:10:72:86:cc:ac:43:70:63:dd:99:69:21:20:3c:eb:
         05:f3:4a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHbtlEHncNdMAhC9lYt4QpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYTU2YzQyZWQ3Y2I5NjNmMjg1NTAzY2VjMDYwNmQ2MGQw
YWIzODcwHhcNMjYxMDA0MTUwMTA3WhcNMjYxMDA1MTUwMTA3WjAzMTEwLwYDVQQD
EyhlY2E3ZmU2MzdlYmQwZjdhMThlYmYyNmRkYmRlMGQxYjAwOTM4ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb0e0TlSW62lFciAn3VD4O7CRxzF
CVfMYRN8vD9ivD7JxKPtKVQe82XsGcV82Lity2Mpot7FEtye5VuOuMHrc43Q6h7h
Jp4RHbW0N7Q3JVW5BRjFlvAMKwj9YRZeudyf31Af3ZzPcIoqUtyt7+8bpun8dg+e
lYlqNjegVphGicMBWYNp30FJ1iC+QL6OOBmHLQSnxKh0FS1UKtqMXbkgiGBG+M6x
1QBiqKbyj2DThuAyycvFcSTn+RGbo0jghwJ8QoJx46LWcL81pcUurLmdDVzSwU17
8GrVkO0L7Qwmu2iL8fLvHoHV2Zlj1sO/W1e0aK10kk0vD7ci5ovQu/3ZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyn/mN+vQ96GOvybdveDRsAk45xMB8GA1UdIwQY
MBaAFAGlbELtfLlj8oVQPOwGBtYNCrOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMt
ZWQwN2Y1Y2FkNmQ3LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMtZWQwN2Y1Y2FkNmQ3
LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA105nd0G/
XUuZB/uMRUvB7u0/U+ReYyQqhRDIQc/0Zm3WvNU4dQdm2Lwx4qbbhB2xDGLLbIlx
LKM39FbrVW9oW7wXukXstM3a63h4xDrKi8l5HH8N/UOuqsvmrSrnzZvJjRuNod1e
U8YBBjnZaGVYmc5pCdS4ziDGazqwn55sY6s1fZsPbQnaQ1OmJct/JTO43Rrx5tb9
NhaC65PjNZ17Ab63QmTlkCN4kTkWDmt3GRVdZdO7jnljnMd0YNfWg47U1P3dKG5j
HlMvJwip+Cx4rur4rRfFKe5zjdFPZXb+3oDjEE1GbV1DX2ePv7XJEHKGzKxDcGPd
mWkhIDzrBfNKnA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:41 2026 by rpki-client