Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File:                     AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier:          4u+anaIsQQ/MySewP7R4khdT66BH8wKqUxTKnMq9kG8=
Subject key identifier:   FA:0C:11:F2:75:83:9E:1C:78:92:D7:7E:B0:2B:E6:06:91:8E:CA:D0
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer:       /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial:       01A0016FBA939416E865B18C1767F6969E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 18:01:34 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:34 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:34 +0000
Files and hashes:         1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: ZTyEwnPvBF5HP/o+TfySGfR4sQ5T3ZZg2JYvohGBK5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:ba:93:94:16:e8:65:b1:8c:17:67:f6:96:9e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
        Validity
            Not Before: Aug 14 18:01:34 2026 GMT
            Not After : Aug 15 18:01:34 2026 GMT
        Subject: CN=fa0c11f275839e1c7892d77eb02be606918ecad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:96:0e:f4:23:20:54:58:14:b5:5e:ca:8b:41:
                    46:ea:3b:d2:ca:dd:16:51:c8:94:11:8d:13:cd:58:
                    f6:2b:07:14:e2:01:a2:c1:a5:bd:60:12:a2:54:9f:
                    a0:86:57:ef:fb:24:fa:b1:fd:7d:d9:d2:31:99:40:
                    47:44:88:bb:d3:4b:3f:79:4b:b9:fc:49:2a:a1:f1:
                    6f:87:3d:9f:23:ed:4a:e2:45:1d:e1:bd:02:f7:1c:
                    91:3d:4b:c2:e5:9e:20:fa:62:c8:5e:c9:63:0a:ca:
                    03:f3:ed:4b:41:40:81:19:43:f4:a3:3a:7e:3e:65:
                    6e:db:e2:6c:7b:be:60:0e:d5:71:74:fd:14:d6:cc:
                    c8:0b:7d:c6:58:a1:51:13:df:1f:ae:48:77:e5:c1:
                    d8:91:80:38:64:37:38:e9:f8:34:ed:b0:07:a4:42:
                    b4:fd:0d:21:fb:bd:f2:aa:3d:7d:a8:2d:32:21:87:
                    ca:54:fc:9b:07:ef:33:8f:46:b8:b4:ed:46:f8:9b:
                    44:e5:dd:56:6c:2c:9e:e2:f3:72:fc:7a:c2:32:3d:
                    28:29:e4:3d:5a:c3:78:c7:e7:8f:c7:1f:20:1b:25:
                    20:a3:fb:d1:72:50:2c:0b:f0:74:a4:b6:ec:03:bf:
                    1f:a7:8b:18:35:22:d8:6f:3a:59:55:2c:47:3e:a4:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0C:11:F2:75:83:9E:1C:78:92:D7:7E:B0:2B:E6:06:91:8E:CA:D0
            X509v3 Authority Key Identifier:
                keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:d9:6d:f0:c6:b6:cc:0e:6b:be:22:ca:6e:1f:47:e6:63:
         20:b5:28:12:c1:fa:a0:8b:5e:21:a5:72:72:a6:85:3d:a9:cd:
         77:15:f8:c4:ec:a3:71:5f:4d:49:36:a7:25:65:68:29:20:7a:
         5e:01:03:99:6b:15:18:6b:8a:91:1f:9e:7e:98:58:ee:b6:2a:
         4a:a0:77:a3:8a:46:91:38:a3:cb:2a:7c:5f:41:2c:91:bc:79:
         1a:0b:56:57:09:93:0f:14:01:1a:93:23:f3:7d:06:01:7b:08:
         c4:02:e1:9c:96:05:cb:6d:97:f7:7b:bd:a6:63:a6:c3:79:a4:
         4c:91:85:6a:13:f5:a9:fc:9a:7a:aa:a0:82:44:5c:ce:1a:c2:
         fa:ea:7c:26:db:02:ef:fa:cf:5d:bb:a9:98:6f:09:9b:73:18:
         a4:14:c4:47:25:b8:d2:65:77:9b:27:6b:69:85:e3:f5:c0:97:
         d9:51:3a:30:20:03:8e:1c:1f:3c:a3:15:ff:3d:50:a8:aa:2a:
         97:2a:8e:5b:de:f2:85:17:17:3e:00:52:f3:b4:05:8e:26:8f:
         82:87:d3:a6:77:9f:b5:2c:c7:e3:22:42:47:8a:11:6d:d2:68:
         fa:47:02:8e:37:b9:66:29:92:7b:16:35:8e:85:48:9c:aa:5b:
         50:00:a0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:08 2026 by rpki-client