Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File:                     AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier:          /xq3OboUk6a8fGUaWdS4b8TsSUkq1A9O5khHL5YZvbI=
Subject key identifier:   03:49:CC:7F:49:88:49:AA:8B:90:C6:60:67:D1:F2:F3:E5:AF:C3:43
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer:       /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial:       019D38D3C5D2D000F10DF03D5410F1DD253E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 09:01:35 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:35 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:35 +0000
Files and hashes:         1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: 3xsfy/GMHEjcaMY5xHufy1Sq25J1XHoccouoIgNIafk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:c5:d2:d0:00:f1:0d:f0:3d:54:10:f1:dd:25:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
        Validity
            Not Before: Mar 29 09:01:35 2026 GMT
            Not After : Mar 30 09:01:35 2026 GMT
        Subject: CN=0349cc7f498849aa8b90c66067d1f2f3e5afc343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:34:7d:8e:54:5b:57:b7:5f:11:78:de:a0:
                    58:72:dc:35:d5:25:2d:13:60:77:87:1a:ec:d0:bc:
                    ab:38:1b:6b:74:92:25:97:e0:23:b6:6b:3c:7e:6e:
                    df:30:dc:3e:fc:74:31:3d:24:0a:d4:9c:6c:1d:86:
                    2b:c9:25:c7:e2:da:13:9e:42:5b:70:69:92:96:ce:
                    63:b6:c5:9d:2e:d1:bc:1c:d4:23:e0:2b:ea:5a:da:
                    ae:34:d0:0f:a5:4d:d7:7f:52:c6:d4:f9:ba:a6:e3:
                    2a:4e:f6:d0:f9:22:70:35:fb:87:1a:e4:61:8f:81:
                    66:c5:a8:91:52:06:a3:28:e2:82:00:e7:25:81:b6:
                    ad:2c:71:94:4b:4e:5e:a7:e1:48:63:7f:75:d5:f7:
                    d0:81:f8:2d:32:7f:ea:1f:59:eb:6d:80:36:fb:4d:
                    52:a1:d6:64:b9:f8:79:44:90:dc:bc:dd:3e:a5:09:
                    85:57:25:8b:55:b0:6a:ab:11:73:25:d8:57:1b:86:
                    dd:21:d6:c9:3f:52:1d:ae:b6:40:9e:5d:9c:86:17:
                    d9:51:42:0f:e7:4c:bc:a3:9c:9a:f2:e0:29:bf:35:
                    a1:3f:bb:be:69:f9:5c:e7:14:46:b8:a1:1f:fa:5b:
                    ea:84:11:18:0e:db:6e:11:40:55:d2:59:0b:a9:87:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:49:CC:7F:49:88:49:AA:8B:90:C6:60:67:D1:F2:F3:E5:AF:C3:43
            X509v3 Authority Key Identifier:
                keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:63:86:8d:f6:07:94:5a:47:81:bb:6d:8e:6e:7a:cf:ce:
         eb:25:bd:54:1d:70:ab:be:c8:bc:b2:95:2f:9a:12:39:14:46:
         4e:b2:78:88:f6:8a:83:17:6d:fb:95:41:2d:5d:43:8d:92:16:
         aa:6e:5d:c6:63:f3:89:6f:89:de:04:42:a6:32:9f:c8:cb:e7:
         cb:a8:d7:07:c8:33:57:b2:4f:34:7e:14:ba:b4:c1:21:49:23:
         28:ca:78:65:9d:58:9b:e5:ac:c3:95:8d:63:95:ba:c4:0a:70:
         4f:79:8e:89:ba:16:61:0b:c4:20:0d:0d:c2:ce:0f:41:41:cb:
         87:72:7b:12:10:30:21:2b:97:6e:f1:e9:37:19:b2:0c:ba:51:
         0f:56:cf:8f:b0:17:65:17:e0:e4:2d:c3:c4:de:30:49:08:d4:
         da:f2:5f:85:fc:5a:39:06:21:77:39:75:03:14:66:5e:00:b9:
         9e:ed:09:f1:55:2b:dd:25:bc:c2:6d:ff:74:f3:2b:63:2c:34:
         3a:5c:70:71:07:dd:de:f6:6e:29:67:60:91:3a:dd:00:aa:98:
         0c:40:09:57:41:f1:0b:3a:e8:06:c2:69:30:6f:99:15:43:aa:
         75:63:4e:f7:fc:26:08:c9:05:3f:71:42:9e:95:31:4c:11:ab:
         17:ff:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:50 2026 by rpki-client