Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File:                     AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier:          +wfFtCte2wsR9m/kvTau7MyHt9ZXP/kX6OLFvcSmndA=
Subject key identifier:   44:4B:36:FC:16:23:1E:DC:1A:5C:5C:AA:A4:6E:F5:B1:9D:28:7D:B3
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer:       /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial:       019E31853667BBA6F0F7488CEC489D4685CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number:          1001
Signing time:             Sat 16 May 2026 16:01:14 +0000
Manifest this update:     Sat 16 May 2026 16:01:14 +0000
Manifest next update:     Sun 17 May 2026 16:01:14 +0000
Files and hashes:         1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: 7hh6I4tFnh+cEI6l+s7sv5gyKTZ/CVPR/FXE6pjMdYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:36:67:bb:a6:f0:f7:48:8c:ec:48:9d:46:85:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
        Validity
            Not Before: May 16 16:01:14 2026 GMT
            Not After : May 17 16:01:14 2026 GMT
        Subject: CN=444b36fc16231edc1a5c5caaa46ef5b19d287db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:aa:18:ea:7a:7f:58:b5:53:97:a8:7f:1f:
                    6e:03:8d:82:86:3e:9d:45:87:c3:96:7d:a0:f6:06:
                    ef:07:a1:02:8e:90:b4:3b:68:75:11:92:28:8d:6e:
                    8c:9b:84:16:00:1d:fe:e9:13:93:21:8e:cd:1b:b1:
                    62:7a:24:14:bf:62:3c:70:90:6e:c0:f8:37:81:e5:
                    01:90:03:6e:39:23:9c:0b:2c:30:1e:35:af:d4:be:
                    1f:69:5a:ee:cf:13:a8:e4:e8:68:86:e6:9e:c5:0d:
                    7b:66:3a:78:cb:7e:2e:50:d2:36:70:8f:b8:86:16:
                    de:5d:22:26:09:36:e1:ff:2d:6e:ae:c9:42:e7:57:
                    19:80:9d:7d:db:f4:35:2f:0d:b0:ab:5c:7f:18:5e:
                    65:2f:a0:2d:39:50:dc:0d:db:3e:70:35:01:3d:06:
                    39:03:6c:25:02:2a:e4:9f:94:bf:82:db:f2:59:5b:
                    3e:ff:6d:a6:c0:4c:3c:5c:32:a6:0f:2d:86:32:2c:
                    ed:4c:69:9b:4f:b8:5b:5b:75:77:36:45:04:3e:d0:
                    50:a0:eb:85:dd:ca:ea:00:1d:29:3f:7c:a3:15:82:
                    65:04:a4:fe:2d:ef:ee:51:e8:bc:76:48:68:c4:46:
                    71:d4:72:69:d7:3b:a9:4f:36:8f:91:4b:a7:9f:00:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:36:FC:16:23:1E:DC:1A:5C:5C:AA:A4:6E:F5:B1:9D:28:7D:B3
            X509v3 Authority Key Identifier:
                keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:1f:bd:45:8b:87:2d:18:c9:a8:57:3a:54:fa:bb:a1:5f:
         5f:5c:c0:e1:18:95:29:83:45:30:3f:b7:79:74:5a:be:ff:17:
         6a:2e:bb:13:cf:f5:68:e2:fc:66:f2:dc:f2:8b:99:23:58:32:
         2f:80:a4:4e:2f:ea:d2:03:2f:b1:cf:c9:5a:fb:bd:7d:ee:59:
         1a:96:b0:a6:70:74:01:d4:64:5a:22:37:74:36:cc:1b:0a:f8:
         5a:bb:e7:4b:10:0b:19:0a:f6:29:c8:13:2f:52:e0:03:c3:d4:
         2c:e6:b3:d6:e8:8f:a0:b4:2a:92:67:a3:db:72:4d:70:7f:29:
         8a:bc:a7:59:8e:ed:f9:d1:94:d3:95:1c:0e:0a:82:a0:d2:ae:
         ba:09:8b:a6:e7:90:4d:62:5f:b9:c8:90:fd:da:3a:bd:32:8b:
         c1:51:49:2b:4a:a4:2d:4c:49:81:85:4c:5b:a4:b3:92:0e:aa:
         ce:8c:ac:cd:7e:8c:3b:61:47:6d:77:58:03:f0:f6:00:d6:86:
         f4:07:94:f4:53:de:18:3f:b1:a3:53:6f:8b:c5:5b:b5:64:e0:
         fe:40:08:c9:e2:28:70:4f:62:a5:71:d8:d0:41:32:96:e1:da:
         2c:f8:0a:65:13:a6:31:65:50:ae:38:30:ec:42:11:f5:09:58:
         7f:cb:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:47 2026 by rpki-client