Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File:                     AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier:          HPK2i0Q/6S7eCQcjCZu1W4hRI5hF6b4nokj7K90fxl8=
Subject key identifier:   C9:66:3B:74:C6:0D:82:87:C5:5B:31:8E:48:A0:DC:00:DA:EC:49:26
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer:       /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial:       01A13F029FC9C904B55E9AD0D318557CE27D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number:          1986
Signing time:             Thu 15 Oct 2026 10:01:38 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:38 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:38 +0000
Files and hashes:         1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: LDHct74vTJoqZiSj+hlVeqGv9O/luNGG+ROTWho4jT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:9f:c9:c9:04:b5:5e:9a:d0:d3:18:55:7c:e2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
        Validity
            Not Before: Oct 15 10:01:38 2026 GMT
            Not After : Oct 16 10:01:38 2026 GMT
        Subject: CN=c9663b74c60d8287c55b318e48a0dc00daec4926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:5e:3b:cb:e9:e6:7d:ed:ab:46:8b:d4:86:
                    07:a3:e6:9b:37:a2:5d:2f:ca:cf:eb:1c:37:d0:d9:
                    28:2c:1c:92:b5:e5:7f:08:17:e2:af:90:56:fb:fa:
                    1e:57:1a:1a:64:5f:16:54:94:10:cf:a2:0c:4b:59:
                    91:69:1f:6a:7b:f6:5f:31:a4:28:59:53:95:02:35:
                    ce:92:c4:3e:44:8a:db:e2:4f:b6:fe:97:62:bb:91:
                    0c:fe:61:f9:73:42:53:c0:ea:14:e8:73:ae:a3:35:
                    b0:ba:50:10:af:de:fc:b8:91:f2:6c:0e:3b:67:01:
                    17:06:0d:78:1c:e2:7d:e7:f4:37:e6:bb:31:12:87:
                    90:51:17:c6:df:f1:bc:74:bb:93:0e:0f:de:dc:e1:
                    4b:c7:c4:f1:aa:fc:09:82:1b:ea:d4:98:88:c0:5f:
                    f7:a7:a5:98:ff:03:dd:7f:14:04:87:be:cf:23:4b:
                    f7:04:5f:4b:29:f6:cb:eb:b1:4d:c6:48:7d:69:48:
                    ff:b9:e3:58:4d:42:66:78:80:0d:d9:44:52:8a:34:
                    b6:ae:dd:86:0f:aa:34:54:fd:50:ea:7a:bd:48:3a:
                    e5:fc:40:68:f6:71:1c:01:40:5f:0a:f5:ca:45:a2:
                    6f:50:32:4b:25:91:81:36:b4:40:21:01:f0:f9:8d:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:66:3B:74:C6:0D:82:87:C5:5B:31:8E:48:A0:DC:00:DA:EC:49:26
            X509v3 Authority Key Identifier:
                keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:45:31:75:6c:ec:46:1c:65:b1:4a:79:4a:00:75:5a:fb:59:
         49:96:19:4b:34:48:a9:79:d2:d4:c8:c1:2f:08:9e:1f:db:88:
         7d:e3:7e:99:1c:b5:6e:7b:5b:11:8b:2e:84:d9:a6:f9:18:e9:
         25:76:4b:1a:b9:88:56:35:bb:6e:0c:ac:f1:28:f6:16:5e:b3:
         7c:60:9e:66:9a:d5:4d:c8:37:7d:7a:76:87:22:3b:ad:e2:a5:
         00:ed:b2:1f:d0:3d:ef:4f:d4:f0:a9:65:ff:f8:44:c3:f0:75:
         3f:b1:d9:e6:9e:05:88:e9:83:f0:83:05:7c:04:08:7a:79:41:
         32:0a:73:5c:80:3b:5d:66:bf:83:61:6d:14:ee:04:b8:0e:78:
         df:83:15:5c:80:5f:97:bf:63:78:d6:77:c5:ac:30:df:08:73:
         cb:47:04:a1:54:b7:0c:13:17:58:b1:ba:5e:e1:1c:07:f2:0d:
         17:86:b9:d5:90:ed:bc:b9:f6:40:0f:8f:c7:9b:7f:a9:01:ae:
         70:f9:d3:5b:7c:0a:1b:d2:a1:c0:2d:5f:da:02:51:c5:05:63:
         7f:8f:56:b4:7e:f3:e0:cf:8b:e1:1a:93:e4:7f:4b:55:a9:c7:
         17:37:3d:68:87:4a:f2:cb:c6:38:a4:32:c7:dc:21:39:09:ec:
         e5:e4:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:41 2026 by rpki-client