Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File:                     AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier:          vl9oCnfjN1XNU8BK9m9ldz0AKWPAdRIXw5bfTlBYm0o=
Subject key identifier:   87:B0:CB:AC:30:90:84:1F:DA:6D:7F:C7:F6:CB:0B:5C:D1:EE:5C:00
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer:       /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial:       019F189E4748D1090B7834FEF7E4980B14E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number:          1869
Signing time:             Tue 30 Jun 2026 13:00:53 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:53 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:53 +0000
Files and hashes:         1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: PWWseidW0z8ckjZMDj/wGBnWFtWmXc5NxKMlesQsfvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:47:48:d1:09:0b:78:34:fe:f7:e4:98:0b:14:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
        Validity
            Not Before: Jun 30 13:00:53 2026 GMT
            Not After : Jul  1 13:00:53 2026 GMT
        Subject: CN=87b0cbac3090841fda6d7fc7f6cb0b5cd1ee5c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:6e:1c:11:2d:67:9e:e7:d4:b0:a6:55:0e:
                    11:6f:97:a0:cd:19:c3:a2:b3:c5:e5:8f:a6:3e:cc:
                    30:bc:12:f3:2e:f7:17:51:f2:a9:e2:ad:76:11:1d:
                    56:fa:43:5e:ac:a8:d5:60:e9:eb:5e:d3:98:42:54:
                    74:74:f3:9a:38:30:2b:23:81:01:4c:a6:b1:62:a2:
                    d8:71:c8:31:34:23:4a:2d:a7:cc:e1:62:63:2c:8f:
                    f4:9c:d8:90:eb:3e:20:31:b9:56:30:e1:40:b2:56:
                    aa:79:c7:9a:d7:ae:fa:18:66:fb:26:96:cc:56:0e:
                    a7:f4:65:1e:e6:23:d8:de:d2:58:70:47:17:06:eb:
                    09:d8:4a:2f:1f:ad:11:a8:8d:73:d4:e9:53:7a:0f:
                    97:77:7b:d7:79:d7:c6:53:e3:75:b9:c1:9a:ea:0a:
                    0b:f9:ac:45:f1:8c:b9:2b:26:20:1c:b7:9f:94:42:
                    24:02:26:13:1b:01:41:b7:de:9a:3f:25:46:02:b6:
                    e8:24:51:46:03:02:1a:79:5c:f0:77:d8:15:88:8b:
                    a6:7f:62:97:b3:50:d0:ea:23:98:bc:fa:b4:b7:e5:
                    96:b5:06:6f:fb:3f:14:b9:dd:0a:46:23:cb:fb:1d:
                    9e:4c:4f:70:52:84:a1:a6:d0:9f:92:0a:17:23:e4:
                    4c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:CB:AC:30:90:84:1F:DA:6D:7F:C7:F6:CB:0B:5C:D1:EE:5C:00
            X509v3 Authority Key Identifier:
                keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:3d:26:a1:20:be:13:f5:1c:01:90:46:57:2f:b8:9b:84:
         7e:aa:2c:37:f3:ae:93:25:8b:40:96:40:a6:c7:8b:e2:db:40:
         81:c0:b5:aa:71:96:57:b8:92:73:69:ea:78:ef:5c:bb:43:23:
         65:10:c0:75:7f:c2:f5:bd:42:02:78:f8:74:4f:09:a6:46:5f:
         6f:eb:b1:44:c8:76:e2:e2:d0:2e:72:37:98:2c:64:be:30:93:
         d3:1f:c7:e0:e7:79:e5:fe:bc:7a:2c:b8:5b:cf:22:c2:76:d0:
         15:0a:88:80:88:b9:a1:e6:0e:08:7a:41:7f:a3:f8:b7:38:e7:
         fc:60:9b:5f:9c:64:c7:10:7c:be:06:c3:5d:7b:fb:0c:57:96:
         33:38:5c:63:df:48:55:56:09:72:5a:08:bd:ee:c1:87:33:3d:
         da:79:53:8f:e8:ad:2d:a2:0c:9d:80:46:73:32:1f:7e:ff:a9:
         d3:54:7d:89:48:53:a4:b3:59:91:64:d7:f2:f6:11:67:80:1d:
         d5:bc:af:56:a1:66:5e:82:07:41:d9:7c:6f:f0:b6:b3:00:09:
         ad:65:99:d3:82:fd:7e:82:33:c9:76:eb:be:0e:71:d0:4a:32:
         ef:d2:b3:b7:cf:75:e0:df:00:34:fa:57:5c:e5:75:ca:31:92:
         8b:74:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:43 2026 by rpki-client