Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File:                     AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier:          cbk7iLLADh+oDLnr1wKxFRMq+lnIJI7nEhqbFz0OQpI=
Subject key identifier:   9C:94:91:E9:E6:CC:14:19:3D:12:DA:5C:80:B5:8F:1D:4E:D2:DC:AA
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer:       /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial:       01A0024AB37975057673FAD9B4452A7E2097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number:          18E2
Signing time:             Fri 14 Aug 2026 22:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:45 +0000
Files and hashes:         1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: 7M7seWsCYF2fMQAMhglM2sdM/9oSH97iOH04CVxCSxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:b3:79:75:05:76:73:fa:d9:b4:45:2a:7e:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
        Validity
            Not Before: Aug 14 22:00:45 2026 GMT
            Not After : Aug 15 22:00:45 2026 GMT
        Subject: CN=9c9491e9e6cc14193d12da5c80b58f1d4ed2dcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:bc:1a:5d:0d:60:94:ac:f7:37:8f:4b:bd:
                    94:20:95:a1:96:75:f8:88:b9:e4:a7:83:5c:1a:41:
                    6e:fe:51:8a:74:0e:d8:8c:f0:70:85:59:e5:01:b5:
                    a0:17:1b:46:88:9e:8c:05:f7:d1:db:26:7c:25:cd:
                    05:cf:25:25:a2:b8:47:27:75:87:dc:19:d8:77:c3:
                    6e:2d:96:e3:8b:74:5e:fe:6b:8a:de:a4:70:cf:c1:
                    b0:ba:f3:71:2b:98:9f:2a:ee:86:fd:8c:92:0b:d3:
                    c8:23:ae:d1:44:0e:03:7c:5a:99:b5:dd:f2:a9:44:
                    82:65:89:5f:70:71:c7:55:bd:86:e2:e4:a5:31:8f:
                    eb:3c:af:bc:0c:b6:e7:d3:96:86:44:5f:8c:5c:80:
                    b3:98:08:62:24:a1:92:c1:98:9d:73:42:cf:25:f0:
                    f9:7a:c7:17:a2:55:4d:e8:ed:66:5b:42:6b:77:7d:
                    6f:6b:c6:62:cb:38:43:2c:e6:b7:d6:64:e0:6b:96:
                    c2:29:a1:d7:a6:ff:c1:22:d6:f9:f0:fc:7b:bf:68:
                    03:cc:1a:25:fc:b2:f4:b4:b7:7b:b5:9b:b2:b9:23:
                    da:77:49:07:7e:40:ff:60:39:c8:cf:3a:b3:2a:8e:
                    99:b2:53:79:3e:13:ac:ac:0b:c6:d9:db:c7:ff:47:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:91:E9:E6:CC:14:19:3D:12:DA:5C:80:B5:8F:1D:4E:D2:DC:AA
            X509v3 Authority Key Identifier:
                keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:32:b8:ec:f7:3a:a4:47:24:cf:1b:d6:fc:24:f4:98:fc:f7:
         56:f7:64:1a:bb:18:b8:cb:15:57:3d:cb:bb:25:d2:27:b0:4d:
         ec:4d:1d:7b:14:08:d1:a0:c7:cb:12:c2:64:58:49:2f:19:47:
         5c:51:7b:3c:c3:20:f4:96:3a:68:92:f4:cd:10:24:75:6d:bb:
         38:84:0e:ab:50:fd:02:2b:c3:c1:ce:93:93:cb:08:31:0f:34:
         fa:3b:bf:97:a1:dd:89:47:69:01:47:ce:50:60:5b:c5:da:69:
         c6:b1:18:ca:58:fc:c6:1f:97:a3:f2:3b:62:a7:ab:cc:35:56:
         ae:ce:c7:8d:67:db:2a:45:98:c4:71:31:c2:fa:d3:78:19:78:
         2f:cb:03:ad:2d:0b:73:26:48:e3:3a:62:a4:3a:60:f0:46:3f:
         87:6f:1b:c3:28:57:11:ed:70:f5:68:42:a9:06:f7:2c:b5:5a:
         17:62:e2:3d:47:07:79:fb:74:bb:b6:9c:5b:05:08:a9:a3:6a:
         95:58:dd:3e:00:b6:d1:09:ec:5d:3c:3e:08:9a:54:26:47:46:
         bc:82:b0:52:e6:88:3e:18:e6:84:1f:a8:f6:46:34:66:39:4a:
         04:5b:b9:df:b7:80:f5:49:96:b2:a8:d6:a9:5a:a0:f2:07:37:
         e1:a2:29:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSrN5dQV2c/rZtEUqfiCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGE4MDhjY2Y1OTE5ZDA1NjdkYzQyMzRlOTBhM2U2MGNl
YjE2NDgwHhcNMjYwODE0MjIwMDQ1WhcNMjYwODE1MjIwMDQ1WjAzMTEwLwYDVQQD
Eyg5Yzk0OTFlOWU2Y2MxNDE5M2QxMmRhNWM4MGI1OGYxZDRlZDJkY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ci8Gl0NYJSs9zePS72UIJWhlnX4
iLnkp4NcGkFu/lGKdA7YjPBwhVnlAbWgFxtGiJ6MBffR2yZ8Jc0FzyUlorhHJ3WH
3BnYd8NuLZbji3Re/muK3qRwz8GwuvNxK5ifKu6G/YySC9PII67RRA4DfFqZtd3y
qUSCZYlfcHHHVb2G4uSlMY/rPK+8DLbn05aGRF+MXICzmAhiJKGSwZidc0LPJfD5
escXolVN6O1mW0Jrd31va8ZiyzhDLOa31mTga5bCKaHXpv/BItb58Px7v2gDzBol
/LL0tLd7tZuyuSPad0kHfkD/YDnIzzqzKo6ZslN5PhOsrAvG2dvH/0e9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyUkenmzBQZPRLaXIC1jx1O0tyqMB8GA1UdIwQY
MBaAFAFKgIzPWRnQVn3EI06Qo+YM6xZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMt
MTZhMmQzZTZjOTk0LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMtMTZhMmQzZTZjOTk0
LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjK47Pc6
pEckzxvW/CT0mPz3VvdkGrsYuMsVVz3LuyXSJ7BN7E0dexQI0aDHyxLCZFhJLxlH
XFF7PMMg9JY6aJL0zRAkdW27OIQOq1D9AivDwc6Tk8sIMQ80+ju/l6HdiUdpAUfO
UGBbxdppxrEYylj8xh+Xo/I7YqerzDVWrs7HjWfbKkWYxHExwvrTeBl4L8sDrS0L
cyZI4zpipDpg8EY/h28bwyhXEe1w9WhCqQb3LLVaF2LiPUcHeft0u7acWwUIqaNq
lVjdPgC20QnsXTw+CJpUJkdGvIKwUuaIPhjmhB+o9kY0ZjlKBFu537eA9UmWsqjW
qVqg8gc34aIpuw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:05 2026 by rpki-client