Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File:                     ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier:          muNCkcMKW90oVnijBRs93cFcmYtluq4R3tCCmCOjqo4=
Subject key identifier:   F1:76:EB:53:7A:EF:6E:EC:B1:75:9E:0F:27:F5:98:BE:E1:C9:9B:EE
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer:       /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial:       01A0024B29D181284DD1847B1F1E8E399589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number:          14AC
Signing time:             Fri 14 Aug 2026 22:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:15 +0000
Files and hashes:         1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: 0LxdoMDfs+XgPU/r/8kNhpYqCc1sr1SHNFmedzkaeFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:29:d1:81:28:4d:d1:84:7b:1f:1e:8e:39:95:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
        Validity
            Not Before: Aug 14 22:01:15 2026 GMT
            Not After : Aug 15 22:01:15 2026 GMT
        Subject: CN=f176eb537aef6eecb1759e0f27f598bee1c99bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:a9:fb:c2:bf:fc:6e:8d:1a:b7:9e:94:ea:
                    3c:6e:d1:5c:f8:07:de:1e:68:e3:ce:87:81:2b:06:
                    29:d8:8f:b4:cd:63:ba:06:f1:69:a2:8c:f2:ba:24:
                    0d:7e:0e:71:34:00:a1:f9:99:48:64:89:5c:8a:0a:
                    9a:5b:a0:e3:98:a1:85:b8:2e:9c:ec:a2:a4:61:3d:
                    92:a4:0d:c4:d4:65:4c:fc:c7:e7:ec:6c:a2:62:95:
                    cd:a5:4e:0d:91:d3:26:d2:63:f3:2b:8f:f4:08:9e:
                    e7:ba:fb:ff:4e:2b:a4:d7:9d:f5:ec:88:34:9a:ca:
                    cc:68:30:30:e9:93:b9:10:88:20:76:99:36:b6:0f:
                    fe:d4:b5:0b:b2:2a:19:f4:fd:92:59:d0:b2:1d:fd:
                    cc:c9:80:83:f0:7f:93:9a:ee:fa:8e:6f:83:01:d4:
                    11:31:f6:63:aa:d1:96:e3:a6:cc:4a:5a:3e:e3:b4:
                    67:c4:7e:44:54:b8:d1:7a:c8:a5:a4:b1:66:c9:fb:
                    aa:98:e9:84:83:01:08:2f:87:76:64:12:37:36:6a:
                    df:cf:e7:dd:58:75:be:81:f8:02:db:4a:3a:33:2d:
                    c0:cc:61:ef:34:30:e7:bf:be:69:1d:6b:bb:16:fb:
                    bc:8e:86:58:25:29:45:30:b4:47:f7:26:5d:ef:ca:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:76:EB:53:7A:EF:6E:EC:B1:75:9E:0F:27:F5:98:BE:E1:C9:9B:EE
            X509v3 Authority Key Identifier:
                keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:f7:8f:25:6c:d8:b8:d5:1f:eb:66:76:87:92:f2:d6:ea:
         4d:9b:11:bb:14:fa:55:90:92:4e:d2:22:2b:e9:f6:a0:47:d6:
         00:bb:4d:a9:71:2a:3a:b4:e1:a3:2b:12:2e:ea:72:9a:88:1a:
         f8:21:04:e9:af:38:68:8f:8f:1e:4b:a4:d2:2a:82:9c:38:d7:
         ed:5a:4d:f1:bc:c1:ae:36:a8:ba:58:09:a6:bb:24:d9:84:6c:
         3e:0a:39:d2:34:37:21:83:16:d3:d5:74:11:1f:13:fe:e8:b3:
         83:74:d0:50:bd:0e:29:2f:38:f3:81:f5:d6:a4:d1:b2:51:db:
         93:58:e3:49:f6:49:94:c0:37:64:6c:34:dd:04:a9:09:ab:ff:
         c1:f9:8c:af:02:fd:04:6e:5d:b7:2f:24:4e:bb:a6:42:b9:a4:
         73:d1:0b:5d:77:cc:8e:7f:e1:09:20:83:8a:81:db:29:4c:36:
         f6:fe:ef:f9:a4:7d:fb:00:c2:e5:1b:f8:40:ed:a8:58:52:58:
         38:5c:5d:ed:a3:20:01:40:ac:eb:f3:7f:b0:3f:15:61:28:3e:
         ec:e3:da:9e:a9:e6:c6:6d:15:1d:ff:81:90:f9:f0:16:7a:52:
         70:47:1b:99:80:d3:5c:b9:1b:a9:f4:12:9a:77:45:0e:68:c7:
         79:4e:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:41 2026 by rpki-client