Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File:                     AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier:          B45SwlwbEzdcZzDb+shpJcBwH+lVumqYt+7W7EcRkLc=
Subject key identifier:   B5:0E:F9:5D:D6:98:9A:43:AE:18:34:DF:63:F9:9B:06:27:1A:24:89
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer:       /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial:       01A0016F42456560D8554C39D3FB9AD919A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number:          141D
Signing time:             Fri 14 Aug 2026 18:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:03 +0000
Files and hashes:         1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 1OGowkT3rJ00dlDCFsQF3iKyudcZo86BQ7ohEBsp2pk=)
                          2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:42:45:65:60:d8:55:4c:39:d3:fb:9a:d9:19:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
        Validity
            Not Before: Aug 14 18:01:03 2026 GMT
            Not After : Aug 15 18:01:03 2026 GMT
        Subject: CN=b50ef95dd6989a43ae1834df63f99b06271a2489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:c0:c4:74:13:bc:9a:e9:ee:a4:9c:35:5a:
                    88:4f:c6:01:bc:20:51:8c:de:bc:02:31:aa:ce:19:
                    be:71:ea:d5:41:4c:06:8b:9c:75:21:37:1a:0a:61:
                    91:1f:0f:85:a1:04:0d:7f:9c:38:89:cb:6a:91:ad:
                    85:a1:2f:95:92:1b:30:3f:87:ea:3e:35:81:c9:44:
                    4b:a6:03:a7:20:8e:b9:cd:a5:4c:b2:ca:e6:d5:dc:
                    19:f6:90:c2:7f:2b:c4:7a:14:de:30:0e:cc:34:8e:
                    aa:3e:21:78:3d:d3:2f:92:5a:a4:eb:24:63:59:10:
                    2c:29:98:eb:ed:16:ae:be:3b:f5:ff:c6:56:00:6d:
                    ac:a7:ba:a1:2d:e2:c4:c2:ba:1b:20:4d:a6:78:d8:
                    eb:b1:19:5e:ce:b8:84:87:90:8d:15:85:3b:a9:3e:
                    2c:4c:56:11:e4:3f:e5:a4:c9:47:28:8a:91:37:93:
                    46:c6:c9:3f:79:3d:ab:cb:b7:c9:18:3c:4d:87:e7:
                    0a:af:28:4b:23:01:5a:6f:1b:32:d7:b8:b5:29:20:
                    5d:e6:eb:ab:29:3a:6e:71:f9:17:66:9b:fd:99:7c:
                    af:a2:2e:83:5f:38:92:58:a9:bf:b9:01:43:8c:b0:
                    8e:e8:c8:a4:25:51:be:fc:5a:30:68:40:34:9c:64:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0E:F9:5D:D6:98:9A:43:AE:18:34:DF:63:F9:9B:06:27:1A:24:89
            X509v3 Authority Key Identifier:
                keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:55:4a:0e:a4:aa:a2:ca:72:47:3d:55:1a:7b:3c:2d:98:1c:
         99:7b:e8:c9:17:e9:45:bf:3f:d8:f6:89:6a:c0:a7:3d:35:21:
         37:aa:b3:fc:cb:11:6a:78:5a:77:1f:66:ae:0d:a3:01:8f:b6:
         77:1d:8a:be:8c:f0:29:c2:da:5d:57:0f:40:c1:dc:74:34:5e:
         ae:e8:3b:63:7f:46:6e:ed:52:6e:ec:27:31:05:d7:5b:3f:77:
         e8:76:9d:d1:fe:26:df:3e:ae:d0:9a:7e:ae:eb:7a:0c:33:b2:
         58:c8:b5:f9:95:27:20:8f:ea:c7:7d:b7:7d:46:bf:2c:bf:77:
         73:e5:d6:65:57:06:f8:87:e4:b8:26:c0:f9:4c:5e:e0:83:05:
         77:56:c2:f4:2e:02:f4:d1:a4:35:5c:78:b1:0e:44:47:7b:f2:
         42:7a:cc:36:5e:3a:55:f8:e5:3b:79:5c:71:5e:a4:fc:b7:86:
         98:39:86:da:fb:31:d0:cb:ea:f4:37:5b:ec:90:f2:7e:b1:cc:
         14:ec:fb:66:5d:5d:fd:6b:3d:8c:3e:7a:ea:d8:bf:ac:ee:0a:
         a9:0f:07:e0:57:f7:5d:76:4a:0f:0d:a6:b7:06:dc:3d:f6:70:
         16:dd:06:e7:a5:88:cf:1b:f3:ad:eb:b7:37:55:eb:a4:60:e0:
         dd:5b:1a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb0JFZWDYVUw50/ua2RmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTMzODQ4MDIxZDM4ODg4NjBkYWRmNzE4ODA5NGQ3OTJh
ZjZhZTYwHhcNMjYwODE0MTgwMTAzWhcNMjYwODE1MTgwMTAzWjAzMTEwLwYDVQQD
EyhiNTBlZjk1ZGQ2OTg5YTQzYWUxODM0ZGY2M2Y5OWIwNjI3MWEyNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVnAxHQTvJrp7qScNVqIT8YBvCBR
jN68AjGqzhm+cerVQUwGi5x1ITcaCmGRHw+FoQQNf5w4ictqka2FoS+VkhswP4fq
PjWByURLpgOnII65zaVMssrm1dwZ9pDCfyvEehTeMA7MNI6qPiF4PdMvklqk6yRj
WRAsKZjr7Rauvjv1/8ZWAG2sp7qhLeLEwrobIE2meNjrsRlezriEh5CNFYU7qT4s
TFYR5D/lpMlHKIqRN5NGxsk/eT2ry7fJGDxNh+cKryhLIwFabxsy17i1KSBd5uur
KTpucfkXZpv9mXyvoi6DXziSWKm/uQFDjLCO6MikJVG+/FowaEA0nGRPUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUO+V3WmJpDrhg032P5mwYnGiSJMB8GA1UdIwQY
MBaAFACTOEgCHTiIhg2t9xiAlNeSr2rmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTkt
OTdmMzliYjEzMzJkLzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTktOTdmMzliYjEzMzJk
LzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFVKDqSq
ospyRz1VGns8LZgcmXvoyRfpRb8/2PaJasCnPTUhN6qz/MsRanhadx9mrg2jAY+2
dx2KvozwKcLaXVcPQMHcdDRerug7Y39Gbu1SbuwnMQXXWz936Had0f4m3z6u0Jp+
rut6DDOyWMi1+ZUnII/qx323fUa/LL93c+XWZVcG+IfkuCbA+Uxe4IMFd1bC9C4C
9NGkNVx4sQ5ER3vyQnrMNl46VfjlO3lccV6k/LeGmDmG2vsx0Mvq9Ddb7JDyfrHM
FOz7Zl1d/Ws9jD566ti/rO4KqQ8H4Ff3XXZKDw2mtwbcPfZwFt0G56WIzxvzreu3
N1XrpGDg3VsamA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:07 2026 by rpki-client