Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File:                     AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier:          ehfOnu3KjB6ydvJlgW/f4d04eenc47R26A77MI3/APw=
Subject key identifier:   95:15:A6:BB:39:81:28:3E:39:B2:4F:89:E2:80:37:84:7B:50:7D:F3
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer:       /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial:       01A0016FC6A9964488CAAA5A4D172DB8F145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 18:01:37 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:37 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:37 +0000
Files and hashes:         1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: a+cyhH5eE1crQLMyIEiueGXIWtv3YfPabLh923hYuCM=)
                          2: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (hash: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:c6:a9:96:44:88:ca:aa:5a:4d:17:2d:b8:f1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
        Validity
            Not Before: Aug 14 18:01:37 2026 GMT
            Not After : Aug 15 18:01:37 2026 GMT
        Subject: CN=9515a6bb3981283e39b24f89e28037847b507df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:0d:4d:82:2a:47:ad:d8:be:51:c4:60:a5:
                    8a:2d:41:fe:db:8d:85:65:0b:ab:81:3d:ed:57:8c:
                    09:91:0e:98:67:08:8c:05:ec:db:32:bf:ad:da:bd:
                    4d:6a:99:57:3e:3a:f0:4b:de:1e:9d:0f:29:9f:57:
                    03:93:70:07:80:1c:cc:c6:75:b3:5e:4a:30:0b:2d:
                    13:91:9f:5e:d3:b5:0a:20:24:78:1f:a9:eb:d1:2b:
                    03:c3:8e:77:c5:26:17:b3:93:d6:5a:ac:a5:3b:47:
                    9f:a6:59:44:94:37:ad:1b:43:9b:4a:f7:fa:01:b8:
                    47:20:3d:8b:ab:d2:1d:71:a9:f9:93:f5:ad:a8:c7:
                    1a:5f:e2:f5:ff:5e:70:dc:10:1e:f0:a5:3a:b7:b4:
                    98:0a:d4:ea:12:aa:40:96:f4:80:3b:2c:ec:7e:75:
                    bc:d4:d4:d0:08:ab:1b:30:83:1f:36:d6:d7:71:bf:
                    40:3a:f5:c1:2e:74:30:f7:86:3d:cb:3b:ae:f6:d0:
                    58:38:e1:2d:de:da:c0:63:0c:20:7e:cc:0c:ed:f7:
                    c5:56:b5:1c:1b:8b:42:6a:9a:e0:2e:5b:f1:e2:c0:
                    60:69:8e:4b:e4:bb:b1:9c:a2:f5:98:d0:96:68:c6:
                    7e:9b:a2:05:03:9c:6c:cc:a8:91:d7:43:07:8e:59:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:15:A6:BB:39:81:28:3E:39:B2:4F:89:E2:80:37:84:7B:50:7D:F3
            X509v3 Authority Key Identifier:
                keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:aa:e2:1b:a3:5b:d9:9e:1e:22:c3:8c:1c:b0:be:e5:b7:
         5f:90:99:63:e2:2b:c4:94:67:68:aa:f2:22:48:2c:40:6d:62:
         52:62:ce:51:cd:17:81:76:23:9f:ba:25:d2:db:19:1a:5d:71:
         52:27:3f:d2:4e:a2:55:74:7b:71:8c:50:db:c5:4d:93:90:8a:
         d9:3d:a3:33:ad:16:3c:7f:3b:2b:a4:94:c3:40:c2:9f:ac:5b:
         42:41:e1:63:f5:16:85:47:13:c9:33:55:c1:4b:35:6a:e2:ae:
         90:4d:ef:85:7d:ea:2f:13:50:af:a4:10:2a:da:82:01:a6:e6:
         b3:9c:fa:c7:4e:84:d5:8f:69:cf:06:ac:1c:ab:2e:b3:fd:27:
         93:90:2a:30:e3:ab:da:cf:f9:b8:32:a3:23:a4:1c:b0:27:78:
         3d:64:96:6b:64:7e:78:ce:f2:24:07:c8:c0:5f:c3:0e:2c:87:
         00:7f:25:d4:e2:b7:db:b7:0a:1c:71:21:1a:be:82:ff:d9:91:
         7e:e4:b3:9b:ba:04:88:13:81:6a:d0:bf:2b:0c:fc:c0:aa:00:
         a0:28:b1:50:a4:ba:68:b3:e6:3e:6f:1f:95:ad:23:cb:c9:c9:
         02:9d:d4:e3:94:65:86:9b:10:37:8a:df:70:2e:5c:14:41:66:
         d2:79:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:07 2026 by rpki-client