Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File:                     AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier:          YnLZ9vwyD9D83hEhXi4e6RRM+ALNe7L3vVZztQSNNAM=
Subject key identifier:   40:C0:1F:8E:69:BD:16:F0:59:37:AE:21:D9:2F:A1:58:06:10:BB:F5
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer:       /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial:       019D389C431F3CA16EAF8ECC207A52DE1099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 08:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:58 +0000
Files and hashes:         1: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: IIK2N5px0hk0aBp/4I847t/nv0IeckqzZWW8Lbsf42c=)
                          2: uJRDK81LaOJPqwaMH3aOr8mzVc0.roa (hash: kDLHQO0Rz/R4i/HPTjDis1WgRXCxP6QcVEL1nIljmbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:43:1f:3c:a1:6e:af:8e:cc:20:7a:52:de:10:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
        Validity
            Not Before: Mar 29 08:00:58 2026 GMT
            Not After : Mar 30 08:00:58 2026 GMT
        Subject: CN=40c01f8e69bd16f05937ae21d92fa1580610bbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:56:d2:16:2e:9f:a1:5b:f2:ed:03:d4:66:
                    a3:77:e0:df:80:af:34:96:25:91:90:ee:9d:ad:1d:
                    4a:e8:24:09:db:f0:f2:fd:0b:13:b3:1c:25:4d:80:
                    e7:45:1c:89:ff:d1:b3:47:ea:e4:a3:89:43:d4:32:
                    35:56:e4:bc:59:b8:1c:fd:92:9e:18:19:39:79:37:
                    2d:c8:e6:40:4d:06:4b:94:aa:e3:71:4e:83:f6:09:
                    1f:5f:f6:70:57:17:5e:59:a7:58:16:f1:22:cb:36:
                    ab:d8:37:51:99:0e:8c:b3:32:e3:05:52:04:89:00:
                    fb:ea:25:5f:09:6c:0e:c2:3f:7d:12:6b:75:06:ab:
                    b1:44:64:6d:36:45:67:31:99:57:b1:a8:3a:c5:44:
                    d6:40:61:75:70:19:65:b6:92:ec:59:c3:f9:eb:9d:
                    2a:73:4d:32:8d:4a:60:af:ac:50:aa:17:65:42:04:
                    dd:de:31:7f:59:5c:9e:d2:37:9c:ff:08:25:41:f3:
                    9e:58:cd:fd:59:3a:84:f0:31:aa:31:20:1d:f3:80:
                    08:34:f0:64:10:86:93:42:95:a1:1b:11:73:37:3f:
                    15:7a:a8:af:8d:be:94:8d:70:ad:74:bc:37:70:66:
                    a5:67:10:46:a5:88:22:43:4e:1f:ed:3b:67:38:f1:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C0:1F:8E:69:BD:16:F0:59:37:AE:21:D9:2F:A1:58:06:10:BB:F5
            X509v3 Authority Key Identifier:
                keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:64:c9:67:2e:5e:4d:ce:de:aa:2f:08:de:f7:f1:eb:b3:bf:
         59:ce:31:fc:73:f3:e5:5e:b4:50:00:3c:ee:c9:c4:e0:51:a2:
         59:eb:24:2e:c3:f9:e7:8f:54:2b:ab:b4:94:94:a8:68:af:00:
         3b:e8:29:e4:5b:7b:02:cd:e3:84:09:36:51:ee:eb:c3:f7:30:
         24:2d:26:e8:85:58:08:1b:cb:8f:e4:4f:3e:6d:1c:03:78:b7:
         79:35:9e:b2:3d:37:49:b4:e4:be:f7:d2:53:d4:de:01:ce:07:
         88:a3:a6:6f:87:87:38:c7:77:1d:db:10:38:9b:fc:6c:da:63:
         b6:ff:1b:24:df:7b:b4:99:92:f5:42:f1:b7:0b:2a:eb:d8:a7:
         b6:7e:1f:b2:b5:b4:59:41:c4:21:f7:80:7b:2b:15:a4:0f:dc:
         81:8e:49:ad:70:9d:f5:ff:0e:e8:7e:a4:74:8e:73:ac:2e:63:
         c1:eb:0b:dd:be:1c:2f:51:0b:c7:77:1e:d8:8a:69:e1:78:28:
         d0:92:41:ff:4a:16:15:b2:ef:da:9b:93:31:51:6e:9c:7d:c3:
         36:79:b0:80:85:a7:9f:cb:0f:0f:4a:ab:76:b5:f2:21:12:7f:
         6b:d9:07:74:7a:07:0d:62:8c:ff:31:f5:05:87:49:88:30:f6:
         97:5c:18:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nEMfPKFur47MIHpS3hCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWRiYTRiNDA3NGRlMTNkOThkNjQ4MTlhNmVjODVmODEy
YTc5ZTkwHhcNMjYwMzI5MDgwMDU4WhcNMjYwMzMwMDgwMDU4WjAzMTEwLwYDVQQD
Eyg0MGMwMWY4ZTY5YmQxNmYwNTkzN2FlMjFkOTJmYTE1ODA2MTBiYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK1W0hYun6Fb8u0D1Gajd+DfgK80
liWRkO6drR1K6CQJ2/Dy/QsTsxwlTYDnRRyJ/9GzR+rko4lD1DI1VuS8Wbgc/ZKe
GBk5eTctyOZATQZLlKrjcU6D9gkfX/ZwVxdeWadYFvEiyzar2DdRmQ6MszLjBVIE
iQD76iVfCWwOwj99Emt1BquxRGRtNkVnMZlXsag6xUTWQGF1cBlltpLsWcP5650q
c00yjUpgr6xQqhdlQgTd3jF/WVye0jec/wglQfOeWM39WTqE8DGqMSAd84AINPBk
EIaTQpWhGxFzNz8Veqivjb6UjXCtdLw3cGalZxBGpYgiQ04f7TtnOPGL1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDAH45pvRbwWTeuIdkvoVgGELv1MB8GA1UdIwQY
MBaAFACtuktAdN4T2Y1kgZpuyF+BKnnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUt
YjM4OTViOTYyYzUyLzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUtYjM4OTViOTYyYzUy
LzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmTJZy5e
Tc7eqi8I3vfx67O/Wc4x/HPz5V60UAA87snE4FGiWeskLsP5549UK6u0lJSoaK8A
O+gp5Ft7As3jhAk2Ue7rw/cwJC0m6IVYCBvLj+RPPm0cA3i3eTWesj03SbTkvvfS
U9TeAc4HiKOmb4eHOMd3HdsQOJv8bNpjtv8bJN97tJmS9ULxtwsq69intn4fsrW0
WUHEIfeAeysVpA/cgY5JrXCd9f8O6H6kdI5zrC5jwesL3b4cL1ELx3ce2Ipp4Xgo
0JJB/0oWFbLv2puTMVFunH3DNnmwgIWnn8sPD0qrdrXyIRJ/a9kHdHoHDWKM/zH1
BYdJiDD2l1wYyg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:22 2026 by rpki-client