Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
File:                     AEUKhqpPfvd-WnXdluyzwqaPrRw.mft (raw, json)
Hash identifier:          Szwd0L8ZC+WyoJn3f2WFfBnMAPxgZCgYyGkwkf0EbLQ=
Subject key identifier:   6A:C6:8E:77:0C:7D:F6:36:A9:E3:26:F1:A9:FA:60:A9:A2:7B:F5:D0
Authority key identifier: 00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
Certificate issuer:       /CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Certificate serial:       01A0408576B3D29EAEB4284F8B1518FFFF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
Manifest number:          0307
Signing time:             Thu 27 Aug 2026 00:01:23 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:23 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:23 +0000
Files and hashes:         1: AEUKhqpPfvd-WnXdluyzwqaPrRw.crl (hash: GjDT8NrE+0FW+MmQGLUs404/2B28yuQQ5AtC+xEPPJI=)
                          2: Kiy0Jf4_Jme7VpJWikdnGteyZBw.roa (hash: fEVRmquaw1jZNFkmMKxarAcgeViD3yJxH62xy+zCJ+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:76:b3:d2:9e:ae:b4:28:4f:8b:15:18:ff:ff:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
        Validity
            Not Before: Aug 27 00:01:23 2026 GMT
            Not After : Aug 28 00:01:23 2026 GMT
        Subject: CN=6ac68e770c7df636a9e326f1a9fa60a9a27bf5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4c:55:10:88:49:82:ed:5e:8d:3b:4f:7e:db:
                    e6:06:fd:31:8a:f7:6b:b9:2b:dc:cb:7a:51:02:3e:
                    c3:8c:c9:56:5c:10:9b:ff:f7:cb:cb:19:3a:29:92:
                    dd:f7:5d:58:21:f9:17:9d:71:00:be:7f:50:7c:e4:
                    fc:c9:05:07:eb:91:bf:5b:75:0b:d5:dd:39:44:d0:
                    75:c2:b9:40:d0:49:f3:3f:b8:22:5c:8e:d2:0d:63:
                    50:d4:4e:e1:11:d8:b4:1b:e3:e2:3b:db:8b:7b:21:
                    15:ad:cd:72:67:ee:0d:13:ee:1d:f1:d8:88:f8:cb:
                    23:67:4c:ac:ff:0c:f5:ef:fa:8e:02:05:7f:9f:7b:
                    d3:db:56:d5:b1:2f:26:55:d2:d8:f6:79:c7:7e:19:
                    70:6e:80:ba:7d:57:12:ed:4a:24:5a:7b:d7:d1:1e:
                    f8:dc:8d:8a:7f:4e:b5:23:43:30:c8:74:b9:9d:b5:
                    c5:0c:c8:cd:87:a7:32:2d:c7:de:29:20:6d:f4:71:
                    e6:9a:85:e1:01:4d:44:3c:66:3d:ff:d4:5a:f5:4e:
                    93:2b:15:91:6f:35:34:24:61:b0:52:eb:2d:35:9c:
                    4a:d9:ff:4f:db:38:81:ce:59:4a:d1:e5:9d:ef:f3:
                    9f:34:b7:4f:59:ea:a4:53:62:73:c3:d2:0d:7b:42:
                    7c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:8E:77:0C:7D:F6:36:A9:E3:26:F1:A9:FA:60:A9:A2:7B:F5:D0
            X509v3 Authority Key Identifier:
                keyid:00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0f:b0:7c:bb:45:dc:53:fd:98:95:97:49:ba:e2:9d:13:cf:
         4e:a8:6e:5f:61:e6:08:c9:96:f0:7c:3d:08:1c:ec:32:d3:51:
         13:9a:ae:de:6c:74:2f:6d:5e:91:d9:4b:39:2e:be:35:95:70:
         aa:5b:5d:d9:c2:f5:e1:92:1b:09:b5:e3:31:ab:68:cc:a3:b6:
         84:0a:90:b7:db:38:1e:2e:b5:56:c8:26:09:46:a6:1e:86:02:
         5f:a0:43:bb:db:fa:f4:5d:24:2c:d3:00:36:7a:07:9e:31:c1:
         ec:24:71:ee:8e:6c:19:a1:30:2d:ec:c8:c2:7b:bc:9f:fa:1b:
         29:f7:16:1d:d2:94:49:fb:13:36:b3:44:f3:2b:ac:8c:7b:74:
         5f:b5:25:31:1e:35:b7:eb:46:3a:fa:61:3e:47:9f:70:9d:56:
         cd:d0:e1:f8:5a:22:d1:de:cb:3a:90:ea:66:7a:d0:6f:38:af:
         ef:4f:01:1f:1b:57:e0:af:ec:57:9d:0f:86:87:9f:08:e8:fc:
         c7:22:ea:cb:87:81:57:51:d7:17:eb:5c:22:e6:fd:f0:95:8a:
         13:9d:02:93:93:64:06:8a:b1:47:a0:65:f8:6d:19:59:21:b6:
         50:02:ae:53:ae:db:19:a4:1e:0d:32:d4:e8:4b:53:cf:ce:7a:
         c6:59:4b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhXaz0p6utChPixUY//+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNDUwYTg2YWE0ZjdlZjc3ZTVhNzVkZDk2ZWNiM2MyYTY4
ZmFkMWMwHhcNMjYwODI3MDAwMTIzWhcNMjYwODI4MDAwMTIzWjAzMTEwLwYDVQQD
Eyg2YWM2OGU3NzBjN2RmNjM2YTllMzI2ZjFhOWZhNjBhOWEyN2JmNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ExVEIhJgu1ejTtPftvmBv0xivdr
uSvcy3pRAj7DjMlWXBCb//fLyxk6KZLd911YIfkXnXEAvn9QfOT8yQUH65G/W3UL
1d05RNB1wrlA0EnzP7giXI7SDWNQ1E7hEdi0G+PiO9uLeyEVrc1yZ+4NE+4d8diI
+MsjZ0ys/wz17/qOAgV/n3vT21bVsS8mVdLY9nnHfhlwboC6fVcS7UokWnvX0R74
3I2Kf061I0MwyHS5nbXFDMjNh6cyLcfeKSBt9HHmmoXhAU1EPGY9/9Ra9U6TKxWR
bzU0JGGwUustNZxK2f9P2ziBzllK0eWd7/OfNLdPWeqkU2Jzw9INe0J8EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrGjncMffY2qeMm8an6YKmie/XQMB8GA1UdIwQY
MBaAFABFCoaqT373flp13Zbss8Kmj60cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYt
YjExYWI4M2ZjMzYzLzEvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYtYjExYWI4M2ZjMzYz
LzEvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg+wfLtF
3FP9mJWXSbrinRPPTqhuX2HmCMmW8Hw9CBzsMtNRE5qu3mx0L21ekdlLOS6+NZVw
qltd2cL14ZIbCbXjMatozKO2hAqQt9s4Hi61VsgmCUamHoYCX6BDu9v69F0kLNMA
NnoHnjHB7CRx7o5sGaEwLezIwnu8n/obKfcWHdKUSfsTNrNE8yusjHt0X7UlMR41
t+tGOvphPkefcJ1WzdDh+Foi0d7LOpDqZnrQbziv708BHxtX4K/sV50PhoefCOj8
xyLqy4eBV1HXF+tcIub98JWKE50Ck5NkBoqxR6Bl+G0ZWSG2UAKuU67bGaQeDTLU
6EtTz856xllLZQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:06 2026 by rpki-client