Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File:                     Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier:          hV6f2L+MT745xtk+DMOQmTeR/cRVW6mwG4wZBLm7hIM=
Subject key identifier:   C0:26:C7:92:F9:66:EB:2A:B6:E7:25:7B:23:EF:77:FF:78:B3:FE:26
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer:       /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial:       019E31F3600092F945E5911F9AED9875B4A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number:          1915
Signing time:             Sat 16 May 2026 18:01:33 +0000
Manifest this update:     Sat 16 May 2026 18:01:33 +0000
Manifest next update:     Sun 17 May 2026 18:01:33 +0000
Files and hashes:         1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: LpgKKQ2BjPCxcTIwDrksFJj5zuP+3U7wUN50/cACzhk=)
                          2: tLACRLHJMNO7pkHg2BdbS9oOBUU.roa (hash: 9tUxOLxvWwiq+19ZOnFgqeZk3zELbv4Ra0UrW4JTYYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:60:00:92:f9:45:e5:91:1f:9a:ed:98:75:b4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
        Validity
            Not Before: May 16 18:01:33 2026 GMT
            Not After : May 17 18:01:33 2026 GMT
        Subject: CN=c026c792f966eb2ab6e7257b23ef77ff78b3fe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:58:80:50:1c:9c:70:3a:bd:7e:55:ad:cb:
                    59:e2:17:db:b2:b6:e6:59:e1:40:36:9b:de:9d:4e:
                    77:81:d7:68:c5:3c:72:df:c9:0e:f1:a3:4b:c0:ab:
                    54:fd:9e:b6:39:8f:f3:83:2d:f1:0e:5c:e5:b6:1b:
                    0b:bd:24:10:e1:cb:f9:93:53:b8:9b:90:70:78:85:
                    8e:b0:0e:f8:ac:61:ae:38:4b:ff:32:43:ea:52:8a:
                    56:3a:fe:ca:39:21:e1:3e:33:56:b5:d8:9c:03:b4:
                    43:e1:b8:58:a8:e4:01:d7:40:90:1c:83:58:2f:a2:
                    5c:3f:23:19:6a:b6:3d:93:6f:5f:5e:a3:21:ea:f6:
                    e1:39:1c:11:c6:39:ea:51:c2:0c:da:91:a4:46:d5:
                    c3:4b:f6:6f:79:ab:1a:dd:32:1a:33:db:bc:7a:94:
                    22:b4:d8:f0:0e:83:54:72:c7:bf:87:c1:35:7b:25:
                    15:e8:6c:8e:d7:7d:52:99:d4:aa:b1:39:d8:9e:10:
                    16:54:af:66:25:30:60:2b:b3:3c:c0:19:bd:12:11:
                    13:46:6e:7a:e0:7e:5b:72:3d:fc:6b:a3:d5:33:bd:
                    eb:bf:5f:1d:1f:ee:2f:89:35:b8:a9:91:3c:41:0e:
                    44:bd:c8:cc:00:2e:60:08:7d:6a:f9:c6:b9:65:ad:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:26:C7:92:F9:66:EB:2A:B6:E7:25:7B:23:EF:77:FF:78:B3:FE:26
            X509v3 Authority Key Identifier:
                keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:07:3f:1b:e3:4d:45:b0:bd:26:56:77:08:09:28:2e:ec:62:
         f6:c0:0c:20:33:b8:6c:db:62:53:96:96:10:b7:1a:73:52:93:
         e6:4b:e5:01:1f:0b:c5:8c:ee:17:95:56:9a:7d:34:1b:23:d6:
         51:ed:8a:e6:d4:e2:fe:71:cc:33:89:a2:fd:3d:56:32:18:3e:
         43:8e:0a:fd:11:49:68:c8:2e:a0:4c:7a:e6:c7:ec:fe:10:c0:
         bc:da:0b:3f:b0:7d:7b:73:98:ae:8c:aa:17:9d:db:88:53:37:
         df:23:37:ec:c1:58:8b:a5:c7:b0:ed:89:f7:da:37:98:18:4c:
         60:c8:53:bf:bc:d5:82:26:e9:82:b3:7b:ef:58:1d:73:40:d6:
         e3:66:2d:53:a4:a9:32:22:fd:b6:ae:76:9f:be:2c:a4:e0:69:
         de:c4:52:8e:9a:cd:77:64:26:cb:c3:71:70:8a:5f:35:f3:51:
         03:5d:56:4e:93:51:cc:3d:e3:57:ee:53:2a:84:b8:b4:98:23:
         dd:2b:eb:84:92:4d:31:02:6a:f9:fc:a2:9d:22:2a:c8:fe:0d:
         c1:f5:99:02:59:c3:29:62:df:40:26:70:87:2c:e0:71:13:0f:
         dd:d9:6d:2d:39:17:06:1f:23:19:65:b8:25:cb:71:e1:2b:4a:
         14:57:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:12 2026 by rpki-client