Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
File:                     A1mTnOHGqpvru2WA4VbuvYcd87I.mft (raw, json)
Hash identifier:          pc9dFBAf+xcID2JcRFKEgsxKNMouQYXKuR7RpFMYV00=
Subject key identifier:   A6:A6:52:C4:E2:05:5C:AE:2A:A1:7B:25:44:44:3C:E8:7C:DF:85:AE
Authority key identifier: 03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
Certificate issuer:       /CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Certificate serial:       019E3004D9505A1B09F64F20EF3C48E9C33E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
Manifest number:          0766
Signing time:             Sat 16 May 2026 09:01:24 +0000
Manifest this update:     Sat 16 May 2026 09:01:24 +0000
Manifest next update:     Sun 17 May 2026 09:01:24 +0000
Files and hashes:         1: A1mTnOHGqpvru2WA4VbuvYcd87I.crl (hash: WmH6V2K3rtcA6NcnLzo0Fjh4j/Nx8TJCQhySpsgAEgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:d9:50:5a:1b:09:f6:4f:20:ef:3c:48:e9:c3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
        Validity
            Not Before: May 16 09:01:24 2026 GMT
            Not After : May 17 09:01:24 2026 GMT
        Subject: CN=a6a652c4e2055cae2aa17b2544443ce87cdf85ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:9e:a7:75:36:0a:5b:77:18:a1:c0:b1:72:
                    8b:3f:45:2a:37:48:cc:68:ed:21:94:1a:19:47:85:
                    96:df:12:bb:4a:90:74:33:af:84:48:18:c7:56:05:
                    9a:db:df:ef:88:aa:9f:b6:de:31:ea:9c:fe:b5:4b:
                    84:6e:ef:fd:a6:57:0e:c6:41:a1:f6:96:b9:09:50:
                    3c:8d:50:60:3f:0e:58:9b:16:57:43:e2:3c:f9:4e:
                    81:0a:de:50:d6:9b:fd:b2:0f:82:6e:95:c5:3f:3b:
                    2a:b6:73:39:5f:e3:93:ce:6f:26:93:28:2d:d9:99:
                    7a:d9:09:61:de:35:d6:eb:10:48:60:8a:e4:07:eb:
                    1d:cc:cb:1a:a2:56:8c:02:8e:c7:42:71:44:3b:04:
                    ba:37:63:84:fb:34:93:27:46:40:d0:0e:0f:19:e7:
                    2c:a8:19:b7:79:70:43:ff:a6:85:97:e3:5a:8a:92:
                    79:85:7a:89:6d:0c:7c:eb:13:f7:32:23:7d:c6:d1:
                    52:d1:ab:b8:83:9f:1d:5b:3f:fe:4d:67:27:2c:2b:
                    94:4d:b4:df:83:a3:f0:44:81:f0:b3:e4:e1:e9:f4:
                    1a:18:de:1d:22:36:f0:56:e7:18:88:2b:c6:56:7a:
                    3c:d4:d7:68:47:ad:61:6f:f0:2c:c2:68:75:b1:99:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A6:52:C4:E2:05:5C:AE:2A:A1:7B:25:44:44:3C:E8:7C:DF:85:AE
            X509v3 Authority Key Identifier:
                keyid:03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:3b:ed:d9:26:b2:38:38:3c:12:4c:a3:1d:73:46:86:4d:
         7e:13:00:d2:6b:d7:0b:94:e4:58:6a:8a:25:a4:59:23:65:32:
         cf:e4:d1:94:7a:18:29:e7:65:e3:15:a4:0f:b0:3c:11:33:fe:
         57:b2:56:9d:d2:36:71:59:c3:a8:5d:79:80:12:4a:94:da:40:
         c7:fe:68:ed:9b:e9:b3:1b:2a:ef:7b:ee:69:9c:9b:ab:97:ac:
         6c:54:89:49:68:11:d3:87:6f:c1:e0:98:6f:03:87:ca:c1:b3:
         36:6e:fd:e9:bf:98:95:3c:5c:73:f2:fe:1d:73:27:07:ec:43:
         28:ab:59:ad:c6:ef:75:11:c4:92:f6:9d:5a:e6:b8:a0:0e:99:
         98:81:db:0b:3d:7e:8d:99:bc:53:67:ee:16:19:9b:3a:38:5f:
         43:75:b8:32:93:65:ba:a9:61:e2:ba:0d:78:a2:aa:af:1d:13:
         3c:d1:b3:72:37:e7:d8:f1:2a:63:03:cb:dc:bb:ef:72:ba:84:
         c6:72:7a:2f:d6:88:bd:26:60:c2:1a:3d:10:ef:5c:61:c0:38:
         b4:03:18:c9:43:d2:92:4a:b1:f3:0d:53:f1:d4:6b:1f:d7:88:
         a2:26:da:fe:d2:69:95:cd:f9:97:6f:0c:11:33:4e:53:b4:44:
         70:23:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:28 2026 by rpki-client