Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File:                     AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier:          8RFu8Rx7xUhBB2ocwejKdtlbEQSUPM3RSoLugvwHW3o=
Subject key identifier:   8A:0B:12:30:82:E8:46:BB:5C:21:2D:04:A0:BF:ED:37:94:68:E6:02
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer:       /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial:       01A0401746C919379B76F4A533EEA2FE93A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number:          04E4
Signing time:             Wed 26 Aug 2026 22:01:01 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:01 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:01 +0000
Files and hashes:         1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: r+83SoreqX0C0hlxJTz713iT9Uy/djN5ndJx7L9TlA0=)
                          2: vYbe5i0abM5OKc80hhLHQSxkx6I.roa (hash: 11dpUJpj4Md28m8DN1pCtjlW/06S3TdKsIGJmsfc4nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:46:c9:19:37:9b:76:f4:a5:33:ee:a2:fe:93:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
        Validity
            Not Before: Aug 26 22:01:01 2026 GMT
            Not After : Aug 27 22:01:01 2026 GMT
        Subject: CN=8a0b123082e846bb5c212d04a0bfed379468e602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:95:8e:e0:c9:81:8a:14:52:37:37:13:f9:
                    e5:05:4f:27:10:67:ee:62:d3:fa:c4:4a:2d:ff:25:
                    02:29:42:7a:b1:fd:49:d4:35:c0:69:55:90:5d:e7:
                    b4:50:c4:5d:e1:38:db:2e:15:9f:1c:8d:f7:08:b2:
                    38:04:52:70:27:45:e2:d4:6e:66:8f:92:27:f5:3f:
                    62:14:04:a2:86:c3:42:bc:d1:98:e2:93:04:f8:f1:
                    80:96:a8:e4:76:5b:ad:51:16:3d:f6:bd:0e:6d:77:
                    ac:8c:15:62:a0:4e:e7:1c:d8:ca:b5:f2:91:4d:96:
                    01:b0:0f:bd:e5:8e:e0:07:17:49:df:7b:5d:cc:61:
                    a5:9f:7e:7e:64:b2:a3:55:04:2c:6b:e2:cc:66:aa:
                    f7:04:cd:24:da:09:48:d2:8b:79:fa:52:f0:92:f8:
                    c5:95:bf:74:93:1d:6a:54:d0:33:34:a2:e3:8c:fe:
                    d6:30:9f:16:55:bb:b0:44:f3:d3:56:9a:68:2e:a0:
                    42:5d:69:91:1c:0e:10:0c:9e:8b:28:9e:bc:25:1a:
                    ed:10:bb:9e:15:11:0a:f9:39:c3:12:b2:06:e5:96:
                    46:19:db:55:99:7b:d7:13:3b:75:56:bd:34:cc:d8:
                    cb:e5:b5:55:4f:b8:84:4b:28:a7:4f:a7:c9:b6:0f:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:12:30:82:E8:46:BB:5C:21:2D:04:A0:BF:ED:37:94:68:E6:02
            X509v3 Authority Key Identifier:
                keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0c:74:3d:8e:82:d8:4d:47:59:8c:5e:34:a1:58:20:47:e1:
         09:33:c4:84:d0:e5:25:fe:dc:96:53:16:82:63:6f:05:e7:96:
         74:e2:6e:22:41:85:28:7f:56:86:ae:d8:b5:81:b4:6c:71:61:
         05:d1:83:3d:a3:42:4d:3e:ab:7b:48:0e:d3:11:8c:0a:d9:fa:
         87:89:26:da:b8:ea:ae:5d:b4:16:a2:41:a3:72:97:7a:4f:d4:
         c3:3f:30:48:c6:72:51:cd:3e:1c:cf:bd:7c:df:30:29:73:05:
         8d:89:c2:c9:54:a3:17:d8:dd:24:48:49:e9:d1:7b:a1:50:d9:
         e1:2e:52:01:5b:71:6e:27:6a:16:52:2a:05:75:8b:ef:66:8f:
         ba:08:a5:ce:6c:95:90:5f:6d:50:d7:af:06:5a:a4:6a:bf:fb:
         8f:3a:06:3b:81:4b:ed:a1:19:90:85:24:8d:1c:10:ce:2b:94:
         9c:64:4d:2e:76:d0:34:53:fb:12:df:a2:c5:e8:99:f8:ad:74:
         21:5d:b3:6a:b8:17:09:0d:d7:ad:4f:b7:cf:c0:59:1e:24:1a:
         72:c2:0f:20:34:47:ef:cb:3a:78:f6:59:da:0e:02:17:17:30:
         a0:0a:1e:a8:12:8c:4b:ef:07:97:76:5f:04:9e:c3:17:4c:88:
         20:99:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:14 2026 by rpki-client