Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File:                     Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier:          eTzuLTmsn+xK9zf4p1q5BJ5JSOARukv9VoFHkEs+7wY=
Subject key identifier:   8D:18:E4:1A:DC:C2:34:E9:42:CA:8E:CE:C2:D2:45:8E:6D:5C:98:1A
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer:       /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial:       019FF97EBDD85BA13DE71527FE1411DC1E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number:          0AC4
Signing time:             Thu 13 Aug 2026 05:01:00 +0000
Manifest this update:     Thu 13 Aug 2026 05:01:00 +0000
Manifest next update:     Fri 14 Aug 2026 05:01:00 +0000
Files and hashes:         1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: HucScn3EHTvX6HyIjSMGcfIuViNPZ+mBbP3bzR/L/OQ=)
                          2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
                          3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:7e:bd:d8:5b:a1:3d:e7:15:27:fe:14:11:dc:1e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
        Validity
            Not Before: Aug 13 05:01:00 2026 GMT
            Not After : Aug 14 05:01:00 2026 GMT
        Subject: CN=8d18e41adcc234e942ca8ecec2d2458e6d5c981a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:8b:d7:17:60:b9:b2:8a:ed:1d:3b:12:ed:
                    fa:c8:fc:87:e8:3d:62:e4:5a:b9:6f:f1:8f:c9:5d:
                    fd:9f:b2:4e:d4:9c:e6:d1:24:96:72:6e:46:22:f0:
                    29:8c:08:ee:fd:2d:ee:56:16:ad:95:31:38:f8:df:
                    ec:16:97:e1:83:06:d6:34:4f:3d:77:8f:81:ca:ef:
                    23:43:d4:cc:ac:77:c6:14:f0:4e:3d:5a:73:eb:6a:
                    21:5a:20:d2:80:5d:e2:5a:a2:a2:05:7d:20:9e:15:
                    f5:d8:d4:11:46:0b:ca:56:af:1d:18:7b:2c:8a:84:
                    9f:0c:60:ab:c7:fd:1b:de:6c:cb:8f:2c:93:82:84:
                    97:a8:6e:b3:a4:97:d0:bf:0c:ac:09:a4:5a:26:8f:
                    2b:6f:ba:39:3b:c1:0b:ac:84:cf:69:8b:8c:2b:f1:
                    92:92:73:8a:49:cd:8a:3d:91:e5:93:44:5a:6e:b6:
                    e2:7b:e6:42:1f:34:ee:3d:7b:7f:88:4e:32:fb:83:
                    a5:89:d7:4d:18:0f:78:23:0f:6d:ad:7d:0d:04:43:
                    19:40:f0:66:f5:a6:39:75:f9:bb:b8:8e:bd:4f:d0:
                    ad:ca:77:cb:23:25:fb:27:3c:c0:cb:09:c7:92:1a:
                    27:b5:f7:f7:50:b1:9d:9f:8c:4b:3c:b5:a7:36:1f:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:18:E4:1A:DC:C2:34:E9:42:CA:8E:CE:C2:D2:45:8E:6D:5C:98:1A
            X509v3 Authority Key Identifier:
                keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7d:29:a4:58:16:52:bb:95:3a:8c:f0:cc:9f:89:8f:66:10:
         03:93:e5:0c:0b:dc:bd:f7:37:13:35:6d:51:79:d0:0b:30:57:
         0f:f3:6f:6b:fc:e5:b0:d0:3d:c0:62:8d:2d:9f:01:2b:df:7f:
         92:13:47:95:33:2e:fa:08:ab:a3:9e:f1:4a:f4:32:37:0c:e6:
         55:0d:40:30:39:d0:8a:de:9e:1a:d7:72:79:d7:e1:65:0f:14:
         6a:7c:cb:4f:a3:34:0f:74:83:fe:e7:8d:c3:2b:50:e3:f9:60:
         89:41:b1:f2:c3:11:c4:b4:d1:3e:6f:22:ef:b7:36:64:dd:c3:
         08:d5:40:ea:3f:17:a4:1d:8c:3e:63:5e:df:11:67:65:9e:42:
         d3:d2:df:61:45:58:5d:88:8b:24:64:cd:22:de:5b:ae:5c:b0:
         1e:4a:a2:23:89:a3:fe:f1:9e:68:92:03:c8:d1:8a:1d:64:5d:
         5b:5a:05:cd:e2:1b:2d:21:84:e1:0b:fe:13:52:09:70:58:d6:
         48:11:06:7e:f6:59:96:fb:4f:c4:8b:46:c3:c5:78:dd:89:32:
         94:1d:9f:bb:58:93:79:9e:d4:a3:ec:ee:9a:24:d0:7d:f5:df:
         dd:fd:3b:cc:c5:d1:57:a7:89:17:c5:12:32:1a:8f:e4:2d:22:
         36:e4:d8:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5fr3YW6E95xUn/hQR3B5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjYwODEzMDUwMTAwWhcNMjYwODE0MDUwMTAwWjAzMTEwLwYDVQQD
Eyg4ZDE4ZTQxYWRjYzIzNGU5NDJjYThlY2VjMmQyNDU4ZTZkNWM5ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTSL1xdgubKK7R07Eu36yPyH6D1i
5Fq5b/GPyV39n7JO1Jzm0SSWcm5GIvApjAju/S3uVhatlTE4+N/sFpfhgwbWNE89
d4+Byu8jQ9TMrHfGFPBOPVpz62ohWiDSgF3iWqKiBX0gnhX12NQRRgvKVq8dGHss
ioSfDGCrx/0b3mzLjyyTgoSXqG6zpJfQvwysCaRaJo8rb7o5O8ELrITPaYuMK/GS
knOKSc2KPZHlk0Rabrbie+ZCHzTuPXt/iE4y+4OliddNGA94Iw9trX0NBEMZQPBm
9aY5dfm7uI69T9CtynfLIyX7JzzAywnHkhontff3ULGdn4xLPLWnNh9CIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0Y5BrcwjTpQsqOzsLSRY5tXJgaMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbH0ppFgW
UruVOozwzJ+Jj2YQA5PlDAvcvfc3EzVtUXnQCzBXD/Nva/zlsNA9wGKNLZ8BK99/
khNHlTMu+giro57xSvQyNwzmVQ1AMDnQit6eGtdyedfhZQ8UanzLT6M0D3SD/ueN
wytQ4/lgiUGx8sMRxLTRPm8i77c2ZN3DCNVA6j8XpB2MPmNe3xFnZZ5C09LfYUVY
XYiLJGTNIt5brlywHkqiI4mj/vGeaJIDyNGKHWRdW1oFzeIbLSGE4Qv+E1IJcFjW
SBEGfvZZlvtPxItGw8V43YkylB2fu1iTeZ7Uo+zumiTQffXf3f07zMXRV6eJF8US
MhqP5C0iNuTYCg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:12 2026 by rpki-client