Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File:                     AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier:          qWJBdRs33xS1qmi6dPpNjFBDRhTdFrNVEJ41ZnX6Jsk=
Subject key identifier:   8F:88:FC:FD:7B:49:63:07:7A:A5:34:B0:5E:5A:31:04:B1:53:ED:FD
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer:       /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial:       01A000939AF42E07FAA1989C61E8086C9AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number:          06E6
Signing time:             Fri 14 Aug 2026 14:01:08 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:08 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:08 +0000
Files and hashes:         1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: BemWSvtyvYPvTYXTtUYDdGnnRND9HA0rx/4EZsYIMbg=)
                          2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:9a:f4:2e:07:fa:a1:98:9c:61:e8:08:6c:9a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
        Validity
            Not Before: Aug 14 14:01:08 2026 GMT
            Not After : Aug 15 14:01:08 2026 GMT
        Subject: CN=8f88fcfd7b4963077aa534b05e5a3104b153edfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:c6:c5:68:4a:ec:a1:c4:d4:b9:66:d3:f8:
                    32:74:5c:f9:92:83:63:6f:36:b6:75:1e:0c:a7:b0:
                    b4:d8:2d:c1:99:24:45:4c:db:83:4f:c3:20:47:cc:
                    fb:9b:21:c7:47:d8:19:b5:ee:ac:2d:b9:37:ff:d1:
                    af:fb:76:c5:64:88:15:a3:f5:d4:47:d2:6d:c9:5a:
                    c6:69:82:6c:1d:2b:d9:da:3d:4c:99:11:89:84:80:
                    c7:45:6c:fd:98:55:de:74:cb:d7:89:ef:12:aa:7b:
                    88:b4:b9:c9:9f:50:84:30:a6:ec:d5:f5:43:61:8a:
                    69:23:75:20:43:c0:e6:b7:18:01:65:a6:9d:0f:3a:
                    39:37:cd:16:6c:73:b0:eb:c7:80:c9:4d:19:b5:cd:
                    1d:bd:1e:26:51:7c:36:05:85:39:dd:a3:45:a8:c3:
                    b0:7a:c1:00:8f:07:97:92:1a:8b:ff:b0:32:01:cf:
                    db:38:5d:38:c3:07:8e:70:fb:64:e0:df:b1:86:d7:
                    cf:05:66:0e:12:29:fe:5e:2b:ae:44:8a:a7:9b:dc:
                    73:dc:aa:62:37:a0:f3:f2:fe:dd:7c:6a:71:52:bb:
                    b3:65:29:75:5c:54:b3:14:a0:da:89:8b:cb:c9:84:
                    ec:bd:3b:e9:78:6f:ed:cd:9c:17:e8:6d:a4:cd:d2:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:88:FC:FD:7B:49:63:07:7A:A5:34:B0:5E:5A:31:04:B1:53:ED:FD
            X509v3 Authority Key Identifier:
                keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:46:83:32:19:53:22:cc:f3:2f:40:79:de:d9:22:31:94:81:
         fe:f4:53:96:12:ea:e8:b2:ed:8d:61:2a:7e:84:1c:05:33:26:
         d0:7d:2b:47:89:cd:d7:66:03:80:41:e8:80:6e:55:1f:71:e9:
         78:28:d3:a5:dc:02:49:6f:9d:d7:f1:9d:04:35:7e:3e:c2:a9:
         28:94:91:19:45:d2:b6:7a:4c:8c:6a:85:d5:ad:aa:2c:b1:a2:
         87:be:7b:80:02:18:27:2f:5a:54:ac:4d:f2:b7:e8:0f:8b:69:
         69:f3:a2:39:ef:b5:88:f8:0c:5b:7a:ef:1d:c4:93:76:24:ef:
         19:6e:d4:b3:ca:9d:a6:7d:90:d2:fd:cf:14:ef:8c:fe:f3:43:
         43:a5:d8:bd:8b:0f:6c:46:fe:cd:1d:8b:4f:05:0d:6e:7e:bc:
         6f:fb:93:0c:6f:bd:ba:f5:99:c9:da:7e:bf:20:93:dc:8b:a4:
         d6:ae:b4:6b:d1:01:e4:e5:7e:c0:8e:cb:9f:fc:c3:40:15:ed:
         48:ea:ef:85:d9:27:cc:ff:26:ac:4d:44:10:b3:4a:8f:51:74:
         d3:ed:a8:41:92:2f:7a:f8:7f:23:b7:b9:3e:8a:46:7b:4d:1d:
         1d:5d:f4:72:97:78:54:2c:86:69:c6:24:29:f9:a9:ce:a1:04:
         43:ee:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:06 2026 by rpki-client