Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File:                     AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier:          4SUArMbWh5JhXAXvwdXFQcC5Ie17DqiJZ+XmtkrfVq8=
Subject key identifier:   AF:85:2D:09:5F:F6:1C:27:38:7F:A7:F5:E9:1D:1D:7C:FF:60:B2:52
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer:       /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial:       019E3117673203084CAB3EF794AF66447580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number:          05F6
Signing time:             Sat 16 May 2026 14:01:17 +0000
Manifest this update:     Sat 16 May 2026 14:01:17 +0000
Manifest next update:     Sun 17 May 2026 14:01:17 +0000
Files and hashes:         1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: /W2M3vS8WZYs4zsWl+YMvDduR8nKkB3jNpja08OIjI0=)
                          2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:67:32:03:08:4c:ab:3e:f7:94:af:66:44:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
        Validity
            Not Before: May 16 14:01:17 2026 GMT
            Not After : May 17 14:01:17 2026 GMT
        Subject: CN=af852d095ff61c27387fa7f5e91d1d7cff60b252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:8e:1d:6a:2b:76:e1:f1:3e:8b:7e:fd:5a:
                    d8:6d:a6:e5:21:8c:24:8c:aa:0f:97:65:6a:86:cf:
                    54:2e:ec:ac:00:39:24:d1:74:ba:4b:5b:40:77:a6:
                    22:80:dd:00:b9:8d:8d:af:63:5b:2b:59:57:9e:32:
                    39:b1:7f:12:b5:95:76:88:1c:0e:f9:fb:08:fb:a2:
                    d0:67:11:29:92:7b:11:5e:f5:69:ad:dd:66:69:7b:
                    c3:ac:85:49:4f:f1:ca:3d:43:f5:ba:34:27:0d:12:
                    c0:67:16:22:63:54:3d:f8:c1:4b:78:d5:7a:06:87:
                    82:ac:08:fd:f6:93:59:7c:7f:bb:da:ab:80:fb:51:
                    30:f5:23:69:83:e3:75:15:e8:4d:0d:0b:5e:e2:26:
                    98:98:16:7b:ad:19:bf:3a:f5:57:9a:e8:3a:7b:01:
                    39:68:64:fd:1b:66:d6:04:44:4b:c2:bb:e1:e1:ee:
                    29:c2:f2:19:99:56:ee:f3:08:59:2b:d9:2f:5e:c1:
                    42:66:de:ac:70:a1:3d:ad:af:81:8b:f7:6a:bd:44:
                    36:fe:a3:88:07:00:b7:c6:ce:a7:d3:f3:b9:df:e0:
                    7f:91:fc:23:38:aa:c4:e6:38:23:3d:72:aa:48:ce:
                    d5:76:7c:40:46:a9:57:d5:3f:9f:74:b9:f9:64:10:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:2D:09:5F:F6:1C:27:38:7F:A7:F5:E9:1D:1D:7C:FF:60:B2:52
            X509v3 Authority Key Identifier:
                keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:33:95:69:79:f3:eb:14:ed:48:0d:c0:ef:4a:5d:44:2f:9b:
         0e:91:02:44:3b:a0:88:df:49:f1:d9:90:17:41:01:ce:d4:eb:
         c0:56:e7:cf:a0:f1:5f:ac:d4:af:da:ba:e5:a6:fe:27:50:cd:
         bd:6b:a6:62:26:d0:ea:6d:c8:59:d2:e5:6e:ff:4c:9b:da:31:
         2b:38:54:de:77:ab:bd:a2:2b:76:73:4a:25:cc:e6:49:17:de:
         09:3d:53:3a:89:92:2b:6e:ef:69:19:db:96:b4:61:61:91:fa:
         5a:bb:85:5d:61:ce:8c:12:dc:2e:0b:fa:4e:0c:7f:73:5d:69:
         2b:39:69:ed:5f:e3:ab:28:a4:31:e8:f6:fb:1c:0c:76:8c:6b:
         35:0f:17:51:0f:46:0c:14:cc:db:95:a9:10:a8:2f:b6:42:5d:
         b6:39:9b:bc:db:02:86:0d:3d:0c:9e:fe:db:d2:fe:a8:6a:ed:
         d1:0b:cc:6a:cb:f3:c8:bb:da:d1:a9:b1:cc:e0:6a:38:19:04:
         d2:c5:d9:82:cf:45:78:10:ca:c7:b0:6b:26:b4:9e:ea:4d:d1:
         ee:04:18:be:bc:75:94:61:14:1c:8e:ce:66:d4:f7:63:a8:68:
         9f:c0:b1:72:6b:7d:33:e9:b3:92:14:af:6e:69:24:c3:f9:24:
         9d:89:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:16 2026 by rpki-client