Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File:                     ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier:          iIdEJxNS7IzT+dLqMUSwWnGslSNZWGJkajcuMQxD1tQ=
Subject key identifier:   91:DF:E1:C9:43:A3:DA:25:45:CB:DC:7D:69:6C:02:1D:EE:E3:7E:8C
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer:       /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial:       01A0016FEAABE98192098F2D866500FE0C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number:          1176
Signing time:             Fri 14 Aug 2026 18:01:46 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:46 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:46 +0000
Files and hashes:         1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: S83Ye0Om7bmYjOFRo+HWxwB3NWnYjvi3oyTtZUz6pmc=)
                          2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:ea:ab:e9:81:92:09:8f:2d:86:65:00:fe:0c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
        Validity
            Not Before: Aug 14 18:01:46 2026 GMT
            Not After : Aug 15 18:01:46 2026 GMT
        Subject: CN=91dfe1c943a3da2545cbdc7d696c021deee37e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:db:a6:09:da:52:8b:85:30:ae:c4:1f:2c:
                    77:5d:32:73:4c:6e:51:f7:49:9d:ee:f8:44:2c:62:
                    f6:66:38:f2:b0:5b:7f:3a:6d:00:71:7c:18:95:14:
                    5f:cd:fb:8b:f7:21:af:63:66:af:d6:3b:d0:e9:91:
                    fc:bd:02:e9:06:f3:5b:f9:f8:e0:17:61:82:41:a7:
                    7c:9e:35:86:e6:09:aa:c8:b1:8b:b0:2b:18:21:18:
                    a3:37:14:de:ff:94:f2:91:ee:43:0f:c4:07:83:47:
                    3b:bf:32:3f:fc:6f:d3:55:9e:54:ea:ef:bb:2d:7b:
                    da:f0:4b:86:82:27:ac:04:5b:d3:b2:73:ce:4d:36:
                    3c:4e:1b:cb:10:41:05:df:14:46:0b:f5:8f:cb:97:
                    02:72:4b:e0:dc:d9:cc:92:00:71:3f:0a:ba:3f:c1:
                    2e:cd:8b:b9:a9:50:fc:06:b0:3f:4f:ee:2c:de:98:
                    2c:dc:43:0e:1a:c7:a1:ea:30:b1:38:02:3b:b3:fe:
                    33:d4:2f:f9:97:d9:f7:89:01:25:29:1e:30:02:4f:
                    35:1f:9d:d5:99:5b:73:10:d7:a3:e6:96:7f:79:62:
                    ab:df:ea:cd:e3:32:51:de:83:4e:57:55:f7:6e:4f:
                    a5:07:30:02:94:67:31:6b:5c:e4:af:3d:f5:5e:36:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DF:E1:C9:43:A3:DA:25:45:CB:DC:7D:69:6C:02:1D:EE:E3:7E:8C
            X509v3 Authority Key Identifier:
                keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:3e:e1:41:82:13:ae:1f:57:8a:e1:57:38:16:d5:07:6c:
         19:44:3f:3a:c9:bf:3d:0a:14:4a:cf:18:d3:71:ad:0b:b8:5c:
         3c:dd:0e:1f:83:a0:61:d7:50:16:5c:3e:4f:eb:6f:50:dc:5f:
         97:69:eb:21:67:07:96:79:79:55:d5:92:72:e3:9e:9e:96:8d:
         79:7a:35:39:88:63:47:89:28:e6:b2:1a:29:7b:7a:3c:6b:b0:
         c1:ed:37:0d:bb:ea:d6:9f:f6:a9:a7:96:13:04:96:54:95:9f:
         e8:25:eb:6d:34:c6:7f:57:64:02:75:28:df:4a:68:c7:9b:94:
         1c:99:78:ea:66:df:eb:f3:56:c2:55:f8:cf:9f:7d:64:7f:2d:
         5b:b0:37:3d:8b:16:93:58:a3:b1:f0:99:fc:fe:99:57:3b:a0:
         61:4e:d1:1e:a6:e0:e0:8b:bc:eb:a7:3c:3d:ab:84:2d:ef:5c:
         21:30:8b:57:3e:09:14:4a:47:c8:1f:fb:48:78:13:7d:8e:6d:
         80:07:3f:9b:a3:d3:c0:c4:65:30:da:15:2d:5c:5c:73:88:0f:
         67:9a:bf:17:0f:e4:17:85:2a:97:3f:e6:fa:50:8f:1c:92:7f:
         79:0f:c0:18:fa:bd:4f:92:92:72:1c:ec:b1:54:8a:71:c6:0e:
         97:d2:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:46 2026 by rpki-client