Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          nDdKypCRVGQqSQ0vcXwRcEweSiSUxN7MsAsuzuADHks=
Subject key identifier:   7B:67:C1:A7:93:38:37:4D:F7:9C:1D:02:5B:DE:61:55:BC:01:92:32
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       01A00101807FF452E3D6C54DD1F4DEBE36BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 16:01:10 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:10 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:10 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: lBW+Wf6zBbaQxAgG8FIqaJLnrX9SdvcqC271T+He5Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:80:7f:f4:52:e3:d6:c5:4d:d1:f4:de:be:36:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Aug 14 16:01:10 2026 GMT
            Not After : Aug 15 16:01:10 2026 GMT
        Subject: CN=7b67c1a79338374df79c1d025bde6155bc019232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:c7:aa:8b:44:09:3e:5c:0c:a2:17:c1:b9:
                    f5:fc:64:97:9e:f9:b2:22:39:f1:36:1a:60:37:8e:
                    a6:bb:30:84:db:b0:28:21:ac:c1:06:66:70:6d:74:
                    2a:31:fd:da:37:8b:90:0b:28:b8:7d:06:f2:62:4c:
                    3b:76:5b:db:b9:94:1e:62:b7:41:45:b1:dc:e3:03:
                    2c:35:dd:b4:a1:e5:80:2a:9e:4d:32:06:f9:b3:20:
                    56:2c:47:01:f7:7f:05:52:a2:a8:ab:14:a5:0a:4a:
                    af:80:85:fa:96:c8:d2:56:c7:4a:7f:ea:65:fd:4d:
                    87:d2:ea:11:8e:20:ad:d7:3b:a1:c0:4a:94:00:ac:
                    af:1b:6d:97:6e:77:e9:9b:07:d1:ef:50:36:22:21:
                    79:9b:46:7c:74:0c:58:f3:e7:10:d0:3e:9a:0d:06:
                    2a:7d:e6:b0:7e:7f:a7:30:c3:b8:a0:a4:1e:e3:65:
                    8f:9f:c3:cd:9f:e0:02:58:5d:be:bb:c0:00:2b:5c:
                    2f:1d:03:e4:97:67:ff:34:aa:b9:85:b4:48:3c:c3:
                    48:9c:39:c5:16:d9:d4:06:a7:ed:03:c7:e9:68:9b:
                    9a:a9:4a:f1:f9:ec:59:16:0d:fa:2b:b9:13:a7:d9:
                    a0:35:50:54:4f:1d:7a:88:a4:98:22:76:3b:e5:db:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:67:C1:A7:93:38:37:4D:F7:9C:1D:02:5B:DE:61:55:BC:01:92:32
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:85:ee:d1:89:9c:4d:dd:46:39:c0:6d:c6:11:11:07:1c:d3:
         06:67:48:5a:b6:4a:03:85:52:08:11:cf:81:5d:a0:d7:a0:3e:
         33:45:2b:63:50:ed:b6:a1:ef:2a:65:d3:16:e3:04:29:2d:5f:
         02:fd:2b:c0:74:1b:a1:9f:fb:28:9c:77:5c:10:a9:27:45:f5:
         dd:c5:93:a8:4f:2a:e1:9e:63:74:f0:09:17:60:d9:84:00:0d:
         d4:63:ea:83:67:77:d0:71:b3:8e:df:c0:6e:2b:9c:fb:b6:68:
         e3:4c:11:04:fd:de:ad:b4:65:46:d3:17:7d:bc:6f:92:b2:e1:
         b2:2c:63:73:1b:a7:71:0e:e7:f1:31:52:73:fc:38:df:58:5e:
         78:7e:af:08:94:4d:03:d3:53:3e:61:63:56:43:02:cc:34:4c:
         35:7b:47:1e:97:08:20:2d:26:38:ed:5b:b9:a8:39:bb:4e:5f:
         5e:c3:fc:4d:4f:95:2e:d6:5b:d8:13:2d:09:b8:17:06:2b:2a:
         8f:4b:7c:85:e7:f2:36:4d:0f:5a:a6:e4:1f:5b:5b:71:eb:7b:
         14:a5:1c:8a:dc:80:75:89:23:f5:4c:0d:85:fa:19:f3:a4:55:
         00:7e:24:07:17:77:84:0e:48:9c:0b:38:c3:97:90:fb:43:23:
         b4:57:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:59 2026 by rpki-client