Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          cZNjfSjMkcTMIX8p4fvOZtrKfMYvj+oJeDbeUMITwdE=
Subject key identifier:   F2:6A:19:03:7B:1F:C8:3E:C8:EC:E3:74:A1:58:3A:BE:A8:E2:46:2A
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       01A13DB7BA59513734A9BA34907B96F38AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          1AA0
Signing time:             Thu 15 Oct 2026 04:00:13 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:13 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:13 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: iRW6SE3gN8oEAO7Vg5vLlXFUigVQUxJSfx3XL0GijJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b7:ba:59:51:37:34:a9:ba:34:90:7b:96:f3:8a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Oct 15 04:00:13 2026 GMT
            Not After : Oct 16 04:00:13 2026 GMT
        Subject: CN=f26a19037b1fc83ec8ece374a1583abea8e2462a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:9b:9c:c3:47:e5:86:0a:0e:b3:b2:28:f1:
                    59:47:1b:6c:59:49:a9:f1:e2:51:99:dd:e6:7a:a7:
                    9f:99:bb:56:a4:59:56:c2:70:fd:eb:1c:2b:18:02:
                    49:6d:03:24:e6:80:be:58:72:08:da:85:e7:c0:06:
                    df:96:76:00:3d:75:37:f9:cd:d3:17:4f:2b:4f:36:
                    39:53:1f:fb:cf:3c:3d:4c:15:d8:96:bf:b9:28:71:
                    f9:89:60:33:ce:7f:38:f9:23:96:5c:32:6a:1b:e3:
                    7e:4d:fa:9c:49:06:a3:1b:05:dd:c0:2b:50:96:54:
                    32:a7:b4:ef:5b:7a:cc:2a:81:e8:67:29:f1:a5:a3:
                    b0:59:6e:b5:88:3d:1d:a8:fa:bc:b7:38:c4:69:de:
                    40:d7:b1:e3:aa:09:2a:dd:f7:5b:9d:67:d0:17:7f:
                    26:e8:45:7d:11:2e:54:88:ec:af:92:42:38:d8:d6:
                    6b:ec:61:e2:6a:88:37:f9:61:82:33:6f:a5:71:75:
                    5e:5f:2d:d2:da:1e:3c:ab:d6:c2:f7:b0:87:ed:74:
                    b7:18:67:d3:86:89:f3:1a:6a:73:15:73:bc:3a:9b:
                    93:e5:cc:d7:f0:e2:a8:4d:5c:9e:0b:f8:c0:c2:85:
                    e6:0b:3e:cf:83:a0:15:43:df:ab:46:cc:9f:32:7d:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6A:19:03:7B:1F:C8:3E:C8:EC:E3:74:A1:58:3A:BE:A8:E2:46:2A
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:da:15:78:cb:3f:82:14:f5:cd:a4:37:25:b2:4e:0d:0b:
         02:a6:53:a3:0c:c6:ac:24:7b:a2:02:db:f9:af:32:97:ae:c1:
         ed:02:aa:59:a6:cb:a8:65:a8:0c:25:64:a6:74:64:e4:6d:de:
         c2:58:5c:37:1c:c5:99:25:1c:34:9d:56:a1:e7:14:0e:11:3e:
         55:f8:9b:b7:f4:01:e1:cc:aa:ee:6b:e9:b0:c4:f2:ca:7d:01:
         7a:2d:74:74:8a:79:51:c9:43:6d:33:15:c8:09:01:73:94:c2:
         1c:91:fd:2b:01:9c:33:8c:25:d3:54:dd:36:77:cf:7a:a4:3a:
         ab:c6:69:1c:94:57:74:fa:44:9d:73:5a:e3:d3:fa:c5:78:5d:
         94:ea:48:c5:74:90:17:ff:ee:67:a6:7c:33:dd:1e:42:30:bf:
         44:4f:54:44:11:b3:ad:73:e1:e1:64:53:3c:ea:d8:8d:c2:06:
         fc:4d:e3:f9:42:98:c4:77:2b:46:d8:cc:d0:a2:cd:c1:1a:8e:
         07:15:2e:d5:7e:1f:f6:4f:27:bd:10:d1:e2:65:a8:a1:da:e6:
         45:4f:b1:8f:23:8a:0f:21:03:9e:ae:16:89:db:e7:67:8a:d3:
         40:29:3a:fb:dc:9b:53:ee:dd:b2:41:cc:03:d8:ac:5e:45:9c:
         df:04:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:40 2026 by rpki-client