Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File:                     Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier:          LODGnnYQ43VLmMD3U/VHdteO0+3wIdZ4jjX/XsrBGv4=
Subject key identifier:   08:45:43:F1:1C:8F:91:24:11:52:32:34:D8:1B:CD:9B:85:9E:78:70
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer:       /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial:       01A0016F4807D2EA781E68ADF65170B45D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number:          198F
Signing time:             Fri 14 Aug 2026 18:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:05 +0000
Files and hashes:         1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: rwfhML62rsmMkyACmbQQBie0hMPZbAt+9b4GyZBnPT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:48:07:d2:ea:78:1e:68:ad:f6:51:70:b4:5d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
        Validity
            Not Before: Aug 14 18:01:05 2026 GMT
            Not After : Aug 15 18:01:05 2026 GMT
        Subject: CN=084543f11c8f912411523234d81bcd9b859e7870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:0b:f7:22:6a:b7:c3:9c:51:e5:12:37:e6:
                    47:3d:bb:08:96:8c:48:c5:7c:15:d5:47:55:30:ca:
                    49:8c:c3:d6:d4:0d:45:1e:e0:06:ee:90:67:44:05:
                    0e:37:29:04:37:01:69:bf:54:8b:db:de:bc:9f:bc:
                    f4:89:1a:5b:7a:cc:51:d9:c4:7f:02:ba:d6:3f:71:
                    13:9a:53:d6:9f:99:b1:86:3e:96:4d:fe:b2:c8:ba:
                    c3:6c:27:ef:22:ac:1f:f3:66:fb:f0:3f:33:ca:df:
                    70:0c:71:d6:15:66:c0:7e:0b:08:6c:60:6c:12:69:
                    5e:e8:83:e2:20:17:a5:32:db:42:7b:4f:26:16:cf:
                    32:1d:0c:3b:9a:83:18:e6:ad:78:2f:7e:4a:d0:f6:
                    c4:4f:d3:9e:2c:0a:5d:85:48:93:93:67:ac:0e:08:
                    1f:dd:e8:c4:18:56:54:c9:a7:ee:de:d2:66:08:6c:
                    3d:bc:53:d7:77:df:0b:f0:19:6b:67:8d:df:7c:70:
                    e6:54:b4:da:e0:18:80:43:8a:5e:ed:d3:78:b8:37:
                    cf:bf:f1:fa:8b:03:a9:1f:6b:42:a1:fa:c5:d7:87:
                    d2:5c:36:0c:70:e3:91:76:b8:ca:5a:ea:ee:1b:bc:
                    f4:3e:25:08:79:79:b9:99:f1:bb:87:ba:36:48:f1:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:43:F1:1C:8F:91:24:11:52:32:34:D8:1B:CD:9B:85:9E:78:70
            X509v3 Authority Key Identifier:
                keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:f3:8a:b7:11:d8:a8:0a:75:a0:4a:c6:ee:d4:63:e8:fd:
         18:fb:08:37:71:a1:ab:ed:90:b9:4a:44:4f:a7:42:08:51:33:
         5a:d5:89:c3:8d:de:66:f8:e1:c0:ad:ca:83:0f:eb:d6:21:c9:
         01:ec:ae:10:20:f0:1f:21:d5:45:1c:40:67:d8:5c:6c:0e:b5:
         6c:44:2c:07:aa:24:eb:f2:8c:c4:b7:61:70:4d:aa:b0:8d:60:
         80:72:9e:f3:08:f8:17:c1:87:37:c5:6f:d1:9c:97:98:4e:d4:
         9c:0c:1d:16:a8:a4:aa:a9:09:02:f0:08:e6:b4:42:10:76:8f:
         1b:6c:e4:04:7f:de:01:e5:04:53:e2:5b:1f:9e:68:95:9d:7f:
         52:6a:49:a4:ae:f0:08:b3:da:b2:fe:27:da:37:df:cf:fa:d1:
         5c:06:ea:31:81:33:24:cd:8d:d2:98:fa:ad:7e:91:10:ff:55:
         ec:80:ef:69:dc:12:49:ef:85:ce:cf:b5:12:49:c4:aa:94:5a:
         76:e0:dc:a5:2c:fd:4d:a5:99:d6:ac:19:4c:2d:ae:60:4b:82:
         74:f1:1a:28:db:0a:61:0c:77:4b:d3:3d:ac:4b:e7:f0:1d:81:
         7a:24:2e:04:2a:a1:c0:2d:16:ea:78:66:56:37:a3:47:93:13:
         0e:5c:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:32 2026 by rpki-client