Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File:                     AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier:          rCIO3z+gZG5429nl9/woE/1ECoBCFF94IUg8xRHUzW0=
Subject key identifier:   78:CF:2B:8D:A3:18:06:83:B9:0E:DA:E0:0E:6A:C5:F1:FF:CF:B3:6E
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer:       /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial:       019E31173F793F389CCFCCBDEF06775BE38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number:          113F
Signing time:             Sat 16 May 2026 14:01:07 +0000
Manifest this update:     Sat 16 May 2026 14:01:07 +0000
Manifest next update:     Sun 17 May 2026 14:01:07 +0000
Files and hashes:         1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: sNeSLG8hKXqCven9fPR3qDvN52XxBGYzjDB3WWRDxXU=)
                          2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:3f:79:3f:38:9c:cf:cc:bd:ef:06:77:5b:e3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
        Validity
            Not Before: May 16 14:01:07 2026 GMT
            Not After : May 17 14:01:07 2026 GMT
        Subject: CN=78cf2b8da3180683b90edae00e6ac5f1ffcfb36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:20:f6:6a:2c:a2:50:b0:7f:da:a4:02:e5:
                    fb:32:1f:07:1a:f6:8f:d5:5c:cb:60:0c:4e:01:50:
                    b3:80:46:1b:9e:24:95:77:26:bb:e9:58:c1:4b:34:
                    fe:18:58:6d:c8:b6:9d:2f:7f:8d:cf:86:89:32:99:
                    dc:10:e5:13:f3:b2:4b:0a:ee:86:e4:86:04:fd:59:
                    bf:22:d8:c0:3b:c4:56:26:b8:65:ef:c2:30:bf:95:
                    3a:9a:06:12:a0:bd:09:27:38:bd:ed:72:6a:a7:b8:
                    ae:f9:9f:4a:a9:a3:c6:ac:f9:ab:43:23:b6:9c:92:
                    c6:15:fa:0a:a7:3f:4e:a1:93:51:1b:08:5a:ed:b6:
                    80:7b:f9:30:6b:48:c8:c3:53:f3:8d:47:ff:81:5f:
                    bf:a5:bc:a4:76:a5:60:f9:6a:b9:ee:e2:18:ba:40:
                    17:5d:fc:d1:b8:53:ae:e6:2c:9b:0a:92:09:db:d1:
                    ab:e4:8b:5f:18:63:2c:7b:25:1d:3c:49:41:2f:e6:
                    ab:10:db:d3:27:b2:43:c2:87:b8:d5:64:7b:e4:75:
                    51:2a:f3:e9:1b:1e:9d:2a:a8:a7:79:78:ae:68:4e:
                    16:2c:74:35:ea:0f:5c:c7:e9:4c:46:64:b7:fd:b3:
                    eb:e3:c4:02:02:86:df:06:78:4a:c5:5a:a0:b1:25:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:2B:8D:A3:18:06:83:B9:0E:DA:E0:0E:6A:C5:F1:FF:CF:B3:6E
            X509v3 Authority Key Identifier:
                keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b1:f8:94:bc:a7:70:85:19:af:1a:a0:b6:77:1b:7e:38:ef:
         a0:f9:18:2f:1f:60:57:80:cb:cd:43:c4:08:21:78:96:98:51:
         a1:ca:ac:4f:eb:ad:be:04:6b:7a:fc:49:ff:33:ec:40:e4:aa:
         8a:6e:d3:02:fd:f1:cc:68:4c:15:31:5b:d7:3d:6c:b0:ab:9a:
         33:cc:b4:65:68:dd:b3:0d:53:de:dd:a7:e7:89:d9:91:59:f4:
         a5:8c:eb:17:56:3e:e0:f1:f9:e4:38:57:f3:be:66:0f:ab:db:
         da:0a:e5:9a:8b:1a:1c:a2:f2:28:aa:49:30:f8:47:6b:ba:be:
         24:ec:59:e9:22:f4:26:e6:ba:15:9d:96:d5:32:07:f1:1c:0f:
         a3:08:6f:d4:18:ca:c1:81:4c:ea:6f:ee:d1:35:bd:41:a7:50:
         b9:6c:89:1e:ff:66:7a:03:9d:09:3b:d9:54:cd:bc:b9:4d:61:
         4c:88:e6:05:01:73:4a:00:b1:9f:66:dd:47:3f:bc:2d:75:e3:
         f1:af:9c:87:64:5c:e2:ec:a0:88:f1:38:f1:64:4f:41:e7:0a:
         42:85:8e:c3:5f:76:3e:35:3e:5a:0d:c5:f9:05:2a:84:8e:e0:
         3f:c1:a1:10:90:51:87:97:5d:f1:fd:15:6c:dd:2c:08:0b:d0:
         c8:fe:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:24 2026 by rpki-client