Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
File:                     ahjtHt_p75yYdyAyDp28ketQWa0.mft (raw, json)
Hash identifier:          MKWgeau/UzL24m2hAxTXx5U9LZMyqiAJsNHy9Yp+fRw=
Subject key identifier:   9A:FC:18:4D:7A:C2:B2:C0:64:F6:04:AF:BA:66:9B:D2:09:3E:A7:31
Authority key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Certificate issuer:       /CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Certificate serial:       019FF86C3075C05A4ED466B8471C4C9D33E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
Manifest number:          01CC
Signing time:             Thu 13 Aug 2026 00:01:07 +0000
Manifest this update:     Thu 13 Aug 2026 00:01:07 +0000
Manifest next update:     Fri 14 Aug 2026 00:01:07 +0000
Files and hashes:         1: ahjtHt_p75yYdyAyDp28ketQWa0.crl (hash: CyFjCIe1os8EctNiOnNaH8QhxUJUxkBMbj6eHQefbIo=)
                          2: cVgf6zYHcxsLW9bXFfBT2wbbXtY.asa (hash: e9U9Ggfq0Q0bxFuYqJQPA4Kvtu4sRsMsGLECB9T3Dnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:6c:30:75:c0:5a:4e:d4:66:b8:47:1c:4c:9d:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
        Validity
            Not Before: Aug 13 00:01:07 2026 GMT
            Not After : Aug 14 00:01:07 2026 GMT
        Subject: CN=9afc184d7ac2b2c064f604afba669bd2093ea731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:f7:72:a7:09:4b:4a:1c:fe:94:9b:6a:39:
                    1d:1b:cb:88:0d:5d:52:df:e6:c1:f5:d8:b3:26:c5:
                    cf:c1:8d:21:08:e4:26:50:4b:da:26:58:f8:34:e4:
                    78:f9:62:e8:a5:ab:6d:b9:b6:0e:c2:e7:20:13:51:
                    58:de:41:57:8b:80:41:39:50:02:e6:c5:f3:f6:ea:
                    ee:23:04:42:4f:e5:3b:ad:0f:c2:7b:2e:a3:6a:53:
                    44:eb:f9:cf:a5:73:43:b6:ea:14:3c:d0:2e:81:ab:
                    0b:bd:3b:5c:64:64:5f:a3:f0:c4:81:01:3c:1b:5e:
                    90:13:3e:31:8f:6d:f5:42:8d:78:03:c8:74:38:1a:
                    b6:ca:0f:88:a3:14:d0:42:84:97:6b:af:17:52:8e:
                    05:76:33:50:75:4b:96:ec:eb:b9:b1:d0:10:30:b1:
                    86:ca:59:47:aa:e0:75:57:f1:19:5a:ba:21:f6:72:
                    20:ae:9c:53:ea:67:cb:a3:f9:e8:a6:af:5e:da:2e:
                    da:b5:d1:e6:ca:77:a6:b4:f7:22:4d:8d:da:24:56:
                    54:96:1a:28:4e:bd:5f:37:66:61:52:2b:07:27:40:
                    cb:16:e4:eb:a5:a5:21:54:4b:f8:c2:15:00:af:d8:
                    68:2b:94:2a:ee:ab:14:4a:f7:d1:67:c0:42:65:da:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:18:4D:7A:C2:B2:C0:64:F6:04:AF:BA:66:9B:D2:09:3E:A7:31
            X509v3 Authority Key Identifier:
                keyid:6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:8a:a9:90:c1:f1:24:f7:b5:73:6d:5c:50:3a:5f:df:9f:
         5f:44:39:e9:fe:20:f3:25:c5:df:6a:6f:0c:3d:01:17:f7:c9:
         6d:fb:f1:21:46:c5:75:74:28:d3:eb:8c:a9:b1:a3:1e:f5:ed:
         20:6f:d7:12:db:fa:2b:68:0a:bb:6a:6b:03:0a:eb:07:38:49:
         2f:9c:cc:ed:3a:d8:27:67:78:d7:56:0a:d9:f4:e6:ef:b6:1f:
         5c:14:ac:f2:8e:36:9d:05:16:a5:b4:c7:ca:c8:7e:b0:89:b4:
         b3:ac:cc:a5:7e:83:43:b0:c2:6a:82:e5:dc:11:54:d6:e9:69:
         e4:b4:c2:1c:8a:3a:32:19:f4:92:9d:c0:34:a8:6e:f2:7d:99:
         44:c9:23:f5:4f:d5:0d:a9:5f:e1:e6:fe:ba:82:03:d3:7e:4a:
         36:75:20:f8:48:f5:65:be:07:a6:0d:5d:de:c8:ac:5a:f1:bc:
         5e:53:f1:3e:d1:37:40:47:88:30:3c:10:d1:c9:c3:b3:2e:73:
         26:0e:48:b8:1c:dc:15:fa:a9:33:8b:a1:5f:e2:29:94:f3:cf:
         ac:ff:9e:d4:20:f2:85:9f:5f:88:e7:c8:b6:02:f3:ff:13:70:
         83:cf:42:02:90:9e:ee:3e:8d:3e:e7:1f:ea:2e:dd:87:a1:0c:
         52:2f:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:51 2026 by rpki-client