Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File:                     akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier:          Cc/HaEgBT0MtQm3dkobwpGiQY1FUTwxvdGqQz0jNS2w=
Subject key identifier:   C5:47:69:1A:D7:CA:C7:59:21:C4:C1:15:B0:50:57:44:18:B0:8C:02
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer:       /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial:       01A0024B39296BB67443D2692C1AF9C63495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 22:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:19 +0000
Files and hashes:         1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: 9xE+IvTTM6R5vPxK5wUPTwRoCYbZxpYuFt2x3ITRFBo=)
                          2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:39:29:6b:b6:74:43:d2:69:2c:1a:f9:c6:34:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
        Validity
            Not Before: Aug 14 22:01:19 2026 GMT
            Not After : Aug 15 22:01:19 2026 GMT
        Subject: CN=c547691ad7cac75921c4c115b050574418b08c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:f2:51:4d:ae:b8:43:79:f4:fe:6f:dd:1e:
                    8d:ce:ad:38:c7:25:ee:54:5a:36:2c:1b:96:1c:ef:
                    d4:3e:59:9c:8b:67:ed:6f:5f:65:54:a7:18:92:2c:
                    61:8d:a0:c2:b5:92:39:c6:e1:2b:29:55:bd:98:04:
                    c6:e6:cb:c2:10:b0:82:62:be:95:50:93:da:f8:29:
                    2b:5b:da:9c:f8:14:bf:2c:36:53:71:09:e1:34:01:
                    19:8e:74:e2:1a:f1:43:3e:f1:44:a0:65:ee:7c:32:
                    14:2d:62:07:12:9f:42:e6:98:db:43:9f:47:a0:0a:
                    a2:24:9d:f2:f7:95:fa:ca:3b:6b:52:55:86:0a:0f:
                    5e:6b:81:55:ba:d6:04:fd:8f:f7:e8:5a:9a:67:28:
                    8e:5c:76:6d:01:4d:23:5b:c0:e8:bb:c2:4d:fc:24:
                    d8:af:1b:29:71:2a:ef:58:56:7e:95:38:34:82:52:
                    0f:22:13:5c:34:00:af:54:3d:08:86:ae:aa:01:de:
                    97:ad:ce:4a:ed:08:f0:ef:7b:e2:53:41:db:5c:7d:
                    cc:a7:94:26:39:e3:1c:99:b5:05:fb:ac:81:02:42:
                    da:90:ca:02:b6:a8:f0:ac:bd:c1:a9:bb:9f:f0:b3:
                    ac:4d:91:d6:71:8f:24:ac:ce:cb:c4:e4:de:96:6d:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:47:69:1A:D7:CA:C7:59:21:C4:C1:15:B0:50:57:44:18:B0:8C:02
            X509v3 Authority Key Identifier:
                keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:66:18:81:bc:7c:45:b3:79:fe:99:e0:78:db:f8:09:49:7b:
         76:54:cd:72:ba:ee:e7:e6:ae:20:69:5b:9a:20:55:35:34:51:
         c0:5a:5e:52:27:2e:f9:72:c3:3c:db:83:0c:0c:03:ae:9b:35:
         c2:dd:cb:ab:11:86:9b:b0:d9:d1:b4:ed:07:5d:fa:b7:fd:22:
         99:43:da:c9:f9:15:c7:14:b1:a5:6b:ad:09:91:83:36:bc:63:
         74:77:89:ce:97:1b:5a:90:aa:3b:07:c0:5c:76:54:6c:7f:96:
         6e:28:9d:0c:f6:c1:03:2c:3a:50:a2:b4:be:18:ac:3a:71:62:
         ac:9c:3b:2f:77:aa:f8:f1:01:2d:33:57:1c:19:5f:65:ba:eb:
         5e:bc:55:60:f5:6f:2d:fc:0e:c4:b1:3b:e0:55:7f:e7:21:c6:
         8e:2f:33:ba:97:fe:91:27:bf:0b:6c:9a:7f:99:37:46:20:fc:
         14:4e:e2:5a:fc:4e:48:ca:82:08:6d:63:55:97:59:21:03:04:
         20:ef:8b:9a:93:46:3b:d6:c0:ca:ce:cd:bd:b4:16:0d:a4:24:
         44:72:81:71:7e:6c:48:ac:77:cc:99:8e:04:8d:9e:b0:19:11:
         46:46:f1:b4:4f:3c:09:93:c6:5b:34:66:7b:a3:99:61:18:ca:
         01:58:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:31 2026 by rpki-client