Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File:                     AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier:          AwqHlcPehQ7o8oHvXsX673CYctTdWUG2KC+NpWs4BjQ=
Subject key identifier:   E5:AB:6D:1F:80:76:E6:D6:00:A3:28:18:7C:5D:63:AF:BC:3A:9F:64
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer:       /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial:       01A001701BE3A11D2AB0D20C06898D07C8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number:          0E76
Signing time:             Fri 14 Aug 2026 18:01:59 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:59 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:59 +0000
Files and hashes:         1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: IlgZhxPU07zM8K/9g1CJf3RHOgGOWVrWWY4TafRIFIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:1b:e3:a1:1d:2a:b0:d2:0c:06:89:8d:07:c8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
        Validity
            Not Before: Aug 14 18:01:59 2026 GMT
            Not After : Aug 15 18:01:59 2026 GMT
        Subject: CN=e5ab6d1f8076e6d600a328187c5d63afbc3a9f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:f9:5e:f7:0b:3b:ec:50:ba:0b:9e:53:36:
                    5d:b8:fe:f8:c2:d1:2c:25:70:29:e8:35:e7:13:4b:
                    85:c8:0d:52:e7:23:e0:49:30:f2:5a:e0:d6:77:04:
                    3e:fb:99:51:b3:51:8d:e1:da:7d:e4:c4:25:b3:17:
                    c4:f6:8c:1a:f3:fa:e5:55:97:3e:1a:90:29:26:38:
                    98:8e:21:00:34:1a:69:01:a1:ba:bb:6e:c0:c8:4c:
                    52:cb:e1:54:4e:c0:4f:f7:b5:06:41:cb:e7:85:58:
                    e1:22:18:d2:c0:bf:f2:f2:e3:eb:03:33:54:7d:42:
                    f0:b9:f3:8e:0b:c6:e0:87:01:91:a8:d8:e5:b3:da:
                    67:86:89:e0:0f:85:1d:23:8c:cc:ee:c7:8e:28:c7:
                    b2:15:87:e3:99:29:36:ad:a5:40:79:b9:bf:4d:6c:
                    35:31:ae:08:13:a8:88:db:80:16:32:cd:01:27:14:
                    2a:b6:d9:17:c4:ba:d6:cb:da:f5:60:7c:19:6a:a6:
                    73:de:82:0f:c8:e9:05:59:c9:1e:cc:ca:d2:b2:57:
                    10:18:1f:23:63:44:99:7f:a3:d1:11:ac:62:8d:83:
                    89:0d:fa:4b:89:23:79:af:3a:6e:1b:26:a2:7f:27:
                    db:1c:ac:ab:14:0a:95:2e:1a:1e:40:13:a2:a1:9f:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AB:6D:1F:80:76:E6:D6:00:A3:28:18:7C:5D:63:AF:BC:3A:9F:64
            X509v3 Authority Key Identifier:
                keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:92:0a:dd:4e:e7:dc:45:04:f6:60:c2:c6:d9:89:1b:b0:ba:
         cf:ae:74:65:1e:70:1d:87:89:2a:ee:07:b8:c6:cd:27:45:4a:
         62:80:2b:14:29:7e:04:9d:bd:a9:46:34:10:88:78:bd:1e:55:
         af:dc:50:6c:58:3e:55:10:a9:21:ef:9d:a8:83:4c:56:ec:4d:
         13:36:d7:c7:c6:a5:4b:49:a7:62:30:38:01:bd:a0:e1:34:6f:
         20:22:a8:aa:85:d0:fb:d2:16:dd:38:17:18:c6:dd:b4:e0:45:
         8d:eb:33:45:c3:e1:73:65:80:1e:bf:ae:93:01:59:fc:7a:7a:
         18:14:bd:16:3b:26:15:c0:13:96:bd:d7:4b:42:e2:2b:3a:5a:
         2a:16:46:be:ee:bb:ef:d6:78:98:c9:36:97:28:c1:fd:d9:0b:
         be:4f:a9:65:d3:6c:c6:10:7e:e1:bd:a8:de:f2:d9:7c:a5:a2:
         40:65:9a:09:fd:2b:ae:94:4a:33:c5:e7:7a:15:73:a6:9c:38:
         51:e4:9f:dd:f6:8b:64:e1:0d:fe:86:6a:3b:41:2a:5e:f8:e4:
         48:f2:e8:97:c8:47:c9:fe:d1:90:b6:5a:a9:75:d7:f6:4b:85:
         4a:65:d3:34:1f:39:6b:47:e9:2b:32:0f:40:c8:6d:1f:45:72:
         5a:27:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:56 2026 by rpki-client