Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
File:                     AURLjJMub2XrHJyZmhreW9iskRY.mft (raw, json)
Hash identifier:          hH9ueAu9CFrMIZas9lKzDjL7azvjkZnsp1bCDH82kCk=
Subject key identifier:   F9:26:AA:A6:0E:99:4F:27:78:04:90:31:99:36:87:2F:30:14:89:D6
Authority key identifier: 01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16
Certificate issuer:       /CN=01444b8c932e6f65eb1c9c999a1ade5bd8ac9116
Certificate serial:       01A03FE06CD0AFA312C0A9974184D3E8FDAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
Manifest number:          0105
Signing time:             Wed 26 Aug 2026 21:01:07 +0000
Manifest this update:     Wed 26 Aug 2026 21:01:07 +0000
Manifest next update:     Thu 27 Aug 2026 21:01:07 +0000
Files and hashes:         1: AURLjJMub2XrHJyZmhreW9iskRY.crl (hash: 3OzRmb1cNl8c+ul1xDt7Qc/mdGifrtSF7acBlOK7Qd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:e0:6c:d0:af:a3:12:c0:a9:97:41:84:d3:e8:fd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01444b8c932e6f65eb1c9c999a1ade5bd8ac9116
        Validity
            Not Before: Aug 26 21:01:07 2026 GMT
            Not After : Aug 27 21:01:07 2026 GMT
        Subject: CN=f926aaa60e994f27780490319936872f301489d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:94:1e:c7:09:a2:97:c3:77:a9:ee:80:20:
                    6b:47:0c:58:38:36:64:9c:16:dc:26:8f:a7:b5:1c:
                    85:b6:b4:43:88:9f:bd:88:f5:07:bd:91:9a:3f:b4:
                    ac:95:7c:b5:1b:23:d8:4b:ec:52:33:18:0f:8f:8a:
                    35:d5:44:9a:bc:f0:b6:25:7b:1a:bc:c0:d1:3e:c4:
                    36:ec:52:d4:dc:f2:d9:d9:c6:e6:66:5a:5b:7e:7d:
                    76:94:c0:fe:69:5b:1c:27:df:cf:c4:56:53:d2:93:
                    1c:56:2a:6d:ba:b4:16:8f:7b:bc:7b:37:0b:6d:25:
                    c2:cb:7b:00:1d:68:65:22:50:b7:10:20:fe:73:83:
                    fc:99:dd:72:f9:ec:04:31:9e:00:f4:5f:d7:ba:4f:
                    78:36:4b:d5:d4:a1:22:fb:74:de:d1:62:66:ea:81:
                    9b:a4:1b:b6:73:a1:37:fe:c7:3d:0c:f8:cb:48:77:
                    f0:88:7f:6e:6d:0c:f8:49:cc:32:70:c8:5a:40:94:
                    5c:ac:e7:84:65:25:ad:5b:61:8b:81:e4:8d:0c:db:
                    c5:12:10:f8:15:e0:02:7e:04:85:19:31:a6:6b:6a:
                    ca:2e:6e:b9:54:d1:6c:6c:8e:81:06:cb:cb:b8:78:
                    91:3d:17:c3:1a:a0:ea:c7:c3:d5:55:c9:44:98:9f:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:26:AA:A6:0E:99:4F:27:78:04:90:31:99:36:87:2F:30:14:89:D6
            X509v3 Authority Key Identifier:
                keyid:01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8a:6a:a3:2b:37:00:8f:70:15:16:e2:f6:9e:3b:59:14:42:
         35:5a:02:2d:80:a7:da:07:ce:f6:6e:b9:e7:96:bc:5e:e7:a5:
         84:96:04:7d:2b:84:4c:db:be:60:b9:fa:56:cc:62:1a:dc:35:
         0f:93:dc:1e:c9:62:6f:58:5e:b5:64:d4:cf:8e:5d:15:4a:86:
         3a:26:11:dc:00:f4:88:31:ce:25:e5:82:14:9f:8d:3c:b0:0d:
         d7:45:65:92:24:26:f5:b7:9a:2b:e0:00:5f:43:6a:bd:2b:a8:
         3f:d1:bc:ae:0d:ae:f4:55:69:da:65:95:4a:4c:f7:68:bb:5b:
         74:e1:d9:c3:cd:09:68:42:45:9d:23:44:d1:f6:6b:ea:e0:e2:
         3d:29:d8:21:fc:25:ff:37:47:3f:33:77:0f:e9:52:01:c7:a6:
         ab:14:b0:ed:e1:f2:23:df:fc:02:8c:a4:fe:23:f5:9f:2e:62:
         97:9f:96:36:3c:ed:b9:f9:42:9d:36:6a:5f:40:6a:c2:05:7a:
         43:21:b5:c4:fc:3a:79:4a:e6:a5:72:4d:c3:8c:fc:e2:a4:aa:
         50:2e:eb:2d:06:2e:61:ce:ed:e6:50:9a:10:8e:06:25:fd:8c:
         f7:c8:17:62:41:3a:eb:31:bc:21:f3:43:c3:97:2c:70:ad:c7:
         13:30:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:41:02 2026 by rpki-client