Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File:                     AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier:          E+24PO1yqLZGuTNV7qs1/K7nbtDhzoSZKtLapDPnFPU=
Subject key identifier:   15:53:32:38:BB:D0:FD:8B:04:C7:A6:68:D2:F4:36:B4:0A:B8:DD:E7
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer:       /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial:       01A1249D40ADE43BF7FEC22FE3D923019998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number:          066A
Signing time:             Sat 10 Oct 2026 07:00:47 +0000
Manifest this update:     Sat 10 Oct 2026 07:00:47 +0000
Manifest next update:     Sun 11 Oct 2026 07:00:47 +0000
Files and hashes:         1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: hFxN7QNLnOk6bzlOPNSXnvhkQMRRdcNcPknrRPXJoC4=)
                          2: _WRsTWt5ilvC18u9jW4tmRy2hJw.roa (hash: FSHpNqv1WPRCkPAW3tk75kwS45o2WxoPkRBJKuK3fZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:9d:40:ad:e4:3b:f7:fe:c2:2f:e3:d9:23:01:99:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
        Validity
            Not Before: Oct 10 07:00:47 2026 GMT
            Not After : Oct 11 07:00:47 2026 GMT
        Subject: CN=15533238bbd0fd8b04c7a668d2f436b40ab8dde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:c1:43:88:e0:96:24:ee:d9:e5:b0:bb:8b:
                    57:01:6a:14:f9:19:82:4b:ce:bb:3c:3d:e5:c5:ce:
                    4b:37:ed:00:87:b2:24:b5:15:30:df:bc:c5:7a:b3:
                    f3:0c:3d:87:9f:af:35:cc:c6:f9:9b:1c:17:35:a3:
                    4f:a9:98:9a:13:c7:28:e6:45:fd:44:42:21:a0:2a:
                    62:39:08:c3:7d:46:5e:87:fc:ba:39:47:8b:73:22:
                    b3:a0:8f:46:23:06:28:68:18:bd:40:a1:97:7f:16:
                    b5:3d:0d:b5:ad:07:3f:a2:6d:5e:dd:f1:54:53:36:
                    26:94:d2:a7:17:1e:e7:a5:75:41:7b:ba:87:50:67:
                    ff:c5:31:aa:c2:7a:d1:69:40:9a:24:09:38:2e:c0:
                    2a:13:64:99:4e:b0:02:f2:fb:68:4f:fa:47:92:99:
                    7a:e7:1a:eb:ae:32:45:66:45:ab:58:52:8d:3e:1f:
                    c6:dc:b4:19:d0:a9:d0:2a:6d:db:f8:e6:b3:9a:0a:
                    72:bf:c0:0c:12:ef:19:f0:cf:67:87:50:32:d2:40:
                    4a:1d:e0:6d:e6:e6:5e:df:ea:4b:e8:b6:4e:17:00:
                    f6:a6:ba:62:9c:53:35:d3:0e:9d:03:ed:12:fd:0a:
                    78:92:95:69:43:d0:d9:51:e2:6f:a0:27:2b:4e:70:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:53:32:38:BB:D0:FD:8B:04:C7:A6:68:D2:F4:36:B4:0A:B8:DD:E7
            X509v3 Authority Key Identifier:
                keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:23:04:26:50:5a:5a:af:c1:4e:74:ce:50:89:bf:94:c8:c7:
         0f:46:01:ee:95:59:4a:83:40:b6:de:f9:6a:58:3f:ea:e0:8f:
         7b:a3:95:ff:39:c3:bd:f3:80:f0:14:81:cb:b3:da:69:c5:1d:
         88:a5:86:34:f8:86:5d:ff:a0:60:04:cc:a4:30:ed:71:ed:01:
         29:ab:35:3b:74:bc:ac:65:2f:95:49:7c:62:ee:a4:40:64:d6:
         8d:56:bc:37:c4:32:da:98:93:c8:11:7f:f8:23:8d:d7:77:bf:
         23:28:4f:55:0b:77:d6:97:7b:1e:ed:aa:f7:26:84:9e:8d:3b:
         ff:7a:01:6c:88:f7:98:0d:d1:95:6d:7d:dc:a3:2e:6b:33:4d:
         1f:ec:47:46:06:6f:a7:10:2f:e9:d5:7f:9c:71:dc:ec:b5:93:
         f2:56:dd:de:e1:9c:5b:3f:f1:7a:09:38:4a:a8:22:b4:1b:c5:
         45:c1:04:1b:1f:e4:e8:95:0b:3f:b9:74:fa:61:4c:1c:22:cb:
         22:12:9c:b0:4f:4d:47:29:4a:7d:4d:53:6c:6d:e5:cf:2e:d1:
         e3:c2:59:6d:d4:f9:36:bc:b2:48:b6:a3:4f:ed:ae:30:e5:ba:
         ad:ab:e7:19:d9:bb:aa:7a:a5:d1:ad:10:08:6a:06:24:03:ee:
         57:ba:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:16:43 2026 by rpki-client