Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          wJSah9QxnaauuFkzJKfQZ/IOGP3gMz4U1T4/4/98IS0=
Subject key identifier:   6C:60:65:ED:05:5E:2C:05:1A:A8:B1:D4:D8:2D:2C:FC:E7:D5:03:54
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       01A149F35A55DAD2D93408915CA54ACF1E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          1AAE
Signing time:             Sat 17 Oct 2026 13:00:47 +0000
Manifest this update:     Sat 17 Oct 2026 13:00:47 +0000
Manifest next update:     Sun 18 Oct 2026 13:00:47 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: 5DX7HJxE70wb9+NO3AE2tLPL+uwLOTYaMUL8CdQq1bo=)
                          2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:f3:5a:55:da:d2:d9:34:08:91:5c:a5:4a:cf:1e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Oct 17 13:00:47 2026 GMT
            Not After : Oct 18 13:00:47 2026 GMT
        Subject: CN=6c6065ed055e2c051aa8b1d4d82d2cfce7d50354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:ea:0b:be:01:b9:9c:7b:a8:e6:f5:89:b0:
                    d0:c5:f2:66:e6:81:cf:e4:4b:b4:bf:f2:ab:8c:cc:
                    85:43:b8:e0:f0:cf:99:05:d5:a7:c1:7d:26:9a:fa:
                    95:01:1f:82:3b:08:17:57:3b:3e:45:73:db:75:e3:
                    b1:a1:26:b1:81:36:5f:2b:0e:ed:e6:86:8d:21:5a:
                    ad:ee:61:90:f9:15:f3:b7:1e:db:37:83:ec:fa:3d:
                    ac:ce:9e:2d:9f:f4:75:af:e0:de:ca:66:92:19:54:
                    b0:f3:00:ba:cd:a9:4d:c1:95:2d:0e:95:82:f5:6a:
                    81:04:0d:61:fa:f0:4f:12:e0:cd:74:99:13:70:f2:
                    20:dd:88:d6:4f:b1:82:44:0f:1f:ad:14:53:73:d5:
                    b8:f5:46:63:c2:07:f8:95:e5:7c:dc:59:20:22:43:
                    2f:8a:d9:8e:62:ef:50:63:eb:04:2e:d2:f9:4a:3b:
                    65:26:ed:2c:bd:1e:a4:52:ef:6d:ac:2c:e4:95:93:
                    86:f0:b4:e6:5f:ed:cd:ac:87:c8:ff:f6:39:41:ed:
                    03:93:93:26:55:50:40:d8:45:76:f0:30:12:25:a1:
                    4a:0e:a4:52:c3:68:c6:b6:95:4a:cc:b2:fd:f0:aa:
                    82:e8:89:00:ee:72:88:65:11:c5:d2:76:68:f2:40:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:60:65:ED:05:5E:2C:05:1A:A8:B1:D4:D8:2D:2C:FC:E7:D5:03:54
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:80:a0:20:d0:0d:b2:d3:82:7e:a3:b8:24:56:93:27:9e:c6:
         79:70:a5:a5:bd:fc:b0:80:0c:3d:8d:34:92:95:f8:5a:f7:98:
         6c:4a:88:9d:ea:65:3d:46:73:41:a6:91:ec:7f:39:7d:f3:90:
         ab:e4:00:e1:d2:53:a1:cd:c7:80:e6:af:5c:b8:e9:14:14:11:
         f4:9e:8a:9b:ee:de:bd:36:0d:f8:44:97:71:df:fb:3f:77:de:
         c5:0f:99:17:d0:09:62:eb:0c:04:7e:fe:64:34:b0:1f:29:8f:
         5f:b7:9b:c2:e1:67:f1:5b:c2:af:c6:7e:a0:80:8e:90:a7:64:
         8f:b7:9a:c2:4e:3b:db:fa:40:4e:64:6a:c3:a8:ca:a9:38:3e:
         15:9c:94:74:40:df:d9:d4:d8:a9:7f:0d:4d:3a:8b:8f:1c:f0:
         55:af:32:c6:fd:5b:b2:9a:c1:a8:c8:98:db:78:66:cf:d8:4a:
         c6:b3:56:77:56:d1:8a:8c:f6:dd:9a:01:cb:6d:c2:59:4a:3c:
         3c:b8:84:3c:8f:fd:f2:f1:2b:75:ac:8b:f7:cd:15:4c:5c:0a:
         dc:ef:4f:45:b7:c5:fe:ab:f1:16:ee:02:80:16:78:0f:ef:d8:
         26:a6:c5:5e:bd:30:5f:5d:d6:77:17:af:b0:f1:fb:6e:85:03:
         63:14:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:34 2026 by rpki-client