Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          GpyiUw5DKo8D7o7o0Pt1bUg5ZAdI8zpxk5ao3Xd43pU=
Subject key identifier:   D9:2A:D5:07:E2:2B:4F:6B:17:C0:8A:86:ED:69:75:8B:89:8A:DB:43
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       01A001A649B6F5C841A73900C2FC71E1C427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 19:01:10 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:10 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:10 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: aZv/ID59bbCpLeupCx4R+EWdQ5D6leeQ+oNUlrkyUEg=)
                          2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:49:b6:f5:c8:41:a7:39:00:c2:fc:71:e1:c4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Aug 14 19:01:10 2026 GMT
            Not After : Aug 15 19:01:10 2026 GMT
        Subject: CN=d92ad507e22b4f6b17c08a86ed69758b898adb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:bc:c9:fb:d5:ba:d6:90:7b:d7:9b:31:d2:
                    23:94:af:e1:92:0d:8f:4b:4f:fc:79:bb:43:9d:b0:
                    55:b2:0f:66:26:13:97:e2:b5:74:1f:15:40:0c:d7:
                    86:98:38:0f:35:f0:ac:b4:92:66:62:ac:f3:34:ea:
                    f5:de:46:4d:7b:33:dd:83:c6:ac:3e:d7:69:ec:26:
                    d4:68:df:79:91:ac:7d:b1:e1:c9:9d:31:21:71:a2:
                    5d:ff:fd:af:86:6a:6a:57:ec:d5:14:98:6a:97:d3:
                    dc:db:19:08:70:f0:01:49:84:0a:56:27:f9:b9:ad:
                    39:a9:aa:dd:61:03:e7:23:32:f6:fd:e2:38:72:4b:
                    64:70:c3:06:d0:6d:0f:c7:91:04:9c:9d:7d:0e:a1:
                    e6:7f:a5:59:a1:0a:a4:8c:c4:94:44:32:09:eb:94:
                    ac:8e:37:83:46:cb:40:e4:a7:ff:f0:d3:ef:39:0c:
                    58:3e:14:58:58:d3:66:47:9c:5c:17:dd:59:a0:f8:
                    a9:db:14:58:8b:47:b6:6c:66:d9:10:4a:74:c5:f8:
                    6d:40:be:b5:c4:ad:4a:73:6d:ad:1e:c0:6a:7a:9d:
                    9c:85:06:56:e2:b2:f8:ca:fe:40:be:eb:3d:47:ed:
                    0e:09:d5:1a:4f:02:bb:49:d6:69:40:28:c5:b8:fe:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:D5:07:E2:2B:4F:6B:17:C0:8A:86:ED:69:75:8B:89:8A:DB:43
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:77:ff:82:0f:9e:a7:98:7e:b2:fd:10:0d:d9:20:2a:22:
         1f:c0:fc:da:72:b8:cc:30:83:2a:bd:ec:7c:5a:36:e5:18:ac:
         da:e3:7b:9a:1b:f2:8a:98:85:d3:f8:ef:a4:70:45:43:a9:db:
         e6:61:77:c8:eb:c3:7a:b9:50:df:8f:9d:86:70:4c:d5:38:63:
         38:24:c3:54:46:52:2f:ab:d1:43:6d:97:12:6e:a7:fa:5c:a5:
         9f:9d:68:0e:4a:0f:b3:38:43:59:3c:e7:3e:11:7b:9e:64:11:
         c9:e5:76:53:eb:4f:0f:e2:f3:0c:ab:3c:58:ae:82:57:b1:e2:
         e9:9f:f5:be:98:99:b4:3d:d7:48:04:81:9f:80:74:2e:05:2d:
         33:54:c7:97:95:68:07:50:bf:cb:04:0a:da:2d:87:fb:70:01:
         92:bf:d7:78:de:80:f5:90:82:8a:45:9a:21:aa:99:1e:2a:66:
         b0:2e:8c:e7:21:65:ad:43:99:0d:15:c9:ed:22:f8:c4:94:af:
         1e:8a:c9:d0:1f:81:4d:b9:c7:c8:0a:1d:04:8e:a7:19:c8:7c:
         2b:2c:40:e9:6e:84:5f:74:8e:99:61:a4:60:a6:2e:36:05:a9:
         b7:58:d4:0a:53:0e:3b:26:bd:c3:37:a1:f7:da:e9:13:70:9f:
         74:53:e9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpkm29chBpzkAwvxx4cQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNmU1ZTMxZmE4NzE2YWFhNTRlMThmY2RjZmVkM2ZjOTRk
YjkwYjUwHhcNMjYwODE0MTkwMTEwWhcNMjYwODE1MTkwMTEwWjAzMTEwLwYDVQQD
EyhkOTJhZDUwN2UyMmI0ZjZiMTdjMDhhODZlZDY5NzU4Yjg5OGFkYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1a8yfvVutaQe9ebMdIjlK/hkg2P
S0/8ebtDnbBVsg9mJhOX4rV0HxVADNeGmDgPNfCstJJmYqzzNOr13kZNezPdg8as
Ptdp7CbUaN95kax9seHJnTEhcaJd//2vhmpqV+zVFJhql9Pc2xkIcPABSYQKVif5
ua05qardYQPnIzL2/eI4cktkcMMG0G0Px5EEnJ19DqHmf6VZoQqkjMSURDIJ65Ss
jjeDRstA5Kf/8NPvOQxYPhRYWNNmR5xcF91ZoPip2xRYi0e2bGbZEEp0xfhtQL61
xK1Kc22tHsBqep2chQZW4rL4yv5Avus9R+0OCdUaTwK7SdZpQCjFuP6FHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkq1QfiK09rF8CKhu1pdYuJittDMB8GA1UdIwQY
MBaAFAFuXjH6hxaqpU4Y/Nz+0/yU25C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYt
Yzk2YzJjZTg1OWU1LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYtYzk2YzJjZTg1OWU1
LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+F3/4IP
nqeYfrL9EA3ZICoiH8D82nK4zDCDKr3sfFo25Ris2uN7mhvyipiF0/jvpHBFQ6nb
5mF3yOvDerlQ34+dhnBM1ThjOCTDVEZSL6vRQ22XEm6n+lyln51oDkoPszhDWTzn
PhF7nmQRyeV2U+tPD+LzDKs8WK6CV7Hi6Z/1vpiZtD3XSASBn4B0LgUtM1THl5Vo
B1C/ywQK2i2H+3ABkr/XeN6A9ZCCikWaIaqZHipmsC6M5yFlrUOZDRXJ7SL4xJSv
HorJ0B+BTbnHyAodBI6nGch8KyxA6W6EX3SOmWGkYKYuNgWpt1jUClMOOya9wzeh
99rpE3CfdFPptg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:55 2026 by rpki-client