Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File:                     AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier:          rjaNG88KZOKoLf34jz8uxz5NPyRm2h5+C+R7JBtJTi4=
Subject key identifier:   91:C5:D6:81:95:4A:48:A8:83:C5:E9:6D:C6:12:61:EE:58:67:42:49
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer:       /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial:       01A040BC0E955756D7E1924F45529F67D06B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number:          0566
Signing time:             Thu 27 Aug 2026 01:01:01 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:01 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:01 +0000
Files and hashes:         1: 2vNgKOpEbzaja_VIW4Gy_vX__vw.roa (hash: 3da40VmqFrVIzGNQWd74Q1I2LkbqTG2fl0jqzMqaDcU=)
                          2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: TI7uL2vWQXjESbh0hthE9EzE/F0iy/Z2pUHwkDXK+po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:0e:95:57:56:d7:e1:92:4f:45:52:9f:67:d0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
        Validity
            Not Before: Aug 27 01:01:01 2026 GMT
            Not After : Aug 28 01:01:01 2026 GMT
        Subject: CN=91c5d681954a48a883c5e96dc61261ee58674249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:03:f0:82:79:a8:c2:c2:e3:29:15:c6:35:
                    84:1e:e4:0e:68:18:15:69:b5:c6:b6:f1:92:fa:05:
                    53:88:5c:ed:df:4a:6b:01:69:e0:71:3b:76:2b:4d:
                    46:62:7c:4f:70:35:a1:75:ad:75:0a:7e:56:6a:70:
                    47:e5:d2:03:88:6b:df:49:02:e4:85:64:05:23:9a:
                    10:c0:d8:69:d7:dc:16:d1:75:5f:ff:b7:6d:ca:18:
                    72:f6:84:4f:bf:bd:12:b6:4b:dd:b8:1f:29:9a:ae:
                    48:29:03:4d:39:e2:d2:2e:4a:ad:21:67:e5:58:8d:
                    03:51:e2:b1:de:ee:99:ff:19:20:a7:80:34:0d:39:
                    ee:78:76:44:52:dd:6a:2b:85:9d:da:bc:99:f6:c7:
                    c5:5a:48:da:4f:14:b2:d0:6e:79:af:2c:0d:06:de:
                    9a:92:2c:6b:23:2b:26:5a:ef:69:22:88:07:97:15:
                    ed:ef:a6:17:1e:a3:07:5a:92:a2:25:77:2a:a1:54:
                    fe:af:20:27:1f:f1:c0:00:62:07:06:80:cb:b7:a7:
                    95:76:00:29:76:80:b3:4f:e4:cb:23:fa:77:86:56:
                    78:d3:46:c1:6d:1f:50:a3:48:bc:4a:b5:db:2f:af:
                    bb:83:ca:73:0b:18:49:4c:c2:19:83:bd:f2:25:f5:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C5:D6:81:95:4A:48:A8:83:C5:E9:6D:C6:12:61:EE:58:67:42:49
            X509v3 Authority Key Identifier:
                keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:d1:63:da:9e:c4:f4:fb:65:98:7e:5b:55:5a:0f:18:79:
         7d:4c:ca:b6:bd:8d:17:3d:5d:40:96:97:8d:17:ea:f4:a6:bf:
         62:23:75:14:04:b9:66:c5:e1:4c:9c:d3:1d:71:d9:54:4f:fe:
         55:a0:5d:20:c5:b7:3c:6b:35:51:80:d8:15:33:77:a2:14:47:
         55:15:5c:31:bd:a7:54:37:61:de:cd:55:7f:00:52:07:0e:c2:
         08:4e:f7:ec:1f:71:9c:70:8e:cf:d4:11:cf:89:ef:e2:44:39:
         eb:92:3c:0f:f9:07:92:c9:de:fa:1b:09:25:ae:f2:22:fb:28:
         bd:ba:76:d4:fd:19:b3:19:eb:ef:c6:df:d4:e4:48:8a:17:47:
         35:fe:58:f6:38:56:0e:f4:95:d2:a2:df:28:0d:29:49:ab:02:
         a6:79:86:29:6c:94:78:11:be:26:60:c3:d5:27:09:ed:82:7a:
         91:cf:8c:ab:40:8f:14:8d:9b:91:98:c6:6f:ec:08:27:20:39:
         16:67:b2:f0:19:db:66:d6:09:a0:60:a3:40:72:b6:e2:0d:fb:
         02:9d:c2:3e:ae:dd:3d:0a:dc:af:2a:05:8c:14:47:48:d0:ac:
         97:0f:ed:59:47:10:c0:c5:32:a2:10:66:df:2c:f9:06:e4:8e:
         f2:f2:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:02 2026 by rpki-client