Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File:                     AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier:          cWaSM6mMYhJjlV52zTJj/5lqDN96X7+VWXJcFU7wDYc=
Subject key identifier:   CE:2B:C5:84:49:16:51:40:0A:D9:E2:20:F3:67:9A:CC:26:D8:50:20
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer:       /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial:       019D28BBDF0339DA3264257EBAE893FEF592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number:          09CE
Signing time:             Thu 26 Mar 2026 06:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:34 +0000
Files and hashes:         1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: ZU6Cc5J+CAcy9tzhoEB2+N1Ca2Wpe35HUIlDZxyiavA=)
                          2: MZejqw04W8XvDSTgyhF_vZtjtHk.roa (hash: y+X1OSPqc8Aw+l04NXTCLvm9a9sOckjKF5RYXVztnSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:df:03:39:da:32:64:25:7e:ba:e8:93:fe:f5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
        Validity
            Not Before: Mar 26 06:01:34 2026 GMT
            Not After : Mar 27 06:01:34 2026 GMT
        Subject: CN=ce2bc584491651400ad9e220f3679acc26d85020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:be:8f:45:84:7c:86:92:c7:bf:51:43:c0:
                    64:44:f6:39:dc:b5:15:5e:97:05:e0:c4:fe:eb:84:
                    c7:80:80:ad:98:cd:fe:43:43:b4:ca:02:0c:fb:4e:
                    b7:fc:56:7a:f6:b4:96:e5:96:0d:8c:51:5a:c7:49:
                    fc:96:9f:73:46:ff:a5:e6:35:2b:1f:ab:b7:a1:5c:
                    f7:6b:22:8c:30:df:b2:5c:f3:77:3f:7c:e5:35:fa:
                    73:ce:4e:c6:88:76:49:e6:66:01:7d:3c:04:f3:1d:
                    ba:f0:f5:e1:60:bc:d8:20:ca:8c:eb:c3:25:61:64:
                    02:f6:e9:e3:87:1d:fc:b0:04:11:6b:14:d2:39:f8:
                    a0:12:8f:50:bc:8d:b9:86:e1:d0:8f:fe:cf:64:06:
                    9d:b0:bc:06:32:de:a8:f0:46:3f:35:79:cc:cc:4e:
                    a5:c6:a5:d6:70:37:8e:d4:ca:68:2a:94:63:74:f2:
                    ff:bf:28:85:a8:01:3d:8a:d5:3b:6d:c6:d3:88:34:
                    58:7e:9e:01:82:6b:ba:c8:a8:27:83:fc:a8:93:9f:
                    c4:f1:1e:b8:1b:f4:54:1c:f0:db:88:f5:5b:2e:90:
                    d3:7b:8a:fe:6f:ab:ec:b4:4e:f5:c8:db:e1:b9:af:
                    cf:03:3a:3e:5c:92:d2:87:dd:05:b1:64:cd:cf:70:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2B:C5:84:49:16:51:40:0A:D9:E2:20:F3:67:9A:CC:26:D8:50:20
            X509v3 Authority Key Identifier:
                keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:da:93:1d:de:ce:e7:34:ac:e2:4e:0f:1a:74:74:30:69:1a:
         f2:71:af:29:00:fa:d9:60:e8:77:55:52:a8:c9:4d:a5:68:48:
         ff:ef:53:b6:ff:73:87:54:d1:ee:37:f7:36:a7:44:2d:a9:35:
         8c:79:f2:c2:c4:e9:e8:8a:7c:6e:a7:ed:47:2b:50:39:66:c3:
         6c:7d:c0:40:9d:67:93:3c:7e:a8:ac:5c:d5:99:2b:d7:68:01:
         84:b8:84:28:7f:b5:98:b6:1e:3e:e7:05:3e:1b:94:a9:52:e7:
         25:84:cf:f2:1f:24:22:16:09:25:1a:17:42:89:ce:6a:d2:d8:
         94:1a:df:f8:b4:bc:1f:2b:a2:fb:b1:77:fc:49:6e:d0:df:ba:
         40:64:db:2e:a5:84:41:9a:0c:dd:24:f7:e2:f1:0d:89:59:14:
         0c:52:f3:29:10:05:5a:38:dc:23:98:3a:8f:24:79:67:a2:b4:
         3d:50:2d:8d:51:6b:a2:5a:c7:61:41:d4:65:c9:24:86:2f:8c:
         e7:5b:27:ad:57:0f:fd:c5:66:e8:ea:b9:09:7d:28:bd:e9:9c:
         92:f1:50:6c:d9:02:0c:8c:6b:f0:8b:ee:11:5c:8f:13:86:5f:
         3d:2b:d0:d8:e6:e6:d0:ef:f3:c1:60:d0:e2:23:42:b0:2b:69:
         9a:bb:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:01 2026 by rpki-client