Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File:                     AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier:          2KcPMbQlPM9aFHd5oE9G9ZGhqq0XnpJbEBYnLnjCsLU=
Subject key identifier:   C0:C4:CB:AB:83:B7:3C:E9:DE:51:6C:A7:49:CA:49:9B:5F:F9:2E:23
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer:       /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial:       01A0CCA3750B79F04FB54967B3AAF6B02C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number:          169E
Signing time:             Wed 23 Sep 2026 05:00:59 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:59 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:59 +0000
Files and hashes:         1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: /TsHYxOPVy2rcHZ/KoTXdQrFTqoWuxoan/DeEgOf4rg=)
                          2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:75:0b:79:f0:4f:b5:49:67:b3:aa:f6:b0:2c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
        Validity
            Not Before: Sep 23 05:00:59 2026 GMT
            Not After : Sep 24 05:00:59 2026 GMT
        Subject: CN=c0c4cbab83b73ce9de516ca749ca499b5ff92e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:20:35:69:6a:4e:93:8d:fb:19:b2:59:66:
                    e4:35:50:0b:3c:53:73:5c:f4:d1:25:cc:fa:b9:4c:
                    bc:e8:92:44:eb:d1:6e:ef:1c:8b:a8:14:f0:f2:de:
                    2e:d9:a5:a2:9c:58:6c:f5:25:73:a1:32:f3:06:9c:
                    60:ca:38:3a:7d:08:ef:a7:79:e4:86:73:50:7c:e3:
                    31:2c:bd:d7:69:68:c7:7d:4d:85:df:fe:7b:9b:19:
                    81:63:a2:34:8c:86:b5:e3:be:68:4e:cd:3c:7b:bc:
                    41:38:16:f0:c3:e7:52:a3:d0:f0:51:0e:51:72:57:
                    43:41:0c:fa:5e:02:3c:e7:c9:5a:f5:c1:9f:8c:bf:
                    53:36:1c:2b:5c:bf:95:9e:84:ec:ce:dc:61:8f:61:
                    9a:e3:29:74:29:01:45:9f:5e:42:66:ce:70:25:9e:
                    f9:b6:a9:8c:33:27:ca:1e:b0:27:45:1c:5a:f8:cd:
                    1d:1c:26:33:45:02:c2:7a:89:ee:43:52:8c:dd:80:
                    c0:d4:bd:a8:bd:27:74:05:68:a9:e4:e8:44:ae:f0:
                    a6:3a:7c:f2:0a:26:78:f7:1c:0b:a8:46:d2:71:d3:
                    5e:89:67:32:30:d9:0d:b0:55:ea:09:3d:48:63:46:
                    c2:47:9f:52:b6:ec:03:ab:b5:57:56:e3:4c:b2:29:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C4:CB:AB:83:B7:3C:E9:DE:51:6C:A7:49:CA:49:9B:5F:F9:2E:23
            X509v3 Authority Key Identifier:
                keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:68:be:b3:47:b4:50:ce:b2:d8:fb:22:41:5c:cf:85:89:4d:
         6e:56:80:8e:c3:d6:67:3d:09:57:37:c7:68:d3:53:34:b4:8e:
         10:fa:69:1f:58:97:fa:ef:d3:ad:04:b7:2d:ea:b3:ad:82:da:
         2f:65:2a:d9:0d:33:9c:10:88:a1:58:1a:b2:d5:ab:e4:2f:99:
         16:98:63:fa:2c:e2:39:dc:67:8f:95:b2:b6:b5:59:23:99:1a:
         6d:6e:c3:72:9a:86:d4:3e:d2:aa:53:1a:36:3f:0e:14:2c:f8:
         11:ec:40:b3:31:5a:6c:f1:7f:9e:2b:e4:e2:3b:3e:4b:7a:73:
         a4:48:0f:57:fe:a0:f8:21:a5:ea:92:77:6f:b4:1a:a0:51:7c:
         43:41:d8:bd:09:3f:eb:f3:56:59:c3:07:6b:f8:08:11:73:28:
         a9:cf:0a:7d:61:38:de:9e:92:9c:8c:b6:18:ba:b7:07:20:84:
         5a:06:da:39:d8:e5:38:a3:ca:98:f9:10:0e:5f:db:51:64:ad:
         15:32:03:c8:06:a7:46:67:b7:84:e5:48:5b:e2:04:13:29:f9:
         dd:1b:13:e1:ad:02:b0:e4:5f:fd:57:0e:1d:51:8a:91:3d:ed:
         c0:7e:cc:b4:96:a3:09:e9:62:ac:32:93:bf:20:eb:07:7d:87:
         74:b4:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:27:41 2026 by rpki-client