Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File:                     AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier:          h0CVWKsjHQcMg+ti/NMpiHR5ixO68UbJ4EUkFV3uFd8=
Subject key identifier:   CC:5E:C0:F3:AF:4A:62:61:D9:F6:87:A7:83:17:8F:88:A7:52:8D:71
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer:       /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial:       019E1F11269C8B7959BB858318F3B0CE9EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number:          153B
Signing time:             Wed 13 May 2026 02:01:18 +0000
Manifest this update:     Wed 13 May 2026 02:01:18 +0000
Manifest next update:     Thu 14 May 2026 02:01:18 +0000
Files and hashes:         1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: E80duqIn2oYEyKZZx9hGuasxkFqUxhyGWvl0oq+qBgo=)
                          2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:26:9c:8b:79:59:bb:85:83:18:f3:b0:ce:9e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
        Validity
            Not Before: May 13 02:01:18 2026 GMT
            Not After : May 14 02:01:18 2026 GMT
        Subject: CN=cc5ec0f3af4a6261d9f687a783178f88a7528d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:7f:6d:bd:c1:46:e7:06:93:4b:2a:6a:61:
                    89:4e:8b:ad:67:f9:9a:bb:70:39:f2:3d:0b:f6:15:
                    18:9d:93:2d:72:fc:4e:d6:69:9c:83:31:3d:3c:10:
                    cd:42:57:c5:3f:fc:ac:d7:2f:7d:b0:e5:5a:56:1a:
                    af:44:4d:ff:50:30:0b:e3:32:cc:18:43:06:9d:70:
                    ea:88:da:60:b2:19:df:f8:ba:84:b7:96:e7:2b:76:
                    2f:d3:1a:70:be:72:54:e1:38:62:d1:88:b4:57:c1:
                    2d:7c:c0:4e:55:2f:68:9a:59:12:cc:40:bb:85:94:
                    ad:c8:9f:d2:d3:2a:cd:5f:86:43:a9:f5:60:df:cc:
                    a3:ef:28:34:79:7e:29:ea:cf:47:59:05:7d:1a:5c:
                    bf:e0:e8:fc:09:fc:3b:3b:ee:d1:e8:89:db:82:02:
                    13:9a:f5:ad:49:14:16:49:22:38:38:e6:38:da:34:
                    a6:3a:d4:1e:17:a7:7e:19:d2:30:a7:d3:75:0a:39:
                    c0:13:73:c0:15:9a:e7:c6:5c:70:ef:00:93:fe:7e:
                    43:9b:c3:bb:38:0e:ce:db:13:54:05:b1:63:cd:8b:
                    b8:a9:a5:6f:ee:18:02:f8:aa:59:d1:a3:61:9e:38:
                    f9:73:8c:62:a3:cf:a4:71:a7:b3:06:8f:ac:a6:8c:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5E:C0:F3:AF:4A:62:61:D9:F6:87:A7:83:17:8F:88:A7:52:8D:71
            X509v3 Authority Key Identifier:
                keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:2f:6f:a5:8b:97:96:2e:8d:d8:87:89:28:d8:8b:fe:28:
         69:89:e4:79:05:68:c3:47:ce:8e:56:11:f2:fd:9c:33:0d:09:
         3a:36:fa:b0:ee:f9:95:25:16:da:91:b3:66:97:85:4b:1a:1e:
         ba:c0:1b:0d:4a:88:85:68:8b:23:9c:af:4a:7d:63:eb:17:87:
         dc:08:0c:1e:85:b3:cb:06:2e:45:90:d6:c1:95:ee:5c:9d:ca:
         ce:67:d7:48:b9:0a:67:82:8a:dc:3c:e2:49:d7:6a:ee:30:55:
         cf:5d:41:04:75:a8:df:d4:ac:71:5c:0f:af:07:d6:3c:de:fc:
         e7:59:c3:be:19:c6:73:46:0d:f9:62:16:91:43:78:59:b0:9d:
         f5:4e:89:75:b7:fc:e5:71:90:52:36:75:eb:d2:98:2d:80:23:
         23:b5:14:82:eb:38:ff:34:cd:4e:42:2f:67:cc:8f:68:ab:ff:
         20:fb:f1:a7:8a:26:c6:a4:c1:97:ab:a7:73:16:a3:2f:01:d7:
         5b:02:72:88:b1:95:38:74:12:2f:67:04:22:91:f3:f3:87:46:
         79:7d:07:e9:06:d8:1d:c8:31:a8:a1:46:44:12:72:c2:44:89:
         5f:1e:8b:56:84:68:6f:ee:00:3b:dd:bd:4d:28:62:57:09:fc:
         71:bf:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:59 2026 by rpki-client