Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File:                     AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier:          ME7q+32+6q4JQ1Yz1XbSEmvBe21KLo0/9yW07vGn1iE=
Subject key identifier:   D6:F8:89:20:13:ED:8F:93:B4:2C:7B:7E:7A:F4:83:FC:96:77:6E:E5
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer:       /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial:       019D2704563C17BE08E1BDAFD4A46EB2605A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number:          0F77
Signing time:             Wed 25 Mar 2026 22:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:28 +0000
Files and hashes:         1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: +rRmvqG7VmnIacBGFxAFobGKKounr0k/uyg6zntYhbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:56:3c:17:be:08:e1:bd:af:d4:a4:6e:b2:60:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
        Validity
            Not Before: Mar 25 22:01:28 2026 GMT
            Not After : Mar 26 22:01:28 2026 GMT
        Subject: CN=d6f8892013ed8f93b42c7b7e7af483fc96776ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:b6:57:ed:66:10:79:20:b4:71:40:e8:a9:
                    b0:18:67:35:a1:42:c9:a9:37:05:a3:5d:3f:b9:2e:
                    83:99:9b:37:f4:4c:d8:9e:d0:06:96:7c:2b:9b:d2:
                    df:fe:49:cf:15:fe:c1:78:9b:07:b5:37:1b:85:3b:
                    82:29:44:96:e1:e4:01:7f:10:d8:e2:c6:0f:05:82:
                    56:69:a9:49:98:cf:83:70:d0:a1:85:e2:1c:b2:eb:
                    89:63:61:0c:06:a0:27:04:87:a5:65:53:09:36:2a:
                    ac:c8:24:84:2c:4f:97:4e:bd:00:d8:cd:7f:27:0a:
                    29:54:23:df:1b:d4:7a:52:ce:44:ea:73:bf:3e:41:
                    a7:b4:2c:49:c8:7a:09:b2:06:ab:a8:ef:e6:13:8f:
                    95:2f:a1:ff:09:4a:d5:68:d8:42:8a:9b:fc:f2:66:
                    13:9f:f0:4b:97:02:f8:1f:e3:41:ea:bf:84:28:0a:
                    b1:b8:46:b7:fc:d5:f8:7c:d1:c1:0b:a6:a1:69:b3:
                    b7:d5:19:fd:e6:fd:fb:3a:f4:60:45:8c:0e:8d:bb:
                    8a:86:1e:60:97:7e:ec:0d:ec:dc:70:9d:f6:d3:ad:
                    bc:a8:ea:13:3b:19:51:ba:51:64:97:de:49:d3:d1:
                    49:0e:24:8c:61:4a:38:01:77:15:d2:8f:8c:1c:c1:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F8:89:20:13:ED:8F:93:B4:2C:7B:7E:7A:F4:83:FC:96:77:6E:E5
            X509v3 Authority Key Identifier:
                keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:89:74:f6:0a:81:a9:e8:fb:87:9b:5c:6a:ad:36:2e:3b:a6:
         6a:06:73:2b:4c:a1:ab:a7:45:e8:ce:c4:33:37:0e:72:1b:d6:
         ac:83:4a:b4:89:fb:ed:2c:8b:86:4b:ec:4a:fe:ae:39:c5:d8:
         ab:66:4f:b4:6a:84:77:1e:81:1d:5d:a1:70:ee:18:d3:7d:71:
         10:43:93:fc:63:d9:3b:6e:40:c2:ea:66:ae:1a:d6:36:52:4c:
         53:3d:78:ec:ba:b5:34:49:ed:49:20:b3:0d:ff:2a:9b:6f:71:
         06:81:19:cf:bd:9e:87:fa:6c:c3:78:fa:4b:87:ab:7b:6f:12:
         2a:dd:29:01:04:ce:8c:5f:05:7e:b2:36:68:ec:1c:98:ff:b1:
         6c:b4:5a:00:5e:0b:9a:65:4c:1c:ba:3e:38:07:9c:0a:58:de:
         92:44:2e:84:48:15:fb:88:c0:ed:47:87:b5:59:23:a3:3f:44:
         b9:7f:02:5f:5b:05:0e:5f:fb:03:75:8c:54:da:fc:8f:4b:e9:
         26:7c:e4:d5:64:38:58:a0:29:18:8e:f1:57:22:9d:a2:88:d4:
         14:cc:37:03:5b:c1:b2:4c:7b:f4:e2:ef:75:07:5f:10:92:7a:
         8a:88:33:61:1c:6b:b3:08:87:60:2e:cd:45:96:65:6b:7e:01:
         cc:66:c6:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBFY8F74I4b2v1KRusmBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz
N2I4NDMwHhcNMjYwMzI1MjIwMTI4WhcNMjYwMzI2MjIwMTI4WjAzMTEwLwYDVQQD
EyhkNmY4ODkyMDEzZWQ4ZjkzYjQyYzdiN2U3YWY0ODNmYzk2Nzc2ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwC2V+1mEHkgtHFA6KmwGGc1oULJ
qTcFo10/uS6DmZs39EzYntAGlnwrm9Lf/knPFf7BeJsHtTcbhTuCKUSW4eQBfxDY
4sYPBYJWaalJmM+DcNChheIcsuuJY2EMBqAnBIelZVMJNiqsyCSELE+XTr0A2M1/
JwopVCPfG9R6Us5E6nO/PkGntCxJyHoJsgarqO/mE4+VL6H/CUrVaNhCipv88mYT
n/BLlwL4H+NB6r+EKAqxuEa3/NX4fNHBC6ahabO31Rn95v37OvRgRYwOjbuKhh5g
l37sDezccJ320628qOoTOxlRulFkl95J09FJDiSMYUo4AXcV0o+MHMEGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb4iSAT7Y+TtCx7fnr0g/yWd27lMB8GA1UdIwQY
MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt
Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2
LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYl09gqB
qej7h5tcaq02LjumagZzK0yhq6dF6M7EMzcOchvWrINKtIn77SyLhkvsSv6uOcXY
q2ZPtGqEdx6BHV2hcO4Y031xEEOT/GPZO25AwupmrhrWNlJMUz147Lq1NEntSSCz
Df8qm29xBoEZz72eh/psw3j6S4ere28SKt0pAQTOjF8FfrI2aOwcmP+xbLRaAF4L
mmVMHLo+OAecCljekkQuhEgV+4jA7UeHtVkjoz9EuX8CX1sFDl/7A3WMVNr8j0vp
Jnzk1WQ4WKApGI7xVyKdoojUFMw3A1vBskx79OLvdQdfEJJ6iogzYRxrswiHYC7N
RZZla34BzGbGCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:24 2026 by rpki-client