Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          3yOUVUQCaL0iGEIOE54KYqZmMCNxtjmdy4AIT8MLUdY=
Subject key identifier:   AF:A4:7F:F1:3E:DC:F5:22:16:C4:73:D5:2C:FD:16:8B:62:F4:C1:E4
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       01A0DFF36C8DD95D341097FFD199E7335888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          193A
Signing time:             Sat 26 Sep 2026 23:01:07 +0000
Manifest this update:     Sat 26 Sep 2026 23:01:07 +0000
Manifest next update:     Sun 27 Sep 2026 23:01:07 +0000
Files and hashes:         1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
                          2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: hBfaSsnYc1R4HQCBqWq9lEhuY/9URv1ILauJnPPHsqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f3:6c:8d:d9:5d:34:10:97:ff:d1:99:e7:33:58:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Sep 26 23:01:07 2026 GMT
            Not After : Sep 27 23:01:07 2026 GMT
        Subject: CN=afa47ff13edcf52216c473d52cfd168b62f4c1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:8d:25:c3:3c:0a:3e:d4:b9:9f:4b:77:82:
                    08:93:5f:62:ab:28:45:1d:2a:a8:3e:7e:31:53:ba:
                    30:4a:e9:68:6c:24:28:2e:36:3f:0a:55:20:c5:41:
                    da:df:6e:e1:a1:fb:86:14:0e:cf:69:ad:53:cb:5b:
                    e8:d9:9b:fe:19:87:96:a1:ff:ac:a6:69:62:74:63:
                    07:ce:9c:22:e0:e7:66:9f:12:23:61:0a:42:33:fa:
                    6c:d0:79:81:a9:32:09:75:ed:d6:6b:91:be:28:81:
                    eb:12:5f:ee:11:37:b5:49:19:45:c3:b1:d9:1b:45:
                    1d:15:53:37:fc:2c:88:b9:d7:ae:dd:72:18:7c:56:
                    8b:53:83:44:77:83:56:c8:ea:0e:d8:d7:55:8b:5e:
                    ac:2a:61:17:36:aa:28:f5:9e:e9:06:66:8f:2d:a2:
                    75:71:46:d8:06:a0:18:6d:ca:d6:86:0d:ed:b2:42:
                    d1:24:44:e9:21:23:dd:9d:35:23:89:61:80:20:52:
                    a6:4f:cc:1b:16:42:a5:da:0c:73:49:75:27:72:de:
                    cf:f8:33:3e:09:75:1e:fd:d7:6e:7d:81:ab:86:6c:
                    40:8e:d2:27:f3:49:c2:76:b1:20:8d:62:5f:03:6b:
                    96:70:3f:06:42:6b:db:cc:d9:c4:14:7a:eb:13:d7:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A4:7F:F1:3E:DC:F5:22:16:C4:73:D5:2C:FD:16:8B:62:F4:C1:E4
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:f7:f1:5d:69:cc:9c:53:e5:83:7e:bd:34:a8:81:1b:bb:
         ee:6a:e7:c8:0c:8d:87:db:77:a6:f2:d2:04:70:7b:68:52:94:
         60:02:14:b1:70:e1:bc:de:86:f4:37:6f:ef:1d:58:e4:4a:98:
         fe:ce:23:45:13:6d:8f:19:33:2f:58:e0:54:68:4b:e5:73:40:
         de:a2:b0:d2:a9:ee:de:c3:58:ae:d4:58:93:97:04:a3:87:89:
         e3:7e:b6:8e:41:f7:3a:95:ae:7f:90:6f:b0:3e:d0:58:fd:97:
         7a:c1:bd:7b:7c:71:f3:e1:75:27:44:19:3b:40:d5:ca:bf:0f:
         5c:a6:8a:f3:ed:05:db:c3:7a:98:a2:7f:79:f3:81:85:0a:8d:
         4b:0a:c6:32:e2:c5:5d:da:28:43:e3:17:e8:7b:d1:27:0c:d7:
         d7:c7:68:47:c2:8e:85:1a:b9:52:ff:ee:c6:28:03:c7:8d:0f:
         53:82:0f:00:df:17:23:be:0e:16:1b:72:8e:01:ac:cf:e0:f3:
         ac:a8:27:bb:c2:d2:ef:29:9f:76:85:39:fd:5a:37:2b:a7:17:
         db:4c:b2:f2:97:bd:84:1a:5c:d4:cf:35:57:87:e8:88:76:b1:
         30:dd:06:eb:a6:10:17:91:81:10:f1:85:6d:8a:5b:54:13:2f:
         e7:38:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:27:21 2026 by rpki-client