Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
File:                     AKGRL91T8vGf6bza51RJZoFZM8w.mft (raw, json)
Hash identifier:          z+cvSAwo3EYfFhWYAOnviD82WsFEkSx5WZv0k/UJefQ=
Subject key identifier:   90:FE:A9:C4:36:5C:04:26:70:39:78:99:44:5E:F1:D5:16:6D:8D:B6
Authority key identifier: 00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
Certificate issuer:       /CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Certificate serial:       019E1D90F71EEF70EB0DBFA717998DACEE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
Manifest number:          0D
Signing time:             Tue 12 May 2026 19:01:39 +0000
Manifest this update:     Tue 12 May 2026 19:01:39 +0000
Manifest next update:     Wed 13 May 2026 19:01:39 +0000
Files and hashes:         1: AKGRL91T8vGf6bza51RJZoFZM8w.crl (hash: fHEXqDx3LYXmyN9GNiiKqhI+CJg2RvBzA7aRh2Mym3o=)
                          2: GzOvk8lHsu4BYLj1d10xgx8tglU.roa (hash: qwnpR7TfGpJqvG2MvNeXDUXWtBVeH7xIX0oA5goxnbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:f7:1e:ef:70:eb:0d:bf:a7:17:99:8d:ac:ee:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
        Validity
            Not Before: May 12 19:01:39 2026 GMT
            Not After : May 13 19:01:39 2026 GMT
        Subject: CN=90fea9c4365c042670397899445ef1d5166d8db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:c2:e6:a3:fe:10:93:02:5a:06:41:7f:df:
                    d2:37:c9:85:a9:63:41:9b:5f:07:46:33:60:88:a6:
                    2f:c8:6d:65:25:b1:0e:4f:54:ce:a1:3c:e9:1b:7b:
                    e6:a0:bf:26:66:0e:21:66:a0:16:94:9a:86:dc:14:
                    1c:a6:75:0d:48:db:a0:78:ac:5f:7e:63:fa:1b:47:
                    27:cc:90:7e:c9:c3:20:10:c0:fd:2b:29:ec:b8:82:
                    49:f2:0c:bb:30:18:bb:01:3f:1a:08:c0:23:03:64:
                    98:6b:e1:ca:54:4b:b6:88:b2:d8:1c:b2:f2:0b:e4:
                    3a:c7:e7:63:53:18:26:48:32:2c:f7:fe:07:d2:95:
                    8e:17:a7:27:ec:f8:0f:e7:f5:9c:6b:4d:ee:1a:9c:
                    46:2d:d6:76:62:88:7e:a8:0b:70:db:c7:04:9f:79:
                    e2:ea:ea:9e:1a:be:9a:0c:26:13:2c:e2:cc:8a:94:
                    8e:08:43:db:2f:91:3f:15:7e:b7:7a:a2:ae:77:4a:
                    e4:87:4a:0c:49:b9:8d:99:e0:b5:ff:5e:1d:76:89:
                    1b:e5:fe:09:c8:b9:7c:60:42:d8:cc:e6:79:5d:51:
                    25:a3:47:2a:57:56:d2:ec:46:10:ad:3a:a8:4f:d9:
                    09:19:32:53:95:8e:55:aa:c2:9e:d7:4b:d2:14:f7:
                    ed:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FE:A9:C4:36:5C:04:26:70:39:78:99:44:5E:F1:D5:16:6D:8D:B6
            X509v3 Authority Key Identifier:
                keyid:00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:3a:4a:78:44:d1:fd:4b:6b:fe:bd:d9:14:1e:27:e7:d8:
         50:a1:73:b7:5f:85:1f:3f:fa:fd:7f:36:3c:a5:01:d3:0c:7c:
         d6:0e:91:0a:05:6f:3a:d8:97:d9:57:d9:db:48:c9:91:f7:11:
         63:2f:88:ea:38:93:8f:f3:9c:59:a5:b6:fc:9f:11:01:75:4f:
         e1:05:85:3f:f8:cc:4c:46:73:90:5f:58:47:42:71:92:71:da:
         e1:e8:82:8a:50:5b:33:02:11:a0:32:e2:b8:ac:9f:48:f4:c8:
         de:09:93:b4:87:80:6d:96:0a:6b:e1:7d:60:dd:59:24:d8:c7:
         f5:d1:85:36:9a:23:45:6a:ac:1b:0e:80:6a:4d:d9:d2:f3:8d:
         77:87:51:f1:2a:96:0c:67:36:b0:5c:4f:2a:91:04:9c:05:66:
         28:32:53:1c:90:9c:82:45:0b:21:93:d7:9c:9c:ef:cd:73:7d:
         ce:fb:a6:59:c8:8b:c5:f2:20:1e:90:46:8c:5e:69:b5:47:f2:
         6d:f8:a2:e4:70:de:00:07:64:da:c8:7e:ba:c6:a9:85:5f:e8:
         06:6a:32:ad:ab:4e:37:43:ef:43:89:b5:22:ab:df:d0:42:94:
         be:1f:d4:b7:b2:8e:b6:db:96:d5:f3:d9:1d:5f:bf:76:9b:c2:
         cd:aa:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:57 2026 by rpki-client