Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File:                     AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier:          bhhb41Hd7lVKrkAhDwzWmxAyxjPEuZg7hxRASX2o2Pg=
Subject key identifier:   13:46:13:DB:5E:08:C6:E0:12:A7:90:BB:64:95:3C:7B:08:5F:EA:5C
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer:       /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial:       019E1EA2F66DA4DD665653EAAA278EF012CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number:          1323
Signing time:             Wed 13 May 2026 00:00:56 +0000
Manifest this update:     Wed 13 May 2026 00:00:56 +0000
Manifest next update:     Thu 14 May 2026 00:00:56 +0000
Files and hashes:         1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: WEsWzWH6hUljZiC3RORXOIpdkATDE9HarCGUDPA6kB8=)
                          2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:f6:6d:a4:dd:66:56:53:ea:aa:27:8e:f0:12:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
        Validity
            Not Before: May 13 00:00:56 2026 GMT
            Not After : May 14 00:00:56 2026 GMT
        Subject: CN=134613db5e08c6e012a790bb64953c7b085fea5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:53:d3:26:8f:14:f2:ac:81:c5:74:7b:07:
                    23:2b:3c:f5:21:d7:ac:cd:4a:31:83:eb:6e:a2:dc:
                    74:9d:e4:82:95:df:8a:ed:f7:d4:ee:17:6c:64:23:
                    ed:e7:21:48:f6:24:43:95:d1:80:3e:b5:57:60:bf:
                    5b:95:02:cd:ed:b8:64:e6:a4:96:7a:7b:10:d8:64:
                    18:bf:22:68:2b:39:ed:e3:fe:e7:bc:7d:94:90:9f:
                    90:98:4f:55:f1:31:18:d4:b4:42:97:c6:1c:7d:74:
                    3f:e8:98:c5:ff:72:71:d8:f1:9b:7f:1f:75:b7:67:
                    40:a8:d1:87:3c:fe:ea:6a:3e:7d:c1:3e:b0:af:49:
                    20:e6:a8:b2:5f:d4:91:6a:58:6f:90:52:2d:14:66:
                    06:7f:77:63:d1:79:04:ee:c4:de:3b:71:82:f9:04:
                    46:d1:56:61:9a:df:23:ae:f2:85:d6:a9:3d:8c:00:
                    6d:75:66:50:7a:b0:6a:73:95:ed:38:ab:a1:34:3c:
                    e4:b9:c3:b2:4d:ee:f2:0e:ae:d0:71:77:a7:7a:07:
                    22:17:bb:e6:22:68:4d:3a:43:97:e4:55:f7:58:9a:
                    c8:7f:97:25:2a:7b:61:02:ad:e8:6b:d4:f6:f2:6f:
                    9f:01:d6:51:93:8d:25:fc:5c:87:94:cc:86:a9:86:
                    de:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:13:DB:5E:08:C6:E0:12:A7:90:BB:64:95:3C:7B:08:5F:EA:5C
            X509v3 Authority Key Identifier:
                keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:98:d5:69:ca:4a:51:b7:40:87:d5:d8:3f:26:46:4f:ce:
         32:a8:c6:92:f5:3a:d5:ba:ee:6b:5e:e7:75:05:8d:7e:e4:9d:
         92:ce:bc:d6:25:f3:41:d0:6f:4e:b9:fd:9b:df:74:b7:d4:49:
         ea:aa:44:48:41:42:c1:96:6e:94:ea:46:20:5e:93:73:0a:ce:
         f3:fb:dd:a0:f5:5d:fe:d5:6c:6d:03:88:4e:28:e1:f8:a9:74:
         55:ff:98:fe:81:21:2a:fd:f4:6b:74:1d:ca:37:9d:8d:21:d6:
         ab:18:ce:05:ef:df:76:5f:4a:f9:f1:22:ca:bf:40:06:be:f6:
         44:a4:c7:81:60:79:9a:7c:f6:aa:47:7d:f4:24:6a:77:1c:3d:
         42:d6:6b:5b:44:e2:e5:5c:b9:dc:65:8b:0c:39:83:19:30:1c:
         14:ed:96:ef:0f:83:69:89:53:48:28:cb:38:68:88:f0:25:0d:
         7d:a6:be:3e:38:04:ec:07:a0:cd:de:cb:bc:1c:62:de:c7:f4:
         5d:59:85:28:53:65:b1:12:4e:e5:f2:dc:35:71:a4:c0:aa:3a:
         bc:da:ec:75:93:05:f9:e5:72:56:5a:09:bc:5b:1f:ab:54:e0:
         62:a3:62:31:a6:6b:75:3c:9b:2c:57:c1:1c:54:e0:e0:69:47:
         4f:4e:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:00 2026 by rpki-client