Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File:                     AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier:          kGx3C75q/Uu3NFoIjd7yFdawF/EEZClCHyLfEe+U8eI=
Subject key identifier:   A2:EB:87:AF:58:09:D2:FC:59:35:91:41:82:23:D5:29:B6:63:72:8A
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer:       /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial:       01A0D7CD4E80F0FD39C5DF14006134EECADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number:          148C
Signing time:             Fri 25 Sep 2026 09:02:31 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:31 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:31 +0000
Files and hashes:         1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: i+TkqipXCxd2gakyGFQQhmH1x7kA9lXiOXbdZ9wTRvU=)
                          2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cd:4e:80:f0:fd:39:c5:df:14:00:61:34:ee:ca:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
        Validity
            Not Before: Sep 25 09:02:31 2026 GMT
            Not After : Sep 26 09:02:31 2026 GMT
        Subject: CN=a2eb87af5809d2fc593591418223d529b663728a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:ed:77:72:44:77:76:c3:f9:1a:57:6e:49:
                    2e:e3:f4:f6:ef:4f:23:19:5a:10:a2:36:7d:7d:96:
                    38:34:af:29:a5:10:d2:ab:62:0b:2a:93:2c:bd:51:
                    24:c4:fe:f2:6d:42:4b:6c:ba:06:94:67:f6:24:44:
                    b8:aa:c9:49:c5:7e:ab:5a:6b:06:1d:c5:39:cf:21:
                    36:8a:cd:ea:8b:a0:73:68:c2:6e:b0:1f:79:ba:13:
                    35:ab:37:aa:f3:42:0b:90:d5:ec:6a:a3:48:f9:8f:
                    cb:aa:22:76:b4:12:90:17:09:bd:19:7b:9e:2c:80:
                    67:cd:f2:3c:87:bc:0f:47:e4:16:61:e9:20:90:20:
                    5b:c0:e0:41:b4:d8:48:2a:0b:0a:64:2c:7b:32:34:
                    cb:89:46:b1:0b:5d:6f:48:dd:4b:a1:9d:40:96:d3:
                    af:1a:c1:19:66:ce:67:b9:59:db:13:df:34:7d:f8:
                    6e:d3:c7:e4:d4:89:2a:a1:d0:03:f3:0e:01:be:f5:
                    e7:5e:7c:3e:4e:5f:fb:6a:78:0b:51:fb:f1:66:01:
                    ba:b4:6e:fa:5f:80:1e:09:46:f7:80:fe:b9:7a:47:
                    98:0a:81:71:b7:5b:e7:1d:92:37:af:63:87:da:03:
                    63:1d:56:b6:66:18:94:2f:2b:7a:e0:53:44:d4:0b:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:87:AF:58:09:D2:FC:59:35:91:41:82:23:D5:29:B6:63:72:8A
            X509v3 Authority Key Identifier:
                keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:98:a3:98:d0:fd:01:f3:3f:b6:0f:c7:a2:d0:f4:c3:5c:
         01:22:3e:7a:98:ba:1c:ed:ed:6b:6f:5a:c6:1e:9c:93:be:6f:
         cf:b3:99:80:61:9a:49:f6:82:f9:82:47:34:36:21:c0:3b:d3:
         bc:70:c7:d1:2b:14:44:d5:f2:2b:6b:e9:a0:5d:0f:eb:13:d7:
         0a:e8:51:91:5c:c2:aa:5e:5b:2f:5f:ae:76:22:f9:5d:56:70:
         95:6e:f5:f0:17:ee:fe:b6:97:57:e5:6b:1f:75:3d:e0:9d:b2:
         de:04:46:b5:ce:84:46:cb:3d:76:d2:c3:f2:e1:6e:45:e5:8d:
         63:ee:59:b0:e3:c0:c5:ee:72:79:d3:f8:7f:b7:3f:53:bf:22:
         08:12:c7:50:be:f8:79:cd:37:a6:ea:98:bc:04:0e:0d:ee:67:
         b5:3a:21:df:fc:92:66:72:1c:7b:cf:97:54:34:3e:9c:85:4f:
         b8:15:5d:31:e8:a7:a4:3c:6d:0c:06:6e:2a:eb:d6:5d:b2:0b:
         2e:59:ec:8f:e3:d4:d9:1c:38:ff:0d:95:2f:9c:9f:9f:d9:59:
         ac:44:f4:21:98:05:37:ee:d8:1b:f9:58:8b:35:1b:d7:14:f6:
         66:6e:eb:99:bd:6a:b9:f5:23:4b:61:5a:df:c8:04:5b:53:6d:
         59:73:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:18:32 2026 by rpki-client