Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File:                     AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier:          qjjX5mwDqBvewuY/x0w239PcvbpQv1IYYws3rDIduzA=
Subject key identifier:   23:24:9A:26:EA:4F:4E:4B:78:B5:12:AA:94:3A:3E:AF:D7:8B:93:C8
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer:       /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial:       019E1CB51E12D8C556883C1EE577D9BC4604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 15:01:32 +0000
Manifest this update:     Tue 12 May 2026 15:01:32 +0000
Manifest next update:     Wed 13 May 2026 15:01:32 +0000
Files and hashes:         1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: EqLeGrz9h1MyBulCiGzGhVtDN9FOetoXfA67+p40PnU=)
                          2: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (hash: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:1e:12:d8:c5:56:88:3c:1e:e5:77:d9:bc:46:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
        Validity
            Not Before: May 12 15:01:32 2026 GMT
            Not After : May 13 15:01:32 2026 GMT
        Subject: CN=23249a26ea4f4e4b78b512aa943a3eafd78b93c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:06:19:6d:73:90:5f:dc:15:a4:1d:b0:2f:
                    8e:f9:a6:37:b2:4f:20:76:46:6d:fd:88:75:02:29:
                    4b:62:5a:ea:85:df:63:ef:74:75:20:1d:be:e0:9b:
                    a0:ec:c7:35:eb:9d:56:a4:04:c7:7d:d0:fe:92:41:
                    b7:7b:20:6d:a6:43:85:4e:3c:33:d1:01:ce:6b:68:
                    0b:da:48:b9:d3:fc:9b:c9:16:3d:42:7e:3e:86:43:
                    40:f5:c7:48:fa:19:1b:00:62:01:f4:d8:8a:84:40:
                    ce:4a:1f:c7:10:de:c3:f3:5d:02:4d:05:b4:17:35:
                    22:5e:15:8d:a1:82:e8:0d:68:7d:e8:16:d1:42:65:
                    87:1f:91:5a:b8:cf:dd:ba:56:68:c1:ea:21:35:25:
                    04:82:da:12:6c:fb:b4:a0:12:cd:74:f4:27:ad:bf:
                    15:0c:1b:10:37:31:77:b5:20:d2:08:2d:74:78:ca:
                    06:82:8a:d3:61:ed:cf:55:5e:8e:4b:0e:fc:30:47:
                    f5:97:ef:81:76:08:ae:fd:fe:d8:3a:fa:20:66:53:
                    cf:6e:5b:f5:e7:2f:70:07:57:81:45:eb:bf:4a:69:
                    34:c7:55:f6:24:e9:f9:85:2e:28:01:42:3d:3d:f4:
                    0b:da:43:ca:93:9d:e9:e8:c9:28:89:bc:fc:95:41:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:24:9A:26:EA:4F:4E:4B:78:B5:12:AA:94:3A:3E:AF:D7:8B:93:C8
            X509v3 Authority Key Identifier:
                keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:06:50:b4:26:a2:97:39:bc:d8:21:f9:d9:b3:58:13:a3:e6:
         11:51:bd:68:9f:f4:0a:6f:fb:29:29:72:6f:19:ce:63:35:5d:
         b5:f5:a6:01:9b:c2:33:61:3b:d2:ce:73:39:16:9f:24:5e:26:
         14:56:3c:ef:ba:81:35:17:34:56:43:3c:95:2e:1e:c9:0e:22:
         54:64:77:6d:31:07:cb:c7:10:98:4d:2c:e4:10:f9:cb:2e:5e:
         a7:ae:ef:83:2b:77:ea:c5:48:17:30:db:31:72:65:86:44:2b:
         11:84:d0:35:e0:69:a7:e1:34:35:9d:fa:6f:45:da:09:48:7e:
         66:21:5a:71:17:7d:d5:9b:ab:4f:da:07:05:6f:80:9d:3b:af:
         3c:7a:29:e1:25:e6:bb:77:0e:7b:0a:c5:c1:20:46:0d:fd:d4:
         ac:39:e4:26:c3:90:84:56:0a:bd:37:d8:bf:b1:ea:70:78:77:
         ab:80:ab:74:30:51:aa:76:af:2c:27:84:db:6c:a1:7f:cf:e3:
         53:78:47:5c:81:f6:d0:a3:ae:0a:80:3b:b1:85:66:67:0c:5d:
         9a:ca:84:26:e4:e9:7d:f6:d0:e3:e6:d9:97:8e:14:ac:0b:c3:
         fe:55:36:4b:7b:d6:99:86:f6:a6:f0:d0:73:c5:97:20:78:56:
         36:5c:8a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctR4S2MVWiDwe5XfZvEYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl
NTIxMjkwHhcNMjYwNTEyMTUwMTMyWhcNMjYwNTEzMTUwMTMyWjAzMTEwLwYDVQQD
EygyMzI0OWEyNmVhNGY0ZTRiNzhiNTEyYWE5NDNhM2VhZmQ3OGI5M2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxQGGW1zkF/cFaQdsC+O+aY3sk8g
dkZt/Yh1AilLYlrqhd9j73R1IB2+4Jug7Mc1651WpATHfdD+kkG3eyBtpkOFTjwz
0QHOa2gL2ki50/ybyRY9Qn4+hkNA9cdI+hkbAGIB9NiKhEDOSh/HEN7D810CTQW0
FzUiXhWNoYLoDWh96BbRQmWHH5FauM/dulZoweohNSUEgtoSbPu0oBLNdPQnrb8V
DBsQNzF3tSDSCC10eMoGgorTYe3PVV6OSw78MEf1l++Bdgiu/f7YOvogZlPPblv1
5y9wB1eBReu/Smk0x1X2JOn5hS4oAUI9PfQL2kPKk53p6Mkoibz8lUHDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMkmibqT05LeLUSqpQ6Pq/Xi5PIMB8GA1UdIwQY
MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt
OWQyZDlmNmVlZTkzLzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz
LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgZQtCai
lzm82CH52bNYE6PmEVG9aJ/0Cm/7KSlybxnOYzVdtfWmAZvCM2E70s5zORafJF4m
FFY877qBNRc0VkM8lS4eyQ4iVGR3bTEHy8cQmE0s5BD5yy5ep67vgyt36sVIFzDb
MXJlhkQrEYTQNeBpp+E0NZ36b0XaCUh+ZiFacRd91ZurT9oHBW+AnTuvPHop4SXm
u3cOewrFwSBGDf3UrDnkJsOQhFYKvTfYv7HqcHh3q4CrdDBRqnavLCeE22yhf8/j
U3hHXIH20KOuCoA7sYVmZwxdmsqEJuTpffbQ4+bZl44UrAvD/lU2S3vWmYb2pvDQ
c8WXIHhWNlyKCA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:07:29 2026 by rpki-client