Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File:                     AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier:          n7nNjsSnGoqjwL4BGv7syfr8SbyzWQWW4xrk3RvikO0=
Subject key identifier:   59:48:C8:77:8A:90:91:4D:81:58:3A:0A:3E:0D:D6:F8:9E:BE:98:B8
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer:       /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial:       01A0DF85E09C6A7C94ABAE98367175DCE2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number:          1A76
Signing time:             Sat 26 Sep 2026 21:01:27 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:27 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:27 +0000
Files and hashes:         1: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: yO1LAoeIODziG5jskx/rTKgzlAvbCf/p4c4AtD07WdI=)
                          2: T0PKdpY-NmquZZ8W5q5sczFw4HU.roa (hash: hAEz18QKEFNj/3DJHuJkTiVTgl3SDPgBVi0BIoWhL64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:85:e0:9c:6a:7c:94:ab:ae:98:36:71:75:dc:e2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
        Validity
            Not Before: Sep 26 21:01:27 2026 GMT
            Not After : Sep 27 21:01:27 2026 GMT
        Subject: CN=5948c8778a90914d81583a0a3e0dd6f89ebe98b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4f:7a:fb:13:f2:d4:b5:ef:2c:12:ba:b4:06:
                    fd:ed:ca:91:f9:ae:79:ed:de:14:b3:43:8d:95:49:
                    d4:9d:68:65:92:6a:95:6f:62:c5:65:75:54:e5:4b:
                    97:3e:5f:56:10:b3:5d:9e:4e:19:b7:c6:d3:f5:85:
                    2f:ca:49:10:cb:c7:a1:2a:e9:99:1b:82:43:bd:9e:
                    35:36:68:4d:d9:80:63:5e:82:f1:ff:5f:c2:70:7b:
                    3d:0b:62:5d:ba:4b:e5:91:96:06:06:bb:a2:46:80:
                    a0:e2:be:ea:17:bc:8c:6e:3d:a4:a0:5b:06:1a:b0:
                    d5:3d:f7:74:f8:37:60:20:79:98:31:0d:7d:d8:c7:
                    1c:30:4a:a0:47:cd:55:5e:5b:b5:3f:13:6f:0c:b8:
                    d6:36:9f:05:2f:3c:d5:68:9f:6a:57:8e:69:e5:67:
                    ab:51:62:fd:f3:40:25:dd:da:9f:e5:55:21:c2:5a:
                    35:4d:c8:2c:b3:72:d7:46:92:5c:fb:87:6b:32:b2:
                    dd:8a:d3:72:c1:20:62:b6:88:90:5e:ab:c4:01:06:
                    2b:33:5d:88:85:bd:54:d4:4d:08:c1:4e:92:6e:3f:
                    ea:ac:f3:96:85:0f:b5:04:37:c4:d7:2c:be:42:09:
                    2d:eb:60:be:9f:25:76:36:e1:48:bc:5a:47:ee:ac:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:48:C8:77:8A:90:91:4D:81:58:3A:0A:3E:0D:D6:F8:9E:BE:98:B8
            X509v3 Authority Key Identifier:
                keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:90:6a:36:0b:58:71:c1:06:9f:2d:62:b8:ff:da:67:93:
         e2:3f:79:1b:09:13:c3:05:88:47:84:e3:cf:a3:31:50:96:91:
         fc:36:6f:56:d4:72:97:b3:89:a0:b9:64:ae:b7:a3:97:62:32:
         04:ac:e7:44:3d:53:eb:c5:d4:de:6c:0e:e2:4e:53:fa:73:fd:
         99:c3:d6:44:97:e8:05:49:77:11:c1:a2:64:2c:92:ba:71:17:
         56:9d:39:a1:92:1e:00:e9:36:25:7d:16:4a:24:26:6b:a5:42:
         0f:6e:48:15:81:1c:c0:62:ac:40:b1:f0:9d:f8:e6:27:85:9a:
         0d:e8:76:5b:c1:de:6b:9b:a1:4f:41:aa:76:6b:98:61:e6:a3:
         10:03:f2:26:ce:a4:39:cc:56:48:50:ea:3e:f3:fc:c6:e7:5a:
         24:17:8e:f6:13:5c:c4:fe:ac:50:cb:f4:30:6a:26:43:c0:2f:
         31:d8:e1:71:ba:69:3b:b3:11:12:3f:b1:d1:2c:6c:67:ee:50:
         73:d9:d9:de:20:f0:5f:1d:9f:4e:8c:b3:05:29:30:b6:e9:1f:
         86:0f:bf:69:93:ea:0f:40:14:4d:02:63:65:5e:45:ce:a9:44:
         6e:8c:f0:f0:b5:7d:f8:fd:d9:f1:f5:30:53:da:c7:6c:c7:6c:
         59:92:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:14:11 2026 by rpki-client